RethinkDNS

Open-source Android app pairing encrypted DNS with a per-app firewall.

rethinkdns.com
Visit websiteView source
Price
FreeFree and open source; an optional paid RPN VPN is a separate product.
Works on
Android
Based in
India
Source code
Open source
Encryption
End-to-end encrypted

RethinkDNS is a free, open-source Android app that combines an encrypted DNS client with a per-app firewall and connection tracker in one interface. You can route queries to any DoH, DoT, ODoH, or DNSCrypt resolver, apply blocklists, and cut off individual apps' internet access based on rules you set. Query logging stays on-device and no backend account is required. The Android app is Apache-2.0 licensed and its serverless resolver is MPL-2.0 so the whole stack is open. Worth knowing: it is built by Celzero Pvt Ltd in India and registered there as a VPN app, which places it under Indian data rules.

Strengths

  • Encrypted DNS plus a per-app firewall
  • Fully open source (Apache-2.0 / MPL-2.0)
  • On-device logging, no account needed

Considerations

  • Android only
  • Indian VPN registration and data rules apply
Listed inDNS

RethinkDNS alternatives

NextDNSConfigurable DNS-level blocking for every device on your network.AdGuard DNSSet-in-minutes public DNS resolver that blocks ads and trackers.Quad9Nonprofit Swiss resolver that blocks malicious domains by default.Control DHighly customizable DNS from the Windscribe team.