NetGuard provides simple and advanced ways to block access to the internet - no root required. Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.

Blocking access to the internet can help:

NetGuard is the first free and open source no-root firewall for Android.


PRO features:

There is no other no-root firewall offering all these features.



Certificate fingerprints:


You can use the settings menu to change from blacklist mode (allow all in Settings but block unwanted applications in list) to whitelist mode (block all in Settings but allow favorite applications in list).

For more screenshots, see here.


The only way to build a no-root firewall on Android is to use the Android VPN service. Android doesn't allow chaining of VPN services, so you cannot use NetGuard together with other VPN based applications. See also this FAQ.

NetGuard can be used on rooted devices too and even offers more features than most root firewalls.

Some Android versions, expecially not updated Samsung Android versions, have a buggy VPN implementation, which results in Android refusing to start the VPN service in certain circumstances, like when there is no internet conncectivity yet (when starting up your device) or when incorrectly requiring manual approval of the VPN service again (when starting up your device). Unfortunately these Android bugs cannot be worked around by NetGuard.

Filtering mode cannot be used on CopperheadOS.

NetGuard will not work or crash when the package has been removed or otherwise is unavailable. Removing this package is possible with root permissions only. If you disable this package, you can enable it with this command again:

adb shell pm enable --user 0

NetGuard is supported for phones and tablets only, so not for other device types like on a television or in a car.

Wi-Fi or IP calling will not work if your provider uses IPsec to encrypt your phone calls, SMS messages and/or MMS messages, unless there was made an exception in NetGuard for your provider (currently for T-Mobile and Verizon). I am happy to add exceptions for other providers, but I need the MCC codes, MNC codes and IP address ranges your provider is using. As an alternative you can enable the option 'Disable on call', which is available since version 2.113.

Frequently Asked Questions (FAQ)

(0) How do I use NetGuard?

(1) Can NetGuard completely protect my privacy?

(2) Can I use another VPN application while using NetGuard?

(3) Can I use NetGuard on any Android version?

(4) Will NetGuard use extra battery power?

(6) Will NetGuard send my internet traffic to an external (VPN) server?

(7) Why are applications without internet permission shown?

(8) What do I need to enable for the Google Play™ store app to work?

(9) Why is the VPN service being restarted?

(10) Will you provide a Tasker plug-in?

(13) How can I remove the ongoing NetGuard entry in the notification screen?

(14) Why can't I select OK to approve the VPN connection request?

(15) Are F-Droid builds supported?

(16) Why are some applications shown dimmed?

(17) Why is NetGuard using so much memory?

(18) Why can't I find NetGuard in the Google Play™ store app?

(19) Why does application XYZ still have internet access?

(20) Can I Greenify/hibernate NetGuard?

(21) Does doze mode affect NetGuard?

(22) Can I tether (use the Android hotspot) / use Wi-Fi calling while using NetGuard?

(24) Can you remove the notification from the status bar?

(25) Can you add a 'select all'?

(27) How do I read the blocked traffic log?

(28) Why is Google connectivity services allowed internet access by default?

(29) Why do I get 'The item you requested is not available for purchase'?

(30) Can I also run AFWall+ on the same device?

(31) Why can some applications be configured as a group only?

(32) Why is the battery/network usage of NetGuard so high

(33) Can you add profiles?

(34) Can you add the condition 'when on foreground'?

(35) Why does the VPN not start?

(36) Can you add PIN or password protection?

(37) Why are the pro features so expensive?

(38) Why did NetGuard stop running?

(39) How does a VPN based firewall differ from a iptables based firewall?

(40) Can you add schedules?

(41) Can you add wildcards?

(42) Why is permission ... needed?

(43) I get 'This app is causing your device to run slowly'

(44) I don't get notifications on access

(45) Does NetGuard handle incoming connections?

(46) Can I get a refund?

(47) Why are there in application advertisements?

(48) Why are some domain names blocked while they are set to be allowed?

(49) Does NetGuard encrypt my internet traffic / hide my IP address?

(50) Will NetGuard automatically start on boot?

(51) NetGuard blocks all internet traffic!

(52) What is lockdown mode?

(53) The translation in my language is missing / incorrect / incomplete!

(54) How to tunnel all TCP connections through the Tor network?

(55) Why does NetGuard connect to Amazon /

(56) NetGuard allows all internet traffic!

(57) Why does NetGuard use so much data?

(58) Why does loading the application list take a long time?

(59) Can you help me restore my purchase?

(60) Why does IP (Wi-Fi) calling/SMS/MMS not work?

(61) Help, NetGuard crashed!

(62) How can I solve 'There was a problem parsing the package' ?

(63) Why is all DNS traffic allowed?

(64) Can you add DNS over TLS?

(65) Why can NetGuard not block itself?


For questions, feature requests and bug reports, please use this XDA-Developers forum thread.

There is support on the latest version of NetGuard only.

There is no support on things that are not directly related to NetGuard.

There is no support on building and developing things by yourself.

NetGuard is supported for phones and tablets only, so not for other device types like on a television or in a car.



Building is simple, if you install the right tools:

The native code is built as part of the Android Studio project.

It is expected that you can solve build problems yourself, so there is no support on building. If you cannot build yourself, there are prebuilt versions of NetGuard available here.


Please note that by contributing you agree to the license below, including the copyright, without any additional terms or conditions.


NetGuard uses:


GNU General Public License version 3

Copyright (c) 2015-2018 Marcel Bokhorst (M66B)

All rights reserved

This file is part of NetGuard.

NetGuard is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your discretion) any later version.

NetGuard is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with NetGuard. If not, see


Android is a trademark of Google Inc. Google Play is a trademark of Google Inc