Rethink: DNS + Firewall + VPN - Secure & Transparent VPN
Unlock safe internet with powerful VPN, firewall protection, and app monitoring for seamless online security.

- v0.5.5u Version
- 4.6 Score
- 396K+ Downloads
- Free License
- 3+ Content Rating
Welcome to a more secure, transparent, and reliable Android experience.

Feature Overview Based on Three Core Categories:
#### 1. Parental Control
- **Blocked Content**: Adult content, pirated websites, gambling platforms, dating apps, and social media.
- **Purpose**: Helps parents limit children's exposure to inappropriate or distracting content, fostering a healthy online environment. For example, this prevents children from accessing adult websites, engaging in online gambling, or becoming overly addicted to social media platforms, helping them balance their online use with their real-life lives.
#### 2. Security
- **Blocked Targets**: Malware, ransomware, cryptojacking software, phishing websites, and other online threats.
- **Purpose**: Blocks the intrusion paths of various malicious programs at the network level, preventing device infection, data from being encrypted for ransom, or personal information from being stolen through phishing. For example, it blocks links carrying viruses, preventing ransomware from spreading over the network, protecting devices and data.
#### 3. Privacy Protection
- **Blocking Targets**: Adware, spyware, scareware, and trackers.
- **Purpose**: Reduces unnecessary privacy leaks and prevents excessive tracking of personal behavior. For example, it blocks adware behind pop-up ads, prevents spyware from secretly collecting user location and usage habits, and blocks third-party trackers from tracking browsing history and consumption preferences, protecting users' online privacy.
Safety Guarantee:
VPN:
Allows connection to various WireGuard VPN services of your choice.
Safe:
Displays network activity from installed applications and provides options to disable, uninstall, or restrict them through a firewall.
Secure:
Serves as the initial barrier against spyware, ransomware, and malware that could compromise personal data and take over accounts. It protects users from DNS manipulation often used for blocking access to websites, social media, and messaging platforms.
Fast:
DNS servers are situated in over 300 locations globally to ensure optimal internet speed and availability.
Open:
This solution is based on open-source technology and is free from any tracking mechanisms.
Features:
Firewall:
Stops applications from accessing the Internet. Blocks spyware, malware, ransomware, and additional threats.
The firewall prevents any app from establishing an Internet connection through WiFi or mobile data. Since most surveillance techniques rely on data transmission over networks, implementing a firewall effectively reduces this risk (certain apps like File Managers, Alarm Clock, and Calculator typically do not need online connectivity). The firewall functionality uses Accessibility Service to identify and control background applications.
Monitoring:
Observe incoming and outgoing Internet traffic.
WireGuard:
Safeguard outgoing Internet traffic.
The application employs the rapid, modern, efficient, and secure WireGuard protocol to encrypt outgoing connections to any compatible VPN service you select.
Anti-censorship:
This application secures your internet connection to a Domain Name System (DNS) server operated by Rethink, present in our extensive network of over 300 global locations. DNS servers act as the internet's address directory: providing the precise addresses required to access websites or launch applications.
Data Monitor:
Keep track of individual app and connection data usage over Mobile or WiFi.
Application Experience:
Rethink DNS is a security application designed for Android users, focusing on three core dimensions: parental controls, security protection, and privacy protection. It accurately blocks inappropriate content, malware, and privacy tracking tools, creating a safe and transparent online environment for users. It also features practical functions such as a firewall, network traffic monitoring, and WireGuard encrypted connections. It supports custom connections to various WireGuard VPN services and leverages over 300 DNS servers worldwide to ensure network speed and stability.
Furthermore, it can monitor the data usage of various applications in real time. Based on open-source technology and without tracking mechanisms, although it uses a VPN API to route DNS traffic rather than actual network traffic, it effectively avoids network censorship. The overall experience is safe, efficient, and flexible, balancing parental control needs with the privacy and security of ordinary users.
FAQ:
Q:What Rethink DNS is not?
A:It isn't a VPN, at least not yet. Though, it is effective in circumventing internet censorship in most if not all countries. Rethink DNS uses VPN APIs to only route the DNS traffic and not the actual internet traffic.
Rethink DNS isn't a tracker. Rethink DNS logs DNS requests if a user opts-in. Rethink doesn't sell any user information or use it for anything else other than to provide analytics and reports to the user.
Q:Is RethinkDNS a recursive resolver?
A:Rethink DNS is both a stub and a recursive resolver-- sky.rethinkdns.com forwards user requests to another recursive resolver like Cloudflare's 1.1.1.1, but does so in a way that doesn't leak the identity of the client (user). Think of it like a proxy resolver that sits in-between a recursive resolver and you, the user.max.rethinkdns.com, which runs on fly.io is a recursive resolver and does not forward queries, but resolves DNS answers on its own.
Q:Is Rethink DNS a content-blocker?
A:Yes, Rethink DNS functions are similar to a pi-hole and it "blocks content" by blackholing traffic intended for certain domains. Most operating systems, including Android and Windows, resolve DNS requests on behalf of apps installed on the device (though this isn't strictly always true that apps use OS or network provided DNS resolver, it mostly is). If these DNS requests are blackholed, it effectively means every app on the device is then unable to initiate a connection to that domain, since an IP address is required to establish such a connection in the first place, which wasn't supplied by the DNS resolver. For example, if one chooses to block all requests to facebook.com, Rethink DNS would simply return 0.0.0.0 as the IP Address for facebook.com, effectively blackholing the traffic from all apps installed on the device to facebook.com, for example. Read more.
Q:Where is Rethink DNS?
A:Rethink DNS, the resolver, runs in 300+ locations world-wide. Rethink DNS + Firewall, the app (if you've installed it), should be on your Android.
- Versionv0.5.5u
- UpdateOct 27, 2026
- DeveloperCelzero
- CategoryTools
- Requires AndroidAndroid 6+
- Downloads396K+
- Package Namecom.celzero.bravedns
- Signature29082d5a9f2422f0a7f2c75343bd076a
- Available on
- ReportFlag as inappropriate
-
NameSizeDownload
-
89.07 MB
-
89.07 MB
-
79.17 MB























Provides comprehensive control over app internet access
Supports DNS filtering and per-app firewall features
Open source with no ads
Blocks ads and tracking effectively
Lightweight and minimal battery impact
Offers options for advanced users (e.g., custom DNS)
Includes bypass functions for Internet censorship
Developed by a knowledgeable team with industry experience
Allows for customized rules to improve security
Frequently encounters network issues leading to crashes
High data consumption despite blocking apps
Complicated setup may confuse some users
Does not consistently block certain apps
Lack of reliable documentation or tutorials
Needs improvement in handling multiple domains for blocking
Updates may introduce new bugs, impacting functionality
Not user-friendly for those unfamiliar with technical configurations
May interfere with basic phone operations when improperly configured