Software / Privacy Software / RethinkDNS

RethinkDNS

RethinkDNS is a free, open-source Android app combining DNS filtering, per-app firewall controls, network monitoring, and WireGuard VPN support.

7.4/10 TechZella Score
Visit Website ↗
Editorial overview

Aggregated Overview

Official documentation describes DNS filtering, per-app firewall rules, connection logs, and WireGuard support. The app is free and open source, but configuration is feature-rich and Google Play shows a 3.8-star rating. No systematic independent review evidence was found.

This profile combines documented product information and independent evidence where available. It is not a hands-on test unless TechZella explicitly identifies one.

Decision guide

RethinkDNS Decision Snapshot

A quick way to understand who this product may suit, where its limits matter, and which facts are most relevant before you compare alternatives.

Best suited to

Android users who want app-specific network controls, DNS filtering, connection visibility, and optional WireGuard routing within one open-source app.

Look elsewhere if

People seeking a cross-platform firewall, a traditional antivirus, or a product that hides their identity. The project explicitly says it is not an antivirus or anonymity tool, and should evaluate alternatives such as AdGuard for Android or NetGuard instead.

Platforms

Android, Cloud

TechZella assessment

7.4/10

Overview

RethinkDNS is an open-source Android privacy and network-control app. It combines DNS filtering with a firewall that can restrict network access by app and connection context.

It can also display connection activity and use WireGuard configurations. The app relies on Android’s VPN interface for its local network controls, so it is not a conventional full-device VPN by default.

The Android app is free. Optional Rethink cloud services, including the Rethink Proxy Network, have paid plans. The project describes its DNS-based blocking as a layer of defense, not a replacement for antivirus software or an anonymity service.

Decision context

RethinkDNS — What Sets It Apart?

These are the product-specific differences that may matter when deciding whether the software fits your workflow. They are based on documented evidence rather than a universal ranking.

  • Combines Android app-level firewall rules, DNS filtering, connection monitoring, and WireGuard configurations in one app.
  • Supports user-selected DNS resolvers and custom blocklists, alongside its own resolver service.
  • Offers an open-source app and a separately self-hostable DNS resolver.
6 key claims verifiedOur editorial team checked this profile against vendor documentation, product documentation. Supported by 6 documented sources.
Editorial assessment

RethinkDNS Pros & Cons

Pros

  • Combines per-app firewall controls, DNS filtering, and connection monitoring in one Android app.
  • The Android app is free and open source.
  • Users can configure DNS services and WireGuard profiles.
  • The DNS resolver software can be self-hosted.

Cons

  • The app is limited to Android rather than offering verified native apps across desktop and mobile platforms.
  • Local firewall and DNS functions use Android's VPN interface, which can constrain simultaneous use with other VPN-based apps.
  • The project says it is not an antivirus or anonymity tool.
  • Optional cloud and VPN services have separate pricing from the free app.
Operational limits

RethinkDNS Gotchas & Operational Limits

These are documented constraints or practical friction points that may matter before you adopt the product.

RethinkDNS uses Android's VPN interface to provide local firewall and DNS features.

A second VPN-based Android app may compete for the device's VPN slot; the app also supports adding WireGuard configurations.

Evidence source ↗

The app's Play Store build includes opt-in Firebase Crashlytics, according to the FAQ.

Users choosing a distribution should review its privacy settings and the differences between app builds.

Evidence source ↗
Security research

Security & Privacy

For security-sensitive software, TechZella focuses on documented architecture, authentication, data handling, deployment and privacy details that can affect a buying decision. This is product research, not an independent security audit.

Security posture at a glance

Self-hosted resolver environmentsCloudflare, Deno Deploy, and Fly.io

Security claims are presented only when supported by documented sources. The presence of this section does not constitute a penetration test, certification or independent security audit.

Plans & pricing

RethinkDNS Pricing & Plans

Android app

$0
one-time

Free and open-source Android app. Optional cloud services and RPN may require payment.

Check current pricing →

Rethink Proxy Network

From $1.75
month

Official FAQ lists RPN plans starting at this price. Confirm current plan terms and billing options on the service before purchase.

Check current pricing →

Pricing may change. Verify current plans on the vendor's website.

Cost context

Total Cost & Hidden Costs

Additional costs or implementation requirements that are documented in the available evidence.

Optional self-hosted resolver infrastructure

The resolver software is open source, but the documentation notes that users are responsible for Cloudflare billing when hosting it there.

Evidence source ↗
Compare options

RethinkDNS Competitors & Alternatives

Compare similar products directly, then see which alternatives may make more sense when your requirements differ.

Direct competitors

These products address broadly similar requirements. The descriptions focus on documented reasons a buyer might compare them with RethinkDNS.

Capabilities

RethinkDNS Features

DNS and filtering

  • DNS over HTTPS and DNS over TLS resolver support
  • Configurable DNS blocklists
  • Domain filtering for privacy, security, and family controls
  • Option to use a selected DNS resolver

Firewall and monitoring

  • Per-app internet access controls
  • Rules based on app category and app state
  • Searchable connection logs
  • Individual IP blocking

VPN and deployment

  • WireGuard configuration import, manual entry, and QR-code setup
  • Rethink Proxy Network subscription option
  • Open-source DNS resolver with self-hosting instructions
Visual preview

Demo & Screenshots

RethinkDNS product screenshotRethinkDNS product screenshotRethinkDNS product screenshotRethinkDNS product screenshotRethinkDNS product screenshotRethinkDNS product screenshot
Product details

RethinkDNS Specifications

App platformAndroid 6.0 and newer
LicenseApache License 2.0
DNS protocolsDNS over HTTPS and DNS over TLS
VPN protocol supportWireGuard
Self-hosted resolver environmentsCloudflare, Deno Deploy, and Fly.io
APIDNS-over-HTTPS and DNS-over-TLS resolver interfaces; no general-purpose app API verified
IntegrationsNo formal integration catalog verified; supports user-selected resolvers and WireGuard configurations
Free trialNo separate trial period verified; the Android app is free
Deployment

Deployment & System Footprint

Verified installation, hosting, administration, or environment details that can affect implementation.

Installation or hostingThe firewall app installs on Android. The open-source DNS resolver can be self-hosted on Cloudflare, Deno Deploy, or Fly.io; the hosting provider may charge separately. Source ↗
Exit planning

Migration & Lock-In

Documented portability, standards, export, or switching considerations. No switching-cost score is shown unless the evidence supports one.

Resolver configuration

Users can select a DNS resolver and configure blocklists. The documentation also describes adding WireGuard configurations manually, by importing a configuration, or by scanning a QR code.

Evidence source ↗
Our evidence-based assessment

TechZella Score

A proprietary editorial score based on product capabilities, usability, value, performance, support and user sentiment evidence.

7.4/10Moderate confidence
Features8.5
Ease of Use6.5
Value for Money8.5
Performance7.0
Support5.5
User Sentiment6.5

Official documentation describes DNS filtering, per-app firewall rules, connection logs, and WireGuard support. The app is free and open source, but configuration is feature-rich and Google Play shows a 3.8-star rating. No systematic independent review evidence was found.

Methodology v1.0. The assessment weighs feature coverage (25%), ease of use (15%), value for money (20%), performance (15%), support (10%) and user sentiment (15%), using researched product evidence and verified review evidence where available. It is a TechZella editorial assessment, not a direct user-review average.

Editorial transparency

Our Review Methodology

Key claims are linked to the sources used to verify them. This evidence record is separate from third-party user ratings.

TechZella evaluates software using documented product capabilities, pricing information, usability and value considerations, independent user evidence where available, and competitive context. The assessment is an editorial review, not a hands-on test unless one is explicitly identified. Our editorial assessment is based on 6 documented sources.

What TechZella adds
  • Combines Android app-level firewall rules, DNS filtering, connection monitoring, and WireGuard configurations in one app.
  • Supports user-selected DNS resolvers and custom blocklists, alongside its own resolver service.
  • Offers an open-source app and a separately self-hostable DNS resolver.
Important limitations
  • The app is Android-specific and uses Android's VPN functionality for firewall and DNS features.
  • The developer says RethinkDNS is not an antivirus or an anonymity tool.
  • The free app and paid cloud services are distinct; the app's core software remains free while some resolver and VPN services have paid tiers.
Evidence-backed claims
RethinkDNS provides per-app network controls on Android.

The firewall documentation describes monitoring app internet access, blocking individual IPs, and setting rules by app or app state.

View source ↗Verified 2026-10-05
The RethinkDNS app is free and open source.

The official app page identifies the app as free and open source and says the app itself will remain free.

View source ↗Verified 2026-10-05
The DNS resolver supports DoH and DoT and can be self-hosted.

The open-source resolver documentation lists DNS over HTTPS and DNS over TLS support and hosting instructions for Cloudflare, Deno Deploy, and Fly.io.

View source ↗Verified 2026-10-05
The app can use WireGuard configurations.

The official guide documents adding a WireGuard configuration manually, by importing a file, or by scanning a QR code.

View source ↗Verified 2026-10-05
RethinkDNS offers paid RPN subscriptions starting at $1.75 per month.

The official FAQ says RPN plans start at $1.75 per month and describes the service as WireGuard-based.

View source ↗Verified 2026-10-05
RethinkDNS is not presented as an antivirus or anonymity tool.

The project's GitHub description says it is not an antivirus and does not claim to protect user identity at all times.

View source ↗Verified 2026-10-05
Independent review sources

RethinkDNS Ratings & Reviews

Ratings are published by the respective review platforms and may change over time.

Community feedback

Reviews

No reviews yet. Be the first to share your experience.

Write a Review

FAQ

Is RethinkDNS free? The Android app is free and open source. Optional cloud and VPN services can have paid tiers.

Which platforms does it support? The app supports Android 6.0 and newer. No native iOS, Windows, or macOS app was verified.

Does it have an API? The resolver supports DNS-over-HTTPS and DNS-over-TLS endpoints. No general-purpose application API or formal third-party integration catalog was verified.

Is there a free trial? No specific trial period was verified. The app is free; paid RPN subscriptions are listed separately.

Does it replace a VPN? Its DNS and firewall functions use Android’s VPN interface, but that does not mean all internet traffic is routed through a remote VPN. The app can use WireGuard configurations and offers its own RPN service.

Is it antivirus software? No. The project describes domain blocking as a protective measure but states that RethinkDNS is not an antivirus.