Noxa

byPsychopath · Tools

Verified safeOpen sourceExclusive

Download APK

—

No reviews reviews

downloads

7.0

android

AI summary

System-wide ad, tracker and malware blocker using a local DNS sinkhole with ~860,000-domain filter. Optional WireGuard IP tunnel and encrypted DNS. New in 1.9: choose your DNS resolver, dangerous-site alerts for browsers and apps, Protection check-up with one-tap fixes, and auto-restart watchdog. Open source under AGPLv3+; no accounts, no servers, no telemetry.

Generated by AI. May contain inaccuracies.

About this app

Noxa is a free, open, dead-simple Android app that blocks ads, trackers, and malware across your whole phone — every app, not just the browser — and can hide your IP through an encrypted tunnel when you're on untrusted Wi-Fi. No servers of its own, no accounts, no ads, no data sale. Provably nothing leaves your device — you can read the code and check.

What it does

- System-wide blocking — a local VpnService DNS sinkhole checks every app's lookups against a compiled ~860,000-domain filter (UT1 + StevenBlack + EasyList/EasyPrivacy + OISD + HaGeZi + AdGuard). Blocked domains never connect. - Per-app control + plain-language stats — see which company each app is tracking you for ("Google · Advertising", "Xiaomi · Analytics"), and block any app entirely with one switch. - CNAME uncloaking — catches trackers disguised as first-party subdomains that plain domain-lists miss. - IPv6-proof — DNS is captured over IPv4 and IPv6, so lookups can't slip around the filter on modern networks. - Works on Android TV — appears in the TV launcher; block the trackers baked into every smart-TV app. - Stays on — battery-exemption ask, a self-restarting watchdog, and automatic start after reboot: protection that doesn't silently die. - Encrypted DNS (DoH) — hides your lookups from your ISP/Wi-Fi. - Hide my IP (WireGuard tunnel) — optional; routes through your provider (Proton, Mullvad, IVPN, or your own server). Blocks trackers while tunnelling. Noxa runs no servers. - User allowlist — un-block anything caught by mistake, yourself. - 30-day rolling stats, CSV export, first-run explainer. - Zero telemetry, verifiable. No location permission, no accounts, nothing phones home.

Default experience is one on/off switch. Everything advanced lives one tap deeper.

How it works

Noxa is a local filter built on Android's VpnService — not a real VPN by default. It routes DNS to itself, checks each looked-up domain against a compiled Bloom filter (built offline; the phone never parses raw lists), and drops trackers while forwarding everything else. The optional IP tunnel embeds the official WireGuard library and mode-switches with the blocker (Android allows one VPN at a time).

License

GNU Affero General Public License v3.0 or later

ad blocker privacy dns filter open source vpn offline

What's new

v1.9Oct 1, 2026

Choose who answers your lookups: Cloudflare (default), Quad9, Mullvad, AdGuard, Google or your own server, applied instantly. - Fixed apps being named incorrectly on phones using IPv6 DNS, where they used to show as "system / unknown". - New dangerous-site alert: when a browser hits a known scam, phishing or malware site, Noxa blocks it and tells you not to enter passwords there. A non-browser app doing it gets a stronger warning. - New Protection check-up: what keeps you protected, what's missing, and a one-tap fix for each, covering battery, Always-on, alerts, encryption and list age. - Protection now restarts itself within seconds if it ever stops, and tells you if it can't.