dorumrr/de1984
An open-source Android firewall and package manager that blocks per-app network access and disables or uninstalls apps, using iptables, Shizuku, or a local VPN.
Open-source alternative to:NetGuard
- Stars
- 503
- Forks
- 34
- Open issues
- 1
- Last commit
- 10 days ago
What is it?
De1984 is an Android app for controlling which installed apps can use the network. It lets you block apps separately on WiFi, mobile data and roaming, block LAN access, and set a global policy of either allowlisting or blocklisting by default. Several firewall backends are available: iptables for rooted devices, ConnectivityManager and NetworkPolicyManager through Shizuku, and a VPN-based backend that needs no root.
The app also covers package management. With Shizuku or root, you can enable or disable system apps, force stop running apps, and uninstall system or user apps, with filters for system/user apps and enabled/disabled state. Screen-off blocking and automatic rule application on network changes are included.
The project states that it has no tracking, analytics or telemetry, stores data locally, and contains no proprietary libraries. It is MIT licensed and buildable from source. Users of VPN mode must disable Android's "Block connections without VPN" setting, or allowed apps will be blocked.
Key features
- 01Per-app blocking on WiFi, mobile data, roaming and LAN
- 02Multiple firewall backends: iptables, ConnectivityManager, NetworkPolicyManager and VPN
- 03Global default-allow or default-block policies
- 04Enable, disable, force stop and uninstall apps via Shizuku or root
- 05Screen-off blocking to save battery and data
- 06No tracking, analytics or telemetry; data stored locally
Use cases
- Stopping background apps from using mobile data on an Android phone
- Limiting which preinstalled system apps can reach the internet
- Debloating an Android device by disabling or removing unwanted apps
- Using a VPN-based firewall on a non-rooted device
Quick start
- 1
Install from F-Droid or IzzyOnDroid (links in README)
- 2
Set up root or Shizuku for iptables, ConnectivityManager, NetworkPolicyManager and package management (optional)
Things to know
- Requires Android 8.0 or higher.
- Several firewall and package management features need root or Shizuku.
- In VPN mode, "Block connections without VPN" must be turned off or allowed apps will be blocked.
In collections
Topics
FAQ
- What is de1984?
- An open-source Android firewall and package manager that blocks per-app network access and disables or uninstalls apps, using iptables, Shizuku, or a local VPN. De1984 is an Android app for controlling which installed apps can use the network. It lets you block apps separately on WiFi, mobile data and roaming, block LAN access, and set a global policy of either allowlisting or blocklisting by default. Several firewall backends are available: iptables for rooted devices, ConnectivityManager and NetworkPolicyManager through Shizuku, and a VPN-based backend that needs no root.
- Is de1984 free to use? What license does it have?
- de1984 is open source under the MIT license. Check the license terms before using it in commercial products.
- Is de1984 still maintained?
- Actively maintained. The last commit to de1984 was on Oct 27, 2026.
- What can I use de1984 for?
- Stopping background apps from using mobile data on an Android phone Limiting which preinstalled system apps can reach the internet Debloating an Android device by disabling or removing unwanted apps Using a VPN-based firewall on a non-rooted device
- How do I install de1984?
- Install from F-Droid or IzzyOnDroid (links in README) Set up root or Shizuku for iptables, ConnectivityManager, NetworkPolicyManager and package management (optional)
- Where can I get de1984?
- The source code and installation instructions are on GitHub: https://github.com/dorumrr/de1984
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Android app combining a DNS-over-HTTPS/TLS/DNSCrypt client, a per-app firewall and network monitor, and a split-tunnel WireGuard/SOCKS5 proxifier, without requiring root.
Android client for F-Droid, a repository of free and open-source software apps that you can browse and install on your phone.
LuLu is a free, open-source application firewall for macOS that alerts you when processes make outbound network connections.
Android app that freezes apps by disabling, hiding, suspending or uninstalling them, without root for most modes.
No-root Android app that monitors, blocks and records app network traffic as PCAP files, with TLS decryption and HAR export.