A fast, lightweight DNS proxy that blocks ads and trackers for your whole local network, with per-client-group rules.
irbis-sh/zen-desktop
A system-wide ad-blocker and privacy guard for Windows, macOS and Linux that filters traffic from all applications, not just the browser.
- Stars
- 4,356
- Forks
- 146
- Open issues
- 12
- Last commit
- 2 days ago
What is it?
Zen is a system-wide ad-blocker and privacy guard. It sets up a local proxy that intercepts HTTP requests from every application on the machine, blocking ads, tracking scripts, malware and other unwanted content. Because it works below the browser, it can also cover trackers embedded in desktop apps and operating system components that browser extensions cannot reach.
Zen ships with a set of pre-installed filters and lets you add your own hosts files or EasyList-style filter lists by URL. A request history view shows every blocked request and which filter rule caused the block. HTTPS interception relies on a root certificate that is generated locally during first run.
Installers and portable builds are provided for Windows (x64 and ARM64), macOS (Intel and Apple Silicon) and Linux. Windows users can install via Winget, macOS users via Homebrew, and Linux users via an install script, AUR or Nix. Automatic proxy configuration on Linux currently supports GNOME and KDE desktops only.
Key features
- 01Intercepts HTTP requests from all applications through a system-level proxy.
- 02Blocks ads, tracking scripts and malware across desktop apps and OS components.
- 03Supports hosts files and EasyList-style filter lists added by URL.
- 04Includes pre-installed filters and a regional filter list category.
- 05Request history shows each blocked request and the rule that matched it.
- 06Available for Windows, macOS and Linux, with Winget, Homebrew and AUR options.
Use cases
- Blocking ads and trackers in desktop applications that browser extensions cannot filter.
- Adding custom EasyList or hosts-based filters to tailor system-wide protection.
- Inspecting which filter rule blocked a given request when debugging unexpected blocking.
- Running a privacy guard across Windows, macOS and Linux machines from one tool.
Quick start
- 1
On Windows, install with Winget
winget install ZenPrivacy.ZenDesktop - 2
On macOS, install with Homebrew
brew install --cask zen-privacy - 3
Or download the installer or portable build for your platform from the releases page
- 4
On first run, install the root certificate Zen prompts for, which is needed to intercept HTTPS
Things to know
- Zen requires installing a root certificate so it can intercept HTTPS traffic.
- Automatic proxy configuration on Linux is only supported on GNOME- and KDE-based desktops.
In collections
Topics
FAQ
- What is zen-desktop?
- A system-wide ad-blocker and privacy guard for Windows, macOS and Linux that filters traffic from all applications, not just the browser. Zen is a system-wide ad-blocker and privacy guard. It sets up a local proxy that intercepts HTTP requests from every application on the machine, blocking ads, tracking scripts, malware and other unwanted content. Because it works below the browser, it can also cover trackers embedded in desktop apps and operating system components that browser extensions cannot reach.
- Is zen-desktop free to use? What license does it have?
- zen-desktop is open source under the MIT license. Check the license terms before using it in commercial products.
- Is zen-desktop still maintained?
- Actively maintained. The last commit to zen-desktop was on Nov 5, 2026.
- What can I use zen-desktop for?
- Blocking ads and trackers in desktop applications that browser extensions cannot filter. Adding custom EasyList or hosts-based filters to tailor system-wide protection. Inspecting which filter rule blocked a given request when debugging unexpected blocking. Running a privacy guard across Windows, macOS and Linux machines from one tool.
- How do I install zen-desktop?
- On Windows, install with Winget: winget install ZenPrivacy.ZenDesktop On macOS, install with Homebrew: brew install --cask zen-privacy Or download the installer or portable build for your platform from the releases page On first run, install the root certificate Zen prompts for, which is needed to intercept HTTPS
- Where can I get zen-desktop?
- The source code and installation instructions are on GitHub: https://github.com/irbis-sh/zen-desktop
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Browser extension that skips sponsor segments and other non-content parts of YouTube videos, using crowdsourced timestamps.
A Pi-hole-style DNS ad-blocker for the $2 ESP32-C3 that stores blocklist hashes in flash, so it needs no PSRAM.
Free censorship circumvention VPN app for Android, iOS, Windows, macOS and Linux, aimed at speed, privacy and bypassing internet blocks.
Free, open-source Android ad blocker that filters ads, trackers and malware system-wide via a local VPN, no root required.