De1984 vs Rethink: DNS + Firewall + VPN
Side-by-side comparison of two open source alternatives
De1984
De1984 is a powerful Firewall and Package Manager for Android devices with multiple backend support for maximum flexibility and performance. The name **De1984** is inspired by George Orwell’s novel Nineteen Eighty-Four, reflecting the app’s philosophy of resisting surveillance and reclaiming digital privacy. It symbolizes a reversal of the dystopian control described in the book, empowering users to take back control over their devices and data. FIREWALL FEATURES - Multiple firewall capabilities: iptables (root/Shizuku), ConnectivityManager (Android 13+), and VPN fallback - Automatic firewall method selection based on device capabilities - Comprehensive iptables method for rooted devices provides kernel-level blocking with superior performance - ConnectivityManager for Android 13+ devices without root - VPN backend as fallback for maximum compatibility (no root required) - Block apps from accessing WiFi, Mobile Data, or Roaming independently - Global firewall policies: "Block All by Default" (allowlist) or "Allow All by Default" (blocklist) - Screen-off blocking to save battery and data - Real-time network state monitoring and automatic rule application PACKAGE MANAGEMENT (with Shizuku or root) - Enable/disable system apps - Force stop running apps - Uninstall system and user apps - Works with Shizuku (no root required) or traditional root access - Filter packages by system/user apps, enabled/disabled state - Search functionality for quick package lookup PRIVACY FIRST - Zero tracking or analytics - No telemetry - Local-only data storage - No proprietary libraries - No Google Play Services - 100% open source (MIT License) - Buildable from source REQUIREMENTS - Android 8.0 (API 26) or higher - For iptables firewall: Root access OR Shizuku in root mode - For ConnectivityManager firewall: Shizuku + Android 13+ - For VPN firewall: VPN permission (no root required, works on all Android versions) - For package management: Shizuku or root access PERMISSIONS - ACCESS_NETWORK_STATE: Monitor network connectivity for automatic rule application - BIND_VPN_SERVICE: Create local VPN for VPN-based firewall backend - QUERY_ALL_PACKAGES: View all installed apps - POST_NOTIFICATIONS: Show notifications for new app installations (optional) - RECEIVE_BOOT_COMPLETED: Auto-start firewall on device boot - Shizuku or root access: For iptables firewall and package management (optional) OPEN SOURCE Source code: https://github.com/dorumrr/de1984 License: MIT Issues: https://github.com/dorumrr/de1984/issues Late nights for brighter days. Created by Doru Moraru
Rethink: DNS + Firewall + VPN
Say hello to a safer, transparent, and secure Android. VPN: Connects to multiple WireGuard VPNs of your choice. Safe: Reveals network activity of installed apps and lets you disable, uninstall, or firewall them. Secure: First line of defense against spyware, ransomware, and malware that steal personal information and takeover accounts. Protects from DNS manipulation typically employed to censor websites, social media, and messaging apps. Fast: DNS Servers deployed to 300+ locations world-wide to ensure your internet is as fast and highly available as it can be. Open: Open source and free of any trackers. ***Features*** Firewall: Prevent apps from connecting to the Internet. Block spyware, malware, ransomware and more. A firewall blocks any app connecting to the Internet over WiFi or Mobile data. Since most forms of surveillance require the data to be sent the network to a server, firewalling them effectively mitigates the threat (File Managers, Alarm Clock, Calculator are few such examples of apps that do not require any Internet access to function). The firewall feature uses Accessibility Service to detect and firewall background applications. Monitoring: Keep tabs on incoming and outgoing Internet traffic. If enabled, the connectivity logs are collected and analyzed. Automated reports flag previously unknown or suspicious connections, and reveal the extent of attempt to steal data by spyware networks. In our tests, around 60% of the traffic is flagged and reported as being initiated by known spyware. Logs generated are made available in near-real time to the user for their own analysis. WireGuard: Secure outgoing Internet traffic. The app uses fast, modern, light-weight, and secure WireGuard protocol to encrypt outgoing connections to any compatible VPN provider of your choice. Anti-censorship: The app encrypts your internet connection to Domain Name System (DNS) server run by Rethink with presence in our 300+ locations world-wide. DNS servers are the address book of the internet: A DNS server provides the exact addresses you need to visit a website or open an app. Data Monitor: Track per-app and per-connection Mobile or WiFi data usage.
| Feature | De1984 | Rethink: DNS + Firewall + VPN |
|---|---|---|
| License | MIT | Apache-2.0 |
| Install sources | F-DroidGitHubIzzyOnDroid | F-DroidGitHub |
| Categories | Password ManagerProductivityFirewallDev ToolsBrowser | Password ManagerVPNFirewallDev ToolsMessagingBrowser |
| Features | Ad-FreeOpen SourceNo Tracking | Ad-FreeOpen SourceNo Tracking |
| Platforms | Android | Android |
| Website | ||
| Source code |