Rooting an Android phone in 2026 still breaks too much to be worth it for most people. Banking apps refuse to launch, Google Wallet drops contactless payments, Play Integrity blocks streaming apps, and warranties evaporate. The good news is that you no longer need root to block ads. Android’s Private DNS setting, local-VPN apps, and privacy browsers can together block most ads inside apps, browsers, and even some video platforms, all using stock Android APIs.
This guide shows how to block ads on Android without root in 2026: the four methods that actually work, which one to pick for your phone, and step-by-step setup for the two easiest paths. It is written for a stock Pixel, Samsung, Xiaomi, OnePlus, or any other unrooted Android 9 or newer device.
If you only want a recommendation, skip to which method to pick. If you want the head-to-head app comparison instead, see our AdGuard vs Blokada vs RethinkDNS comparison. For a broader app shortlist, see the best AdBlock and privacy apps for Android (no root).
The four methods that actually work in 2026
There are four ways to block ads on an unrooted Android phone. Each has a different reach and a different cost.
| Method | Blocks in-app ads | Blocks YouTube ads | Free | Uses VPN slot | Setup time |
|---|---|---|---|---|---|
| Private DNS (NextDNS, RethinkDNS DoT) | Most | Some | Yes | No | 4 min |
| Local-VPN app (AdGuard, Blokada, RethinkDNS) | Yes | Some | Free or freemium | Yes | 6 min |
| Privacy browser (Brave, Firefox + uBlock) | Browser only | Yes (YouTube web) | Yes | No | 1 min |
| Real VPN with built-in blocking (Proton, Mullvad) | Partial | Some | Free tier varies | Yes | 5 min |
A few facts that decide which one is right for you:
- Android allows only one VPN connection at a time. A local-VPN ad blocker and a real VPN cannot run together by default.
- Private DNS does not consume the VPN slot. You can pair it with a real VPN.
- DNS-based blocking cannot block ads served from the same domain as the content. That is why YouTube’s pre-roll ads survive DNS filtering: the ads and the video both come from
googlevideo.com. - Most “ad blocker for YouTube” claims you see in app store descriptions either rely on a browser, a sandboxed YouTube client, or a Premium subscription. There is no purely DNS-based fix for YouTube ads on the official app in 2026.
Method 1: Private DNS (the easiest free path)
Private DNS is a built-in Android setting from Android 9 (Pie) onward. It encrypts all DNS queries from your device and lets you point them at a custom resolver. If that resolver blocks ad and tracker domains, those domains never resolve and the ads never load.
Two free resolvers stand out:
- NextDNS. Hosted, configurable, generous free tier (300,000 queries per month, which is roughly one phone for a month). Block lists are toggled in a web dashboard.
- RethinkDNS. A free, open-source DNS resolver with public blocklists. Includes a “DNS over TLS” endpoint you can use without installing any app.
What it blocks. Most in-app ads served by ad networks (Google Ads, AppLovin, Unity Ads, ironSource), most tracker SDKs (Facebook, Branch, Adjust, Mixpanel), and most ads inside ad-supported apps and games that load over a separate ad domain.
What it cannot block. YouTube ads inside the YouTube app, Spotify audio ads in the Spotify app, Twitch ads inside the Twitch app, Instagram and TikTok in-feed ads. All of these are served from the same domain as the content itself, so DNS-level filtering cannot separate them.
Cost. Free.
VPN slot used. None. Works alongside a real VPN.
We walk through the setup for Private DNS further down this page.
Method 2: Local-VPN app (the strongest free path)
Apps like AdGuard, Blokada, and RethinkDNS install a local-only VPN. The VPN does not send your traffic to a remote server. It loops it back through the phone, filters DNS and HTTPS requests, then releases the cleaned traffic to the network.
This catches more than Private DNS. Local-VPN apps can apply hostname-based rules to specific apps, block trackers inside split-package games, and (in AdGuard’s case) attempt HTTPS filtering against ad scripts that DNS alone misses.
| App | Open source | Free tier | Best for |
|---|---|---|---|
| AdGuard | Filters yes, app no | Free with limits (premium unlocks HTTPS filtering and full lists) | One-app setup, broadest blocking |
| Blokada 5 | Yes | Free, full features | A no-friction toggle that “just works” |
| RethinkDNS | Yes | Free, full features | Per-app firewall plus DNS, for power users |
Trade-off: these apps occupy Android’s single VPN slot. If you also want a real VPN like Proton VPN or Mullvad, you must either give up the local blocker, run the blocker only at home over Wi-Fi, or use RethinkDNS, which can route its DNS over a wireguard tunnel and keep both running.
For a side-by-side breakdown of these three, see AdGuard vs Blokada vs RethinkDNS for Android (2026).
Method 3: Privacy browser (the simplest fix for web ads)
If most of the ads you see are on web pages, the cleanest fix is to switch browsers.
- Brave (Aptoide) blocks ads, third-party trackers, and fingerprinting by default. No setup required. It also strips YouTube pre-rolls on the web, even without a Premium account. Open source on GitHub.
- Firefox (Aptoide) is the one mobile browser that still supports a real desktop-style extension store. Install uBlock Origin from
addons.mozilla.organd Firefox blocks ads at parity with desktop.
A privacy browser will not stop ads inside apps like Instagram, TikTok, or free games. Use it together with Method 1 or Method 2 if you want phone-wide coverage.
Method 4: Real VPN with built-in blocking
Some VPN providers include a network-level ad and tracker blocker. If you already pay for a VPN (or use Proton VPN’s free plan), enabling its blocklist is one toggle.
- Proton VPN (Aptoide) includes NetShield. Off by default. The free plan keeps NetShield on the paid tiers in some regions, so check before relying on it.
- Mullvad VPN runs a DNS-based blocker. Works on the free trial.
This is the right path if your goal is privacy plus blocking, not blocking alone. If you only want ad blocking, a local-VPN app or Private DNS gives a stronger filter for free.
Which method to pick
Pick based on what you actually do on the phone.
- You want the simplest free fix. Use Method 1 (Private DNS) with NextDNS or RethinkDNS DoT. Four minutes, no app to install, no VPN slot used.
- You want the strongest free fix and do not need a real VPN. Use Method 2 with Blokada or RethinkDNS. Both are open source and free with no feature caps.
- You already use a real VPN. Use Method 1 (Private DNS) in parallel, or switch to RethinkDNS, which can wrap a wireguard tunnel.
- You mostly browse the web. Use Method 3 (Brave or Firefox with uBlock Origin). Add Method 1 if you also want in-app coverage.
- You want one app for everything and do not mind paying. AdGuard with a yearly licence. Single setup, broadest filter, HTTPS scanning, parental rules. About the price of a streaming service.
Setup: Private DNS in 4 minutes
This is the fastest, most reliable path. No app to install.
1. Open the right setting
On stock Android (Pixel): Settings → Network and internet → Private DNS.
On Samsung One UI: Settings → Connections → More connection settings → Private DNS.
On Xiaomi HyperOS or Redmi: Settings → Connection and sharing → Private DNS.
On OnePlus and Oppo: Settings → Wi-Fi and network → Private DNS.
If you cannot find it, search the Settings app for “Private DNS”. It exists on every Android 9 or newer device.
2. Pick a free resolver
Tap “Private DNS provider hostname” and enter one of these:
dns.nextdns.io(you will configure your blocklists onmy.nextdns.ioafter).dns.rethinkdns.comfor the default RethinkDNS configuration.family.adguard-dns.comfor AdGuard’s family-safe filter (blocks ads plus adult sites).
Press save. Android encrypts every DNS query from now on and routes it through the resolver you picked.
3. Verify it works
Open a browser and visit a site you know carries display ads (a news site like cnn.com, a recipe blog, or a sports site). You should see significantly fewer ad slots load. To confirm the resolver is active, visit ip.nextdns.io or rethinkdns.com/test and the page will tell you whether the encrypted DNS path is in use.
4. Tune the blocklists (NextDNS only)
NextDNS is the only one of the three that lets you customise. Sign up free at my.nextdns.io, create a profile, and toggle the lists you want under Privacy → Blocklists. Sensible defaults are NextDNS Ads and Trackers, the AdGuard DNS filter, OISD, and Steven Black’s hosts list. Then copy the unique hostname NextDNS generates (looks like abc123.dns.nextdns.io) back into the Private DNS field on your phone.
Setup: AdGuard in 6 minutes
If Private DNS is not aggressive enough, AdGuard adds a local-VPN filter, HTTPS scanning, and per-app rules. The free version blocks most ads. The premium tier (about $30 per year) adds HTTPS filtering against trackers that hide inside encrypted traffic.
1. Install AdGuard
Download AdGuard from a trustworthy source. Google Play removed standalone ad blockers years ago, so you will need to sideload. Use one of:
- Aptoide app page (verified, malware-scanned, signed by Adguard Software Ltd).
- The official
adguard.com/adguard-androiddownload.
If you are new to installing apps outside Google Play, our Android sideloading guide walks through the safety steps and the “install unknown apps” permission.
2. Grant the VPN permission
The first time AdGuard runs, Android asks whether you trust the app to set up a local VPN connection. This is the local-VPN filter from Method 2, not a real VPN. Tap allow.
3. Pick the filter lists
AdGuard’s defaults are sensible. The four lists worth confirming are enabled:
- AdGuard Base filter
- AdGuard Mobile Ads filter
- AdGuard Tracking Protection filter
- EasyList (English) or the language list for your country
If you want stricter blocking, turn on AdGuard Annoyances and AdGuard Social Media.
4. Enable HTTPS filtering (premium only)
In the free version, AdGuard filters DNS and unencrypted HTTP requests. The premium tier installs a certificate that lets the app inspect HTTPS traffic and remove tracker scripts inside the page. Most modern ads use HTTPS, so HTTPS filtering is the difference between blocking 70 percent of ads and blocking 95 percent.
5. Verify
Open the same test sites you used in the Private DNS step. AdGuard’s notification shows the number of blocked requests in real time. A typical news site should show 50 to 200 blocked requests in the first 30 seconds.
Common problems and fixes
Banking apps refuse to launch. A few banks block any device with an active VPN connection, including the local-VPN ad blockers. Solutions: switch to Private DNS only (no VPN slot used), allow-list the bank in your ad blocker, or temporarily disable the blocker for that session.
Captive Wi-Fi portals do not load. Hotel, airport, and coffee-shop Wi-Fi often hijacks DNS to show a login page. Private DNS blocks that hijack and the portal never appears. Fix: switch Private DNS to “Automatic” before connecting to public Wi-Fi, log in, then switch it back.
YouTube ads still play. Expected behaviour. YouTube serves ads and video from the same domain, so DNS filtering cannot separate them. Options: use the YouTube web page in Brave (works), pay for YouTube Premium, or accept the ads in the app.
The blocker breaks Google Search or Gmail. Some block lists are too aggressive and cut Google domains the apps need. Switch to a less strict list (NextDNS Ads and Trackers, OISD light, or AdGuard Base only) and the apps should recover.
A specific app refuses to load anything. Most ad blockers expose a per-app allow-list. Turn off filtering for that one app and the rest of the phone keeps the blocker active.
Battery drain. Modern local-VPN ad blockers use under 1 percent battery per day. If you see a heavier drain, look for a misconfigured upload of logs or a debug build of the app.
FAQ
Is there an ad blocker for non-rooted Android?
Yes. Private DNS works on every Android 9 or newer device with no app, and local-VPN apps like AdGuard, Blokada, and RethinkDNS work on stock Android without root. Both methods are described above.
What is the best ad blocker for Android in 2026?
AdGuard for the broadest filtering and HTTPS scanning if you are willing to pay, Blokada or RethinkDNS for a free open-source option, or NextDNS Private DNS if you do not want to install anything. See our head-to-head comparison for the full breakdown.
How do I block ads on my phone without rooting it?
Open Settings, find Private DNS, and enter dns.nextdns.io or dns.rethinkdns.com. That blocks most in-app ads in under a minute. For stronger blocking, install AdGuard or Blokada from a trustworthy source like Aptoide and let the app set up its local-VPN filter.
Why can ad blockers not block YouTube ads on Android?
YouTube ads and YouTube videos are served from the same domain (googlevideo.com), so DNS- or hostname-based blockers cannot separate them. The reliable ways to skip YouTube ads on Android in 2026 are using YouTube in Brave (the browser strips ads on the web player), or subscribing to YouTube Premium.
Will a free ad blocker block ads inside apps and games?
A DNS-based blocker (Private DNS, NextDNS, RethinkDNS) blocks most in-app ads served by external ad networks. It will not block ads embedded inside the app’s own server response. A local-VPN blocker like AdGuard or Blokada catches more, including some interstitial ad providers that DNS-only filtering misses.
Is using an ad blocker safe?
Yes, if you install from a trustworthy source. AdGuard, Blokada, NextDNS, and RethinkDNS are well-known projects with verifiable signatures, and the open-source ones publish full source code. Be careful with random “ad blocker” APKs from search results, which can contain spyware. Stick to the Aptoide app pages, the developer’s official site, or F-Droid for the open-source options.
Do I have to choose between a VPN and an ad blocker on Android?
In most cases, yes, because Android allows only one VPN slot at a time. The two workarounds are Private DNS (does not use the VPN slot and works alongside any VPN), or RethinkDNS, which can wrap a wireguard tunnel and so keeps both ad blocking and your VPN active.
