I bought a license and will be using it on various platforms to learn more about this app. Currently, on iOS, I use Adguard for protection on Safari. This allows me to use Safari with a VPN of my choice. On Android, to take full advantage of Adguard, it has to take up a VPN slot, and this prevents me from using a VPN of my choice. Sadly, Android only allows one VPN on at a time. So, if I don’t want to lose the VPN slot, is there any use for Adguard Android? If so, which settings or features should I enable and use?
AdGuard actual VPN offering includes ad-blocking, as do most other VPNs. VPN with ad-blocking is not as powerful for filtering out ads as what you have now, but it’s the only proper way to do it anyway if you also want to be connected to a VPN.
You can also run a VPN and list any DNS-over-TLS (DoT) endpoint in Private DNS that filters out ad domains for free (AdGuard and Mullvad offer these) . Same result as VPN with ad-blocking but makes you stand out more.
I don’t want to use Adguard Android’s features if it uses a VPN slot. It’s the same with iOS. On iOS, I just avoid the DNS features, which is fine, because I want to use NextDNS. The Safari filters don’t require the use of iOS’s VPN slot. What about on Android?
Use Brave over VPN. It’s a solid setup, and you won’t be wasting a VPN slot.
I do use Brave over a VPN. I’m wondering about Adguard.
It’s a bit like NetGuard, you can block an apps internet access, or limit it to only wifi or mobile data. If you’re on grapheneOS, then can already do this on the system level.
Userscript can also be injected into the browser if that’s something you’re into, but I’d recommend using Cromite if that’s a priority.
If you still want to use a VPN with a network filter, rethink’s android app is an option, and its open source. BTW, On android, AdGuard isn’t, if that bothers you.
1 Like
Sorry if I wasn’t clear. So I guess what I’m asking is whether Adguard for Android has a browser-like extension like how Adguard iOS can work with Safari without taking up a VPN slot.
I don’t have any experience with GOS. Are you saying GOS can do what rethinkDNS does natively without installing another app?
Can you please elaborate on Cromite?
Thank you!
Unfortunately not, AdGuard for Android is not an extension. Chromium browsers, other than Edge, do not currently support extensions, although brave may be adding support this year.
AdGuard for Android is a system wide firewall/DNS Adblocker. The iOS version, at least within the browser, is much more powerful.
As for GrapheneOS, when installing an app you get a prompt asking if you want the app to have internet access.
Cromite has userscripts, I just brought this up because you asked if AdGuard for android has any other uses. You can use userscripts and filter https traffic with AdGuard but you need to install a security certificates.
2 Likes
Thank you so much for the explanation. So, I guess Adguard Android is more like a firewall, and that’s why you brought up RethinkDNS?
Where can I read more about Cromite and its user scripts? Any good use case?
If I use Adguard for its userscripts, will I still have to give up the VPN slot? Do you have any concerns about installing those security certificates?
Yeah, it’s pretty similar to RethinkDNS, but Rethink allows you to connect to a VPN in the same connection.
Userscripts let you modify a website with JavaScript. This will make you more identifiable to the site, but for sites you trust or are just logged in into it can be useful. Just make sure you trust the script or better still write it yourself. Cromite does limit some of the headers you can use for security reasons, but that’s probably for the best.
The VPN slot will still be taken up no matter what if you want to use AdGuard. As for the CA, I’m no expert, read up and decide if that’s right for you. AdGuard has great documentation so that’s where I’d start looking.
2 Likes
Are you able to comment on whether Adguard for macOS, Windows, and Linux is more like a firewall than the version on Android? Am I better off with Portmaster and Little Snitch or is Adguard worth using?
Little Snitch is far better. You can use it with a VPN or a custom DNS built in. I like LS better. Portmaster really is meant to be used with the SPN because VPN + only Portmaster is a mess (at-least last I checked it was).
1 Like
Does Adguard for Windows and macOS prevent me from using another VPN?
Well, DNS and VPN don’t often mix well. It’s best to use the VPNs DNS always but if you know what you’re doing and you want your custom DNS only, then I guess you can use it as you want.
As much as I like AdGuard and all their filter lists, I still use Mullvad VPNs’ built in and uBO everywhere else in browsers. But that’s just me. Many here may do it differently but I always prefer simplicity of any “complication” or complication. In my experience, it’s never sustainable even if it may work for now or even for the forseeable future.
1 Like
I have been using custom encrypted DNS with a VPN. I don’t think there is a be-all and end-all solution. It doesn’t hurt to have a discussion about it though.
There have been several discussions on this already. But sure.. both ways can work if you can make it work. Like I said, I prefer simplicity. Do not forget law of diminishing returns.
That’s more fingerprintable, but if that’s cool with that’s completely fine to do. Do what ever works best for your needs.
So this is what I’m thinking and correct me if I’m wrong. While I agree that being less fingerprintable is ideal, what is the cost to doing so? You already mentioned the consequence that I’m facing, and I don’t disagree with you! However, even if I try to do what you say and blend in, there are no guarantees that the website still doesn’t identify me. We don’t know what they know. We’re only guessing. So I think it’s a worthwhile tradeoff to use my own custom DNS settings and get a benefit out of it, even if it makes me more identifiable. At the end of the day, let’s say I’m able to block an ad, and they know it’s me. What’s the worst that will come out of it? I mean, the website is trying to show me an ad. The data they gather on me is what they’re trying to monetize. If I don’t see the ad, what good is the data they have on me? It’s not like they have identifiable information on me since I’m not logged in.
The DNS filters you’re using by themselves are fingerprintable. What is and isn’t blocked is fingerprintable. Also, just using a custom DNS with a VPN lets them know what VPN and DNS provider your using at the same time. Not everyone does this and likely not with the same combo.
But you are right. Blocking ads goes a long way, but that can just be achieved with a VPN that has its own block list. Proton can do this for example.
While yes, a more extreme custom DNS may block more I’m not sure if it’s worth the downsides.
But like I said in my last post, that’s just my opinion, do what ever you feel is best for your situation.
1 Like