Rethink

com.celzero.bravedns

Republished from GitHub / F-Droid by the Zapstore main account.

Say hello to a safer, transparent, and secure Android. VPN: Connects to multiple WireGuard VPNs of your choice. Safe: Reveals network activity of installed apps and lets you disable, uninstall, or firewall them. Secure: First line of defense against spyware, ransomware, and malware that steal personal information and takeover accounts. Protects from DNS manipulation typically employed to censor websites, social media, and messaging apps. Fast: DNS Servers deployed to 300+ locations world-wide to ensure your internet is as fast and highly available as it can be. Open: Open source and free of any trackers. ***Features*** Firewall: Prevent apps from connecting to the Internet. Block spyware, malware, ransomware and more. A firewall blocks any app connecting to the Internet over WiFi or Mobile data. Since most forms of surveillance require the data to be sent the network to a server, firewalling them effectively mitigates the threat (File Managers, Alarm Clock, Calculator are few such examples of apps that do not require any Internet access to function). The firewall feature uses Accessibility Service to detect and firewall background applications. Monitoring: Keep tabs on incoming and outgoing Internet traffic. If enabled, the connectivity logs are collected and analyzed. Automated reports flag previously unknown or suspicious connections, and reveal the extent of attempt to steal data by spyware networks. In our tests, around 60% of the traffic is flagged and reported as being initiated by known spyware. Logs generated are made available in near-real time to the user for their own analysis. WireGuard: Secure outgoing Internet traffic. The app uses fast, modern, light-weight, and secure WireGuard protocol to encrypt outgoing connections to any compatible VPN provider of your choice. Anti-censorship: The app encrypts your internet connection to Domain Name System (DNS) server run by Rethink with presence in our 300+ locations world-wide. DNS servers are the address book of the internet: A DNS server provides the exact addresses you need to visit a website or open an app. Data Monitor: Track per-app and per-connection Mobile or WiFi data usage.

First release: Jun 9, 2024, 9 total releases.

Most recent release: Sep 21, 2026.

Website Repo

Appears in 4 app stacks.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

Sep 21, 2026 v0.5.7

<html> <h3> 🌍 Lok 2 </h3> <div class="changes-main"> <div class="changes-sec"> <ul> <li> UI: A new, re-designed homescreen. </li> <li> UI: Re-designed all RPN screens, including country selection, connection stats, and multi-hop setup.

More…

</li> <li> UI: A new, re-designed Stats: On-device blocklists stats, country map, and pie charts... mmm. </li> <li> New: Allowed / blocked domain & IP stats grouped by app and time. </li> <li> New: Universal trust / allow rules for domains and IPs. </li> <li> New: 3 new Smart DNS preset filters: Privacy, Security, and Family. </li> <li> Fix: Re-enforce trust / allowed Universal (global) domain and IP rules. </li> <li> Improvement: UI changes to accommodate Foldables. </li> <li> Improvement: Soon-to-be-defunct Mullvad DNS replaced with equivalent ControlD endpoints. </li> <li> Improvement: Notes, filtering, and sorting for Configure -> Apps list. </li> </ul> <hr> Note: This release removes Crashlytics from GitHub/Website flavours, first added in <a href="https://github.com/celzero/rethink-app/releases/tag/v0.5.5u"><code>v055u</code></a>. </div> </div> </html>
Aug 9, 2026 v0.5.6

<html> <h3> 🗺️ Lok </h3> <div class="changes-main"> <div class="changes-sec"> <ul> <li> Fix: Crash on app start-up with DNS53 in proxy mode. </li> <li> Fix: Re-enforce trust/allowed IP rules for Isolated apps.

More…

</li> <li> Improvement: Faster WireGuard start-up when in Proxy Lockdown mode. </li> <li> Improvement: Support Android 17. </li> <li> Improvement: Several features graduate out of "experimental" status in Configure -> Network: Choose IP version, Do not route Private IPs, Use all available networks, Bandwidth Booster. </li> <li> Improvement: Configure -> DNS -> Show website icons is no longer "experimental". </li> <li> Improvement: Avoid showing deleted WireGuard configurations in the UI. </li> </ul> <hr> Note: This is a fast-follow release, the last major release was <a href="https://github.com/celzero/rethink-app/releases/tag/v0.5.5v"><code>v055v</code></a>. </div> </div> </html>
Jul 7, 2026 v0.5.5y

### 💤 Zzzzz 4 - *New*: Notifications for unsuspecting users on Rethink's own traffic being blocked when in *Loopback* mode. - *New*: Rethink's own traffic logs unified with *Configure -> Logs -> Network*, like it was for DNS. - *Improvement*: Handle database failures more gracefully to avoid near-constant, crashes on app startup. - *Improvement*: WiFi/Mobile automation for WireGuard and RPN under certain scenarios. - *Improvement*: A few quality of life improvements on backup and restore for WireGuard configurations. - *Improvement*: Tuning down aggressiveness of "Block when DNS is bypassed" rule. - *Improvement*: A bit more eager WireGuard reconnectivity attempts on recovering from network loss events. - *UI*: Close all active connections button in *Stats*.

More…

- *UI*: Show server (endpoint) information for all active RPN locations. - *UI*: Show exit IP geo-location for third-party WireGuards when *Configure -> Settings -> Show provider information* is turned on. - *Fix*: Avoid "Endpoint-Independent Mapping" to-be looped-back (UDP) traffic when in *Loopback* mode. - *Fix*: Avoid looping back *System DNS* when in *Loopback* mode. - *Fix*: "Transport ended" failures when switching between DNSCrypt servers. - *Fix*: In cases where Rethink itself is proxied when in *Loopback* mode, avoid looping back WireGuard traffic more than once. - *Fix*: Incorrect application of IP/Port firewall rules during DNS resolution time. --- Note: This is a fast-follow release, the last major release was [v055v](https://github.com/celzero/rethink-app/releases/tag/v0.5.5v).
Jun 19, 2026 v0.5.5x

### 💤 Zzzzz 3 - _Improvement_: Global / user-preferred DNS (set in *Configure -> DNS -> Type*) works alongside *Simple*-mode WireGuard, regardless of *Configure -> DNS -> Split DNS* setting. - _Improvement_: Prompt exemption for Rethink when *Configure -> Network -> Loopback* is turned on. - _Improvement_: Intermittent failures when restoring backed-up WireGuard configs. - _Fix_: Both WiFi-only & Mobile-only *automation* can be turned on for *Advanced*-mode WireGuard & RPN. - _Fix_: Unresponsive *Configure -> DNS -> On-device blocklists* UI. ---

More…

Note: This is a fast-follow release, the last major release was [v055v](https://github.com/celzero/rethink-app/releases/tag/v0.5.5v).
Jun 16, 2026 v0.5.5w

- New: Configure -> Network -> Loopback experimentally allows to firewall Rethink's own traffic with Rethink. - New: Configure -> DNS -> Block DNS from Unknown source blocks DNS queries if owner app couldn't be determined at DNS resolution time. - Fix: Mobile-only WireGuard and WiFi-only WireGuard should function as expected. - Fix: Backup and restore for WireGuard configurations. - Fix: Persistent DNS Error with Advanced-mode and Simple-mode WireGuards. - Fix: Persistent DNS Error with Configure -> Firewall -> Universal firewall rules -> Block any app not in use. - Fix: Regular certification refresh for DNSCrypt endpoints. - Fix: WireGuard multi-hop crash. - Fix: WireGuard re-connectivity.

More…

--- Note: This is a fast-follow release, the last major release was [v055v](https://github.com/celzero/rethink-app/releases/tag/v0.5.5v).
Jun 14, 2026 v0.5.5v

### 💤 Zzzzz - *New*: Rethink Proxy Network in partnership with good folks at Windscribe for Play Store & GitHub builds - Starting $1.75/mo. In-app "no questions asked" refund button. - Connect to 5 locations at once. Split-tunnel apps among those locations. - Multi-hop over (secret) "Auto" endpoint. - No bandwidth caps. - ~~Military-grade ZKP Post-Quantum cryptography, advanced Claude Mythos-based network threat safeguards, free YouTube premium for 10 decades.~~ - *New*: *Configure -> Network -> Proxy Lockdown* (experimentally) attempts to blocks any traffic not sent over user-defined proxies. - *New*: *Configure -> Network -> Socket Buffer Size* adjusts packet staging sizes of egressing TCP and UDP sockets ([see](http://www.cyberciti.biz/faq/linux-tcp-tuning/)).

More…

- *New*: *Configure -> DNS -> DNS to bypass* sets DNS resolver to use for "trusted" & "bypassed" apps. - *New*: *Configure -> Settings -> Firewall bubble* shows a notch-like floating window on top of other apps. - *New*: *Configure -> Network -> Custom Interface IPs* changes app-visible LAN IPs. - *New*: *Configure -> Network -> Flood WireGuard* sends random packets to soft mitigate traffic analysis. - *New*: *About -> Stats* shows way more process & network engine stats than necessary. - *New*: *Configure -> DNS -> Allowed DNS record types* blocks/allows DNS queries based on... record types like IPv4, IPv6, MX, TXT, etc. - *UI*: Material 3. - *UI*: Minor UI fixes for Foldables. - *Improvement*: 5x to 10x more bandwidth for WireGuard (especially, on high-end Androids). - *Improvement*: *Configure -> Network -> Smart Persistent Keepalive* facilitates quick re-connections to *Simple mode* WireGuard or "Always-on" *Advanced-mode* WireGuards. - *Improvement*: Better support for dual-stack WireGuard. - *Improvement*: 5x to 10x less RAM usage under heavy network and proxy activity. - *Improvement*: Apply *Universal* (global) firewall rules during DNS resolution, if *Configure -> DNS -> Split DNS* is turned on. - *Fix*: Bug fixes in *Configure -> Anti-censorship* modes. - *Fix*: Several battery life optimization / power-use reduction. - *Fix*: Per-app + per-DNS resolver caching to avoid cross poisoning. - *Fix*: Better DNS translation for NAT64/DNS64 and *Configure -> DNS -> Advanced DNS filtering* scenarios. - *Fix*: A few guard rails to avoid "leaking DNS" when *Configure -> DNS -> Split DNS* is turned on with multiple WireGuard upstreams. - *Fix*: Numerous stability improvements. --- [FLOSS/fund](https://floss.fund) awarded Rethink a $25K grant 6mo ago, which we *want* to use to make Rethink on iOS a thing. Let's see. Note: This release contains *opt-in* Firebase Crashlytics to help catch crashes and make the app stable: #1455
Nov 1, 2025 v0.5.5u Release page →

### ✊ Amit Jethwa - _New_: Stop and start WireGuard based on Wi-Fi Identifiers (SSIDs) - _New_: Experimental _Bandwidth booster_ - _New_: Frost theme - _New_: Force dual-stack network (both IPv4 and IPv6) - _Improvement_: Opt-in stability program - _Improvement_: Size reduction with per-architecture builds - _Improvement_: Instant on-device blocklist setup with 4x less memory use - _Improvement_: General, database, and battery stats in _About_ UI

More…

- _Improvement_: A more compatible anti-censorship mode - _Fix_: Crash on startup due to uninstalled apps - _Fix_: Other DNS & WireGuard related fixes --- [FLOSS/fund](https://floss.fund) awarded Rethink a $25K grant; we'll communicate what it means for our work soon. Note: This release contains *opt-in* Firebase Crashlytics to help catch crashes and make the app stable: #1455
Jun 9, 2024 v0.5.5n Release page →

### 🧘‍♀️ Don't Panic 1. New: Capture network engine errors in user bug reports. 2. New: use System DNS for "undelegated" domain names iff Prevent DNS leaks is ON. 3. Improvement: Dual-stack (IPv4 + IPv6) WireGuard connectivity. 4. Improvement: Avoid blocking the UI elements when the network engine is unresponsive. 5. Fix: Connection timeouts with Advanced DNS filtering turned ON. 6. Fix: WireGuard peer endpoints with domain names hang on network changes. Note: `v055n` is a fast-follow release. Most of the significant changes were released in [`v055f`](https://github.com/celzero/rethink-app/releases/tag/v0.5.5f).
Jun 9, 2024 v0.5.5n-1-gc74a7ae1

### 🧘‍♀️ Don't Panic 1. New: Capture network engine errors in user bug reports. 2. New: use System DNS for "undelegated" domain names iff Prevent DNS leaks is ON. 3. Improvement: Dual-stack (IPv4 + IPv6) WireGuard connectivity. 4. Improvement: Avoid blocking the UI elements when the network engine is unresponsive. 5. Fix: Connection timeouts with Advanced DNS filtering turned ON. 6. Fix: WireGuard peer endpoints with domain names hang on network changes. Note: `v055n` is a fast-follow release. Most of the significant changes were released in [`v055f`](https://github.com/celzero/rethink-app/releases/tag/v0.5.5f).