How to block ads on Android without root with hado99
Practical guide to block ads and trackers on Android using hado99, no root needed, via local VpnService and encrypted DNS.
Drafted by automation from the sources listed at the end of this page, and reviewed before publishing. The sources are the part that matters: check them.
What is hado99 and why it works without root
hado99 uses a public Android API called VpnService, available to any regular app after user permission. It creates a local tunnel that starts and ends on the device itself, with no remote servers. Only DNS queries go through this tunnel; other traffic follows the normal path. This makes it possible to inspect DNS queries without root or installing certificates.
Step-by-step to enable blocking
- Install hado99 and open the app.
- Tap to enable protection. Android will show the standard system VPN permission dialog – accept once.
- From then on, all DNS queries on the device are checked against a list of over 134,000 domains for ads, trackers, phishing, and malware, resolved via DNS-over-HTTPS (Cloudflare), encrypted.
- The main dashboard shows real-time counts of allowed and blocked queries. A separate screen lists blocked domains with the time of each block.
What to do if an app breaks
DNS blocking can occasionally catch a domain that an app needs to function, not just for showing ads. If that happens:
- Go to the blocked list and tap on the problematic domain.
- Choose the option to allow it – one tap undoes the block for that specific domain, without needing to disable protection entirely.
- The allowed domain appears in a list, so you can revert the change later if needed.
Pause instead of disable
If the issue is temporary (e.g., to test whether blocking is the cause), you can pause protection. Real options in the app are:
- 5 minutes
- 1 hour
- Until manually resumed
Protection automatically resumes when the timer ends, so you don’t have to remember to turn it back on. Even while paused, DNS remains encrypted – only domain filtering stops.
Identify which apps talk to trackers
hado99 also provides a per-app report, showing which installed apps make queries to tracking domains. This lets you identify the “noisiest” app on your device, rather than just seeing a list of domains without knowing their source.
Limits of DNS blocking
It’s important to understand what DNS blocking does not do:
- It does not remove ads served from the same domain as the content of a site or app (e.g., an app that hosts banners on its own domain).
- It does not hide your IP address or change your location – hado99 is not an anonymity VPN, it’s DNS filtering.
- It can occasionally break features of apps that rely on domains that also serve ads. That’s why there’s an option to allow specific domains.
Privacy and data
No browsing history is stored, either on the device or on a server. The counters and recent block list live in memory and are discarded upon restart. There is no account or login.
Sources
- hado99 — como funciona hado99