DNSCrypt is a protocol that authenticates communications between a DNS client and a DNS resolver. It prevents DNS spoofing. It uses signatures to verify that responses originate from the chosen DNS resolver and haven't been tampered with. You can learn more about DNSCrypt protocol at

Our app implements DNSCrypt & DNS-over-HTTPS/2 (DoH) protocols and allows you to secure your DNS traffic against of spoofing. It overrides your DNS settings with a single or multiple DNSCrypt or DNS-over-HTTPS/2 (DoH) resolvers. Works both for WiFi & cellular.

■ dnscrypt-proxy version: 2.0.16 (7740e9d) ■

■ App features ■
• Easy to setup & use;
• Clean simple yet powerful UI;
• iOS integration – works at system level;
• Acts as DNS server to prevent DNS traffic leakage;
• Supports both DNS-over-HTTPS/2 (DoH) and DNSCrypt protocols;
• Supports DNSSEC;
• Multiple resolvers support (if none selected - DNSCloak will use the whole list);
• Load balancing within a set of resolvers: app will automatically measure and keep track of their speed, then balancing the traffic across the fastest available resolvers;
• Toggable DNS responses caching (reduces latency and improves privacy);
• Built-in config editor - take full control over your setup
• Custom lists and static servers (via config editor);
• Supports DNS queries logging (separate for regular and suspicious queries);
• Configurable Blacklist, IP blacklist, Whitelist (with logs);
• Domain cloaking feature;
• Queries forwarding feature;
• Automatic background updates of resolvers list;
• Can force outgoing connections to use TCP, that may be useful if your traffic is routed through a TCP-only tunnel such as Tor;
• Passcode lock for the app;
• Works both for WiFi & cellular;
• Supports both 32-bit & 64-bit devices running iOS 10 or later.

■ Contact Us, Support & Feedback ■
If you have any questions – feel free to contact us. You can use "Contact Us" link in the app, "App Support" link in the "Reviews" tab of the App Store or send us email on We are usualy responding within hours on every non-empty email.
If you have contacted us, but haven't received our reply – check your Mail app, it's there. ;)

What’s New

Version 2.1.3

This update contains:
• dnscrypt-proxy 2.0.16 (7740e9d);
• Fixed "debug" log level;
• Display current connectivity type;
• Internal compatibility tweaks & fixes.

Previous updates:
• Config editor (please, read the beginning comment carefully) - you can override ANY setting (except for files locations), use any custom lists or static servers, "Restore defaults" available ;)
• New Settings form UI with option groups;
• Configurable Blacklist, IP blacklist, Whitelist (with logs);
• Domain cloaking feature;
• Queries forwarding feature;
• Better connectivity handling: track network type changes, better IPv6-only support (hello, T-Mobile users!), IPv6 block option (useful for IPv4-only networks);
• Resolvers accessibility check during launch - let iOS wait for dnscrypt-proxy to have accessible resolvers (configurable for some captive networks that block outgoing connections);
• Keep the app connected during device sleep (configurable for better battery life);
• "Ephemeral keys" option for DNSCrypt resolvers for better privacy;
• "Disable TLS sessions tickets" option for DoH resolvers for better privacy;
• Initial FAQ & Help section;
• Other minor UI & internal tweaks.

Ratings and Reviews

4.7 out of 5
140 Ratings
140 Ratings
BuckeyeAdam ,

A “Must-Have” App

Everyone should have this app on their iOS devices. I use DNSCrypt on my Mac and have installed it on countless PCs (including my wife’s laptop, my parent’s laptop, and multiple coworkers). I’m extremely grateful for the dev keeping up the good work. Check him out on GitHub & see how you can improve your NetSec.

Regarding the app: it allows such granular control over your DNS queries that you’d expect to be paying for this app. If you don’t know or understand how DNS works or why DNSCrypt is important, please Google it. Attacks come from everywhere and everyone these days and downloading a simple app will go a long way to protecting you. If you’re not tech-savvy you can basically “set it & forget it”. If you’re a parent, there are a few listings (like AdGuard Family) that will prevent your children from accessing inappropriate websites - however you define that. You can even block them from changing the settings with a PIN for the app. This dev has done a great job creating such a much-needed app with a very friendly UI.

:-Derek ,

Got it to work on iOS 12

Since the update to iOS 12, my iPhone no longer worked with DNSCloak. I don’t know what changed. But today I had another go. I’d wondered if the problem was the DNS server the app was trying to reach. So where could I change it? I kept looking for a simple list as found in the macOS DNSCrypt app. Then I realized I was looking right at it! The list is far more detailed than I was used to. And what a great thing that it is! So I clicked on a server in the list with all the protection features I wanted and DING, I was connected. EXCELLENT.

ngocphamm ,

Stopped working on TMobile LTE

It used to work really well before the 2.1 update. Not anymore, but only under LTE. I'm using TMobile so I don't know about other carriers. It just won't be able to start the server. I couldn't find a way to contact the developer so I had to leave this review. Didn't want to give it 3 stars because I used to love it!!!

Update: 8/20 it is still not working for T-Mobile LTE. Can you please fix this because I just love being able to use this app full time on my phone? I made IAP before but I can definitely make more just for this.


Sergey Smirnov
57.6 MB
Requires iOS 10.0 or later. Compatible with iPhone, iPad, and iPod touch.
Age Rating
You must be at least 17 years old to download this app.
Unrestricted Web Access
Copyright © 2018 Sergey Smirnov
In-App Purchases
  1. Small tips $0.99
  2. Big tips $9.99
  3. Medium tips $4.99


  • Family Sharing

    With Family Sharing set up, up to six family members can use this app.

More By This Developer

You May Also Like