While you're connected, your phone looks up website names on the DNS resolver of your PryVPN server, inside the tunnel. The resolver checks DNSSEC and keeps no query logs.
In the Protection tab you choose what it blocks, in every app:
- Ads: known ad domains. Off unless you turn it on, when you set up PryVPN or later in Protection. Some apps and sites are paid for by ads, and a few may not work well without them.
- Trackers: analytics and tracking domains. On by default.
- Malware: malware and phishing domains from curated threat lists. On by default.
Some known malware and phishing domains are always blocked on our servers to stop abuse, even with Malware off. The counters in Protection are totals for everyone on your server; PryVPN never counts your own lookups.
If an app or site stops working, for example a shopping link or a sign-in page, turn off Ads or Trackers for a moment and try again.
Custom DNS
Settings › Custom DNS replaces our DNS with one you choose, still reached through the tunnel. Ad, tracker and malware blocking then stop working.
Android's Private DNS
If Android's Private DNS is set to a provider's hostname, Android sends your lookups there instead of to PryVPN, and the filters don't apply. Your lookups still travel encrypted inside the tunnel. To use the filters, set it to Automatic or Off: Settings › Network & internet › Private DNS (on Samsung: Settings › Connections › More connection settings › Private DNS). The leak test warns you when it's on.