I am trying all sorts of (non-root) security software that allows me to block internet for apps. so far every one needs some kind of fake VPN to gain access to traffic, I guess so no root is needed. I can't have this since I use an actual VPN which gets turned off if I use any of these security apps. is there no way to block internet for apps while using my VPN?

  • Hardly possible without root. You can run VPN inside VPN but I don't think any Android app would be offering that out of box. You need to configure that manually and that won't be possible without root. It needs messing with routing tables etc. Dec 21, 2018 at 20:01
  • 1
    Does this answer your question? How to use a firewall AND a VPN? Nov 13, 2023 at 21:53

3 Answers 3


This is possible since Android 8 (when Block connections without VPN feature was added), also you will have to use VPN app which supports Per-App VPN (which is supported since Android 5.0?) e.g. OpenVPN for Android from F-Droid or Google Play.

Assuming you use OpenVPN for Android:

  1. System settings → VPN → tap button with gear icon on the right side of OpenVPN for Android → enable both Always-on VPN and Block connections without VPN.

  2. OpenVPN for Android → tap button with pencil icon on desired profile → swipe to ALLOWED APPS tab → select apps you want to exclude from using VPN → return to main screen → re/connect to VPN using this profile

This was tested on MIUI device, but I think should be pretty much the same on majority of devices (except those whose manufacturers removed or hid Android's default functionality from ROM (like Huawei from EMUI)). Also per app internet control access is built-in by default in MIUI.


I don't think it's possible as per this answer: In Android 6, how to deny an app permission to access the network?. To summarise the network permission is classified as 'normal' so it is automatically granted and can't be removed. However you can try to revoke the INTERNET permission using adb.

adb shell pm revoke com.name.app android.permission.INTERNET

I'm 99% sure it won't work, but can't test right now, on mobile. Unfortunately that means a VPN firewall or root + iptables firewall are your only options.


You can try NetGuard, the non-root firewall for Android smartphones. It can help you in restricting the net usage per app.

  • this is also vpn based, I just tried it.
    – Bricktop
    Dec 21, 2018 at 15:07
  • NetGuard also uses a local VPN. (i.sstatic.net/KacDS.jpg)
    – Firelord
    Dec 21, 2018 at 15:08
  • But this is the only option.
    – Yet Zio
    Dec 21, 2018 at 16:33
  • how is it an option if it has the exact same problem? plus is definitely not the only one that works that way. or am I missing something?
    – Bricktop
    Dec 21, 2018 at 16:41

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .