Sweep for Android

Custom DNS now takes one encrypted server: an https:// address (DNS over HTTPS), a tls:// address (DNS over TLS) or an sdns:// stamp (DNSCrypt), and choosing a server applies at once. If the encrypted server cannot be set up, Sweep says so on that row and uses your network’s DNS meanwhile. The log, its search and App management show the company behind a blocked domain. A weekly block summary (Sunday evening, one notification, off in Settings) and an Errors notification channel are new: it tells you when the filtering engine fell back to DNS-only blocking or the lists have not updated for 3 days. Customer support has a Forum row that opens the public Sweep community on GitHub.

Licenses were not on sale yet at that version, so the upgrade sheet said so and offered no plans: the trial turns every list on and the dangerous-site list stays free afterwards. The data-saved card is marked as an estimate. Support mail goes to hello@azet.io.

A suspicious message can now be checked by AZET Nunchi, AZET’s own AI model. Share or paste the message into Sweep, tick the consent box and tap “Check for a scam with AI”: Sweep shows whether it looks like a scam, which kind, the signs it found and what to do. Only the text is sent, and only after you consent; it is not stored (see the privacy policy). Reporting the message stays a separate, optional step. Everything else works as in 0.6.3.

A new look. The main screen says above the power button whether protection is on, off or paused, and the counters are cards: ads blocked, trackers blocked, data saved and risky sites blocked. Settings, plans, the side menu and the first-run screens use the same cards, switches and buttons, and Korean text no longer breaks inside a word on Android 13 or later. Blocking works as in 0.6.2.

Sweep is now built for Android 16 (target API 36), which Google Play requires for new apps and updates. On Android 15 and 16 every screen keeps its layout under the status and navigation bars, Back while editing user rules or the allowlist closes the editor first, and the main screen's counters and the filtering log rows grow with large text instead of cutting the numbers off. Nothing else changed.

It fixes 0.6.0, which we withdrew on October 6, 2026: after Turn off or Stop for 5 minutes its connection stayed up without passing anything, so the phone had no internet until Sweep was force-stopped. Now turning off or pausing ends the connection at once. Also new: a Pause link under the power button with Stop for 5 or 10 minutes, and Activate hides the keyboard so the license key result is not covered. If you installed 0.6.0, install this version over it.

Every app’s connections now pass through Sweep on the phone, carried by firestack, an open-source engine (MPL-2.0) from Rethink DNS. The filtering log shows which app looked each domain up, App management shows each app’s data sent, received and saved by period and network, and each app can be cut off on Wi-Fi or mobile data. Also new: keep apps from outside a store offline, block ads in browsers only, DPI protection (on by default; the first packet of each secure connection is sent in pieces), custom DNS with a name and several IPv4 or IPv6 addresses, a check box for each user rule with select and edit all, and a Suspend shortcut on the app icon. The main screen’s third counter is now data saved. The download is larger, about 17.5 MB, because the engine is included. Nothing is decrypted and no certificate is installed.

Several messages and labels have new wording, written by us. User rules and the allowlist now have a search and a “Remove all” that you can undo for a few seconds. The About screen’s header is centred.

A new layout. A side menu holds every page; the main screen has a round power button and four counters (ads, privacy, user rules, threats), with See details opening App management and its seven-day chart. Filter management, Sweep settings, Updates and Customer support are pages of their own. Each filtering log entry has a menu to always allow or block the domain, or to report a wrong block; the “Something not loading?” sheet is gone. Blocking counts in the notification are now a switch in Sweep settings, off by default. Tasker automation is there too, off by default.

More lists, from open sources we name: AdAway, Anudeep's list and EasyList for ads, EasyPrivacy for trackers, and YousList for Korean sites (on by default when the phone is set to Korean). Each list shows where it comes from and its licence under Protection. The License screen now lists the devices on your license and lets you release one; when every device is taken, the list opens right under the key field. Also fixed: on the first run two list updates could overlap and leave one list missing; the app now fetches a missing list again.

It fixes a bug in 0.3.0: changing the system theme (light or dark), rotating the screen or changing the font size while the app was open could switch every protection list off, along with automatic list updates and start with the device, while the app still said Protected. After updating, the app puts those switches back if it finds exactly that picture; please open Protection once and check your lists. Also new in 0.4.0: the Overview says “Not filtering” whenever nothing is actually being blocked, lookups go to your network’s own DNS servers by default, a two-tap fix for a wrong block, a per-app switch, a five-minute pause inside the app, and seven-day totals.

The full edition is not. Google Play policy does not allow an app to block ads across other apps, so the full edition is a signed APK from azet.io. A Google Play edition, Sweep Shield, blocks known phishing sites and trackers only and does not block ads. It is on Google Play as Sweep Shield Lite.

It uses Android’s VPN permission to set up a local VPN on the phone. Your apps’ connections pass through it on the phone: it reads the domain name, the app and the amount of data, checks the name against its lists, and sends the rest out as before. Lookups that are not blocked go, as ordinary unencrypted DNS, to the DNS servers of the network you are on (your carrier or Wi-Fi). In Sweep settings, Change DNS server, you can pick a public resolver instead or enter one encrypted server (https:// for DNS over HTTPS, tls:// for DNS over TLS, sdns:// for DNSCrypt); lookups to an encrypted server are sent encrypted. It is not a remote VPN, your traffic is not routed through our servers, it does not hide your IP address, and it does not open HTTPS traffic. The app does not send us the sites you visit. What it does send is listed in the privacy policy.

Sweep blocks by domain name. An ad served from the same domain as the content around it, as some video and social apps do, is not removed.

The app keeps working in its free tier with the dangerous-site list. License keys cannot be bought yet. Paid licenses bought on azet.io will come with a 30-day money-back guarantee (refund policy).

Android allows one VPN at a time. If another VPN app takes over, Sweep stops and tells you. If Private DNS is set to a provider hostname in Android settings, lookups bypass Sweep; the app shows a notice when it detects this.

The app checks this site for a newer version and shows an Update button. Before anything is downloaded it tells you which Android warnings to expect. It then downloads the file, verifies its size and SHA-256, and only then opens Android’s installer. Protection turns itself back on after the update.

No. There is no “acceptable ads” program. The lists come from open projects and are shown in the app with their sources and licenses.

Mac and Windows: the installers are under Other editions on this page. iPhone and iPad: Sweep for Safari is not on the App Store. AZET One will cover Sweep and the AZET Care apps under one license.

Uninstall it like any other app. Found an ad Sweep missed, or a page it blocked by mistake? Report it here, or write to hello@azet.io. Sweep is operated by AZET LLC under the terms of service.