DNS Sinkhole vs NoirShield

Choose encrypted DNS without replacing your VPN. Sinkhole helps you understand, select, and configure a trusted DNS-over-HTTPS provider on iPhone and iPad. It adds an encrypted DNS configuration for the provider you choose, using the system API iOS provides for this. SIMPLE GUIDED SETUP Choose your goal — privacy and security, family protection, or advanced custom DNS — then follow clear installation steps designed for everyone. CURATED PROVIDERS Compare privacy and security-focused options from established public DNS providers. Depending on your selection, provider-side filtering may cover known malware, phishing, trackers, ads, or adult content. ADVANCED MODE Use a trusted custom HTTPS DNS endpoint from a service you control or configure, including compatible self-hosted resolvers. HONEST STATUS Sinkhole reads its own state from iOS: whether a configuration exists, and whether iOS has it active. It also sends a single DNS test request to confirm the selected endpoint is reachable, and keeps that separate from activation. PRIVACY BY DESIGN • No Sinkhole account • No LorisLabs DNS server • No VPN tunnel and no VPN configuration • No advertising or analytics SDK • No DNS query or browsing history received by Sinkhole Once active, DNS requests go directly from your device to the provider you selected. That provider's privacy policy and filtering behavior apply. Sinkhole cannot see or fabricate per-domain statistics. IMPORTANT iOS asks for your approval before Sinkhole can add a DNS configuration, and only you can select it in Settings > General > VPN & Device Management > DNS. You can switch away or remove it there at any time, without the app. A VPN may choose to override system DNS settings; behavior depends on that VPN.

NoirShield is a network tool that runs entirely on your device. It encrypts your DNS lookups and can match them against blocklists stored on the device. Your traffic is never routed through a server of ours: there is nothing to relay it through, and your IP address does not change. ENCRYPTED DNS Resolve names over DNS-over-HTTPS or DNS-over-TLS. Choose from built-in encrypted resolvers or enter your own custom endpoint. Measure them on the network you are on and switch to the fastest. ON-DEVICE FILTERING Optional lists for ads and trackers, malware, phishing and crypto mining — 470,943 domains, matched on the device. Every list is off until you turn it on. You can import your own list and add your own allow and block rules, which take priority. DIAGNOSTICS Fourteen checks: reachability, IPv4 and IPv6, captive portals, latency, DNS resolution, DNS interception, DoH, DoT, HTTPS, TLS, QUIC, WebSocket and UDP. AUTOFIX Measures the network, applies a compatibility profile, verifies the result and remembers what worked for that network. NO ACCOUNT No sign-up, no sign-in, no subscription. Nothing about your lookups is uploaded. The activity log stays in memory and is gone when the app closes, unless you switch on "Keep activity after restart" in Settings. The app reaches our server for two things only: signed blocklist updates, and the connection tests while you are running diagnostics. NoirShield is not a country-switching VPN. It has no relay or proxy server, does not change your IP address and never decrypts HTTPS. On iPhone and iPad, iOS shows its own VPN badge whenever an on-device tunnel is running; NoirShield uses that tunnel only to hand DNS queries to the resolver on your device.