Back to


Latest Go to latest
Published: Jul 24, 2020 | License: AGPL-3.0

Source Code



The Portmaster is a privacy app that at its core simply intercepts all your network connections. Different modules with different privacy features are built on top of it, which can all be enabled or disabled as desired:

portmaster modules

⚠️ Disclaimer

The Portmaster is still in its early “alpha” development stage. While some features might still have bugs, it runs quite stable and can easily be uninstalled again. We’ll push updates and fixes as we go. A list of known problems can be found at the bottom of this page.

🔄 Automatic Updates

We have set up update servers so we can push fixes and improvements as we go.


DNS-over-TLS Resolver

Status: alpha

A DNS resolver that does not only encrypt your queries, but figures out where it makes the most sense to send your queries. Queries for local domains will not be sent to the upstream servers. This means it won’t break your or your company’s network setup.


  • Configure upstream DNS resolvers
  • Don’t use assigned Nameserver (by DHCP / local network - public WiFi!)
  • Don’t use Multicast DNS (public WiFi!)

Privacy Filter

Status: alpha

Think of a pi-hole for your computer. Or an ad-blocker that blocks ads on your whole computer, not only on your browser. With you everywhere you go and every network you visit.


  • Select and activate block-lists
  • Manually black/whitelist domains
    • You can whitelist domains in case something breaks
  • CNAME Blocking (block these new nasty “unblockable” ads/trackers)
  • Block all subdomains of a domain in the block-lists

Safing Privacy Network (SPN)

Status: unreleased - pre-alpha scheduled for June

Visit our homepage to read all about this module.


Installation instructions for your platform as well as known issues can be found at the respective wiki pages:

Sceenshot Tour

Please note that so far only the dashboard has gotten attention from our designer. All views will be updated with proper UX.