A curated arsenal of system-wide adblockers, security scanners, download managers, and privacy tools.

Armory Deployed

TheUtilityMatrix

A curated selection of powerful software, system-level filters, and essential utilities designed to restore privacy, security, and control over your digital environment.

See something we missed?

Spotted an error, outdated link, missing resource, or have an idea? Help us make Champagne Wiki better.

Join Discord Check GitHub Contribution Guide

System-Wide Adblocking

Browser adblockers are still the most effective way to remove ads from websites, but they only protect the browser itself. DNS filtering adds a system-wide layer that can block known advertising, tracking, and malicious domains at the DNS level across apps, games, and background services.

DNS performance varies significantly by location and network; these recommendations prioritize filtering, privacy, reliability, and ease of use rather than claiming one resolver is universally the fastest. For a quick comparison, you can test providers from your own connection using tools like DNS Speed Test before switching permanently.

Android Filtering

RethinkDNS

Power user

An open-source DNS + Firewall method for users who want granular control over blocklists, app networking, and DNS-over-TLS routing.

AdGuard DNS

Solid Alternative

A free, encrypted DNS service that blocks ads and trackers system-wide without requiring an app.

Control D

Flexible

Highly reliable free public DNS with ready-made Ads & Tracking, Malware, and Family filtering presets.

Method 1: RethinkDNS Setup RethinkDNS is our preferred default for Android users who want to combine DNS filtering with firewall controls. Visit rethinkdns.com/configure and select the following recommended lists:

Recommended RethinkDNS Blocklists

NoCoin (Cryptojacking)1HOSTS (EXTRA)OISD (BIG)ADS (The Block List Project)GOODBYEADS HOSTSADS AND TRACKING (Lightswitch05)

Once selected, toggle the URL format to DoT and copy the generated URL. Then, configure your Android device:

Open the Android Settings app.

Navigate to Network & internet (or Connections).

Tap on Private DNS.

Select Private DNS provider hostname.

Paste your copied RethinkDNS DoT URL and hit Save.

Method 2: Plug & Play DNS (AdGuard or Control D) If you prefer a simpler setup without configuring custom blocklists, you can use a public filtering endpoint to block known advertising and tracking domains:

dns.adguard-dns.com (or p2.freedns.controld.com)

Paste your chosen hostname into your Android Private DNS settings using the exact same steps listed in Method 1.

iOS & macOS Filtering

wBlock

Open Source

A phenomenal, free, open-source adblocker built strictly for Safari. Operates on Apple's native declarative API for zero-overhead performance.

AdGuard Apple Profiles

System Wide

Official downloadable Apple Configuration Profiles which configure system-wide DNS filtering through AdGuard's blocking servers.

AdGuard for iOS

Browser Native

The free version provides great adblocking, but is strictly limited to Safari. Requires specific filter configuration to be truly effective.

Control D Profiles

Flexible

Generate a tailored Apple Configuration Profile to route your system's DNS queries through Control D's high-performance ad-blocking servers.

Method 1: AdGuard DNS (Native Apple Profile) AdGuard provides official, direct-download configuration profiles that route your device's DNS queries through their ad-blocking servers at the OS level.

Open the AdGuard DNS public servers page in Safari.

Navigate to Option 2: Configure manually, choose the Default server, and download the configuration profile for iOS or macOS.

On iOS: Open the Settings app. Tap the Profile Downloaded banner at the top, then tap Install.

On macOS: Open System Settings. Click on Profile Downloaded in the left sidebar, double-click the profile, and click Install.

Optimizing AdGuard (Safari Only) To get the most out of the free AdGuard iOS app, tap the Shield Icon (Protection) > Safari Protection > Filters, and enable:

Essential AdGuard iOS Filters

Base & Mobile FilterTracking ProtectionMail Tracking ProtectionSocial Media FilterCookie Notices & PopupsApp Banners & WidgetsWarning Removal & Fanboy'sWeb Annoyances UltralistLanguage Specific (Your Region)

Method 2: Control D (Setup Portal) Unlike AdGuard's direct download, applying Control D's free public DNS to an Apple device via a configuration profile requires generating it through their setup flow. Visit the Control D Free DNS page, select your desired preset (e.g., Ads & Tracking), select iOS or macOS, and follow the on-screen instructions to generate and install your custom profile.

Windows Filtering

Safing Portmaster

Maximum Control

A robust, system-wide firewall and adblocker for Windows. Monitor all network activity in real-time, block trackers across applications, and lock down your OS entirely.

(If you prefer not to install a firewall application, you can configure Windows to use AdGuard DNS by entering the IPv4/IPv6 addresses listed in their official setup guide).

Other DNS Options

These alternatives offer different balances of customization, privacy, filtering, and security.

NextDNS

Maximum Customization

Highly configurable profiles, analytics, and custom rules. The free tier currently provides 300,000 queries per month; after that, DNS continues resolving but filtering stops until the quota resets.

LibreDNS

Privacy Focused

Independent encrypted DNS with a dedicated no-ads endpoint and an emphasis on privacy and censorship resistance.

OpenBLD

Independent Alternative

Independent public DNS with adaptive and strict filtering for ads, tracking, malware, phishing, and unwanted domains.

Quad9

Security Focused

A Swiss-based nonprofit DNS resolver providing DNSSEC and threat intelligence blocking against malware and phishing. It does not block advertisements or web trackers.

Setup: Follow the provider's official device-specific instructions linked above; DNS hostnames and profile requirements vary by service.

Security & Threat Analysis

File Verification & Scanning

Always Verify Before Executing

Before running any unfamiliar executable downloaded from the web, always upload it to VirusTotal. It scans the file against over 70 antivirus engines simultaneously. For advanced behavioral analysis, utilize online sandboxes like Triage or Cuckoo Sandbox.

Malwarebytes

Antivirus

The only third-party scanner we recommend. Assuming you practice safe browsing habits (using uBlock Origin, avoiding shady links), the built-in Windows Defender is excellent. Use Malwarebytes as a secondary, on-demand scanner.

AdwCleaner

Cleanup

A lightweight, standalone tool by Malwarebytes specifically designed to eradicate stubborn adware, browser hijackers, and potentially unwanted programs (PUPs) that slip past standard AVs.

Download Managers

AB Download Manager

Open Source

A phenomenal, modern, and open-source download manager. Available on Android, Windows, Linux, and macOS.

Internet Download Manager (IDM)

Windows Only

The legendary heavyweight champion of download speeds. Note: Use our software page to get the premium version.

Free Download Manager (FDM)

Cross Platform

A highly reliable, completely free manager that handles both standard HTTP downloads and torrents. Available on all platforms.

Motrix

macOS Top Pick

A beautifully polished, open-source download manager wrapped in an elegant interface. Highly recommended for Mac users.

Media Acquisition

Cobalt.tools

Web App

An incredibly convenient web app that saves video, audio, photos, or GIFs from hundreds of platforms. Just paste the link. Zero ads, trackers, or paywalls.

yt-dlp

CLI

The undisputed king of video downloading. A powerful command-line tool capable of ripping media from virtually anywhere on the internet at maximum quality.

YouWee

GUI Fork

Intimidated by the command line? YouWee is a fantastic multi-platform GUI fork that gives you the raw power of yt-dlp wrapped in a user-friendly interface.

vdwn.cloud

Web Alternative

A fast, clean, web-based alternative to Cobalt for ripping videos directly from your browser without installing local software.

Data & Account Management

Floccus

Sync

A unique browser extension that securely syncs your native bookmarks across different browsers (Chrome, Firefox, Safari) using your own Google Drive, Dropbox, or Nextcloud server.

JustDeleteMe

Privacy

A massive directory containing direct links and instructions on how to permanently delete your accounts from hundreds of web services and platforms.

Torrenting & Network Security

When torrenting, ensuring your traffic doesn't leak outside your VPN tunnel is critical. Always bind your torrent client directly to your VPN's network interface.

qBittorrent

Windows / Mac

A feature-rich, open-source client with an integrated search engine. It contains no ads and is universally respected.

Transmission

macOS / Linux

A beautifully lightweight, open-source client known for its extreme simplicity and low system resource footprint.

How to Bind Your VPN in qBittorrent

For Windows:

Start your VPN and connect to a server.

Launch qBittorrent and open Preferences (Tools > Options).

Navigate to the Advanced tab.

Find Network Interface and change it from 'Any Interface' to your VPN's adapter (e.g., Mullvad, Proton, WireGuard).

Restart qBittorrent. If the VPN disconnects, torrents will instantly stop routing.

For macOS:

Connect to your VPN.

Open the Terminal app (Applications > Utilities).

Execute the command: ifconfig | grep -A 2 utun

Identify the utun interface showing an internal IP like inet 10.x.x.x (e.g., utun3).

Open qBittorrent Preferences > Advanced tab.

Set the Network Interface to match the identified utun interface (e.g., utun3).

Restart qBittorrent to apply.

Virtual Private Networks (VPN)

ProtonVPN

Best Free Option

The free tier is fantastic, offering strict no-logs privacy and great speeds with unlimited data. The only catch: server locations are auto-assigned, and P2P (torrenting) is blocked on free servers.

Mullvad VPN

Best Paid Option

The gold standard for privacy. Anonymous accounts (no email required) and a flat rate of €5/month that hasn't changed in over a decade. Highly optimized for privacy and torrenting. (Includes an integrated DNS content blocker).

1.1.1.1 (WARP)

Proxy / DNS

Built by Cloudflare. This is not a true anonymity VPN. It encrypts your DNS queries and tunnels traffic to bypass basic ISP blocks or censorship, but it does not hide your true IP address from the websites you visit.

Useful Tools & Utilities