By If you have spent any time on a Kenyan news site, a popular app, or any free mobile game recently, you already know the problem. Ads that play before you can read the headline. Trackers quietly logging which apps you open and when. Data being consumed not by the content you wanted but by the advertising infrastructure around it.
There are solutions and there are bad solutions masquerading as solutions. This guide covers the right one.
Why Most Ad Blockers on the Play Store Are Not Enough
Search "ad blocker" on the Google Play Store and you will find dozens of apps. Most of them are microservices that are stripped-down, single-purpose tools. One blocks ads in the browser only. Another only works with a specific browser. A third requires you to download a companion VPN app from the same developer to unlock half its features.
The reason the comprehensive all-in-one AdGuard app is not on the Play Store is Google's own policy. Google restricts apps that filter or intercept traffic system-wide which is exactly how effective ad blocking works. AdGuard's full Android app is available on the Xiaomi App Store, the Huawei AppGallery, and the Samsung Galaxy Store, but not on the Play Store.
The correct place to download it is the official AdGuard website only.
Do not download it from any other source, not APK mirror sites, not Telegram groups, not random tech blogs. The app intercepts your network traffic, which means a compromised version from an unofficial source would be dangerous. Official source only:
https://adguard.com/en/download.html?auto=1&_plc=en
Your browser will download an .apk file. Open it and tap Install. Android will ask you to allow installation from unknown sources — tap Settings, enable it for your browser, then return and install. This is a one-time step.
Setting Up AdGuard: The Two Settings That Matter Most
Once installed, AdGuard works immediately at a basic level. But two settings significantly improve how much it blocks. Both require a few extra steps, and both are worth taking.
1. HTTPS Filtering — The Certificate
Modern websites and apps use HTTPS, the padlock you see in your browser. HTTPS encrypts the connection between your device and the server, which is what protects your passwords and banking details. That encryption is genuinely important.
But it creates a problem for ad blockers. If AdGuard cannot see what is inside the encrypted connection, it cannot determine whether a particular request is loading an article or loading an ad tracker. Without access to HTTPS traffic, AdGuard works primarily on HTTP requests, a shrinking fraction of what apps and browsers actually do in 2026.
HTTPS filtering solves this by having AdGuard act as a local intermediary. When an app or website makes an HTTPS request, AdGuard decrypts it, checks whether the destination is a known ad or tracker domain, blocks it if it is, then re-encrypts and forwards the legitimate traffic. This happens entirely on your device, nothing is sent to AdGuard's servers.
To enable it, AdGuard needs to install a certificate on your phone. Here is how:
In AdGuard, go to Settings → Network → HTTPS Filtering
Tap to enable HTTPS filtering
AdGuard will prompt you to download a certificate — tap Download
Go to your phone's Settings → Security → Encryption & Credentials → Install a Certificate → CA Certificate (The exact path varies slightly by phone — search "CA Certificate" in your settings search bar if you cannot find it)
Select the certificate file you just downloaded
Android will show a warning:
"Installing a CA certificate will allow whoever issued this certificate to intercept your network traffic, including any password or payment information sent over HTTPS."
This warning is accurate and is why you must only do this with AdGuard downloaded from the official website. The warning describes what any CA certificate can theoretically do. With AdGuard, the filtering is local and the company has been transparent about how it works. But downloading an unofficial version of the app and installing its certificate would be genuinely dangerous, the warning becomes a real risk. With the official app from adguard.com, it is a known, trusted, local tool.
7.Confirm the installation. Return to AdGuard and HTTPS filtering should now show as active.
2. DNS Protection — Blocking at the Network Level
DNS is the phone book of the internet. When your app or browser wants to reach ads.example.com, it first asks a DNS server to look up where that address is. DNS protection works by intercepting those lookups and refusing to resolve addresses that belong to known ad and tracker networks before the connection is even made.
This is fast, lightweight, and works across every app on your phone without touching the content of the connections themselves.
To enable in AdGuard:
Go to Protection → DNS Protection
Tap DNS Server and select from AdGuard's built-in options, or enter a custom server
Recommended: AdGuard DNS — blocks ads and trackers
For family-safe filtering that also blocks adult content: AdGuard Family DNS
DNS protection requires AdGuard's local VPN to be active, it will prompt you to enable this. The local VPN is what lets AdGuard intercept and filter traffic without actually routing anything through an external server.
What Else AdGuard Does
Tracking Protection — blocks trackers that follow you across apps and websites. This is a paid feature in the full version.
Annoyance Blocking — blocks cookie banners, newsletter popups, and subscription modals. Useful, but set it with care. It can occasionally block login prompts, OAuth pop-ups, and other things that look like annoyances but are actually functional. If you find a website or app misbehaving after enabling this, annoyance blocking is the first thing to toggle off and test.
Firewall — lets you control which apps are allowed to access the internet at all. Useful for apps you want to keep installed but do not want phoning home constantly.
Browsing Security — blocks requests to known malicious and phishing websites. Paid feature.
AdGuard Browser — a built-in browser with DuckDuckGo search and ad blocking. Not a replacement for Chrome or Firefox for power users, if privacy is your priority in a browser, Brave is a better daily driver.
Analytics Dashboard — this is one of AdGuard's most satisfying features. The main screen shows you a running count of blocked ads, blocked trackers, and total requests processed. You can drill down to see which specific apps are generating the most ad and tracker traffic, how much data has been saved, and battery usage. Seeing that a free game you installed has made 3,000 tracker requests in a week is the kind of information that changes how you think about free apps.
What AdGuard Cannot Block — And Why
Understanding AdGuard's limits is as important as understanding what it does well.
YouTube ads will mostly still appear. Google serves YouTube ads from the same domains and servers as the actual video content. A domain blocklist approach cannot distinguish between "this is the video you wanted" and "this is the pre-roll ad" when they come from identical infrastructure. YouTube Premium or the YouTube ReVanced project (a separate topic) are the realistic solutions for YouTube ad blocking on Android.
Meta ads in Instagram and Facebook will largely still appear. Same reason, Meta serves ads and content from the same domain infrastructure.
The technical explanation: AdGuard's core blocking mechanism works by maintaining lists of known ad and tracker domains. When your device tries to connect to ad.doubleclick.net, AdGuard blocks it because that domain is on the list. But when YouTube serves an ad from youtube.com (the same domain as the video) AdGuard cannot block the ad without blocking the video too. The two requests are indistinguishable at the domain level.
This is not a failure of AdGuard specifically. It affects every DNS and domain-based ad blocker. It is a deliberate design choice by Google and Meta to make ad blocking harder by merging ad delivery with content delivery infrastructure.
Some apps detect ad blocking. A small minority of apps ( AdGuard estimates less than 10%) will detect that their ads are being blocked and either refuse to load content or show a message asking you to whitelist them. If this happens, you can whitelist specific apps within AdGuard's app management settings.
The realistic expectation: If you spend most of your phone time outside Google and Meta's own apps ( in news apps, free games, third-party streaming apps, shopping apps, and most websites ) AdGuard will block approximately 90% of the ads and trackers you would otherwise encounter. Inside the Google and Meta ecosystems, coverage is significantly lower.
The Simpler Method: AdGuard DNS Without the App
If installing an APK and a certificate feels like too many steps, there is a lighter alternative that blocks ads at the DNS level with no app installation required.
On Android (Private DNS):
Go to Settings → Network & Internet → Private DNS (or search "Private DNS" in your settings)
Select Private DNS provider hostname
Enter one of the following:
Purpose | DNS Hostname |
|---|---|
Block ads and trackers |
|
Block ads, trackers, and adult content |
|
No filtering (unblocked) |
|
Tap Save. Done.
This works system-wide, requires no app, and survives app uninstalls. The trade-off is that it only works at the DNS level that is it cannot do HTTPS filtering, it has no analytics dashboard, and it cannot firewall individual apps. But for basic ad and tracker blocking with zero friction, it is excellent.
For your home router — set the router's DNS servers to AdGuard's IP addresses and every device on your Wi-Fi network benefits automatically, including smart TVs, laptops, and IoT devices.
Default servers (ads and trackers blocked):
IPv4:
94.140.14.14and94.140.15.15IPv6:
2a10:50c0::ad1:ffand2a10:50c0::ad2:ff
Family protection (ads, trackers, and adult content blocked):
IPv4:
94.140.14.15and94.140.15.16IPv6:
2a10:50c0::bad1:ffand2a10:50c0::bad2:ff
Non-filtering (for devices where you want no filtering):
IPv4:
94.140.14.140and94.140.14.141IPv6:
2a10:50c0::1:ffand2a10:50c0::2:ff
None of these require an AdGuard account. You can create a free account at adguard-dns.io to access customised filtering rules, query logs, and per-device settings.
Summary: Which Method Is Right for You?
Situation | Recommended approach |
|---|---|
You want maximum blocking across all apps and websites | AdGuard full app from adguard.com with HTTPS filtering + DNS protection enabled |
You want good blocking with minimal setup | AdGuard Private DNS on Android ( |
You want family filtering on your home network | Router DNS set to AdGuard Family servers |
Your child's phone needs adult content filtering |
|
You spend most time in Google/Meta apps | Manage your expectations — domain-level blocking has limited impact there |
AdGuard is not a magic shield and it does not claim to be. What it is, is the most honest and capable general-purpose privacy tool available on Android without requiring root. For Kenyan users dealing with aggressive in-app ads eating mobile data, third-party trackers building profiles across everything you do, and malicious ad redirects on less reputable sites, it is a meaningful improvement in your daily experience.
Download from the official source. Install the certificate if you want maximum coverage. Set your DNS if you want the lightweight path. And enjoy seeing exactly how many requests your apps were making without your knowledge.
Download AdGuard for Android: adguard.com/en/download.html?auto=1&_plc=en
AdGuard Public DNS setup: adguard-dns.io/public-dns.html
Comments