Privacy and security
How to Block Ads and Trackers on Android TV and Google TV
By the llcloud team 5 min read
Quick answer
Install a DNS filter app that has a real TV screen, such as Repel, switch the filter on with the remote and accept Android's VPN prompt. It then blocks ad, tracker and telemetry domains for every app on the TV. No DNS filter can remove ads inside a video stream, so YouTube ads keep playing.
A smart TV or streaming stick talks to more servers than most people expect. Free apps show banner ads, launchers fetch promoted rows, and the TV itself reports what you watch and how you use it. You can cut a lot of that off at the DNS level, but a TV makes it harder than a phone does, and there is one kind of ad no DNS blocker can touch. This guide covers the three ways that work and what each one costs you.
What can a DNS blocker block on a TV?
Every time an app on the TV wants to reach a server, it first looks up a name such as ads.example.com. A DNS blocker answers "not found" for names on its blocklist, so the request never leaves the TV. That works well for:
- Ad networks that serve banners and full-screen ads in free apps and games
- Trackers and analytics that report what you open and for how long
- Telemetry from the TV maker and the apps that came preinstalled
- Malware and phishing domains
It does not work when the ad comes from the same server as the content. YouTube is the well-known case. Its ads and its videos share servers, so blocking the ads would block the videos. Most streaming apps work the same way. Anyone who promises to remove YouTube ads with DNS alone is promising something DNS cannot do.
What are the ways to block ads on Android TV?
| Method | Needs | Your own list strength? | Easy to switch off? |
|---|---|---|---|
| DNS filter app on the TV | One VPN prompt | Yes | Yes, from the app |
| Private DNS set over ADB | A computer and developer options | No, the provider's list | No, needs ADB again |
| Filtering DNS on your router | Router admin access | Depends on the router | Yes, but for the whole home |
A DNS filter app
This is the easiest route on a TV. The app runs a small local VPN that only sees DNS lookups, checks each one against a blocklist on the TV, and sends the allowed ones on encrypted. Your video traffic never goes through it. The catch is that most blocker apps were built for phones, and a phone layout is hard to use with a D-pad.
Repel has its own Android TV and Google TV screen, made for the remote. Here is the whole setup:
- Open Repel from the Apps row on your TV home screen.
- Press OK on the filter switch. Focus is already on it.
- Accept Android's VPN prompt. That is the only permission it needs.
The blocklist downloads, and the filter starts blocking within seconds. From the same screen you can pause it for 5, 15 or 60 minutes, pick how strong the HaGeZi list is, and see how many lookups were blocked today. Light and Pro are free. Pro is a good middle ground for a TV, while the stronger lists block more and break more apps.
Two limits to know. The filter uses Android's VPN slot, so it cannot run next to another VPN app on the same TV. And a few TV builds ship without Android's VPN prompt at all. On those, Repel tells you it cannot start rather than failing silently.
Private DNS over ADB
Android has had encrypted Private DNS since version 9, and our Private DNS guide covers it on phones. Most TV builds hide the menu, but the setting is still there. If you are comfortable with a computer:
- On the TV, open Settings > System > About (the wording differs by version) and press Android TV OS build seven times to unlock developer options.
- In Developer options, turn on USB debugging or Network debugging.
- From the computer, run
adb shell settings put global private_dns_mode hostname. - Then run
adb shell settings put global private_dns_specifier dns.adguard-dns.com, using the hostname of the provider you picked.
Our free Private DNS picker helps you choose a hostname. This route needs no app and uses no VPN. The trade-offs: you get the provider's list as it is, there is no pause when an app breaks, and with the menu hidden you need ADB again to undo it. If you set Private DNS this way and later want it off, Repel's TV screen has a Turn off Private DNS button for exactly that case.
Filtering DNS on the router
Setting a filtering DNS server on your router covers every device in the home, including TVs that cannot run apps. It is a good choice if you control the router and everyone at home is happy with the same list. It cannot follow the TV to another network, and when an app breaks, it breaks for the whole household until someone changes the router.
Which blocklist strength should a TV use?
Blocklists come in strengths. A light list blocks the obvious ad and tracker networks and almost never breaks anything. Stronger lists catch more telemetry, but they are more likely to stop an app from signing in or loading. On a TV, where you cannot easily read an error, start light or at the middle strength and only go stronger if you miss something. If an app stops working, pause the filter to check whether it is the cause before you change anything else.
Why does my TV blocker keep turning off?
Some TVs and sticks close background apps to save memory, the same way many phones do. If your filter stops after the TV wakes from standby, open the app again and check its status. Our guide on why Android kills background apps explains what is going on. Private DNS and router filtering are not affected, because neither needs an app running.
Which setup should you pick?
- You want it working in a minute, with the remote only: a DNS filter app with a TV screen, such as Repel.
- You want no app at all and are fine with a computer: Private DNS over ADB.
- You want every device at home covered: filtering DNS on the router.
- You use a VPN app on the TV all the time: Private DNS or the router, because a filter app needs the VPN slot.
On your phone, the choices are wider, because phones show the Private DNS menu and Repel adds an app firewall there. Our guide on blocking trackers on Android without a VPN covers that. If you are weighing Repel against other blockers, see Repel vs Blokada and Repel vs NextDNS.
Sources
Questions
Can I block YouTube ads on Android TV with a DNS blocker?
No. YouTube serves its ads from the same servers as the videos, so a DNS filter cannot tell them apart without breaking playback. The same goes for the ads in most streaming apps. A DNS blocker on a TV is for ad networks, trackers and telemetry, such as the banners and data collection in free apps, launchers and the TV's own services.
Where is Private DNS on Android TV?
Most Android TV and Google TV builds hide it. The setting still exists underneath, so you can set it with ADB from a computer, but there is no menu to change or switch it off later. If you set it that way and want it gone, you need ADB again, or an app such as Repel that has a button to turn Private DNS off.
Does a DNS filter slow down my TV?
Not in a way you would notice. The filter only checks domain lookups, which are tiny, and the video itself never passes through it. A very large blocklist can use more memory on a low-end stick, which is why a middle strength such as HaGeZi Pro is a sensible default on a TV.
Will blocking trackers break apps on my TV?
It can. Some apps refuse to start or sign in when a tracking or analytics domain is blocked. Start with a lighter list, and if an app stops working, pause the filter for a few minutes to confirm it is the cause, then use a lighter strength. Stronger lists block more and break more.
Do I need root or a computer to block ads on Google TV?
Not with a DNS filter app. It uses Android's own VPN permission, which you accept once with the remote. A computer is only needed for the Private DNS route, because the TV hides that setting. Router-level blocking needs neither, but it is set up on the router, not the TV.