Low Level Settings guide

Inside AdGuard for Android 'Advanced settings' tab there is a 'Low Level Settings' button. Once you tap it, you will see a big list of various settings, many of which might be confusing to an average user.

WARNING! Changing any of these settings without knowledge of what that particular setting does may lead to undesirable consequences! Ask our support for advice if you are in doubt about this or that setting.

Below we will try to describe what some of the most important and often-used low level settings are for.


If you tap this button, you will find a list, and each entry of this list is a package name of some application. The whole reason of this section is to whitelist any app on a level deeper than you would get using AdGuard Firewall. Traffic of apps from pref.net.exclusions list will not even go through AdGuard, so it can't be modified in any way by definition.

To add an app to this list simply add a new entry with app's package name. For apps from Google Play it is really easy to determine the package name. Just open the apps page in GooglePlay and look at the address bar. The part after 'id=' is exactly what you need to look for. For example, for YouTube app the whole link would be


with com.google.android.youtube being the package name.

HTTPS filtering preferences

We united several settings under this category: pref.https.apps.exclusions, pref.https.domains.blacklist and pref.https.domains.whitelist. They are essentially the same settings you can find in HTTPs filtering settings tab. You can find more information about them in our blog:



Nowadays, more and more often SMS and MMS are sent via network, and when they are, non-standard IPv6 network is often used. When we try to filter this traffic, it is not extremely unusual that we interfere with sending and even receiving MMS. If you suspect this is your case, we recommend checking the pref.vpn.ipv6.bypass checkbox or adding the app responsible for MMS managing to pref.net.exclusions.


This setting has been developed specifically for the South Korean users who often face the following problem — the "Samsung Pay" app doesn’t work on devices with running VPN (which, in its turn, is being used by AdGuard).

If you want to learn about how this feature makes AdGuard compatible with Samsung Pay, please read this article.

All available options:


If enabled - VPN will be configured to filter


If enabled - VPN will be configured to filter everything except the excluded IPv4 routes.


IPv4 TUN interface address.


IPv6 TUN interface address.


If enabled - AdGuard add an IPv6 address to the VPN even if there's no active IPv6 network.


If enabled - VPN will be configured to bypass all the IPv4 traffic.


If enabled - VPN will be configured to bypass all the IPv6 traffic.


If enabled - AdGuard will disable IPv6 routes forcibly (VPN).


Maximum transmission unit (MTU) of the VPN interface.


List of IPv4 routes excluded from VPN and auto-proxy.


List of IPv6 routes excluded from VPN and auto-proxy.


List of excluded UID packages.


Will record all connections that goes through the TCP/IP stack.


Enable HAR file capture.


Disable automatic VPN pause in case of network absence, tethering or power saving mode.


Disable VPN automatic re-configuration in case of network absence, tethering or power saving mode.


Disable Proxy automatic re-configuration.


Block all internet connections through IPv6 (Proxy).


List of the redirect ports.


The initial protection startup delay (in seconds) after device boot up.


Enforce notification about paused protection even when notification icon is set to Disabled (for Android below Oreo).


AdGuard will clear Youtube app data every on boot (ROOT is required).


AdGuard will set minimum oom_score_adj for own process (ROOT is required).


List of apps for which AdGuard enforces HTTPS filtering even if they target Android 7+.


AdGuard will print information about removed HTML elements to the filtering log.


AdGuard will pause protection while Samsung Pay app is in the foreground (in VPN mode only).


Bootstrap DNS for DoH and DoT servers.


Fallback DNS address.


Block type for DNS filtering.


Show unknown CA notifications or not.