Back to blog
Guides·3 min read

Switching From NextDNS or Pi-hole? Check Two Things First

When you're evaluating a replacement for a DNS filter or network blocker, two things matter more than the feature list: whether the blocking works across every app on your device (not just inside a browser), and whether anything happens automatically for browsing you'd rather keep off a pattern-analysis trail.

Does it stop at the browser, or does it follow you across apps?

Browser-only ad- and tracker-blocking tools are scoped to a single browser. That's useful, but tracking also happens inside apps, through shared tracking pixels and analytics beacons that let networks connect your activity across unrelated apps. A self-hosted DNS filter like Pi-hole covers your whole network while you're on it — but if you're looking for something that keeps working the same way once you leave that network on a phone, it's worth checking explicitly whether a candidate tool's blocking is scoped to one browser, one home network, or genuinely follows the device.

Casper's Cloak blocks known tracking and ad domains at the network level across iPhone, Mac, and Android, so the same filtering applies whether you're in a browser, a news app, or a game — rather than needing separate configuration per app or per network. It's also built to catch more of this cross-app tracking than iOS's App Tracking Transparency alone, since ATT only covers part of the picture.

Does it do anything for the browsing you'd rather keep quiet?

Casper's Cloak adds a second layer here: with Decoy Domains enabled, detecting a matching sensitive-site DNS query inside the tunnel can automatically trigger decoy traffic — ordinary-looking background browsing activity — to help bury that visit from traffic-pattern analysis. It's a narrow, specific protection, not a blanket "you're invisible now" claim, but it's the kind of thing worth checking for if pattern-based tracking is part of what you're trying to avoid.

The practical test

Before switching tools, it's reasonable to ask any provider — including us — two concrete questions: "Does your blocking apply inside apps, or just in a browser or on one network?" and "Does anything happen automatically when I visit a sensitive site, or do I have to configure that myself?" Use those questions to evaluate coverage alongside the feature list, whether you're coming from a browser extension, a self-hosted box, or another managed DNS service.

Casper's Cloak runs as one subscription across iPhone, Mac, and Android, with current plans listed at casperscloak.com/subscriptions.