A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH (Oblivious DoH).
Publisher’s description
What is dnscrypt-proxy?
dnscrypt-proxy is an open-source firewall & privacy program for Windows from DNSCrypt. It ranks 9th by popularity among firewall & privacy in this catalogue. It is written in Go.
Installation and requirements
Official installers exist for 64-bit, ARM64 and 32-bit as MSI and Portable. The installer supports unattended (silent) installation. An MSI package is available for deployment with Group Policy, Intune or Configuration Manager.
Updates and version history
The current version is 2.1.20, released on October 22, 2026. 12 versions are listed since February 7, 2023, each with links to its own installer files. That is about 3.2 releases a year. The last update is less than a month old.
Popularity and file types
The Chocolatey package has been downloaded 15,104 times. The source code on GitHub (DNSCrypt/dnscrypt-proxy) has 13,762 stars. Similar programs include OnionShare, Portmaster and WindowsSpyBlocker.
Project description on GitHub: “dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Native ARM64 build for Windows on Arm
- MSI package for managed deployment
- Documented silent install
- Updated in the last two months
- Large user base
In short: dnscrypt-proxy is an open-source firewall & privacy tool for 64-bit, ARM64 and 32-bit PCs. Administrators can deploy it unattended.
Is dnscrypt-proxy safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
7BD55ADBCBC2FA0E94A8952C8D93A0A7F1E2B8E7A18E9DC66777A79D738524F3· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the DNSCrypt/dnscrypt-proxy repository on GitHub by the Open Source Security Foundation, last run on August 15, 2022.
- Actively maintained10
- No known vulnerabilities10
- Dependency update tool10
- Licence declared10
- No dangerous workflows10
- No binaries in the repository10
- Fuzzing10
- Signed releases8
- Pinned dependencies5
- Code review4
- OpenSSF Best Practices badge0
- Branch protection0
- Restricted token permissions0
- Security policy0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 12 versions ›12 versions over 4 years · about 3.2 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 2.1.20Latest | October 22, 2026 | — | ARM64 ZIP32-bit MSI64-bit ZIP64-bit MSI |
| 2.1.19 | October 20, 2026 | — | 32-bit ZIPARM64 ZIP64-bit ZIP64-bit MSI |
| 2.1.18 | July 18, 2026 | — | 32-bit ZIP64-bit MSI64-bit ZIP32-bit MSI |
| 2.1.17 | July 13, 2026 | — | ARM64 ZIP64-bit MSI32-bit MSI32-bit ZIP |
| 2.1.16 | May 24, 2026 | — | 32-bit MSI32-bit ZIPARM64 ZIP64-bit ZIP |
| 2.1.15 | December 10, 2025 | — | 64-bit ZIPARM64 ZIP32-bit ZIP64-bit MSI |
| 2.1.14 | September 3, 2025 | — | 32-bit MSI64-bit MSI32-bit ZIP64-bit ZIP |
| 2.1.13 | August 11, 2025 | — | 32-bit MSI64-bit ZIPARM64 ZIP64-bit MSI |
Install from the command line
Silent install ›winget install --id DNSCrypt.dnscrypt-proxy -echoco install dnscrypt-proxy -yscoop install main/dnscrypt-proxymsiexec /i dnscrypt-proxy-x64-2.1.20.msi /qn /norestartmsiexec /x {F0AF69CD-F137-4540-AE0A-7BD2B01E93BD} /qn /norestartProgram files (.exe): dnscrypt-proxy.exe
Related guide: How to use winget: install and update apps
Also for other systems
brew install dnscrypt-proxyInformation
- Publisher
- DNSCrypt
- Category
- Firewall & privacy
- Licence
- ISC
- Price
- Free
- Source code
- github.com/DNSCrypt/dnscrypt-proxy
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit, ARM64, 32-bit
- Installer
- MSI, Portable
- Version
- 2.1.20
- Released
- October 22, 2026
- Added to the catalogue
- February 27, 2023
- Versions listed
- 12
- Updates / year
- 3.2
- Chocolatey downloads
- 15,104
- GitHub stars
- 13,762
- GitHub forks
- 1,139
- Website
- github.com
- winget ID
- DNSCrypt.dnscrypt-proxy
- Chocolatey package
- dnscrypt-proxy
- Scoop package
- main/dnscrypt-proxy
- MSI product code
- {F0AF69CD-F137-4540-AE0A-7BD2B01E93BD}
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to dnscrypt-proxy
See all ›-
OnionShare2.7OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor networkOpen source40.7K ↓ -
Portmaster2.2.3Portmaster is a free and open-source application that puts you back in charge over all your computers network connections.Open source21.4K ↓ -
Open source21.7K ↓ -
Open source57.4K ↓ -
DingTalk Workspace CLI1.0.65dws — DingTalk Workspace on the command line, built for humans and AI agents.Open source5.7K ↓ -
Subsurface6.0.5504Subsurface can plan and track single and multi-tank dives using air, Nitrox or TriMix.Open source5.4K ↓ -
GreenTunnel3.0.5GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites.Open source854 ↓ - Privoxy4.1.0A non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk.Open source7K ↓
Frequently asked questions
Is dnscrypt-proxy free?
Yes. dnscrypt-proxy is open-source software under the ISC licence.
Is dnscrypt-proxy safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install dnscrypt-proxy with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can dnscrypt-proxy be installed silently?
Yes. The silent install page lists the exact command for each installer, including msiexec for the MSI package.
Does dnscrypt-proxy run on ARM (Windows on Arm)?
Yes, there is a native ARM64 installer.
Where can I download an older version of dnscrypt-proxy?
The versions page lists all 12 versions with links to their official installer files, back to February 7, 2023.
What are alternatives to dnscrypt-proxy?
OnionShare, Portmaster, WindowsSpyBlocker, Prey Anti-Theft and DingTalk Workspace CLI. The alternatives page compares them.
