Threat Manager: Block app and site trackers with ExpressVPN
Prevent unwanted tracking across all your apps with automatic device-level protection
- Block trackers and malicious domains system-wide, not just in a browser
- Stop apps from sending behavioral data to third-party trackers
- Get layered protection and privacy with 1 ExpressVPN subscription
30-DAY MONEY-BACK GUARANTEE FOR FIRST-TIME USERS
What Threat Manager blocks and why it matters
Block apps and websites from known malicious and tracking domains
How trackers collect and use your data
Most apps and websites send data to multiple third-party trackers each time you use them. This can include what you view, how you interact with content, and details about your device and connection.
Advertising networks and analytic platforms use this data to build profiles for targeted advertising, personalization, and cross-app tracking. Your activity in one app can influence the ads and content you see everywhere else.
Hidden risks in apps and websites
Most users don’t realize their browser is just a small part of their online activity. Fitness trackers, messaging apps, news readers, streaming apps, and mobile games routinely send data to third-party trackers to profile your behavior.
These connections continue even when apps aren’t actively in use, creating privacy gaps that a browser-only tracker blocker can’t address.
How Threat Manager actively stops data from reaching trackers
Threat Manager runs on your device at the DNS level, intercepting connection requests before they leave.
When any app or service attempts to send data to a domain, Threat Manager checks it against regularly updated blocklists of known tracking and harmful domains. Blocklisted domains are prevented from receiving your data, stopping tracking at the source across all apps.
Protects more than just your browser activity
Unlike browser extensions that only protect web traffic, Threat Manager blocks tracking across every installed application. Email clients, cloud storage apps, device utilities, and IoT companion apps all connect to analytics servers in the background.
Even when you're focused on one task, Threat Manager monitors and blocks dozens of background processes simultaneously.
Stronger privacy alongside your VPN
How does a VPN work? It encrypts your internet traffic, masks your IP address, and keep your activity hidden from ISPs, network administrators, and hackers on shared networks. But this protection doesn’t prevent apps and websites from sharing your behavioral data with third-party trackers.
The threat blocker adds a second layer of protection by preventing tracker connections at the device level, while your VPN secures the encrypted tunnel.
How to turn on Threat Manager
Block trackers with Threat Manager in just one toggle
Connect to the VPN using Lightway or ‘Automatic’ protocol
Sign up with ExpressVPN and download the app for your device.
Threat Manager* requires the Lightway or ‘Automatic’ protocol to function. You can select these in your app’s settings under ‘Protocol’.
*Threat Manager is included in ExpressVPN’s Advanced Protection suite of privacy tools and requires an Advanced or Pro subscription
Access ‘Advanced Protection’ in your app
Navigate to ‘Upgrades’ or ‘Preferences’, depending on your platform, to find ‘Advanced Protection’, where Threat Manager is located. The path may vary by device, but it is clearly labeled in your app settings.
iOS: Tap Upgrades > Advanced Protection
Android: Tap Upgrades > Advanced Protection
Mac: Click Menu > Preferences > Advanced Protection
Windows: Click Menu > Options > Advanced Protection
Toggle on ‘Block Trackers’ under ‘Advanced Protection’
Enable both menu options for complete protection. Once activated, blocking begins immediately while your device is connected to the VPN.
For Linux, run these Terminal commands:
expressvpn preferences set block_trackers true expressvpn preferences set block_malicious true
Supported devices and requirements
See which devices run Threat Manager and what you need to use it
Threat Manager and supported platforms
Threat Manager works across most devices that support ExpressVPN apps, including:
- Mobile & Desktop: iOS, Android, Mac, Windows, Linux
- Smart TVs: Apple TV* (tracker blocking only)
- Routers: ExpressVPN Aircove (full VPN protection)
*Tracker blocking on Apple TV is limited to DNS-based requests, while Aircove provides system-wide VPN-level protection.
Technical requirements
To use Threat Manager effectively, your VPN setup must meet these requirements:
- Latest ExpressVPN app version for your device
- Protocol: Lightway or ‘Automatic’ (OpenVPN not supported)
- VPN connection: Must be active for Threat Manager to block requests (Airсove is an exception)
- Linux: CLI version 3.0 or later
Real-life benefits of using Threat Manager
Prevent unwanted tracking and regain control of your online activity
Less targeted ads and profiling
A news app or website tracks what you read, how long you spend on articles, and which links you click, sharing this data with third parties to tailor content and ads.
Threat Manager blocks these tracking requests before they reach servers, preventing advertisers from building detailed profiles across apps and websites. The result: fewer personalized ads, some protection against activity-based pricing (price discrimination), and a cleaner online experience.
More control over app permissions
By automatically blocking tracking connections across all apps, Threat Manager provides enhanced system-wide privacy without any manual setup.
Set it once and forget it. There’s no need to review individual app permissions or adjust settings for each application. Blocklists are regularly automatically updated.
Threat Manager vs. browser-only protection
| Browser extension tracker blockers | ExpressVPN Threat Manager | |
|---|---|---|
| Blocks trackers system-wide | ✘ | ✔ |
| Blocks connections to malicious sites | ✔ (browser only) | ✔ |
| One-tap setup | ✘ | ✔ |
| Automatic setup | ✘ | ✔ |
| No third-party tracking | ✘ | ✔ |
| Encrypts all traffic | ✘ | ✔ |
| Works on multiple devices | ✘ | ✔ |
Why choose ExpressVPN for threat protection?
Discover why ExpressVPN offers the most comprehensive online privacy
-
![TrustedServer technology and independent audits ExpressVPN’s TrustedServer technology runs on RAM-only servers, wiping all data on every reboot. ...]()
TrustedServer technology and independent audits
ExpressVPN’s TrustedServer technology runs on RAM-only servers, wiping all data on every reboot. This is one of many advanced security features that prevents our systems from collecting and storing any user connection data. Regular independent audits verify these practices.
-
![Privacy by design: Nothing logged, nothing shared Headquartered in the British Virgin Islands, ExpressVPN benefits from strong privacy protections ...]()
Privacy by design: Nothing logged, nothing shared
Headquartered in the British Virgin Islands, ExpressVPN benefits from strong privacy protections under local law. Following a strict no-logs policy, the company doesn’t store information about your online activity, connections, or personal data.
-
![24/7 live support and risk-free trial First-time customers can try ExpressVPN risk-free with our 30-day money-back guarantee*. If it doesn’t meet...]()
24/7 live support and risk-free trial
First-time customers can try ExpressVPN risk-free with our 30-day money-back guarantee*.
If it doesn’t meet your needs, our 24/7 multilingual support team is available via live chat or email to help with setup or refund requests.
*Apple App Store purchases must request refunds through Apple.
What people are saying about ExpressVPN
See why ExpressVPN is the trusted choice for millions worldwide
I have ExpressVPN on all my devices - phone, laptop, tablet, AppleTV, etc., and absolutely love it.
* A sample of reviews from our most satisfied customers
Got an account with @expressvpn yesterday. Great decision for traveling out of the country!
@D_Geiger
* A sample of reviews from our most satisfied customers
With its consistent performance and reliable security, ExpressVPN is the best VPN out there.
* We sometimes pay expert sites for customer referrals
FAQs: About Threat Manager
All you need to know about how to block trackers
How is Threat Manager different from a DNS blocker?
Threat Manager is a DNS-based blocker that runs on your device rather than ExpressVPN's servers. This device-level architecture means blocked connection requests never leave your device and isn't logged anywhere. It covers all installed apps—not just browsers—and uses open-source blocklists updated weekly.
Is Threat Manager free to use?
Threat Manager is included with your active ExpressVPN Pro or Advanced subscription. You can use it on iOS, Android, Mac, Windows, Linux, Apple TV (tracker blocker only), or on all devices connected to Aircove, ExpressVPN's Wi-Fi router.
Is it safe to use Threat Manager all the time?
Yes! Threat Manager is built to run continuously (while the VPN is turned on), blocking trackers and malicious sites without affecting your device. Combined with ExpressVPN’s strict no-logs policy, it keeps your online activity private and secure whenever you’re connected.
Can I use Threat Manager on my phone?
Yes. Threat Manager works on iOS and Android with Advanced or Pro subscriptions. Enable it under 'Advanced Protection' in the app, connect to the VPN using Lightway or Automatic protocol, and it will block trackers across all mobile apps and browsers.
How do I stop websites and apps from tracking me?
Sign up with ExpressVPN and download the app for your device. Simply enable Threat Manager under ‘Advanced Protection’ on iOS, Android, Mac, Windows, or Linux. If you’re using Aircove, Threat Manager is already set up with the router.
Who uses trackers and why should I care?
Advertisers, analytics companies, and some apps use trackers to monitor your online activity. This data can be shared or sold to third parties to deliver targeted ads or personalized content, often without your knowledge. Threat Manager helps block these trackers, giving you greater control over your privacy.
Try Threat Manager risk-free with ExpressVPN
If you’re a first-time customer, try ExpressVPN risk-free with our 30-day money-back guarantee*.
*Contact ExpressVPN support to request a refund.
Support Center 
FAQ 
VPN Setup Tutorials 
