diff --git a/pkgs/tools/networking/dnscrypt-wrapper/default.nix b/pkgs/tools/networking/dnscrypt-wrapper/default.nix
new file mode 100644
index 000000000000..f443e5450482
--- /dev/null
+++ b/pkgs/tools/networking/dnscrypt-wrapper/default.nix
@@ -0,0 +1,21 @@
+{ stdenv, fetchurl, libsodium, libevent, pkgconfig, autoreconfHook }:
+
+stdenv.mkDerivation rec {
+  name = "dnscrypt-wrapper-${version}";
+  version = "0.2";
+
+  src = fetchurl {
+    url = "https://github.com/Cofyc/dnscrypt-wrapper/releases/download/v0.2/dnscrypt-wrapper-v0.2.tar.bz2";
+    sha256 = "0kh52dc0v9lxwi39y88z0ab6bwa5bcw8b24psnz72fv555irsvyj";
+  };
+
+  buildInputs = [ pkgconfig autoreconfHook libsodium libevent ];
+
+  meta = {
+    description = "A tool for adding dnscrypt support to any name resolver";
+    homepage = http://dnscrypt.org/;
+    license = stdenv.lib.licenses.gpl2;
+    maintainers = with stdenv.lib.maintainers; [ tstrobel ];
+    platforms = stdenv.lib.platforms.linux;
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 851d25d45040..a7b6ca665090 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -1301,6 +1301,8 @@ let
 
   dnscrypt-proxy = callPackage ../tools/networking/dnscrypt-proxy { };
 
+  dnscrypt-wrapper = callPackage ../tools/networking/dnscrypt-wrapper { };
+
   dnsmasq = callPackage ../tools/networking/dnsmasq { };
 
   dnstop = callPackage ../tools/networking/dnstop { };