Mullvad

mullvad.net/en
Awesome Privacy ➔ Networking ➔ Virtual Private Networks ➔ Mullvad
Mullvad

Mullvad is one of the best for privacy, they have a totally anonymous sign up process, you don't need to provide any details at all, you can choose to pay anonymously too (with Monero, BTC or cash).

Avoid

  • nordvpn
  • expressvpn
  • cyberghost
  • surfshark
  • ipvanish
  • hotspot shield

Also Consider

Security Audited Open Source

Mullvad Privacy Policy

Privacy Policy Summary

  • The terms for this service are easy to read
  • You must create an account to use this service
  • The service does not guarantee accuracy or reliability of the information provided
  • The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
  • The service is provided 'as is' and to be used at your sole risk
  • An onion site accessible over Tor is provided
  • An anonymous payment method is offered
  • No third-party analytics or tracking platforms are used
  • Information is provided about what kind of information they collect
  • A free help desk is provided
  • Third parties are involved in operating the service
  • You are responsible for maintaining the security of your account and for the activities on your account
  • The court of law governing the terms is in location X
  • The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection
  • Information is gathered about you through third parties
  • You are informed about the risk of publishing personal info online
  • The data retention period is kept to the minimum necessary for fulfilling its purposes
  • Some personal data may be kept for business interests or legal obligations
  • This service gives your personal data to third parties involved in its operation
  • Third parties used by the service are bound by confidentiality obligations
  • Your personal data will not be used for an automated decision-making
  • You can request access, correction and/or deletion of your data
  • A complaint mechanism is provided for the handling of personal data
  • Inconvenient process for obtaining personal data
  • First-party cookies are used
  • A list of all cookies set by the website is provided
  • The service does not use any third-party advertising services
  • The service will resist legal requests for your information where reasonably possible
  • You will be notified if personal data has been affected by data breaches
  • You can access most of the pages on the service's website without revealing any personal information
  • The service explains how to prevent disclosure of personal information to third parties
  • You are not being tracked
  • IP addresses of website visitors are not tracked
  • There is a date of the last update of the agreements
  • When the service wants to make a material change to its terms, you are notified at least 30 days in advance
  • The service claims to be GDPR compliant for European users
  • Only necessary logs are kept by the service to ensure quality
  • You can retrieve an archive of your data (under very limited circumstances)

Score

B

Documents

Domains Covered by Policy

  • mullvad.net
  • o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion

About the Data

This data is kindly provided by tosdr.org. Read full report at: #641

Mullvad Source Code

Author

mullvad

Description

The Mullvad VPN client app for desktop and mobile

#electron#nodejs#openvpn#rust#vpn#wireguard

Homepage

https://mullvad.net/

License

GPL-3.0

Created

19 Dec 17

Last Updated

29 Jul 26

Latest version

tui

Primary Language

Rust

Size

304,921 KB

Stars

7,410

Forks

503

Watchers

7,410

Language Usage

Language Usage

Star History

Star History

Top Contributors

Recent Commits

  • Jonatan Rhodin (29 Jul 26)

    Merge branch 'unable-to-update-agp-to-930-droid-2798'

  • Jonatan Rhodin (28 Jul 26)

    Update lockfiles

  • Jonatan Rhodin (28 Jul 26)

    Update AGP to 9.3.1

  • David Lönnhager (29 Jul 26)

    Merge branch 'can-select-entry-when-having-multihop-set-to-when-needed-des-3150'

  • Oliver (27 Jul 26)

    Fix entry location selection in relation to multihop mode Can now only be selected when multihop mode is "always".

  • Oliver (27 Jul 26)

    Add flex property to dialog popup content

  • Oliver (27 Jul 26)

    Use status dialog component for disable recents dialog

  • Oliver (27 Jul 26)

    Close menu when selecting multihop mode

  • Bug Magnet (29 Jul 26)

    Merge branch 'ios-upload-strings'

  • Emīls (28 Jul 26)

    Make blog link localizable

  • Emīls (28 Jul 26)

    Update strings once more

  • Bug Magnet (29 Jul 26)

    Merge branch 'limit-submodule-history-ios'

  • Daneo Van Overloop (27 Jul 26)

    Limit submodule history to the latest commit This limits the history and therefore time/space needed on the runner to check out the repository. It also aligns these with our general way of using `git submodule`.

  • Linus (28 Jul 26)

    Merge branch 'fix-installer-downloader-rustflags'

  • Linus (28 Jul 26)

    Build installer-downloader with a cargo profile instead of RUSTFLAGS RUSTFLAGS and the `target.*.rustflags` keys in `.cargo/config.toml` are mutually exclusive, so setting RUSTFLAGS here dropped the config's Windows rustflags. Move the settings that can be expressed as a profile into a new `installer-downloader` profile in the workspace root Cargo.toml, and drop RUSTFLAGS entirely. `.cargo/config.toml` is now the only place that sets rustflags, so all three Windows flags apply again. `strip` and `lto` come from the inherited `release` profile. Binaries now land in `target/installer-downloader/` instead of `target/release/`.

  • Jonatan Rhodin (28 Jul 26)

    Merge branch 'increase-e2e-test-stability'

  • Jonatan Rhodin (28 Jul 26)

    Increase update default location flag test stability

  • Linus (28 Jul 26)

    Merge branch 'deny-cargo-warnings'

  • Linus (28 Jul 26)

    Use build.warnings instead of RUSTFLAGS to deny CI warnings RUSTFLAGS and the `target.*.rustflags` keys in `.cargo/config.toml` are mutually exclusive, so setting RUSTFLAGS here silently dropped `-Ctarget-feature=+crt-static` and the reproducible-build link args from Windows target builds in CI. `build.warnings` is a separate config channel and leaves those intact. It also does not change the rustc fingerprint, so different builds can can share a build cache more. Requires cargo 1.97+. Covers rustc, clippy and rustdoc lints.

  • David Lönnhager (28 Jul 26)

    Merge branch 'add-socket-bypass'

  • David Lönnhager (28 Jul 26)

    Add newtype wrapping a socket and its bypass guard

  • David Lönnhager (20 Jul 26)

    Remove fwmark from all obfuscator settings

  • David Lönnhager (20 Jul 26)

    Remove Obfuscator::remote_socket_fd This method has been superseded by the SocketBypass trait

  • David Lönnhager (28 Jul 26)

    Implement SocketBypass for the obfuscator sockets Set the fwmark on Linux and call TunProvider::bypass on Android. This replaces the manual, Android-only bypass that was applied to the socket returned by Obfuscator::remote_socket_fd.

  • David Lönnhager (28 Jul 26)

    Bypass remote sockets in obfuscators Exclude every socket that talks to a remote obfuscation server from the tunnel, using the bypass provided by the caller. The default bypass is a no-op, so this is a no-op until a caller provides an implementation.

  • David Lönnhager (28 Jul 26)

    Add socket bypass trait This lets individual sockets be excluded from tunnel traffic, without the caller having to know how the exclusion is implemented.

  • David Lönnhager (23 Jul 26)

    Add license exception for talpid-net in mullvad-ios

  • David Lönnhager (23 Jul 26)

    Update udp-over-tcp

  • Jonatan Rhodin (28 Jul 26)

    Merge branch 'device-name-margin-not-matching-other-content-droid-2648'

  • Jonatan Rhodin (28 Jul 26)

    Fix bottom bar margins when using phone in landscape mode

Mullvad Security

8.7/10

Repo Security Summary

Updated 13 Jul 26

  • Code-Review 10/10
  • Maintained 10/10
  • Security-Policy 10/10
  • Packaging N/A
  • CII-Best-Practices 5/10
  • Dangerous-Workflow 10/10
  • Token-Permissions 10/10
  • License 10/10
  • Branch-Protection 8/10
  • Signed-Releases 8/10
  • Fuzzing 0/10
  • Pinned-Dependencies 8/10
  • SAST 10/10
  • Binary-Artifacts 10/10

Security Advisories (2)

  • medium Patched CVSS 6.5

    GHSA-h72f-j6r4-c3jc Renderer-controlled installer path can lead to arbitrary package launch due to missing main-process binding to verified installer path

  • high Patched CVSS 7.3

    CVE-2026-32323 CVE-2026-32323: macOS Local Privilege Escalation in Mullvad VPN installer

Mullvad Website

Website

Free the internet with Mullvad Browser

The Mullvad Browser is a privacy-focused web browser developed in collaboration between Mullvad VPN and the Tor Project. It’s produced to minimize tracking and fingerprinting.

Redirects

Redirects to https://mullvad.net/en/browser

Security Checks

All 65 security checks passed

Server Details

  • IP Address 45.83.223.209
  • Location Malmoe, Skane lan, Sweden, EU
  • ISP 31173 Services AB
  • ASN AS39351

Categories

Some proxies may block this service, as it falls into the following categories

  • VPN Provider

Associated Countries

  • DE DE
  • SE SE
  • US US
  • CA CA

Safety Score

Website marked as safe

100%

Blacklist Check

mullvad.net was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report at web-check.xyz

Mullvad Android App

APK Info

De-Googled Compatibility

Native 4.00 / 4 26 ratings
microG 4.00 / 4 16 ratings
  • GrapheneOS Native 4.0 / 4 (18)
  • CalyxOS microG 4.0 / 4 (9)
  • LineageOS Native 4.0 / 4 (5)
  • LineageOS microG 4.0 / 4 (3)
  • iodeOS microG 4.0 / 4 (3)
  • crDroid Native 4.0 / 4 (2)

Tested on Android 13–16 · Updated 18 Jul 26 · View on Plexus →

Trackers

No trackers found

Permissions

  • Access Network State
  • Foreground Service
  • Foreground Service System Exempted
  • Internet
  • Post Notifications
  • Query All Packages
  • Dynamic Receiver Not Exported Permission

Mullvad iOS App

App Info

Mullvad VPN

Free the internet from data collection with Mullvad VPN – a service that helps keep your online activity, identity, and location private. Only €5/month. GET STARTED 1. Install the app. 2. Create an account. 3. Add time to your account via in-app purchases, vouchers or on our website. To make sure to block third-party cookies and other tracking technologies – use Mullvad VPN together with Mullvad Browser (free of charge). ANONYMOUS ACCOUNTS – NO ACTIVITY LOGS * Creating an account requires no personal info - not even an email address. * We keep no activity logs. * We offer the possibility to pay anonymously with cash or cryptocurrency. * Our app uses WireGuard, a superior VPN protocol that connects fast and doesn’t drain your battery. HOW DOES MULLVAD VPN WORK? With Mullvad VPN, your traffic travels through an encrypted tunnel to one of our VPN servers and then onward to the website you are visiting. In this way, websites will only see our server’s identity instead of yours. Same goes for your ISP (internet service provider); they’ll see that you’re connected to Mullvad, but not your activity. It also means that all the third-party actors with technology integrated into the various websites you visit can’t sniff out your IP address and use it to track you from one site to another. Using a trustworthy VPN is a great first step to reclaim your privacy online. In combination with Mullvad Browser you make sure to block third-party cookies and other tracking technologies. FREE THE INTERNET FROM MASS SURVEILLANCE AND DATA COLLECTION A free and open society is a society where people have the right to privacy. That’s why we fight for a free internet. Free from mass surveillance and censorship. Free from big data markets where your personal information is up for sale. Free from authorities mass monitoring every click you make. Free from an infrastructure mapping your whole life. Mullvad VPN and Mullvad Browser is our contribution to the fight. TELEMETRY AND CRASH REPORTS The app collects a very minimal amount of telemetry, and it does not in any way tie it to an account number, IP or other identifiable information. Account numbers are used for authentication. App logs are never sent automatically but are rather explicitly sent by the user. App version checks are performed every 24 hours to tell the app if there are any upgrades available and if the currently running version is still supported.

Rating

Rated 4.14 out of 5 stars by 1,352 users

Version Info

  • Current Version 2026.2
  • Last Updated 21 Apr 26
  • First Released 08 Apr 20
  • Minimum iOS Version 17.0
  • Device Models Supported 127

App Details

  • IPA Size 46.29 Mb
  • Price Free (USD)
  • Age Advisory 4+
  • Supported Languages 20
  • Developer Mullvad VPN AB
  • Bundle ID net.mullvad.MullvadVPN

Screenshots

  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot
  • App screenshot

Mullvad Docker

Container Info

Mullvad-browser

The [Mullvad Browser](https://mullvad.net/en/browser) is a privacy-focused web browser developed in a collaboration between Mullvad VPN and the Tor Project. It’s designed to minimize tracking and fingerprinting. You could say it’s a Tor Browser to use without the Tor Network. Instead, you can use it with a trustworthy VPN.

#Web Browser#VPN linuxserver/mullvad-browser:latest

Run Command

docker run -d \
  -p 3000:3000/tcp \
  -p 3001:3001/tcp \
  -e PUID=${PUID} \
  -e PGID=${PGID} \
  -e TZ=${TZ} \
  -e LOCAL_NET=${LOCAL_NET} \
  -v /srv/lsio/mullvad-browser/config:/config \
  --restart=unless-stopped \
  linuxserver/mullvad-browser:latest

Compose File

version: 3.8
services:
  mullvad-browser:
    image: "linuxserver/mullvad-browser:latest"
    ports:
      - "3000:3000/tcp"
      - "3001:3001/tcp"
    environment:
      PUID: 1000
      PGID: 1000
      TZ: Etc/UTC
      LOCAL_NET: 192.168.0.0/16
    volumes:
      - "/srv/lsio/mullvad-browser/config:/config"
    restart: unless-stopped

Environment Variables

  • Var Name Default
  • PUID 1000
  • PGID 1000
  • TZ Etc/UTC
  • LOCAL_NET 192.168.0.0/16

Port List

  • 3000:3000/tcp
  • 3001:3001/tcp

Volume Mounting

  • /srv/lsio/mullvad-browser/config /config

Mullvad Reviews

More Virtual Private Networks

  •
    Azire

    Azire

     azirevpn.com

    Azire is a Swedish VPN provider, who owns their own hardware with physically removed storage and a no logging policy. Pricing starts at €3.25/mo, with crypto (including XMR) supported. Note that they've not yet been audited, and client applications are not open source, for more info, see #140.

    Not Open Source
    View Azire Report
  • IVPN

    IVPN

     ivpn.net

    Independently Security Audited VPN with anonymous signup, no logs, no cloud or customer data stored, open-source apps and website. Strong ethics: no trackers, no false promises, no surveillance ads. Accepts various payment methods including cryptocurrencies.

    Security Audited Open Source ivpn/desktop-app
    View IVPN Report
  • OVPN

    OVPN

     ovpn.com

    A court-proven VPN service with support for Wireguard and OpenVPN support, and optional ad-blocking. Running on dedicated hardware, with no hard drives.

    No Security Audit
    View OVPN Report
  • Party VPN

    Party VPN

     partyvpn.com

    Crypto-native VPN with pay-as-you-go pricing. Accepts cryptocurrency only, including Monero. WireGuard and AmneziaWG protocols, no-logs policy, REST API for developers. No subscriptions or credit cards.

    Crypto Payments Accepted No Security Audit
    View Party VPN Report
  • ProtonVPN

    ProtonVPN

     protonvpn.com

    From the creators of ProtonMail, ProtonVPN has a solid reputation. They have a full suite of user-friendly native mobile and desktop apps. ProtonVPN is one of the few "trustworthy" providers that also offer a free plan.

    Security Audited Open Source ProtonVPN/android-app
    View ProtonVPN Report
  • Windscribe

    Windscribe

     windscribe.com

    An audited and court-proven VPN with a free 10GB plan, in-RAM servers, browser extensions and open source WireGuard/IKEv2/OpenVPN clients. Supports split tunneling, customizable DNS blocking, MAC spoofing, decoy traffic and censorship circumvention.

    Security Audited Open Source Windscribe/Desktop-App
    View Windscribe Report
View More...

About the Data: Mullvad

Change History

API

You can access Mullvad's data programmatically via our API. Simply make a GET request to: 

https://api.awesome-privacy.xyz/v1/services/mullvad

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Mullvad

Help your friends compare Virtual Private Networks, and pick privacy-respecting software and services.
Share Mullvad and Awesome Privacy with your network!

View Virtual Private Networks (7)
Next →

Azire