Mullvad
mullvad.net/en
Mullvad is one of the best for privacy, they have a totally anonymous sign up process, you don't need to provide any details at all, you can choose to pay anonymously too (with Monero, BTC or cash).
- Homepage:mullvad.net/en
- GitHub:github.com/mullvad/mullvadvpn-app
- Privacy:mullvad.net/en/help/privacy-policy
- iOS App:apps.apple.com/us/app/mullvad-vpn/id1488466513
- Android App:play.google.com/.../net.mullvad.mullvadvpn
- Web info:web-check.xyz/check/mullvad.net
Mullvad Privacy Policy
Privacy Policy Summary
- The terms for this service are easy to read
- You must create an account to use this service
- The service does not guarantee accuracy or reliability of the information provided
- The service provider makes no warranty regarding uninterrupted, timely, secure or error-free service
- The service is provided 'as is' and to be used at your sole risk
- An onion site accessible over Tor is provided
- An anonymous payment method is offered
- No third-party analytics or tracking platforms are used
- Information is provided about what kind of information they collect
- A free help desk is provided
- Third parties are involved in operating the service
- You are responsible for maintaining the security of your account and for the activities on your account
- The court of law governing the terms is in location X
- The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection
- Information is gathered about you through third parties
- You are informed about the risk of publishing personal info online
- The data retention period is kept to the minimum necessary for fulfilling its purposes
- Some personal data may be kept for business interests or legal obligations
- This service gives your personal data to third parties involved in its operation
- Third parties used by the service are bound by confidentiality obligations
- Your personal data will not be used for an automated decision-making
- You can request access, correction and/or deletion of your data
- A complaint mechanism is provided for the handling of personal data
- Inconvenient process for obtaining personal data
- First-party cookies are used
- A list of all cookies set by the website is provided
- The service does not use any third-party advertising services
- The service will resist legal requests for your information where reasonably possible
- You will be notified if personal data has been affected by data breaches
- You can access most of the pages on the service's website without revealing any personal information
- The service explains how to prevent disclosure of personal information to third parties
- You are not being tracked
- IP addresses of website visitors are not tracked
- There is a date of the last update of the agreements
- When the service wants to make a material change to its terms, you are notified at least 30 days in advance
- The service claims to be GDPR compliant for European users
- Only necessary logs are kept by the service to ensure quality
- You can retrieve an archive of your data (under very limited circumstances)
Score
Documents
- Terms of ServiceCreated 09 Aug 18, Last modified 6 months ago
- Privacy PolicyCreated 19 Oct 18, Last modified 6 months ago
- Cookie PolicyCreated 12 Jun 21, Last modified 6 months ago
- Policy on Reviews, Advertising, Influencers, and AffiliatesCreated 31 Mar 26, Last modified 6 months ago
- How We Handle Government Requests for User DataCreated 31 Mar 26, Last modified 6 months ago
- Policy on Disclosure of Security IncidentsCreated 31 Mar 26, Last modified 6 months ago
- No-logging of User Activity PolicyCreated 31 Mar 26, Last modified 6 months ago
Domains Covered by Policy
- mullvad.net
- o54hon2e2vj6c7m3aqqu6uyece65by3vgoxxhlqlsvkmacw6a7m7kiad.onion
About the Data
This data is kindly provided by tosdr.org. Read full report at: #641
Mullvad Source Code
Author
Description
The Mullvad VPN client app for desktop and mobile
Homepage
https://mullvad.net/Repository
- LicenseGPL-3.0
- Created19 Dec 17
- Primary languageRust
- Size316,898 KB
- Stars7,634
- Forks535
- Watchers7,634
Top Contributors
@dlon (4210)
@linus-mullvad (3294)
@raksooo (2752)
@pinkisemils (1926)
@albin-mullvad (1767)
@Rawa (1683)
@markus-mullvad (1669)
@Pururun (1665)
@olmoh (1221)
@tobias-jarvelov (1079)
@buggmagnet (870)
@Serock3 (540)
@mvd-ows (509)
@hulthe (471)
@rablador (386)
@kl (324)
@faern (288)
@acb-mv (245)
@anderklander (139)
@hankolsen (134)
@SteffenErn (106)
@axti (98)
@sabercodic (96)
@mojganii (90)
@Jontified (80)
@niklasberglund (69)
@sajacl (55)
@daneov (43)
@loafey (24)
@pronebird (23)
@MaryamShaghaghi (20)
@AndreasShortcut (10)
@dependabot[bot] (10)
@zorusty (9)
@Ap4sh (9)
@Ch00k (8)
@braydonf (6)
@tarkah (6)
@nchlscs (6)
@maxz (5)
@MrChocolatine (5)
@Rizzly (5)
@lamtrinhdev (4)
@mullmat (3)
@tshepang (3)
@claucambra (3)
@goggle (3)
@evan-a-a (2)
@FriederHannenheim (2)
@jbjorkang (2)
@stephen-huan (2)
@kilavvy (2)
@leopardracer (2)
@cameronaaron (2)
@sm0rux (2)
@Quince-Pie (1)
@Poussinou (1)
@pmkap (1)
@PeterDaveHello (1)
@pavinjosdev (1)
@magnus-lindstrom (1)
@leana8959 (1)
@lbengtsson71 (1)
@rgo3 (1)
@sdht0 (1)
@simonasker (1)
@inventor500 (1)
@meator (1)
@metametapod (1)
@omahs (1)
@shyba (1)
@tinyboxvk (1)
@anoadragon453 (1)
@arunsathiya (1)
@cljoly (1)
@cole-h (1)
@Cubxity (1)
@dbernt (1)
@dpaoliello (1)
@danielparks (1)
@EricFromCanada (1)
@eriklarko (1)
@emsoucy (1)
@kubrickfr (1)
@gabrysh (1)
@g-andrade (1)
@eltociear (1)
@jmrossi98 (1)
@jvff (1)
@jmcantrell (1)
Recent Commits
Merge branch 'change-by-daneov-rwnsyttvrtwx'
Expect the alert to be hittable before tapping The previous implementation tapped as soon as the alert was detected, without checking whether the element was ready to receive that action. Constraining it to `hittable` resolves the end to end tests getting stuck on this specific dialog.
Merge branch 'upgrade-electron-to-44-des-3239'
Reduce initial map from `493` px to `488` px The `493` value is most likely an arbitrary picked one. The `488` value is based on the app window height minus the header app.
Increase initial map height when app window is pinned on Windows The app window size is 8px taller when the app is pinned on Windows, this is an earlier hack we still have to do as otherwise the app window is not the desired height of 568px. However, with a recent upgrade to Electron 44 we noticed the map did not render correctly and a black bar was seen on top of the map canvas. This happened because the height of the initial render does not account for the 8px added to the window size, as the initial render uses a static value of 493px for the map, which does not correctly account for the entire height that the map should be and the problem does not get resolved by subsequent renders where we dynamically adjust the canvas height. Adding an extra 8px to the static value of 493px when the app is pinned on Windows fixes this issue. Relevant comments have been added in the code to clarify the relationship between the map height and the app window height.
Remove extra padding of width for pinned window on Windows This issue is no longer present in Electron 44+.
Update `@types/node` to `24.13.6`
Update `node` to `24.17.0` to match `electron` version
Update `electron` to `44.5.1`
Merge branch 'ignore-billing-client-purchase-state-if-the-api-tells-the-droid-2919'
Ignore unverified purchase from the billing library If we know that we have successfully validated a purchase with the api, we should ignore any status from the billing library indicating that the purchase has not been verified.
Merge branch 'simplify-gotatun-state'
Remove stopped GotaTun state from tunnel implementation
Merge branch 'fix-regression-to-problem-report-collection'
Fix regression to log collection not collection .log files
Merge branch 'add-macos27-vm-e2e-tests'
Add macOS 27 as default test runner
Remove macOS 14 as default test runner
Merge branch 'user-preferences-own-module'
Move user preferences to its own module
Merge branch 'update-rag-plugin-key-and-version'
Update rust android gradle plugin to 0.11.0
Merge branch 'add-plugin-key-to-gradle-lockfile'
Add plugin key to gradle lockfile
Merge branch 'add-production-fdroid-repo-metadata-droid-2739'
Enable fdroid prod in build server script
Clarify dev repo risks in description
Adjust prod config for prod bucket
Clone dev config into new prod config
Set explicit rclone usage Without setting this config new fdroidserver versions will attempt to use s3cmd rather than rclone.
Mullvad Security
Security Advisories (4)
- highPatchedCVSS 7
GHSA-p9rr-wc9m-qmwgManagement interface socket TOCTOU allows unauthorized local access
- mediumPatchedCVSS 6.8
GHSA-wx6c-cjr8-6442Windows reconnect clears VPN routes before Hyper-V blocking is restored can lead to WSL2 traffic leaking off-tunnel
- mediumPatchedCVSS 6.5
GHSA-h72f-j6r4-c3jcRenderer-controlled installer path can lead to arbitrary package launch due to missing main-process binding to verified installer path
- highPatchedCVSS 7.3
CVE-2026-32323CVE-2026-32323: macOS Local Privilege Escalation in Mullvad VPN installer
Mullvad Website
Website
Free the internet with Mullvad Browser
The Mullvad Browser is a privacy-focused web browser developed in collaboration between Mullvad VPN and the Tor Project. It’s produced to minimize tracking and fingerprinting.
Redirects
Redirects to https://mullvad.net/en/browser
Security Checks
All 65 security checks passed
Server Details
- IP Address45.83.223.209
- LocationMalmoe,Skane lan,Sweden,EU
- ISP31173 Services AB
- ASNAS39351
Categories
Some proxies may block this service, as it falls into the following categories
- VPN Provider
Associated Countries
SE
DE
US
CA
Safety Score
Website marked as safe
100%
Trackers
No known trackers found
Blacklist Check
mullvad.net was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Mullvad Android App
APK Info
- AppMullvad VPN
- Creation Date29 Jun 20
- Last Updated18 Jul 24
- Current Version2020.5-beta2
- Privacy ReportView on Exodus →
De-Googled Compatibility
- GrapheneOSNative4.0 / 4(18)
- CalyxOSmicroG4.0 / 4(9)
- LineageOSNative4.0 / 4(5)
- LineageOSmicroG4.0 / 4(3)
- iodeOSmicroG4.0 / 4(3)
- crDroidNative4.0 / 4(2)
Trackers
No trackers found
Permissions
- Access Network State
- Foreground Service
- Internet
Mullvad iOS App
App Info
Mullvad VPN
Free the internet from data collection with Mullvad VPN – a service that helps keep your online activity, identity, and location private. Only €5/month. GET STARTED 1. Install the app. 2. Create an account. 3. Add time to your account via in-app purchases, vouchers or on our website. To make sure to block third-party cookies and other tracking technologies – use Mullvad VPN together with Mullvad Browser (free of charge). ANONYMOUS ACCOUNTS – NO ACTIVITY LOGS * Creating an account requires no personal info - not even an email address. * We keep no activity logs. * We offer the possibility to pay anonymously with cash or cryptocurrency. * Our app uses WireGuard, a superior VPN protocol that connects fast and doesn’t drain your battery. HOW DOES MULLVAD VPN WORK? With Mullvad VPN, your traffic travels through an encrypted tunnel to one of our VPN servers and then onward to the website you are visiting. In this way, websites will only see our server’s identity instead of yours. Same goes for your ISP (internet service provider); they’ll see that you’re connected to Mullvad, but not your activity. It also means that all the third-party actors with technology integrated into the various websites you visit can’t sniff out your IP address and use it to track you from one site to another. Using a trustworthy VPN is a great first step to reclaim your privacy online. In combination with Mullvad Browser you make sure to block third-party cookies and other tracking technologies. FREE THE INTERNET FROM MASS SURVEILLANCE AND DATA COLLECTION A free and open society is a society where people have the right to privacy. That’s why we fight for a free internet. Free from mass surveillance and censorship. Free from big data markets where your personal information is up for sale. Free from authorities mass monitoring every click you make. Free from an infrastructure mapping your whole life. Mullvad VPN and Mullvad Browser is our contribution to the fight. TELEMETRY AND CRASH REPORTS The app collects a very minimal amount of telemetry, and it does not in any way tie it to an account number, IP or other identifiable information. Account numbers are used for authentication. App logs are never sent automatically but are rather explicitly sent by the user. App version checks are performed every 24 hours to tell the app if there are any upgrades available and if the currently running version is still supported.
Rating
Version Info
- Current Version2026.5
- Last Updated08 Sept 26
- First Released08 Apr 20
- Minimum iOS Version17.0
- Device Models Supported130
App Details
- IPA Size55.22 Mb
- PriceFree (USD)
- Age Advisory4+
- Supported Languages21
- DeveloperMullvad VPN AB
- Bundle IDnet.mullvad.MullvadVPN
Screenshots
Mullvad Docker
Container Info
Mullvad-browser
The [Mullvad Browser](https://mullvad.net/en/browser) is a privacy-focused web browser developed in a collaboration between Mullvad VPN and the Tor Project. It’s designed to minimize tracking and fingerprinting. You could say it’s a Tor Browser to use without the Tor Network. Instead, you can use it with a trustworthy VPN.
View on DockerHub
linuxserver/mullvad-browser:latestRun Command
docker run -d \
-p 3000:3000/tcp \
-p 3001:3001/tcp \
-e PUID=${PUID} \
-e PGID=${PGID} \
-e TZ=${TZ} \
-e LOCAL_NET=${LOCAL_NET} \
-v /srv/lsio/mullvad-browser/config:/config \
--restart=unless-stopped \
linuxserver/mullvad-browser:latestCompose File
version: 3.8
services:
mullvad-browser:
image: "linuxserver/mullvad-browser:latest"
ports:
- "3000:3000/tcp"
- "3001:3001/tcp"
environment:
PUID: 1000
PGID: 1000
TZ: Etc/UTC
LOCAL_NET: 192.168.0.0/16
volumes:
- "/srv/lsio/mullvad-browser/config:/config"
restart: unless-stoppedEnvironment Variables
- Var NameDefault
- PUID1000
- PGID1000
- TZEtc/UTC
- LOCAL_NET192.168.0.0/16
Port List
- 3000:3000/tcp
- 3001:3001/tcp
Volume Mounting
- Container PathHost Bind
- /config/srv/lsio/mullvad-browser/config
Mullvad Reviews
More Virtual Private Networks
Azire is a Swedish VPN provider, who owns their own hardware with physically removed storage and a no logging policy. Pricing starts at €3.25/mo, with crypto (including XMR) supported. Note that they've not yet been audited, and client applications are not open source, for more info, see #140.
Not Open SourceIndependently Security Audited VPN with anonymous signup, no logs, no cloud or customer data stored, open-source apps and website. Strong ethics: no trackers, no false promises, no surveillance ads. Accepts various payment methods including cryptocurrencies.
A court-proven VPN service with support for Wireguard and OpenVPN support, and optional ad-blocking. Running on dedicated hardware, with no hard drives.
Crypto-native VPN with pay-as-you-go pricing. Accepts cryptocurrency only, including Monero. WireGuard and AmneziaWG protocols, no-logs policy, REST API for developers. No subscriptions or credit cards.
From the creators of ProtonMail, ProtonVPN has a solid reputation. They have a full suite of user-friendly native mobile and desktop apps. ProtonVPN is one of the few "trustworthy" providers that also offer a free plan.
An audited and court-proven VPN with a free 10GB plan, in-RAM servers, browser extensions and open source WireGuard/IKEv2/OpenVPN clients. Supports split tunneling, customizable DNS blocking, MAC spoofing, decoy traffic and censorship circumvention.
About the Data: Mullvad
Change History
Edit Mullvad Data
You can edit Mullvad's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external
sources, a list of these can be found data documentation.
Origin Data
Modify Data
API
You can access Mullvad's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/mullvadThe REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Mullvad
Help your friends compare Virtual Private Networks, and pick privacy-respecting software and services.
Share Mullvad and Awesome Privacy with your network!