The Mullvad Blog

A newly discovered leak in Android allows any app to send traffic outside the VPN tunnel.

Mullvad has operated public encrypted DNS (DoH) servers since 2022.

We’ve updated the Multihop feature with different modes, to make it more flexible and easier to use.

We would like to address the recent controversy about one of the owners of Mullvad making a donation to a Swedish political party.

So-called age verification for social media is spreading across the world, framed as an effort to create a safer internet for children.

Our Android app has for the second time passed MASA, a standardized security assessment, conducted by Leviathan Security Group.

On Friday the 15th of May, we became aware of a fingerprinting issue affecting Mullvad users.

A recently discovered bug in Android 16 allows any app to leak traffic outside the VPN tunnel.

Update: After releasing an update of the app, we observed that automatic updates do work.

Starting with 16.0a1 alpha release, Mullvad Browser Alpha is based on the Firefox Rapid Release channel rather than the Extended Support Release (ESR).

In December we wrote about our new WireGuard implementation GotaTun, which is currently used in our Android app.

As a way to improve the options our users have for payments and transaction fees, we have added new currencies when paying with a credit card!

Late last year X41 D‑Sec GmbH performed a white‑box source‑code audit of the Mullvad payment and account API and its supporting backend services.

2025 has been a year of campaigns, audits and improvements to our suite of obfuscation methods.

GotaTun is a WireGuard® implementation written in Rust aimed at being fast, efficient and reliable.

This is the final reminder that we are fully removing support for OpenVPN on January 15th 2026, in a month's time.

In version 2025.14 of the desktop app, we removed the ability to select OpenVPN as a tunnel protocol.

An important victory - but we still need to stop Chat Control.

Chat Control is back on the menu.

We are now adding Lightweight WireGuard Obfuscation (LWO), aimed at helping users bypass firewalls and censorship.