Jump to content

Mullvad

From Wikipedia, the free encyclopedia
(Redirected from Mullvad VPN)

Mullvad VPN
Desktop client
DeveloperMullvad VPN AB[1]
TypeVirtual private network
Launch dateMarch 2009; 15 years ago (2009-03)
Current version2025.3[2] / 7 February 2025; 1 day ago (7 February 2025)
Platform(s)Android, iOS, Linux, macOS, Windows (official app)
Websitemullvad.net Edit this at Wikidata

Mullvad is a commercial VPN service based in Sweden. The name "Mullvad" is the word for "mole" in the Swedish language. Mullvad operates using the WireGuard and OpenVPN protocols. It also supports Shadowsocks as a bridge protocol for censorship circumvention. Mullvad's VPN client software is publicly available under the GPLv3, a free and open-source software license.[3][4][5]

History

[edit]

Mullvad was launched in March of 2009 by Amagicom AB,[6] and it had begun by supporting connections via the OpenVPN protocol in 2009.[7] Mullvad was an early adopter and supporter of the WireGuard protocol, announcing the availability of the new VPN protocol in March 2017[8] and making a "generous donation" supporting WireGuard development between July and December 2017.[9]

In September of 2018, the cybersecurity firm Cure53 performed a penetration test on Mullvad's macOS, Windows, and Linux applications.[10] Seven issues were found which were addressed by Mullvad.[11] Cure53 tested only the applications and supporting functions. No assessment was made on the Mullvad server-side and back end. [10]

In October of 2019, Mullvad partnered with Mozilla.[12] Mozilla's VPN service, Mozilla VPN, utilizes Mullvad's WireGuard servers.[13][14]

In April of 2020, Mullvad partnered with Malwarebytes and provided WireGuard servers for their VPN service, Malwarebytes Privacy.[15]

In May of 2022, Mullvad started officially accepting Monero.[16]

On the 18th of April, 2023, Mullvad's head office in Gothenburg was visited by officers from the National Operations Department of the Swedish Police Authority who had a search warrant to seize computers being used by Mullvad containing customer data. Mullvad demonstrated that in accordance with their policies, no such data existed on their systems. After consulting with the prosecutor, the officers left without seizing any equipment or obtaining customer information. Mullvad had released a public statement in relation to this information in a blog post on their website two days later, also mentioning that it was their first time that their offices had been searched by authorities.[17] In a letter sent to Mullvad nine days after the search, the Swedish Police Authority stated that they had conducted the search at the request of Germany for an ongoing investigation. The investigation involved a blackmail attack that targeted several institutions in the state of Mecklenburg-Western Pomerania which revealed IP addresses that were traced back to Mullvad's VPN service.[18]

On the 29th of May, 2023, Mullvad announced that they would be removing support for port-forwarding, effective on the 1st of July, 2023. This was done due to the use of port forwarding for illegal activities, with this causing interference by law enforcement, Mullvad IP addresses getting blacklisted, and hosting providers canceling their services.[19]

Service

[edit]

A TechRadar review noted in 2019 that "Mullvad's core service is powerful, up-to-date, and absolutely stuffed with high-end technologies".[3] Complementing its use of the open-source OpenVPN and WireGuard protocols, Mullvad includes "industrial strength" encryption (employing AES-256 GCM methodology), 4096-bit RSA certificates with SHA-512 for server authentication, perfect forward secrecy, multiple layers of DNS leak protection, IPv6 leak-protection, and multiple "stealth options" to help bypass government or corporate VPN blocking.[3]

Mullvad provides VPN client applications for computers running the Windows, macOS and Linux operating systems. As of April 2020, native iOS and Android Mullvad VPN clients using the WireGuard protocol are available. iOS and Android mobile operating system users can also configure and use built-in VPN clients or the OpenVPN or WireGuard apps to access Mullvad's service.[20]

Privacy

[edit]

Providing personal information used to identify users such as email addresses and phone numbers is not required during Mullvad's registration process. Instead, a unique 16-digit account number is anonymously generated for each newly registered user, and this account number is used to log in to the Mullvad on other devices.[21]

For anonymity purposes, Mullvad accepts the anonymous payment methods of cash and Monero (payment for the service can also be made via bank wire-transfer, credit card, Bitcoin, Bitcoin Cash, PayPal, Swish, EPS Transfer, Bancontact, iDEAL, Przelewy24, and vouchers sold by multiple resellers.[3][22][23] Payments made via cryptocurrency have a 10% discount.[24] In June 2022, the service announced that it will no longer offer new recurring subscriptions, as this would further reduce the amount of personal information that will have to be stored.[25]

Mullvad does not log VPN users' IP addresses, the VPN IP address used, browsing-activity, bandwidth, connections, session duration, timestamps, and DNS-requests.[3][21]

Mullvad has many privacy-focused features built into their VPN. Instances include multi-hop, which routes all traffic through an additional Mullvad server before it arrives at its destination,[26] the ability to add a quantum-resistant key exchange to the encryption process, making all data encrypted resistant to quantum computer related attacks,[27] and Defense against AI-guided Traffic Analysis (DAITA), which ensures all packets are the same size and also inserts random network traffic (significantly increasing bandwidth usage), though this is only enabled on select servers.[28]

Mullvad has been actively campaigning against the EU's Regulation to Prevent and Combat Child Sexual Abuse (a.k.a Chat Control), which would require service providers to scan all users' online communications, even encrypted services, arguing that it would make all methods of online communication viewable and thus not private and not anonymous.[29][30]

Reception

[edit]

While Mullvad has been noted for "taking a strong approach to privacy and maintaining good connection speeds", the VPN client setup and interface has been noted as being more onerous and technical than most other VPN providers especially on some client platforms.[31] However, a follow-up review by the same source in October 2018 notes, "Mullvad has a much improved, modern Windows client (and one for Mac, too)". A PC World review, also from October 2018, concludes, "With its commitment to privacy, anonymity (as close as you can realistically get online), and performance Mullvad remains our top recommendation for a VPN service".[20]

In November of 2018, TechRadar noted Mullvad VPN as one of five VPN providers to answer a set of questions for trustworthiness verification posed by the Center for Democracy and Technology.[32][33] In March 2019, a TechRadar review noted slightly substandard speeds.[22] However, a more recent and more thorough TechRadar review published on the 11th of June, 2019 stated that Mullvad VPN "speeds are excellent".[3] This is also supported by a 2024 CNET review that demonstrated 13.5% speed loss in spring 2024 tests.[34] While the latter review notes a shortcoming for mobile users in that Mullvad had not provided mobile VPN client apps,[3] Mullvad apps for both Android and iOS are now available.

The non-profit Freedom of the Press Foundation, in their "Choosing a VPN" guide, lists Mullvad amongst the five VPNs that meet their recommended settings and features for VPN use as a tool for anonymizing online activity.[35]

Other products

[edit]
Mullvad Browser
Developer(s)Mullvad VPN and Tor Project
Stable release
14.0.5[36] Edit this on Wikidata / 5 February 2025; 3 days ago (5 February 2025)
Repositorygithub.com/mullvad/mullvad-browser
EngineGecko
Operating system
LicenseMozilla Public License[37]
Websitemullvad.net/browser

Browser

[edit]

On the 3rd of April, 2023, Mullvad Browser was released, developed by the Tor Project team and distributed by Mullvad. It has similar privacy and security settings levels to Tor Browser, with an exception being that it operates independently of the Tor network and is instead marketed as being better to be used with Mullvad VPN in the place of the Tor network..[38] Mullvad Browser has been programmed to minimize the risk of users being tracked and fingerprinted.[39][40] It attempts to achieve this through several measures:

  • Private mode is enabled by default. This means that cookies are never saved between sessions, nor are visited pages, forms, or search-bar entries.
  • It utilizes Firefox's "resist fingerprinting" feature.
  • First-party isolation is in place, in which cookies are placed in separate cookie jars so that trackers cannot connect to each other to build a profile of its user.
  • No collection of telemetry data.[41]

Search-Engine

[edit]

On 20 June 2023 Mullvad announced their search-engine Mullvad Leta. Mullvad Leta uses the Google Search API as a proxy and caches each search. The service is only accessible to devices that have Mullvad VPN turned on.[42] When a user inputs a web query, the service checks if it has a cache of the search, which can be up to 30 days old, before making a call to the Google search API.[43]

Public DNS

[edit]

Mullvad also offers public DNS servers that offer DNS over HTTPS, DNS over TLS, and various content-blocking filters.[44]

See also

[edit]

References

[edit]
  1. ^ "Doing the corporate shuffle (Updated)". Mullvad VPN. 3 February 2020. Retrieved 5 February 2020.
  2. ^ "Release 2025.3 · mullvad/mullvadvpn-app". Retrieved 8 February 2025.
  3. ^ a b c d e f g Williams, Mike (11 June 2019). "Mullvad VPN review". TechRadar.com. Archived from the original on 13 June 2019. Retrieved 7 December 2019.
  4. ^ Newman, Lily Hay (3 April 2023). "Tor Project's New Privacy-Focused Browser Lets You Layer a VPN". Wired. Retrieved 23 December 2023.
  5. ^ "mullvadvpn-app/LICENSE.md at main · mullvad/mullvadvpn-app". Mullvad – via GitHub.
  6. ^ "What is privacy?". Mullvad VPN. Archived from the original on 6 December 2019. Retrieved 7 December 2019.
  7. ^ "Services". Archived from the original on 25 September 2009.
  8. ^ "Test WireGuard with Mullvad". Mullvad. 27 June 2019. Retrieved 27 June 2019.
  9. ^ "Donations". WireGuard.com. Silver company donors. Archived from the original on 24 June 2019. Retrieved 24 June 2019.
  10. ^ a b https://cure53.de/pentest-report_mullvad_v2.pdf [bare URL PDF]
  11. ^ "Read results of security audit on Mullvad app - Blog". Mullvad VPN. 24 September 2018.
  12. ^ "Partnerships and Resellers". Mullvad. Archived from the original on 4 December 2019.
  13. ^ "We test Mozilla's new Wireguard-based $5/mo VPN service". Ars Technica. 22 July 2020. Retrieved 18 December 2021.
  14. ^ "Firefox Private Network". Mozilla Foundation. Archived from the original on 4 December 2019.
  15. ^ Labs, Malwarebytes (23 April 2020). "Introducing Malwarebytes Privacy". Malwarebytes Labs. Retrieved 29 September 2020.
  16. ^ "We now accept Monero - Blog". Mullvad VPN. 3 May 2022. Retrieved 5 May 2022.
  17. ^ "Mullvad VPN was subject to a search warrant. Customer data not compromised". Mullvad VPN. 20 April 2023. Archived from the original on 17 June 2023.
  18. ^ "Update: The Swedish authorities answered our protocol request". Mullvad VPN. 2 May 2023. Archived from the original on 26 June 2023. Retrieved 29 June 2023.
  19. ^ "Removing the support for forwarded ports". Mullvad VPN. 29 May 2023. Archived from the original on 23 June 2023. Retrieved 29 June 2023.
  20. ^ a b "Mullvad 2018 review: A fantastic VPN has a great new look". PC World. 17 October 2018. Archived from the original on 9 December 2019. Retrieved 9 December 2019.
  21. ^ a b "Mullvad review: A VPN that's all about privacy". Macworld.com. 28 August 2019. Archived from the original on 14 September 2019. Retrieved 14 December 2019.
  22. ^ a b Athow, Desire (19 March 2019). "The best Linux VPN 2019". TechRadar.com. Archived from the original on 27 June 2019. Retrieved 27 June 2019.
  23. ^ "Mullvad Partners". Mullvad. Retrieved 26 October 2024.
  24. ^ "Mullvad Pricing". Mullvad. Retrieved 26 October 2024.
  25. ^ Castro, Chiara (22 June 2022). "Mullvad VPN axes recurring subscriptions in the name of privacy". TechRadar.com. Retrieved 22 June 2022.
  26. ^ "Mullvad WireGuard Multihop". Mullvad. Retrieved 17 November 2024.
  27. ^ "Post-Quantum Resistance Mullvad". Mullvad. Retrieved 17 November 2024.
  28. ^ "DAITA Mullvad". Mullvad. Retrieved 17 November 2024.
  29. ^ Nasi, Michele (7 March 2023). "Scansione delle chat degli utenti: l'Europa potrebbe spiare i contenuti personali". IlSoftware.it (in Italian). Retrieved 10 March 2023.
  30. ^ Claburn, Thomas. "German Digital Committee heaps scorn on Chat Control". The Register. Retrieved 20 April 2023.
  31. ^ Paul, Ian (19 June 2017). "Mullvad review: The VPN that doesn't want to get to know you". PC World. Archived from the original on 22 December 2017.
  32. ^ Li, Harold. "Use this checklist to find a VPN you can trust". TechRadar.com. Archived from the original on 3 November 2018. Retrieved 27 June 2019.
  33. ^ "Unedited Answers: Signals of Trustworthy VPNs". Center for Democracy and Technology. 7 March 2019. Archived from the original on 18 April 2019. Retrieved 27 June 2019.
  34. ^ Tomaschek, Attila (29 May 2024). "Mullvad VPN Review 2024: A Budget-Friendly VPN That Pairs Excellent Speeds With Cutting-Edge Privacy". CNET.
  35. ^ "An in-depth guide to choosing a VPN". Freedom of the Press Foundation. 15 February 2022. Retrieved 11 April 2023.
  36. ^ "Release Mullvad Browser 14.0.5 · mullvad/mullvad-browser". Retrieved 5 February 2025.
  37. ^ "Mullvad browser - Privacy-focused browser for Linux, macOS and Windows". GitHub.
  38. ^ "We've Teamed Up With Mullvad VPN to Launch the Mullvad Browser". The Tor Project. 3 April 2023. Retrieved 6 April 2023.
  39. ^ Rudra, Sourav (4 April 2023). "Mullvad VPN and Tor Project Unite to Create a New Browser That Puts Privacy First". It's FOSS. Retrieved 6 April 2023.
  40. ^ Clark, Mitchell (3 April 2023). "The Mullvad browser protects privacy using standard VPNs". The Verge. Retrieved 6 April 2023.
  41. ^ Castro, Chiara (6 April 2023). "Mullvad browser: the privacy of Tor, with the perks of a VPN". TechRadar. Retrieved 4 October 2024.
  42. ^ "Introducing Mullvad Leta: a search engine used in the Mullvad Browser". Mullvad VPN. 20 June 2023. Archived from the original on 29 June 2023. Retrieved 29 June 2023.
  43. ^ "Mullvad Leta FAQ". Mullvad Leta. Archived from the original on 26 June 2023. Retrieved 29 June 2023.
  44. ^ "DNS over HTTPS and DNS over TLS". Mullvad VPN. 6 December 2024. Retrieved 14 December 2024.
[edit]
Retrieved from "http://en.wiki.x.io/w/index.php?title=Mullvad&oldid=1273466790"