Mullvad-bloggen

A recently discovered bug in Android 16 allows any app to leak traffic outside the VPN tunnel. Læs mere

A year ago, we wrote about how bugs in Apple's networking stack are preventing the iOS app from being as secure as possible. The bugs are still there, but we have secured our app anyway. Læs mere

Starting with 16.0a1 alpha release, Mullvad Browser Alpha is based on the Firefox Rapid Release channel rather than the Extended Support Release (ESR). The alpha release is now available on Linux ARM. Læs mere

In December we wrote about our new WireGuard implementation GotaTun, which is currently used in our Android app. An independent audit by Assured Security Consultants is now available. Læs mere

As a way to improve the options our users have for payments and transaction fees, we have added new currencies when paying with a credit card! Læs mere

Late last year X41 D‑Sec GmbH performed a white‑box source‑code audit of the Mullvad payment and account API and its supporting backend services. Læs mere

2025 has been a year of campaigns, audits and improvements to our suite of obfuscation methods. Læs mere

GotaTun is a WireGuard® implementation written in Rust aimed at being fast, efficient and reliable. Læs mere

This is the final reminder that we are fully removing support for OpenVPN on January 15th 2026, in a month's time. Læs mere

In version 2025.14 of the desktop app, we removed the ability to select OpenVPN as a tunnel protocol. Læs mere