The Mullvad Blog

Danish banks have implemented significant restrictions on how Danish kroner (DKK) used outside Denmark can be repatriated back into Denmark. Read more

We evaluated the impact of the latest TunnelVision attack (CVE-2024-3661) and have found it to be very similar to TunnelCrack LocalNet (CVE-2023-36672 and CVE-2023-35838). Read more

Even if you have encrypted your traffic with a VPN (or the Tor Network), advanced traffic analysis is a growing threat against your privacy. Therefore, we now introduce DAITA. Read more

In order to avoid fees when paying with Stripe (credit cards) and Paypal we now support the following currencies: Read more

We were recently made aware of multiple potential DNS leaks on Android. They stem from bugs in Android itself, and only affect certain apps. Read more

Our free Encrypted DNS service has been expanded include another blocking combination: family-friendly content blocking. Read more

Our support emails are now moving to self-hosted and Mullvad-owned hardware. Read more

In order to avoid fees when paying with Paypal, we now support payment in EUR, USD, GBP, SEK, AUD, and CAD. Read more

Vulnerabilities in some implementations of Kyber, the quantum-resistant key encapsulation mechanism, were recently disclosed. Mullvad’s quantum-resistant tunnels are not affected by this vulnerability, nor any vulnerability of the same kind. Read more