Introducing QUIC Obfuscation for WireGuard

We are excited to add QUIC obfuscation for WireGuard, aimed at helping users bypass firewalls and censorship. This new obfuscation method is now available on all desktop platforms.

Our QUIC obfuscation tunnels WireGuard traffic, making it harder for firewalls to detect and block it. With this update, our app should become more usable in countries and networks where WireGuard traffic and our other obfuscation methods are restricted or blocked.

How to Enable QUIC Obfuscation

To use the new QUIC obfuscation, make sure you have at least version 2025.9 of the desktop Mullvad VPN app. The Android & iOS apps will include QUIC obfuscation in future releases.

With the default settings, the app will automatically try QUIC after a few failed connection attempts. You can configure the app to always use QUIC obfuscation by following the instructions below.

• Go to Settings → VPN Settings → WireGuard Settings → Obfuscation → QUIC.
• Or run the following terminal command:mullvad obfuscation set mode quic

QUIC is a fast and lightweight transport protocol based on UDP. It is aimed at replacing the traditional use of TCP in HTTP/2, and is being adopted rapidly as the web transitions to HTTP/3.

What we call QUIC obfuscation builds on the MASQUE protocol described by RFC 9298 - Proxying UDP in HTTP. As the title of the RFC implies, QUIC obfuscation works by tunneling UDP through an HTTP server acting as a proxy. For a censor looking at the traffic being sent between a client and server, the traffic will appear as web traffic. HTTP is generally not blocked by state-level censors, since much of the internet would be unreachable without it.

This update brings yet more resilience on top of the fast & secure WireGuard VPN protocol. We hope this feature enhances your experience, especially in restrictive networks. Give it a try, and see if it works for you, we would love to hear your feedback!