The Mullvad Blog

A security vulnerability in the cryptographic library OpenSSL was just disclosed. OpenVPN clients that use vulnerable versions can be tricked into accepting a man-in-the-middle attacker as a valid VPN server. Read more

Version 50 is now available for download. Read more

The first new server in the USA is up and running. More are on their way. Read more

We now have servers in Canada. For now, we don't have servers in the USA. We just lost two suppliers that do not want to relay anonymous traffic in the USA. We hope to remedy this soon. Read more

The recently disclosed vulnerability in OpenSSL named FREAK can be used to attack OpenVPN clients. We have released a new version of the client with a patch, as well as published a blog post explaining the technical details. Read more

Version 49 is now available for download. It contains a patch against the FREAK vulnerability. Users of our client for Windows and OSX need to upgrade to the new version. Users of our Linux client should get automatically patched through their distribution.Users of plain OpenVPN should download new configuration files and update their OpenVPN client. Read more

[THIS IS AN OLD BLOG FROM 2015-03-05] Read more

Version 48 is now available for download. It primarily solves an issue with Stop DNS leaks on systems with a non-english Windows install. Read more

Version 47 is now available for download. It solves a few DNS leak issues and uses AES-256 as the default encryption cipher. Read more

The default OpenVPN stream cipher in new clients and new configuration files is now AES-256. When encountering certain connection problems the client program will fall back to Blowfish 128. To use nothing but AES, set "cipher = aes256" in Settings -> Advanced. Read more