Frequently asked questions
These are the most common issues that users have when using Mullvad.
I can't seem to connect to some servers, for instance Sweden or USA when using a Mobile device or a router.
Try using a region with fewer server entries, for instance Sweden - Stockholm instead of Sweden or USA - New York instead of USA.
I can't connect using my iOS device or my Android phone to some or all servers .
Try enabling "Force AES-CBC ciphersuites" on your device, here is how you do that
Android (OpenVPN Connect)
- Open OpenVPN Connect
- Click on Settings
- Select Preferences
- Check (Enable) "Force AES-CBC ciphersuites"
iOS (OpenVPN Connect)
- Open iPhone settings app
- Scroll down to the settings for the application OpenVPN
- Enable the settings “Force AES-CBC ciphersuite”
I use Windows and I can't get connected to any server.
My logfiles contains:
Wed Aug 29 22:01:11 2018 NETSH: C:\WINDOWS\system32\netsh.exe interface
ipv6 set address interface=11 [REDACTED] store=active
Wed Aug 29 22:01:11 2018 ERROR: netsh command failed: returned error code 1
1. Make sure that you have "Internet Protocol version 6" enabled on your Tap adapter.
2. Open regedit and go to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponent check if it is set to "0xFF" if it is, then change it to "0x00" and close regedit.
3. Install the "Re-enable IPv6 on nontunnel interfaces and on IPv6 tunnel interfaces" fix from: https://support.microsoft.com/en-us/help/929852/guidance-for-configuring-ipv6-in-windows-for-advanced-users
I use Windows and I get a lot of connection drops after starting to download or stream content.
This is an issue with the Windows TAP drivers, and it is seen more often when using torrents, what you can do is install the older TAP driver version 9.9.2_3 and see if that resolves the issue for you, remember to reconnect after installing it.
Pinging and using HTTP websites work, but HTTPS websites do not.
If you're using Tunnelblick on macOS
- Open a terminal and issue "ping -i 0.1 -D -g 1300 -G 1500 220.127.116.11" when you are connected to Mullvad.
- Once you see "Message too long", look at the value on the line above and that will be your MTU.
- Take your MTU size from step #2 and subtract 40 from it. Save this number for step 6.
- Extract mullvadconfig.zip to a temporary directory.
- Change directory to the newly extracted one.
- Edit OSX/Mullvad.tblk/mullvad_osx.conf and add "mssfix X" where X is the number from step 3. Save the edited file.
- Import the config file to Tunnelblick.
If you're using OpenVPN on Linux
- Open a terminal and issue "ping -M do -s 1300 -c 1 18.104.22.168" when you are connected to Mullvad
- Increase the size (1300) each time as long as you are receiving replies
- Once you see "Message too long" then look at the size on the previous working reply and that will be your MTU
- Take your MTU size from step #3 and subtract 40 from it. Use this number in the next step.
- Edit /etc/openvpn/mullvad_linux.conf and add "mssfix X" where X is the value from the previous step. Save the edited file and restart the OpenVPN service.
If you're using OpenVPN on Windows
Edit C:\program files\openvpn\config\mullvad_windows.conf.ovpn (or C:\program files (x86)\openvpn\config\mullvad_windows.conf.ovpn and add "mssfix 1332" to it, save and retry.
If it does not work, lower the mssfix number to 1300 and then retry.
iOS Devices get stuck at connecting after unlocking them.
One possible fix is to enable Seamless tunnel and also to have Reconnect on wakeup enabled.
I can't connect using Kali it shows: mkdir: cannot create directory '/etc/resolvconf/run': File exists in the error logs.
- Edit /etc/openvpn/update-resolve-conf
- Add mkdir /run/resolvconf/ add it directly after the header on the first non line that starts without a hash (#) sign.
I have disabled IPv6, either systemwide or on the Tun/TAP interface, and OpenVPN exits out with a fatal error.
Edit the OpenVPN configuration and do the following changes
- Replace proto udp with proto udp4 and proto tcp with proto tcp4
- Add pull-filter ignore "route-ipv6"
- Add pull-filter ignore "ifconfig-ipv6"
Be sure to check that there are no IPv6 leaks if you have IPv6 enabled on other interfaces on that system.
I get the error message "Fatal error during driver installation : failed to create virtual adapter: error 2" or "Fatal error during driver installation. Failed to identify newly added
TAP adapter." when installing the Mulllvad VPN app.
This is commonly caused by firewall / internet security software, for instance comodo, please disable them and then try installing the app again.
I can't connect via WireGuard, I get "Protocol not supported"
- Make sure your running kernel and kernel headers are matching when you installed the WireGuard packages, If they do not, then upgrade them.
- Try rebooting and then see if it will load the kernel module correctly in a terminal by issuing
sudo modprobe wireguard && lsmod | grep -i wireguard
- You might want to give installing and compiling the WireGuard source a try as occasionally packages for dists are not setting up things correctly.