Using BitTorrent more securely

CONNECTIVITY

Last updated: 3 November 2020


Use the BitTorrent protocol more securely by following these steps.

We only provide instructions for the qBittorrent client. Others like µTorrent, Vuze, and BitComet are not open source, contain adware or junkware, or aren't equipped with good privacy settings.

Keep in mind that if you switch between WireGuard and OpenVPN you will need to re-bind the network interface and restart qBittorrent, also if you use SOCKS5 then you will need to change the IP-address depending on if you use WireGuard or OpenVPN.

qBittorrent in Windows

If you use OpenVPN instead of the Mullvad VPN app then to make things easier in Windows, you can rename the TAP interface.

  1. Open the Windows Control Panel.
  2. Click on Network and Sharing Center.
  3. Click on Change adapter settings.
  4. On the adapter that contains "TAP-Windows Adapter V9" in its name, right click on it, select Rename, and enter Mullvad.
  5. Proceed with the steps below

If you are using the Mullvad VPN app, or have already renamed the TAP adapter

  1. Open qBittorrent.
  2. Click on Tools.
  3. Click on Options.
  4. Click on Advanced.
  5. Change Network Interface to Mullvad if you use OpenVPN or wg-mullvad if you use WireGuard.
  6. Click on OK and restart qBittorrent.
  7. Continue with the steps in the next section.

qBittorrent in Linux binding an interface

  1. Go to tools -> Preferences.
  2. Click on Advanced.
  3. Use the drop down menu for Network interface and set it to use one of the following depending on the app and protocol:

    Mullvad app:
    - OpenVPN: tun0
    - WireGuard kernel: wg-mullvad
    - WireGuard userspace: tun0

    WireGuard standalone: mlvd-xx
    OpenVPN standalone: tun0
     
  4. Restart qbittorrent.

qBittorrent users in Linux, macOS, and Windows

  1. Click on Tools.
  2. Click on Options.
  3. Click on BitTorrent.
  4. Check Enable anonymous mode.
  5. Uncheck (disable) Enable DHT.
  6. Uncheck (disable) Enable PeX.
  7. Uncheck (disable) Enable Local peer discovery.
  8. Click on Connection.
  9. For Enabled Protocol, use the drop-down menu to select TCP.

Mullvad app settings

If you use the Mullvad desktop app then go to Settings > Advanced and enable "Always require VPN". This will block your Internet if you disconnect it by mistake.

Check for leaks

Go to the Mullvad Connection check page and click on the Torrent check tab. Click on the UDP and HTTP buttons to launch the tests. Note that this test does not work if you use SOCKS5 in the Bittorrent client.

Port forwarding

Read our Port forwarding guide if you want to set up a port forward to the Bittorrent client. This should improve your seeding. Add the port in qBittorrent > Connection > "Port used for incoming connections". Note that this does not work with SOCKS5 enabled.

FAQ
 

When I have enabled the SOCKS5 proxy with qBittorrent, why is the torrent shown as offline?

The SOCKS5 protocol does not support port forwarding, so if you use trackerless torrents, you might need to have DHT enabled. Otherwise, you might need to disable the SOCKS5 proxy.