The Mullvad VPN app makes it easy to use WireGuard.
If you prefer to use the WireGuard app or OpenVPN client, download configuration files (requires login).
Here’s why we use and recommend WireGuard.
This mostly happens with third party security and firewall software that blocks WFP from working correctly. The error will often show up in the daemon.log as : [talpid_core::winnet][ERROR] Initiate WFP transaction: The call timed out while waiting to acquire the transaction lock.
Please make sure you are running Linux kernel version 4.8.0 or newer. Check in a terminal with "uname -a".
If it is below 4.8.0 you can upgrade with "sudo apt-get install linux-generic-hwe-16.04"
After that reboot, and then try connecting with the app again.
This can happen if the Mullvad VPN app can't find the TAP adapter. Solution: close and, re-install the latest Mullvad VPN App. Wait 5 mins (for the connection count to clear) and then try to connect, and see if this solves the issue.
Go into the "Network & Internet settings" > "Change adapter settings" and then right-click the network adapter you use to connect to the internet and select "Properties" then double-click on "Internet Protocol version 4" and set it to "Obtain DNS server address automatically" Please make sure that you are running 2020.2 or later of our Mullvad VPN app.
Our Connection Speed guide lists a variety of possible solutions. You can also read about throttling.
This is a known issue that happens on many sites using Cloudflare. Please follow our SOCKS5 guide to reduce the occurrence of CAPTCHAs, or you can try switching to another server.
We never have sales, but accepted cryptocurrency payments are discounted at 10% due to lower fees and less administration. Visit our pricing page for more info.
You can use your account on up to 5 devices.
Log in to the Account Status page of our website.
Yes, we offer a 30-day money back guarantee, except for cash payments due to anti-money laundering regulations. Read our refund instructions.
If you get a message saying your account has expired, your payment is the problem. If you paid through your PayPal account, log in to PayPal and check the status of the payment. PayPal often changes its mind about transactions, sometimes days after a payment was made, without notification. For cryptocurrency payments, these do not get processed until the transaction has been confirmed. Bank wires can take 1–2 working days to get processed.
To unsubscribe, first log in to the Account Status page of our website. Click on the PayPal Subscription icon and then on the Unsubscribe button.
The directive does not apply to Mullvad because we are not considered an electronics communications service. This is also the case for Sweden's Lagen om elektronisk kommunikation (LEK).
Swedish legislation .
Visit mullvad.net/check to easily check your connection status, or you can visit our website and it will display the server you are connected to at the top of the website.
Please follow our BitTorrent guide on how to use it more securely.
No, we do not store activity logs of any kind. Please read our privacy policy.
We don't collect or store such information. There is nothing to divulge. See our privacy policy.
With the Mullvad VPN app, all Internet traffic is automatically blocked until either the VPN connection is reestablished or you disconnect from or quit the app. This built-in safety feature ensures that your traffic is not accidentally leaked outside of our secure tunnel.
That's OK. Allow the software to install. The warnings occur either because your device requires admin authorization to install drivers or because some antivirus software gives a false positive on new app releases.
DNS leak protection is always on. There is no option to disable it.
Open the app's Settings, then click on Advanced. Here you can specify TCP.
Open the app's Settings, then click on Preferences and turn on Local Network Sharing.
Yes, inbound port numbers can be seen and managed when you are logged in to our website with your account number. Port forward guide
Because of spam we block TCP port 25. Set your email program to send using SSL/TLS on port 465.
The Mullvad app allows you to choose. Check out our full list of VPN servers and locations.
We provide OpenVPN and WireGuard configuration files for any device that supports them.
You can enable IPv6 communication in the Advanced settings menu.
Yes, because of spam we block port 25. Because of a Microsoft security issue, we also block ports 137, 138, 139, and 445. We reserve the right to block any port or IP address in order to protect ourselves, our customers, and the quality of our service.
Please make sure that your guest VM is using static IP addresses.
TCP: 80, 443, 1401
UDP: 53, 1194, 1195, 1196, 1197, 1300, 1301, 1302, 1303, 1400
(Ports 1400 UDP and 1401 TCP do not have DNS hijacking enabled, which might work better for pfSense users)
Yes, by using the Mullvad command line interface. We also provide OpenVPN and WireGuard configuration files for any device that supports them.
We support Windows 7 and newer, macOS X Yosemite (10.10) and newer, and Linux distributions such as Debian, Ubuntu, and Fedora running kernels 4.8.0 or newer. We also provide OpenVPN and WireGuard configuration files for any device that supports them.
Yes, please visit our Invoices guide for more information.
As we are a consumer retailer, we do not offer the option to buy our service without VAT.
Please make sure that you do not have any antivirus or third party firewalls that might be blocking / restricting access for installing the TAP Adapter correctly.
The language is automatically determined based on your computer's language settings.
You can set the environment variable MULLVAD_LOCALE to the language you wish to use of the ones we have available:
If using Linux : MULLVAD_LOCALE=en-US ./mullvad-vpn
If using Windows you set it in: System -> Advanced system settings -> Environment Variables -> and then add a System variable called MULLVAD_LOCALE with the value of en-US for English.
If using macOS from a terminal: MULLVAD_LOCALE=en-US /Applications/Mullvad\ VPN.app/Contents/MacOS/Mullvad\ VPN
Keep in mind that you will need to restart the Mullvad VPN app for it to take effect.
One possible fix is to enable Seamless tunnel and also to have Reconnect on wakeup enabled.
The error message "Fatal error during driver installation : failed to create virtual adapter: error 2" or "Fatal error during driver installation. Failed to identify newly added TAP adapter." when installing the Mullvad VPN app. This is commonly caused by firewall / internet security software, for instance Comodo, please disable them and then try installing the app again.
This is an issue with the Windows TAP drivers, and it is seen more often when using torrents, what you can do is install the older TAP driver version 9.9.2_3 and see if that resolves the issue for you, remember to reconnect after installing it.
Make sure the kernels and kernel headers that you are running match those from when you installed the WireGuard packages. If not, then upgrade them.
Try rebooting to see if the kernel module loads correctly: in a terminal, issue sudo modprobe wireguard && lsmod | grep -i wireguard.
Try installing and compiling the WireGuard source. Distribution packages sometimes don’t set things up correctly.
This can happen if you set a MTU that is lower than 1280 in the WireGuard configuration file, make sure it is not set to lower than 1280 and then try again.
The Mullvad VPN service is operated by Mullvad VPN AB which is a subsidiary of Amagicom AB. Both companies are 100% owned by founders Fredrik Strömberg and Daniel Berntsson.
Yes. By using Bridge mode you will be using the Shadowsocks proxy.
Activate Bridge mode in the app. This will make use of the Shadowsocks proxy.
Here's how to find openvpn.log, openvpn.old.log, daemon.log, and daemon.old.log.
Via the app
You can easily access them via the app by opening Settings > Report a Problem > View app logs.
Via your computer
Windows: C:\ProgramData\Mullvad VPN
macOS: /var/log/mullvad-vpn/
Linux: /var/log/mullvad-vpn/
If you get the error: "Fatal error during driver installation: Failed to enumerate network adapters: SetupDiOpenDevRegKey Failed" Then uninstall the TAP adapter from the system, reboot and then start the Mullvad VPN installation again.
Even when connected to Mullvad, this happens to Firefox users in the U.S. because of the browser’s default settings. To prevent this, open Firefox Options > General > Network settings > Settings, then deselect “Enable DNS over HTTPS.” Once you’ve done that, visit mullvad.net to verify that you’re no longer leaking information.
* Open regedit * Edit Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DeviceInstall\Parameters * Change DeviceInstallDisabled to 0 * Install the Mullvad VPN app * Change the value back to 1
Stand Alone security updates KB4474419 and KB4490628 were released to introduce SHA-2 code sign support. Make sure you install them
Read more: Swedish Covert Surveillance of Data Act.
No, it is not aligned with privacy since it somehow has to be linked to a user
Manage your WireGuard keys on our website (requires login) and remove a WireGuard key that you are not using.
If you use INLINE IPS then try setting it to Legacy mode and see if the performance improves after that.
The app doesn’t have a kill switch setting because the function is built in and can never be disabled. If your network suddenly stops working or if the tunnel fails for any reason, Mullvad automatically protects your traffic from leaking outside of the VPN tunnel until your connection is reestablished.
You can verify the location using https://mullvad.net/check . There are a number of different geolocation databases and it can take some time before they get the correct information and for the websites to update to the latest version of it. When connected to Los Angeles or New York some websites show the location as Romania. You can use another city like Chicago instead. When connected to London some websites show the location as Sweden. You can use gb1 or gb6 in London or any of the Manchester servers instead. How: You can select a specific server in the app by using the down-arrow on the right side of the country and city.
The reason we do not provide this is because it would then give users a false sense of which server they should select. We try to ensure that all our servers have lots of capacity both in terms in Network and CPU If there happen to be performance variations on a given server, it is very likely not because of the server itself. It is most often because of internet routing issues. Try switching to another server hosted by a different hosting provider.
Our app is free software and all the source code is GPL-3 licensed. Read more on our open source page. However, the iOS app when distributed on the Apple App Store is licensed under the Apple App Store EULA and not GPL-3.