The Mullvad VPN app makes it easy to use WireGuard.
If you prefer to use the WireGuard app download configuration files (requires login).
Here’s why we use and recommend WireGuard.
This mostly happens with third party security and firewall software that blocks WFP from working correctly. The error will often show up in the daemon.log as : [talpid_core::winnet][ERROR] Initiate WFP transaction: The call timed out while waiting to acquire the transaction lock.
This can happen if the Mullvad VPN app can't find the TAP adapter. Solution: close and, re-install the latest Mullvad VPN App. Wait 5 mins (for the connection count to clear) and then try to connect, and see if this solves the issue.
Go into the "Network & Internet settings" > "Change adapter settings" and then right-click the network adapter you use to connect to the internet and select "Properties" then double-click on "Internet Protocol version 4" and set it to "Obtain DNS server address automatically" Please make sure that you are running 2020.2 or later of our Mullvad VPN app.
Our Connection Speed guide lists a variety of possible solutions. You can also read about throttling.
This is a known issue that happens on many sites using Cloudflare. Please follow our SOCKS5 guide to reduce the occurrence of CAPTCHAs, or you can try switching to another server.
We never have sales, but accepted cryptocurrency payments are discounted at 10% due to lower fees and less administration. Visit our pricing page for more info.
You can use your account on up to 5 devices.
Log in to the Account Status page of our website.
Yes, we offer a 30-day money back guarantee, except for cash payments due to anti-money laundering regulations. Read our refund instructions.
If you get a message saying your account has expired, your payment is the problem. If you paid through your PayPal account, log in to PayPal and check the status of the payment. PayPal often changes its mind about transactions, sometimes days after a payment was made, without notification. For cryptocurrency payments, these do not get processed until the transaction has been confirmed. Bank wires can take 1–2 working days to get processed.
To unsubscribe, first log in to the Account Status page of our website. Click on the PayPal Subscription icon and then on the Unsubscribe button.
The directive does not apply to Mullvad because we are not considered an electronics communications service. This is also the case for Sweden's Lagen om elektronisk kommunikation (LEK).
Swedish legislation .
Visit mullvad.net/check to easily check your connection status, or you can visit our website and it will display the server you are connected to at the top of the website.
No, we do not store activity logs of any kind. Please read our privacy policy.
We don't collect or store such information. There is nothing to divulge. See our privacy policy.
With the Mullvad VPN app, all Internet traffic is automatically blocked until either the VPN connection is reestablished or you disconnect from or quit the app. This built-in safety feature ensures that your traffic is not accidentally leaked outside of our secure tunnel.
That's OK. Allow the software to install. The warnings occur either because your device requires admin authorization to install drivers or because some antivirus software gives a false positive on new app releases.
DNS leak protection is always on. There is no option to disable it.
If you are using the Mullvad desktop app, go to the Mullvad app settings by clicking on the gear icon in the top right corner of the app. Then select OpenVPN in the advanced settings and then go to "OpenVPN Settings" and click on TCP. If you are using a mobile phone or tablet then you can use the OpenVPN app instead, see "Other VPN software" in the Mullvad help center menu to the left.
Open the Mullvad app settings, then click on Preferences and turn on "Local network sharing". In some cases you have to use the IP address to connect instead of the hostname. If the device is on a different subnet (IP address range) then add a static route to that in the operating system. In Android this will not work if you have enabled "Block connections without VPN" in the Android network settings.
No, adding new ports has been disabled as of May 29th 2023. Existing ports will be deleted July 1st 2023.
Because of spam we block TCP port 25. Set your email program to send using SSL/TLS on port 465.
The Mullvad app allows you to choose. Check out our full list of VPN servers and locations.
We provide OpenVPN and WireGuard configuration files for any device that supports them.
You can enable IPv6 communication in the Advanced settings menu.
Yes, because of spam we block port 25. Because of a Microsoft security issue, we also block ports 137, 138, 139, and 445. We reserve the right to block any port or IP address in order to protect ourselves, our customers, and the quality of our service.
Please make sure that your guest VM is using static IP addresses.
TCP: 80, 443, 1401
UDP: 53, 1194, 1195, 1196, 1197, 1300, 1301, 1302, 1303, 1400
(Ports 1400 UDP and 1401 TCP do not have DNS hijacking enabled, which might work better for pfSense users)
Yes, by using the Mullvad command line interface. We also provide OpenVPN and WireGuard configuration files for any device that supports them.
We support Windows 10 and newer, macOS 11+ and newer, and Linux distributions such as Debian 10+, Ubuntu 20.04+, and the two latest Fedora releases. We also provide OpenVPN and WireGuard configuration files for any device that supports them.
Yes, please visit our Invoices guide for more information.
As we are a consumer retailer, we do not offer the option to buy our service without VAT.
Please make sure that you do not have any antivirus or third party firewalls that might be blocking / restricting access for installing the TAP Adapter correctly.
The language is automatically determined based on your computer's language settings.
You can set the environment variable MULLVAD_LOCALE to the language you wish to use of the ones we have available:
If using Linux : MULLVAD_LOCALE=en-US ./mullvad-vpn
If using Windows you set it in: System -> Advanced system settings -> Environment Variables -> and then add a System variable called MULLVAD_LOCALE with the value of en-US for English.
If using macOS from a terminal: MULLVAD_LOCALE=en-US /Applications/Mullvad\ VPN.app/Contents/MacOS/Mullvad\ VPN
Keep in mind that you will need to restart the Mullvad VPN app for it to take effect.
One possible fix is to enable Seamless tunnel and also to have Reconnect on wakeup enabled.
The error message "Fatal error during driver installation : failed to create virtual adapter: error 2" or "Fatal error during driver installation. Failed to identify newly added TAP adapter." when installing the Mullvad VPN app. This is commonly caused by firewall / internet security software, for instance Comodo, please disable them and then try installing the app again.
This is an issue with the Windows TAP drivers, and it is seen more often when using torrents, what you can do is install the older TAP driver version 9.9.2_3 and see if that resolves the issue for you, remember to reconnect after installing it.
Make sure the kernels and kernel headers that you are running match those from when you installed the WireGuard packages. If not, then upgrade them.
Try rebooting to see if the kernel module loads correctly: in a terminal, issue sudo modprobe wireguard && lsmod | grep -i wireguard.
Try installing and compiling the WireGuard source. Distribution packages sometimes don’t set things up correctly.
This can happen if you set a MTU that is lower than 1280 in the WireGuard configuration file, make sure it is not set to lower than 1280 and then try again.
The Mullvad VPN service is operated by Mullvad VPN AB which is a subsidiary of Amagicom AB. Both companies are 100% owned by founders Fredrik Strömberg and Daniel Berntsson.
In the Mullvad app: Click on the Cogwheel -> VPN settings -> WireGuard settings -> Enable multihop .
Yes. By using Bridge mode you will be using the Shadowsocks proxy.
Activate Bridge mode in the app. This will make use of the Shadowsocks proxy.
Here's how to find openvpn.log, openvpn.old.log, daemon.log, and daemon.old.log.
Via the app
You can easily access them via the app by opening Settings > Report a Problem > View app logs.
Via your computer
Windows: C:\ProgramData\Mullvad VPN
macOS: /var/log/mullvad-vpn/
Linux: /var/log/mullvad-vpn/
If you get the error: "Fatal error during driver installation: Failed to enumerate network adapters: SetupDiOpenDevRegKey Failed" Then uninstall the TAP adapter from the system, reboot and then start the Mullvad VPN installation again.
Even when connected to Mullvad, this happens to Firefox users in the U.S. because of the browser’s default settings. To prevent this, open Firefox Options > General > Network settings > Settings, then deselect “Enable DNS over HTTPS.” Once you’ve done that, visit mullvad.net to verify that you’re no longer leaking information.
* Open regedit * Edit Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DeviceInstall\Parameters * Change DeviceInstallDisabled to 0 * Install the Mullvad VPN app * Change the value back to 1
Stand Alone security updates KB4474419 and KB4490628 were released to introduce SHA-2 code sign support. Make sure you install them
Read more: Swedish Covert Surveillance of Data Act.
No, it is not aligned with privacy since it somehow has to be linked to a user
If you use INLINE IPS then try setting it to Legacy mode and see if the performance improves after that.
The app has a built in kill switch that is enabled by default and cannot be disabled. This is to prevent your traffic from leaking outside of the VPN tunnel if your network suddenly stops working or if the tunnel fails for any reason. Mullvad automatically protects your data until your connection is reestablished.
You can verify the location using https://mullvad.net/check . There are a number of different geolocation databases and it can take some time before they get the correct information and for the websites to update to the latest version of it. When connected to Los Angeles or New York some websites show the location as Romania. You can use another city like Chicago instead. When connected to London some websites show the location as Sweden. You can use gb1 or gb6 in London or any of the Manchester servers instead. How: You can select a specific server in the app by using the down-arrow on the right side of the country and city.
The reason we do not provide this is because it would then give users a false sense of which server they should select. We try to ensure that all our servers have lots of capacity both in terms in Network and CPU If there happen to be performance variations on a given server, it is very likely not because of the server itself. It is most often because of internet routing issues. Try switching to another server hosted by a different hosting provider.
Our app is free software and all the source code is GPL-3 licensed. Read more on our open source page. However, the iOS app when distributed on the Apple App Store is licensed under the Apple App Store EULA and not GPL-3.
If you have set it to maximum security, "which will block most applications except web browsing, email, iTunes and VPN." , try reducing it to typical to see if you then can connect. Or use port 53 for WireGuard / OpenVPN to connect.
We offer a sales partnership reseller agreement. Before connecting you with our partnership department we need you to send support@mullvad.net answers to the following questions:
Certain routers block Mullvad's website and API, and calls it "malware". Some routers from Asus and TP-Link include a DNS filter from Trend Micro which blocks Mullvad because using Mullvad will prevent their filter from working. To turn it off follow these instructions. ASUS: Go to AiProtection > Network Protection > turn off "Malicious Sites Blocking". TP-Link: Go to HomeCare or Security > Antivirus > turn off "Malicious Content Filter". Some Verizon Fios routers contain McAfee Home Network Protection which can also block Mullvad. In that case turn off Parental controls.
Except Android (currently) these settings are built in as toggles, if you want to use configuration files, or if you are running Android you can use the following:Click on the gear icon (Settings), then Advanced. Scroll down to Use custom DNS server and enable it to add any of these DNS servers listed in the link below:
https://github.com/mullvad/dns-adblock#custom-dns-entries
Try to turn off and on your Wi-Fi, or unplug and plug in your network cable. Make sure that you have a DNS set after disconnecting Mullvad by doing this: Go to the macOS System Preferences > Network and click on your active connection to the left. Then click on Advanced... and then the DNS tab. Click on the plus to add a new DNS server (for example 1.1.1.1).
This is not possible as each connection is separated.
Mullvad does not collect user data. Mullvad is based in Sweden and none of the Swedish regulations (https://mullvad.net/help/swedish-legislation/) can force VPN providers to secretly collect traffic-related data. We also have no servers, infrastructure or staff in India.
Open the .ovpn file in a text editor and remove the line "tun-ipv6" before you import it.
This can happen when something other than Mullvad is actively updating the DNS. Try to turn Wi-Fi Calling off in the FaceTime app settings and restart the Mac. Uninstall or disable other DNS, networking and ads/website blocking apps.
Move the Mullvad installation program to the Downloads folder, and then start it again.
Open the System Settings app and go to General > Login items. Under "Allow in the Background" you should find Amagicom. Make sure that is enabled. If it doesn't help then open the Terminal app and run this command: sudo launchctl load /Library/LaunchDaemons/net.mullvad.daemon.plist If it asks for a password then use your Mac login password.
This is a bug in Spotify that is discussed in the Spotify forum. It should work if you add the songs to a playlist first. This applies also when using Split tunneling.
Restart the computer and then install the Mullvad app again. If it doesn't help then try to temporarily uninstall your anti-virus program first, and then re-install it after having installed the Mullvad app again.
Try to restart the computer. If it doesn't help then reinstall the Mullvad app.
You can find the device name in the Mullvad app settings > Account. You can find the device name for the WireGuard key if you log in to our website here: https://mullvad.net/account/devices
No this is not possible. Check if the app has a normal Windows installer or if you can use it in a web browser instead.
We cannot add more devices to an account. You would have to get a second account or install Mullvad on a router with an OpenVPN or WireGuard client to use it with all the devices in the local network.
Do not delete it. The mullvad-exclusion group is required for coming features. If you delete it then the Mullvad service daemon won't be able to start and you can't use the Mullvad app.
No, you don’t have to be a Mullvad VPN user to run the Mullvad Browser. But we highly recommend that you use a trustworthy VPN in combination with the browser.
Yes, but if you don’t use a trustworthy VPN in combination with the Mullvad Browser your IP address won’t be masked. To avoid data collectors and mass monitors to identify you thanks to your IP address (and hide your traffic from your ISP) – use a trustworthy VPN together with the Mullvad Browser.
Yes, here are the full list of requests Mullvad Browser makes by default:
The difference is the network used to access the internet. Tor Browser connects to the internet through the Tor Network. The Mullvad Browser is instead designed to be used with a VPN.
Because it's controlled by Google.
We focus on privacy first. Too many features could make it possible to identify you through fingerprinting.
Yes, but that is something we don’t recommend. Extensions could make it possible to identify you through fingerprinting.
We don’t earn any money from the Mullvad Browser. Our income comes from our VPN service. The Mullvad Browser is a complement to our VPN service.
It’s called letterboxing, a function to combat fingerprinting (using your browser window size to identify you together with other measures).
It’s not possible. It’s an action to combat tracking.
- Right click on the menu icon
- Select “Customize Toolbar”
- Drag the NoScript icon to the place of your choice
- Click on “Done” at the bottom right of the browser
While NoScript & uBlock Origin are extensions, they are integral part of the defense against browser fingerprinting in Mullvad Browser. NoScript is used for the Security Level feature. uBlock Origin is used to block third party trackers.
A VPN extension makes it possible to use the VPN only for the browser. It's very easy to click a link that will make your traffic go outside of the VPN tunnel. This is why we don't propose this: it's much safer to encrypt all your device traffic, to make sure there's no unintentional leak.
It won't change your browser fingerprint, it's safe to remove it.
- Right click on the menu icon
- Select “Bookmarks Toolbar”
- Select “Always Show”
The blur happens because of canvas fingerprinting protection.
A canvas element has its dimensions specified in “content space” (in CSS pixels) and to render it properly, the website will ask the browser for the devicePixelRatio property, which indicates how many of the screen's actual pixels should be used to draw a single CSS pixel.
When Mullvad Browser spoof the devicePixelRatio property, the canvas based elements can be rendered blurry if your screen's actual devicePixelRatio does not match the spoofed value.
Though we don't recommend installing third-party extensions, you can try checking the extension is allowed to run in Private Browsing Mode:
- In the menu, click on “Addons and Themes”
- Click on the extension
- Make sure for “Run in Private Windows”, “Allow” is selected
If the extension is still not working, please contact the extension developer as we're not able to private support for third party extensions.
Known issue: as Firefox Sync is entirely deactivated, extensions will not successfully save data by using the "storage.sync" mechanism.
To fix this, in the Mullvad app, please enable IPv6 found in "Settings" -> "VPN Settings" -> "Enable IPv6" or disable IPv6 on the network interface using the command "networksetup -setv6off Ethernet" or "networksetup -setv6off Wi-Fi" if using Wi-Fi .
Try this when callers can't hear you. Fritz!Box > Telephony -> Own numbers -> Connection settings Activate x Use a random port for the FRITZ!Box's SIP service to the SIP registrar.
Delete the Mullvad app and install it again from the App Store. To delete an app you have to press and hold your finger on it and then select "Remove App" or "Delete App".