The Mullvad VPN app makes it easy to use WireGuard.
If you prefer to use the WireGuard app or OpenVPN client, download configuration files (requires login).
Here’s why we use and recommend WireGuard.
This mostly happens with third party security and firewall software that blocks WFP from working correctly. The error will often show up in the daemon.log as : [talpid_core::winnet][ERROR] Initiate WFP transaction: The call timed out while waiting to acquire the transaction lock.
This can happen if the Mullvad VPN app can't find the TAP adapter. Solution: close and, re-install the latest Mullvad VPN App. Wait 5 mins (for the connection count to clear) and then try to connect, and see if this solves the issue.
Go into the "Network & Internet settings" > "Change adapter settings" and then right-click the network adapter you use to connect to the internet and select "Properties" then double-click on "Internet Protocol version 4" and set it to "Obtain DNS server address automatically" Please make sure that you are running 2020.2 or later of our Mullvad VPN app.
Our Connection Speed guide lists a variety of possible solutions. You can also read about throttling.
This is a known issue that happens on many sites using Cloudflare. Please follow our SOCKS5 guide to reduce the occurrence of CAPTCHAs, or you can try switching to another server.
We never have sales, but accepted cryptocurrency payments are discounted at 10% due to lower fees and less administration. Visit our pricing page for more info.
You can use your account on up to 5 devices.
Log in to the Account Status page of our website.
Yes, we offer a 30-day money back guarantee, except for cash payments due to anti-money laundering regulations. Read our refund instructions.
If you get a message saying your account has expired, your payment is the problem. If you paid through your PayPal account, log in to PayPal and check the status of the payment. PayPal often changes its mind about transactions, sometimes days after a payment was made, without notification. For cryptocurrency payments, these do not get processed until the transaction has been confirmed. Bank wires can take 1–2 working days to get processed.
To unsubscribe, first log in to the Account Status page of our website. Click on the PayPal Subscription icon and then on the Unsubscribe button.
The directive does not apply to Mullvad because we are not considered an electronics communications service. This is also the case for Sweden's Lagen om elektronisk kommunikation (LEK).
Swedish legislation .
Visit mullvad.net/check to easily check your connection status, or you can visit our website and it will display the server you are connected to at the top of the website.
No, we do not store activity logs of any kind. Please read our privacy policy.
We don't collect or store such information. There is nothing to divulge. See our privacy policy.
With the Mullvad VPN app, all Internet traffic is automatically blocked until either the VPN connection is reestablished or you disconnect from or quit the app. This built-in safety feature ensures that your traffic is not accidentally leaked outside of our secure tunnel.
That's OK. Allow the software to install. The warnings occur either because your device requires admin authorization to install drivers or because some antivirus software gives a false positive on new app releases.
DNS leak protection is always on. There is no option to disable it.
If you are using the Mullvad desktop app, go to the Mullvad app settings by clicking on the gear icon in the top right corner of the app. Then select OpenVPN in the advanced settings and then go to "OpenVPN Settings" and click on TCP. If you are using a mobile phone or tablet then you can use the OpenVPN app instead, see "Other VPN software" in the Mullvad help center menu to the left.
Open the Mullvad app settings, then click on Preferences and turn on "Local network sharing". In some cases you have to use the IP address to connect instead of the hostname. If the device is on a different subnet (IP address range) then add a static route to that in the operating system. In Android this will not work if you have enabled "Block connections without VPN" in the Android network settings.
Yes, inbound port numbers can be seen and managed when you are logged in to our website with your account number. Port forward guide
Because of spam we block TCP port 25. Set your email program to send using SSL/TLS on port 465.
The Mullvad app allows you to choose. Check out our full list of VPN servers and locations.
We provide OpenVPN and WireGuard configuration files for any device that supports them.
You can enable IPv6 communication in the Advanced settings menu.
Yes, because of spam we block port 25. Because of a Microsoft security issue, we also block ports 137, 138, 139, and 445. We reserve the right to block any port or IP address in order to protect ourselves, our customers, and the quality of our service.
Please make sure that your guest VM is using static IP addresses.
TCP: 80, 443, 1401
UDP: 53, 1194, 1195, 1196, 1197, 1300, 1301, 1302, 1303, 1400
(Ports 1400 UDP and 1401 TCP do not have DNS hijacking enabled, which might work better for pfSense users)
Yes, by using the Mullvad command line interface. We also provide OpenVPN and WireGuard configuration files for any device that supports them.
We support Windows 10 and newer, macOS High Sierra (10.15) and newer, and Linux distributions such as Debian 10+, Ubuntu 20.04+, and the two latest Fedora releases. We also provide OpenVPN and WireGuard configuration files for any device that supports them.
Yes, please visit our Invoices guide for more information.
As we are a consumer retailer, we do not offer the option to buy our service without VAT.
Please make sure that you do not have any antivirus or third party firewalls that might be blocking / restricting access for installing the TAP Adapter correctly.
The language is automatically determined based on your computer's language settings.
You can set the environment variable MULLVAD_LOCALE to the language you wish to use of the ones we have available:
If using Linux : MULLVAD_LOCALE=en-US ./mullvad-vpn
If using Windows you set it in: System -> Advanced system settings -> Environment Variables -> and then add a System variable called MULLVAD_LOCALE with the value of en-US for English.
If using macOS from a terminal: MULLVAD_LOCALE=en-US /Applications/Mullvad\ VPN.app/Contents/MacOS/Mullvad\ VPN
Keep in mind that you will need to restart the Mullvad VPN app for it to take effect.
One possible fix is to enable Seamless tunnel and also to have Reconnect on wakeup enabled.
The error message "Fatal error during driver installation : failed to create virtual adapter: error 2" or "Fatal error during driver installation. Failed to identify newly added TAP adapter." when installing the Mullvad VPN app. This is commonly caused by firewall / internet security software, for instance Comodo, please disable them and then try installing the app again.
This is an issue with the Windows TAP drivers, and it is seen more often when using torrents, what you can do is install the older TAP driver version 9.9.2_3 and see if that resolves the issue for you, remember to reconnect after installing it.
Make sure the kernels and kernel headers that you are running match those from when you installed the WireGuard packages. If not, then upgrade them.
Try rebooting to see if the kernel module loads correctly: in a terminal, issue sudo modprobe wireguard && lsmod | grep -i wireguard.
Try installing and compiling the WireGuard source. Distribution packages sometimes don’t set things up correctly.
This can happen if you set a MTU that is lower than 1280 in the WireGuard configuration file, make sure it is not set to lower than 1280 and then try again.
The Mullvad VPN service is operated by Mullvad VPN AB which is a subsidiary of Amagicom AB. Both companies are 100% owned by founders Fredrik Strömberg and Daniel Berntsson.
Yes. By using Bridge mode you will be using the Shadowsocks proxy.
Activate Bridge mode in the app. This will make use of the Shadowsocks proxy.
Here's how to find openvpn.log, openvpn.old.log, daemon.log, and daemon.old.log.
Via the app
You can easily access them via the app by opening Settings > Report a Problem > View app logs.
Via your computer
Windows: C:\ProgramData\Mullvad VPN
macOS: /var/log/mullvad-vpn/
Linux: /var/log/mullvad-vpn/
If you get the error: "Fatal error during driver installation: Failed to enumerate network adapters: SetupDiOpenDevRegKey Failed" Then uninstall the TAP adapter from the system, reboot and then start the Mullvad VPN installation again.
Even when connected to Mullvad, this happens to Firefox users in the U.S. because of the browser’s default settings. To prevent this, open Firefox Options > General > Network settings > Settings, then deselect “Enable DNS over HTTPS.” Once you’ve done that, visit mullvad.net to verify that you’re no longer leaking information.
* Open regedit * Edit Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DeviceInstall\Parameters * Change DeviceInstallDisabled to 0 * Install the Mullvad VPN app * Change the value back to 1
Stand Alone security updates KB4474419 and KB4490628 were released to introduce SHA-2 code sign support. Make sure you install them
Read more: Swedish Covert Surveillance of Data Act.
No, it is not aligned with privacy since it somehow has to be linked to a user
Manage your WireGuard keys on our website (requires login) and remove a WireGuard key that you are not using.
If you use INLINE IPS then try setting it to Legacy mode and see if the performance improves after that.
The app has a built in kill switch that is enabled by default and cannot be disabled. This is to prevent your traffic from leaking outside of the VPN tunnel if your network suddenly stops working or if the tunnel fails for any reason. Mullvad automatically protects your data until your connection is reestablished.
You can verify the location using https://mullvad.net/check . There are a number of different geolocation databases and it can take some time before they get the correct information and for the websites to update to the latest version of it. When connected to Los Angeles or New York some websites show the location as Romania. You can use another city like Chicago instead. When connected to London some websites show the location as Sweden. You can use gb1 or gb6 in London or any of the Manchester servers instead. How: You can select a specific server in the app by using the down-arrow on the right side of the country and city.
The reason we do not provide this is because it would then give users a false sense of which server they should select. We try to ensure that all our servers have lots of capacity both in terms in Network and CPU If there happen to be performance variations on a given server, it is very likely not because of the server itself. It is most often because of internet routing issues. Try switching to another server hosted by a different hosting provider.
Our app is free software and all the source code is GPL-3 licensed. Read more on our open source page. However, the iOS app when distributed on the Apple App Store is licensed under the Apple App Store EULA and not GPL-3.
If you have set it to maximum security, "which will block most applications except web browsing, email, iTunes and VPN." , try reducing it to typical to see if you then can connect. Or use port 53 for WireGuard / OpenVPN to connect.
We offer a sales partnership reseller agreement. Before connecting you with our partnership department we need you to send support@mullvad.net answers to the following questions:
Certain routers block Mullvad's website and API, and calls it "malware". Some routers from Asus and TP-Link include a DNS filter from Trend Micro which blocks Mullvad because using Mullvad will prevent their filter from working. To turn it off follow these instructions. ASUS: Go to AiProtection > Network Protection > turn off "Malicious Sites Blocking". TP-Link: Go to HomeCare or Security > Antivirus > turn off "Malicious Content Filter". Some Verizon Fios routers contain McAfee Home Network Protection which can also block Mullvad. In that case turn off Parental controls.
Except Android (currently) these settings are built in as toggles, if you want to use configuration files, or if you are running Android you can use the following:Click on the gear icon (Settings), then Advanced. Scroll down to Use custom DNS server and enable it to add any of these DNS servers listed in the link below:
https://github.com/mullvad/dns-adblock#custom-dns-entries
Try to turn off and on your Wi-Fi, or unplug and plug in your network cable. Make sure that you have a DNS set after disconnecting Mullvad by doing this: Go to the macOS System Preferences > Network and click on your active connection to the left. Then click on Advanced... and then the DNS tab. Click on the plus to add a new DNS server (for example 1.1.1.1).
This is not possible as each connection is separated. You can only access other computers/devices that use Mullvad over the public Internet using our port forwarding setup.
Mullvad does not collect user data. Mullvad is based in Sweden and none of the Swedish regulations (https://mullvad.net/help/swedish-legislation/) can force VPN providers to secretly collect traffic-related data. We also have no servers, infrastructure or staff in India.
Open the .ovpn file in a text editor and remove the line "tun-ipv6" before you import it.
This can happen when something other than Mullvad is actively updating the DNS. Try to turn Wi-Fi Calling off in the FaceTime app settings and restart the Mac. Uninstall or disable other DNS, networking and ads/website blocking apps.