Features

We want to ensure a high degree of privacy for our users. To do so, Mullvad uses a variety of technologies and methods.

Stay secure on public WiFi

Connecting to WiFi at a cafe, hotel, airport, or any other open network means you are at risk for being hacked or tracked. Protect your web browsing with Mullvad in which traffic to and from your computer is encrypted to the highest standards.

Anonymous account

A Mullvad account can be created without supplying any personal information – not even an email address. We keep no activity logs and encourage anonymous payments with Bitcoin or cash. Communicate privately with us by using our public PGP key for encrypted email.

Privacy

Stay secure on public WiFi

Connecting to WiFi at a cafe, hotel, airport, or any other open network means you are at risk for being hacked or tracked. Protect your web browsing with Mullvad in which traffic to and from your computer is encrypted to the highest standards.

Protect against mass surveillance

Worried about your online activity being scrutinized? Mullvad protects your internet traffic from eavesdropping.

Keep your privacy

Your IP address is hidden and replaced by one of ours, ensuring that your activity and location are not linked to you.

Anonymous account

A Mullvad account can be created without supplying any personal information – not even an email address. We keep no activity logs and encourage anonymous payments with Bitcoin or cash. Communicate privately with us by using our public PGP key for encrypted email.

Keeping you safe during disconnections

With Mullvad, all Internet traffic is blocked upon VPN connection failure. This ensures your real IP address from accidentally being revealed while the Mullvad client automatically attempts to reconnect. This kill functionality is an option available in settings "block the Internet on connection failure".

No logging and no tracking on our homepage

We don't log traffic on our website and refrain from sending usage statistics to external parties. Our website uses only two cookies: one that keeps you logged in to your account and one that remembers your language preference.

Censorship

Fight censorship

Use Mullvad to get past restrictive firewalls and proxies. Connected to one of our servers, you are free to surf the entire web.

Mitigate blocking and throttling

Internet providers will sometimes completely block or purposefully slow down (throttle) traffic types which they don't want to provide full or any support for.

We try to mitigate this by wrapping the traffic in a layer of obfuscation (with the help of obfsproxy) that makes it harder for the provider to identify and block it.

Support

Worldwide distribution of servers

The closer a server is physically located to you, the faster your VPN connection will be. We currently have servers located in USA, United Kingdom, Germany, France, Singapore, Sweden and more. Our VPN server guide lists all available countries, including each location's server address.

Supported on multiple platforms

Mullvad can be used on Windows, Mac OS X, Linux, iOS, Android, and most other devices supporting OpenVPN.

Technical

We control our servers

For maximum security, we use physical, bare metal servers (no virtual servers) that are administrated and either owned or rented by us in carefully selected data centers. Our rented servers are not shared with other clients. We put a lot of effort into hardening servers and following best practices.

We have our own client

We have developed an open source VPN client that works for Windows, Linux, and Mac.

Our servers use OpenVPN

The use of OpenVPN means that we offer only secure protocols. OpenVPN is the most widely used solution for creating secure, point-to-point connections. It's even open source and has been extensively tested for security purposes.

Port forwarding available

We offer the ability to open ports in order to forward incoming traffic to your device.

We live and breathe security

We set really high security standards for ourselves. From the operating system on our computers (Qubes) to the tools we use daily, we strive to ensure that our entire workflow is really hard to exploit. We do this in part by using open source software in our infrastructure.

Details

  • IPv6 is supported and can be blocked. We provide IPv6 leak protection and IPv6 tunneling.
  • Mullvad supports TCP port 443.
  • Mullvad does not support SSL Tunnel or SSH Tunnel and it has no proprietary protocols.
  • Mullvad supports DNS and IPv6 leak protection, as well as IPv6 tunneling.
  • We do not block authenticated SMTP.
  • We do not block P2P.
  • We block spam (unauthenticated SMTP is blocked).
  • Our data encryption is AES-256 (with fallback to BF-128 under special conditions).
  • Re-keying is performed every 60 minutes.
  • Handshake encryption is RSA-2048.
  • SSL Cert A+, SSL Cert self issued.
  • Mullvad meets the privacy tools IO criteria.