Using Mullvad VPN in restrictive locations
Mullvad app Connectivity Bridges Windows Linux Android Mobile Installation macOS Desktop iOS Multihop Censorship circumvention
마지막 업데이트:
Some countries use firewalls to block VPNs. They use lists of known VPN server IP addresses and Deep Packet Inspection to find traffic that looks like VPN traffic, and then they block or slow down that traffic.
This guide lists different settings and methods to connect to Mullvad VPN from networks and countries where connecting to a VPN is difficult. This includes countries such as China, Egypt, Iran, Pakistan, Russia, Saudi Arabia, Turkey, Turkmenistan, United Arab Emirates and Uzbekistan.
What this guide covers
- Connecting from Russia or China etc.
- - Using Multihop to exit in your preferred location
- Logging in to the Mullvad VPN app
- - Testing the API connection
- - Using WireGuard
- Creating a Mullvad account
- Adding time to your Mullvad account
- Downloading the Mullvad VPN app
- Obfuscation methods
- - WireGuard Obfuscation
- - OpenVPN Bridge mode (Shadowsocks)
- - DAITA
- - Other bridges and obfuscation methods
Connecting from Russia or China etc.
Russia
The blocking of VPN servers have recently been increased in Russia. Server IP Overrides are no longer working for many users. You can try to use the Amnezia VPN client with our WireGuard configuration files. In Amnezia: Click on "File with connection settings" to import the WireGuard configuration file. Make sure to enable the WireGuard obfuscation option. Then click on Connect.
The Mullvad VPN app for iOS was removed from the App Store in Russia due to regulations and in-app purchases no longer work in Russia (for users who already have the app).
China
One way to circumvent the VPN blocking is to use VPN servers which the great firewall of China is not aware of, like newly added servers. Try to connect to different cities and servers in the USA. If you need help to find a server that works then e-mail support@mullvadvpn.net.
If you have a problem to log in to the Mullvad VPN app then open the Mullvad app settings and go to "API Access". Then go to "Encrypted DNS proxy" and turn it off. Go back and test so "Mullvad Bridges" is working. Then log in.
Using Obfuscation
You can enable Shadowsocks or UDP-over-TCP obfuscation in the Mullvad VPN app settings. However note that this can affect the VPN speed negatively, especially with servers that are far away from your real location.
Shadowsocks: Port 443
Go to the Mullvad app settings > VPN settings > WireGuard settings and set Obfuscation to Shadowsocks. Then click on the arrow icon (iOS: three dots) on the right side of "Shadowsocks" and set the port to Custom: 443.
If you use the Mullvad VPN app for iOS then the location list will show you only the servers that support this port when you enable it. If you use the Mullvad VPN app on another platform then most servers will say "No servers match your settings, try changing servers or other settings" if you try to connect to a server which does not support Shadowsocks on port 443.
Using Multihop to exit in your preferred location
If you are not able to connect directly the location that you want to, then you can enable Multihop in the Mullvad VPN app settings. Then click on Switch location and select an Entry server that you are able to connect to, and select an Exit server anywhere you want.
Logging in to the Mullvad VPN app
If you seem to be unable to log in to the Mullvad VPN app, then try to log in repeatedly many times. The app will then try to use different servers to connect to the API.
If you are using a phone then you can also try it both on Wi-Fi and using mobile data.
Read the next step to test the API connection.
Testing the API connection
You can test the API connection by going to the Mullvad VPN app settings > API access. Then click on all the round buttons with three dots inside and select Test a couple of times. If it works then it should say "API reachable" for a moment. If it says "unreachable" several times then you can try to turn off that method.
Using WireGuard
If the Mullvad API is unreachable as tested above, then you can try to use the WireGuard app instead.
| Platform | Source | Guide |
|---|---|---|
| iOS | App Store | WireGuard on iOS |
| Android | Play Store | WireGuard on Android |
| Windows | WireGuard website | WireGuard on Windows |
| macOS | macOS App Store | WireGuard on macOS |
| Linux | Repository | WireGuard on Linux |
Creating a Mullvad account
You can create a Mullvad account in one of the following ways:
- On our website.
- In the Mullvad VPN app.
- On our website using the onion address in Tor browser.
Adding time to your Mullvad account
You can add time to a Mullvad account in one of the following ways:
- On our website using different payment methods.
- In the Mullvad iOS app with an Apple in-app purchase.
- In the Mullvad Android app with a Google in-app purchase.
- On our website using the onion address in Tor browser (limited to crypto and cash payments).
Downloading the Mullvad VPN app
You can download the Mullvad VPN app in one of the following ways:
- On our website.
- On our Github page (see details below).
- (Android only) on Google Play or using the F-Droid app or website.
Downloading from Github
Go to GitHub and click on Assets to download the app for your operating system: Windows (exe), macOS (pkg), Ubuntu/Debian (deb), Fedora (rpm) or Android (apk). If you download the Android app here then you have to remember to update it manually in the future as the app won't notify you.
Obfuscation methods
You can try to enable the following Obfuscation methods.
WireGuard Obfuscation - Shadowsocks and UDP-over-TCP
- Go to the Mullvad VPN app settings by clicking on the gear icon in the top right corner of the app.
- Windows/macOS/Linux:
Click on VPN settings and select WireGuard as the tunnel protocol.
Click on WireGuard settings and under Obfuscation and select Shadowsocks or UDP-over-TCP. - iOS/Android:
Tap on VPN settings > WireGuard obfuscation and select Shadowsocks or UDP-over-TCP.
OpenVPN Bridge mode (Shadowsocks)
This is available in the Mullvad VPN app for Windows/macOS/Linux.
- Go to the Mullvad VPN app settings by clicking on the gear icon in the top right corner of the app.
- Then click on VPN settings and select OpenVPN as the tunnel protocol.
- Click on OpenVPN Settings and set Transport protocol to Automatic, then set Bridge mode to On.
- Close the settings and click on Switch location. Click on Entry in the top and select a bridge server close to your location for better speeds, then select an Exit server. Try different bridge servers if it doesn't connect.
DAITA
DAITA modifies the traffic pattern and packet sizes to make traffic analysis harder. While it's not designed as an obfuscation method you can see if it helps to enable it in the Mullvad VPN app settings. However note that it can use a lot of extra Internet traffic, so avoid using it on mobile data connections.
Other bridges and obfuscation methods
If the settings above don't help then you can read the following guides: