Mullvad VPN

Mullvad VPN, established in 2009 and headquartered in Sweden, is a no-logs VPN provider that adopts a unique approach to ensure user safety and security. As an open-source service, it has undergone independent audits multiple times, cementing its reputation for reliability and dedication to protecting user privacy and security. In this comprehensive review, let’s explore how Mullvad VPN sets itself apart from other VPN providers.

Privacy

• Jurisdiction: Mullvad VPN, based in Sweden, aligns with the country’s strong privacy laws. Despite Sweden’s 14 Eyes affiliation, its robust privacy regulations support Mullvad’s strict no-logs policy and commitment to user privacy and security.

• No-Logs Policy: Mullvad VPN adheres to a genuinely strict no-logs VPN policy, a rarity among VPN service providers. According to their website, they explicitly state that they do not log:

We log nothing whatsoever that can be connected to a numbered account’s activity:

• no logging of traffic

• no logging of DNS requests

• no logging of connections, including when one is made, when it disconnects, for how long, or any kind of timestamp

• no logging of IP addresses

• no logging of user bandwidth

• no logging of account activity except total simultaneous connections

Source: https://mullvad.net/en/help/no-logging-data-policy

It’s worth noting that Mullvad VPN does not require your email address during signup, account management, or the payment process. This is a significant plus point for maintaining user privacy.

• Privacy Policy: Mullvad VPN upholds a rigorous Privacy Policy, further emphasizing its dedication to ensuring user privacy and security. This policy is straightforward and free from ambiguity, providing users with clarity and confidence.

• Audits: Mullvad VPN has successfully completed three independent audits, underscoring its unwavering commitment to user safety and privacy. The initial audit, carried out by Cure53 in 2021, was followed by an assessment from Assured in 2022, with the most recent review conducted by ROS in 2023. You can access and review the reports from these audits: the Mullvad VPN Cure53 Audit Report, Mullvad VPN Assured Audit Report, and Mullvad VPN ROS Audit Report, by simply clicking the provided links.

• Multi-Hop: Mullvad VPN supports Multi-Hop, a feature that routes your internet traffic through multiple servers in different locations. This offers enhanced privacy and security by making it significantly harder for anyone to trace your online activities back to you. Multi-Hop adds an extra layer of anonymity, providing an added safeguard for your online privacy. It’s worth noting that, currently, Multi-Hop is available for desktop devices but not for smartphones, which may be seen as a drawback.

Security

• Open-source: Mullvad VPN stands out as an open-source VPN provider, which comes with several noteworthy advantages. Being open-source means that its code is accessible for review and scrutiny by anyone, enhancing transparency and trust.
• Encryption: Mullvad VPN employs AES-256-GCM encryption, a highly secure standard that ensures your data remains confidential and protected during transmission. This strong encryption algorithm provides robust security, making it extremely challenging for unauthorized parties to intercept or decrypt your data, thus safeguarding your online privacy and sensitive information effectively.
• Protocols: Mullvad VPN offers both OpenVPN and WireGuard VPN protocols, providing users with flexibility and choices. OpenVPN is renowned for its adaptability and wide device compatibility, ensuring strong security. Meanwhile, WireGuard is recognized for its speed and modern design, making it an excellent option for faster connections. It’s important to note that you can use the WireGuard protocol on smartphones, but there is no option to switch to the OpenVPN protocol, limiting user control. This omission may be seen as a drawback, as offering the choice between protocols could enhance user experience.
• Perfect Forward Secrecy (PFS): Mullvad VPN’s OpenVPN servers are characterized by robust security measures. They employ 4096-bit RSA certificates for server authentication, use 4096-bit Diffie-Hellman parameters for key exchange, and implement Perfect Forward Secrecy (PFS) through Diffie-Hellman Ephemeral (DHE). The advantage of PFS is that it ensures that even if a potential attacker were to compromise a single session’s encryption key, they wouldn’t be able to decipher previous or future communications. This added layer of security helps protect your data and online privacy effectively.
• Two-Factor Authentication (2FA): Mullvad VPN does not offer two-factor authentication (2FA), and this can be seen as a security limitation. 2FA adds an extra layer of protection to user accounts, and its absence may make the service more susceptible to potential unauthorized access.

Speed and Performance

• Speed Test Results: Mullvad VPN delivers impressive speeds when connected to their servers. For this test, I selected servers in Germany, United States, and United Kingdom and was impressed with both download and upload speeds. You can  the speed results and refer to the table below for the test.

* Tested on 100 Mbps optical fibre connection.

• Connection Stability: In my conducted test, I did not experience any connection drops to the server. Connecting to the server is exceptionally fast on both Windows and smartphone devices, providing excellent connection speeds and reliability.
• Bandwidth Limitations: Mullvad VPN offers unlimited bandwidth with no restrictions, ensuring users can enjoy fast and unrestricted internet access.
• Streaming and P2P Support: I contacted customer support to inquire about their support for popular streaming services. Their response was that they do not guarantee streaming functionality. In my testing, Amazon Prime detected the VPN, so you might be disappointed if your streaming service doesn’t load geo-restricted content. Support also confirmed that they do not block P2P traffic, allowing you to enjoy its benefits.
• DNS Leak Test: Mullvad VPN does not exhibit any DNS leaks when connected to their VPN servers. I conducted comprehensive testing on bash.ws, dnsleaktest.org, and dnsleaktest.com, and no DNS leaks were detected.

Server Network Coverage

• Number Of Server Locations: Mullvad VPN boasts a network of servers that spans 39 countries and 69 cities. While offering strong privacy, the service has servers in only a limited number of countries. This can be a disadvantage for users seeking servers in a wider range of locations for various purposes such as unblocking content or optimizing speed.
• Total Number Of Servers: Mullvad VPN maintains a server network consisting of 637 servers. Of these, 167 are owned by Mullvad, affording them complete control over these servers, while an additional 430 servers are rented, contributing to a diverse and extensive server network that benefits user accessibility and performance.
• RAM-only Servers: Mullvad VPN relies on 100% RAM-only servers, a security practice that ensures no user data is stored on hard drives. This enhances privacy by minimizing the risk of data retention. Additionally, it results in faster and more efficient server performance, delivering a secure and swift VPN experience for users.
• Obfuscated Servers: Mullvad VPN provides effective obfuscation via its Bridge Mode feature. This feature utilizes Shadowsocks, an open-source encrypted proxy, to conceal your VPN traffic, making it harder for your internet service provider (ISP) and other third parties to detect and intercept your online activities.
• Servers Specialized For Streaming and P2P: Mullvad VPN does not offer specialized servers for streaming and P2P (Peer-to-Peer) activities. While Mullvad focuses on providing strong privacy and security, the absence of dedicated streaming servers and P2P-optimized servers can be considered a disadvantage for some users.

User Interface

• Design and Ease of Use: Mullvad VPN features an exceptionally straightforward design for both Windows and smartphone devices. Upon launching the application, you’ll encounter just one option: ‘Secure my connection.’ Clicking on it will establish a connection to one of the VPN servers.
• Connection Status and Information: In the Mullvad VPN application, the only information you’ll find is the server name, VPN IP address, and VPN protocol details, which are visible when you toggle the server name. However, it’s disappointing that important details like connection uptime, data usage per VPN session, and the option to pause the VPN are not provided. It’s worth noting that when using the OpenVPN protocol on Windows, not all servers support it. Therefore, it’s essential to ensure that the selected server supports the protocol before attempting to connect and, if necessary, reconnect to an appropriate server.
• Server Selection and Navigation: The application gives you the option to choose your desired server or search for one directly from the main screen. A convenient feature allows you to switch to different servers within the same country by tapping or clicking the reload icon next to the disconnect button. However, it lacks basic features like connecting to the fastest location, nearest country, or a recently used server. These options could greatly improve user convenience, allowing users to instantly connect to their preferred server without the need for multiple clicks and navigation.
• Customization Option: Mullvad VPN lacks essential on/off customization options on the main screen, such as the ‘Pause VPN’ feature, the ability to switch VPN protocols, and a Kill Switch option within the application. The addition of these customization options could be beneficial for users who prefer to tailor their VPN usage according to their specific needs and preferences.
• Settings and Configuration: Mullvad VPN offers a range of advanced settings for both Windows and smartphone devices, although these settings are more limited in scope. For Windows, you can benefit from the Kill Switch feature, ensuring your data’s security even if the VPN connection drops. You can also choose between the WireGuard and OpenVPN protocols, each offering customization options such as custom port selection and obfuscation for enhanced privacy. WireGuard settings on desktop devices further provide multi-hop functionality. OpenVPN settings allow you to select your transport protocol (TCP/UDP) and include Bridge mode for added security. On smartphones, you can take advantage of WireGuard settings, including obfuscation, custom port selection, and a Kill Switch feature to maintain continuous data security. Both the Windows and smartphone applications feature Quantum-resistant tunnels for robust security and provide a custom DNS server option, giving you the flexibility to use your preferred DNS service. These settings allow users to tailor their VPN to their specific needs and preferences, ensuring a more secure and versatile online experience.

Device Compatibility

Mullvad VPN supports a variety of operating systems, such as Windows, Mac, Linux, iOS, Android, and routers. However, it lacks support for web extensions, smart TVs, gaming consoles, and Chromebooks. This limitation may concern users who require support across multiple devices.

Simultaneous Connections

Mullvad VPN permits up to 5 simultaneous connections, and for some users, this limit might pose a challenge, particularly if they need to connect more devices simultaneously.

Mullvad’s clarification on simultaneous connections logging:

Question: How can you limit the maximum number of simultaneous connections if you’re not logging that information?
Answer: Each VPN server reports to a central service. When a customer connects to a VPN server, the server asks the central service to validate the account number, whether or not the account has any remaining time, if the account has reached its allowed number of connections, and so on. Everything is performed in temporary memory only; none of this information is permanently stored to disk.

Source: https://mullvad.net/en/help/no-logging-data-policy/

Pricing

• Subscription plans: Mullvad VPN offers a straightforward pricing structure: $5.28 per month for both the 1-month and 1-year plans. The pricing remains consistent at $5.28 per month, with no special deals or discounts provided.
• Free Trial: No free version or trial option is available.
• Payment Methods: Mullvad offers several payment options, including credit/debit cards, PayPal, and bank transfers. For enhanced anonymity, it also accepts cryptocurrencies and vouchers. Additionally, Mullvad goes the extra mile by offering the option to pay in cash, which is the most secure method to access the VPN service.
• Money-back guarantee: Mullvad VPN provides 30-day money back guarantee except for cash payments.
• Refund Policy: Mullvad VPN stands out for its swift and hassle-free refund policy. From my personal experience, I requested a refund, and to my delight, it was processed without any questions asked within just a few hours. This level of efficiency makes it easy for users to try out the VPN and its features with confidence. If, for any reason, the service doesn’t meet their expectations, the refund process is seamless and straightforward.

Additional Features

DNS Content Blockers

Mullvad VPN boasts a powerful feature known as the DNS Content Blocker, designed to enhance your online experience. With a simple click, users can effectively block a wide range of unwanted content, including ads, trackers, malware, and domains associated with gambling and adult content. What sets this feature apart is its systemwide ad-blocking capability. It not only eliminates ads on websites accessed via browsers but also extends its reach to ads within various apps. The DNS Content Blocker is robust enough to tackle pop-ups, ads, and trackers on the majority of websites, ensuring a cleaner and more secure browsing experience.

However, it’s important to note that while the DNS Content Blocker is highly effective, the application lacks a statistics feature. This means users can’t track the number of ads and trackers blocked during a VPN session. Additionally, integration with popular third-party filters could have been a valuable addition, further enhancing the flexibility and customization of this feature.

Split Tunnelling

Mullvad VPN offers the convenient feature of split tunnelling, allowing users to control which applications or services use the VPN connection. This feature has the advantage of optimizing your internet traffic. For example, you can choose to route sensitive or privacy-focused applications through the VPN while keeping others, like streaming services or certain apps, outside the VPN tunnel. It provides greater flexibility and performance customization.

However, it’s essential to note a significant disadvantage for Windows and Android smartphone users. While Mullvad VPN offers the exclude feature for specific apps, it lacks the website exclusion feature, which can be vital for a comprehensive VPN experience. With website exclusion, users can specify certain websites to bypass the VPN connection, ensuring seamless access to those sites. This feature is crucial for those who need to switch between VPN-protected and non-protected access for specific websites.

Custom DNS Server

Mullvad VPN has introduced a valuable feature: the Custom DNS Server. This feature empowers users with the flexibility to configure their preferred DNS server of choice, enhancing their VPN experience. The advantages of this feature are numerous. It allows users to have control over their DNS resolution, ensuring faster and more reliable access to websites and services. Custom DNS settings can also offer improved privacy and security, as users can opt for DNS servers with strong privacy measures .One notable advantage is that it can be highly beneficial for users who employ cloud DNS filters. They can add an IPv4 DNS server to their settings, ensuring seamless compatibility with their filtering setup.

It’s worth noting that the Custom DNS Server feature is available on both Windows and smartphone devices, ensuring that users across platforms can take advantage of this enhanced flexibility and control over their DNS settings.

Multi-Hop

Mullvad VPN harnesses the power of Multi-Hop to provide an extra layer of privacy and security to its users. Multi-Hop is a feature that allows your internet traffic to pass through multiple servers in different locations before reaching its destination. This feature comes with several advantages. One key advantage is that Multi-Hop significantly enhances your online anonymity. By routing your connection through multiple servers, it becomes remarkably challenging for anyone to trace your online activities back to you. This added layer of protection offers robust security, ensuring that your online privacy remains intact.

Mullvad VPN takes Multi-Hop a step further with its custom entry and exit selection. This means users have the flexibility to choose any server as the entry point and any other server as the exit point for their Multi-Hop connection. This level of customization is highly appreciated, allowing users to tailor their Multi-Hop configuration to their specific needs.

However, it’s important to note a limitation. Multi-Hop is currently available only for desktop devices like Windows and not for smartphones. This restriction hinders its accessibility, leaving users with fewer choices if they wish to utilize the added security of Multi-Hop on their mobile devices.

Kill Switch

Mullvad VPN offers a Kill Switch feature, a critical component in ensuring user privacy and security. This feature acts as a safeguard, preventing data leaks or exposure in the event of a VPN connection drop. If the VPN connection is interrupted for any reason, the Kill Switch immediately terminates the user’s internet connection, effectively shielding their online activities from prying eyes.

For Windows users, Mullvad VPN goes a step further with an enhanced version of the Kill Switch known as “Lockdown mode.” In Lockdown mode, users must always remain connected to the Mullvad VPN server to access the internet. Even if the user manually disconnects the VPN or exits the application, internet access remains inaccessible. This robust security measure ensures that the user’s online privacy and security are upheld, making it virtually impossible for sensitive information to be exposed or compromised. Lockdown mode provides an additional layer of protection, particularly in situations where maintaining utmost privacy is essential.

Shadowsocks Proxy

Mullvad VPN employs a powerful obfuscation feature called “Bridge mode” when the OpenVPN protocol is enabled. This feature enhances users’ ability to circumvent censorship and ensures an added layer of privacy and security.

Bridge mode essentially routes your internet traffic through a “bridge server” before it reaches the OpenVPN server. This bridge server operates as a Shadowsocks proxy. The advantage of this setup is that it helps to obfuscate your VPN traffic, making it appear as regular HTTPS traffic. By doing so, it becomes significantly more challenging for censors or surveillance entities to identify and block VPN traffic, thereby allowing users to access restricted or censored content.

This additional layer of obfuscation, provided by the bridge mode feature, safeguards user privacy and security effectively. It ensures that even in regions with stringent censorship, users can continue to enjoy the benefits of a VPN without the fear of having their VPN connections identified and restricted. It’s a robust and valuable tool for maintaining online freedom and security. The disadvantage is that, currently, when I tested this on smartphone, this feature cannot be enabled, as smartphones do not support the OpenVPN protocol.

Quantum-Resistant Tunnels

Mullvad VPN has introduced an innovative feature known as “Quantum-Resistant Tunnels” to enhance the security of its service. This feature is designed to protect against the potential threat posed by future quantum computers.

WireGuard, the underlying encryption protocol used by Mullvad VPN, is highly secure and currently has no known vulnerabilities. However, one aspect of its implementation, the establishment of a shared secret for encryption, is theoretically susceptible to attack by a sufficiently powerful quantum computer. Although quantum computers with such capabilities have not been realized yet, Mullvad acknowledges the importance of being proactive in ensuring the long-term security of its users. The implementation of Quantum Resistant Tunnels today serves as a protective measure against potential attackers who may record encrypted traffic with the intention of decrypting it using future quantum computers.

Mullvad’s solution to this challenge involves establishing a WireGuard tunnel and sharing a secret in a way that even a quantum computer, if it had access to the network traffic, would be unable to decipher the secret. After this initial secure exchange, a new WireGuard tunnel is established with a fresh shared secret, using WireGuard’s pre-shared key option. The algorithms employed for post-quantum security in this process are Classic McEliece and Kyber, which are recognized for their robustness against quantum attacks.

In essence, Mullvad VPN’s implementation of Quantum Resistant Tunnels ensures that its users’ data remains secure, even in a potential future where quantum computers could pose a threat to traditional encryption methods. This forward-thinking approach strengthens the service’s commitment to user privacy and security.

Customer Support

• Response Time: I have found that quick responses from its support team ensure that any queries or issues are addressed promptly. This level of responsiveness is reassuring and adds to the overall convenience of using their service.
• Problem Resolution: Issues are consistently resolved in a timely manner with responses arriving within just a few hours. This ensures that users facing technical problems can quickly get the assistance they need.
• Knowledge Base: Mullvad VPN offers a comprehensive guide page that includes in-depth articles for setting up and configuring the VPN. These valuable resources make it easy for users to navigate the setup process and customize their VPN experience according to their preferences.
• Contact Options: Mullvad VPN provides a single option for contacting support, which is via email. However, it does not include a chat feature. Having a chat feature can offer the advantage of real-time assistance, allowing users to get immediate responses to their queries or issues. This can be especially beneficial for resolving urgent matters or troubleshooting technical problems swiftly.
• Availability: Mullvad VPN’s website does not provide precise information regarding the availability of their customer support. However, based on their responsiveness, users can generally expect a response to their queries within just a few hours.

Final Verdict

Mullvad VPN presents itself as a robust and privacy-centric solution in the VPN landscape. Its dedication to user privacy and security is evident through its stringent no-logs policy, advanced obfuscation features like the bridge mode, and forward-looking Quantum Resistant Tunnels, ensuring that your online activities remain thoroughly shielded.

However, a few caveats should be noted. Multi-Hop, a feature prized for its added security layer, is available solely for desktop devices. Additionally, the absence of specialized servers for streaming and P2P activities may not cater to all user preferences. A live chat support option and broader device support could further enhance the user experience.

In summary, Mullvad VPN is an appealing choice for discerning users who prioritize their online privacy. It offers simplicity, advanced obfuscation, and responsive support. While some areas could see expansion, the core strengths of Mullvad make it a compelling option for those in search of uncompromising online protection.

Key Features: