select navigate esc close

The Mullvad Blog

npub1l5stusn8rtqj67sg952e0xf06p9vwgjra3fh05yqzz0tjahhvlqs5ul2fy@drss.io

Keep up to date on developments at Mullvad. New versions of our client, security updates, job posts - find it all here.

Donation controversy

20 Jul 2026

We would like to address the recent controversy about one of the owners of Mullvad making a donation to a Swedish political party. It was a private donation from Daniel the individual. Mullvad or

Age verification for social media – the beginning of the end for a free internet?

1 Jun 2026

**So-called age verification for social media is spreading across the world, framed as an effort to create a safer internet for children. In reality, age verification lays the foundation for a fully

2026 security assessment of our Android app

1 Jun 2026

Our Android app has for the second time passed MASA, a standardized security assessment, conducted by [Leviathan Security Group](https://www.leviathansecurity.com/). Following [last year’s

Exit IP fingerprinting between VPN servers

20 May 2026

On Friday the 15th of May, we [became aware](https://tmctmt.com/posts/mullvad-exit-ips-as-a-fingerprinting-vector/) of a fingerprinting issue affecting Mullvad users. When a user switches from one

Any app on recent Android versions can leak certain traffic

12 May 2026

A recently discovered bug in Android 16 allows any app to leak traffic outside the VPN tunnel. As reported in the post [The Tiny UDP Cannon: An Android VPN

Force all app traffic into the tunnel

21 Apr 2026

**Update: After releasing an update of the app, we observed that automatic updates *do work*. However, the update still leaves the device without any internet access and a reboot is still required to

Mullvad Browser Alpha moves to Firefox Rapid Release and adds Linux ARM support

26 Mar 2026

Starting with 16.0a1 alpha release, Mullvad Browser Alpha is based on the Firefox Rapid Release channel rather than the Extended Support Release (ESR). The alpha release is now available on Linux

A security audit of GotaTun is now available

6 Mar 2026

In December we wrote about our new WireGuard implementation [GotaTun](/blog/announcing-gotatun-the-future-of-wireguard-at-mullvad-vpn), which is currently used in our Android app. An independent

Addition of new supported currencies

3 Feb 2026

As a way to improve the options our users have for payments and transaction fees, we have added new currencies when paying with a credit card! It is now possible to pay using more local currencies

New security audit of account and payment services

21 Jan 2026

Late last year X41 D‑Sec GmbH performed a white‑box source‑code audit of the Mullvad payment and account API and its supporting backend services. The engagement covered the parts of the

Mullvad Review of 2025

30 Dec 2025

2025 has been a year of campaigns, audits and improvements to our suite of obfuscation methods. Here we highlight what we think you should be aware of from this year as it comes to an end. ###

Announcing GotaTun, the future of WireGuard at Mullvad VPN

19 Dec 2025

[GotaTun](https://github.com/mullvad/gotatun) is a WireGuard® implementation written in Rust aimed at being fast, efficient and reliable. GotaTun is a fork of the

Final reminder for OpenVPN removal

15 Dec 2025

This is the final reminder that we are **fully removing support for OpenVPN on January 15th 2026**, in a month's time. This means we will no longer have any OpenVPN servers in a month.  We blogged

Removing OpenVPN from the Mullvad VPN app

10 Dec 2025

In version [**2025.14**](https://github.com/mullvad/mullvadvpn-app/releases/tag/2025.14) of the desktop app, we removed the ability to select OpenVPN as a tunnel protocol. We

An important victory – but we still need to stop Chat Control.

26 Nov 2025

**An important victory - but we still need to stop Chat Control.** The Council of Ministers in the EU has, after three years, now reached a common position on Chat Control. The requirement for

Mullvad VPN presents And Then?

14 Nov 2025

Chat Control is back on the menu. To highlight the corruption behind the proposal, Mullvad VPN now presents "And Then?" **Update: On November 26, 2025 the EU Council, after three years, agreed on a

Introducing Lightweight WireGuard Obfuscation

12 Nov 2025

We are now adding Lightweight WireGuard Obfuscation (LWO), aimed at helping users bypass firewalls and censorship. This new obfuscation method is now available on all desktop platforms and Android.

Shutting down our search proxy Leta

6 Nov 2025

On November 27, 2025, we will shut down our search proxy, Leta. Leta's primary benefit was that it acted as a privacy proxy for search. Pooling and caching requests on behalf of a great number of

Independent security audit of our web app completed by Assured

23 Oct 2025

Assured completed an independent security assessment of our web app. The assessment found no critical, high, or medium-severity issues. One low-severity input validation weakness was identified and

QUIC Obfuscation now available on Android and iOS

20 Oct 2025

We are pleased to announce that our latest obfuscation feature, QUIC, aimed at helping users bypass firewalls and censorship, is now available on Android and iOS. Our QUIC obfuscation tunnels