Mullvad VPN Review

Mullvad VPN: What Sets It Apart

Mullvad is the anti-VPN VPN. No email required. No account name. No annual upsell. You get a randomly generated number, pay €5.00 per month, and connect. The company has zero interest in helping you watch foreign Netflix. It exists to make you invisible online.

That philosophy puts Mullvad in a category of one. Every provider claims to prioritize privacy. Mullvad says it builds for it from the architecture up. The company cannot hand over data it says it never collects. Swedish police searched its offices in 2023 and left without taking anything, which Mullvad attributes to keeping no customer data.

This approach earns Mullvad an 83/100 in our review. It ranks among the top providers for security and speed. It also scores poorly for streaming, which limits its appeal for entertainment-focused users. This review covers both sides honestly.

Mullvad VPN Speed and Performance

Mullvad recorded 650 Mbps in the Speed Lab, placing it 7th out of 22 providers ranked. Latency averaged 20 ms. Those numbers put it ahead of most mainstream competitors and behind only the fastest premium services.

WireGuard delivers the best results. WireGuard connections typically retain roughly 85% of base speeds on nearby servers. OpenVPN connections dropped more, losing around 30 to 40% of base throughput. The gap widens on longer routes.

For everyday tasks, Mullvad handles everything comfortably. Video calls, large file downloads and gaming on regional servers all run comfortably. Its server network provides enough geographic coverage for most routing needs.

Long-distance connections tell a slightly different story. Connecting from Europe to servers in Asia or South America typically produces more noticeable speed drops. Providers with larger server networks sometimes route traffic more efficiently across continents. Mullvad’s smaller network means fewer routing options on those long hops.

Mullvad says its servers have run RAM-only since September 2023, so nothing is written to disk and every reboot wipes all data. Mullvad’s relay API flags all 544 active relays as RAM-only, and an audit of two test servers found a memory-only design, but not every production server has been independently verified. Mullvad owns 115 of those relays and rents the other 429 from hosting providers.

Mullvad VPN Security and Privacy

Mullvad operates under Swedish jurisdiction through its parent company Amagicom AB. Sweden sits within the Fourteen Eyes intelligence alliance. Some users view this as a drawback. In practice, jurisdiction matters far less than architecture.

Mullvad’s no-log claim faced a real-world test. In April 2023 Swedish police searched its Gothenburg office under a warrant to seize computers with customer data, following a German request, and left without taking anything or obtaining any customer information. That is a strong real-world signal, though it is not an audit of production servers.

Audits and transparency

Mullvad publishes independent audit reports without requiring a login, including unflattering findings. Four infrastructure audits by three firms (Cure53 in 2020 and 2024, Assured in 2022, Radically Open Security in 2023) found no customer-activity logging on the servers they were given, and X41 audited the apps in 2024. The limit is scope: the audited servers were test or freshly provisioned machines, not production, and none of the audits is continuous.

Open-source apps for desktop and mobile allow anyone to inspect the code. Mullvad runs a coordinated vulnerability disclosure policy but no bug bounty, and we found no warrant canary or periodic transparency report. Few VPN providers publish this many audit reports.

Encryption and protocols

WireGuard serves as the default protocol and suits most users best. It is faster, leaner, and easier to audit than OpenVPN. Mullvad adopted WireGuard before it reached version 1.0, making it one of the earliest commercial implementers.

OpenVPN remains available for users who prefer it. Shadowsocks provides obfuscation for users in censored networks. A SOCKS5 proxy option rounds out the protocol selection.

Unique security features

DAITA (Defence Against AI-based Traffic Analysis) addresses a threat most VPN providers ignore entirely. Even with encryption, traffic analysis can identify users through packet sizes, timing patterns, and volume. DAITA injects random padding and artificial traffic to defeat pattern recognition. Few other VPN providers ship this feature.

Post-quantum cryptography protects WireGuard connections using Kyber-1024 key encapsulation. This defends against harvest-now-decrypt-later attacks, where adversaries collect encrypted traffic today hoping future quantum computers can break it. Mullvad is among the first commercial VPNs to deploy this protection.

Mullvad also supports multihop routing. Traffic passes through two separate VPN servers in different countries before reaching its destination. This makes correlation attacks significantly harder. The kill switch activates by default and cannot be easily bypassed.

Mullvad VPN Streaming and Content Access

Streaming is Mullvad’s weakest category. The provider scores 4/10 in our streaming rating. This is intentional, not accidental. Mullvad does not optimize for streaming and does not market itself as a streaming proxy.

Netflix, Disney+, and BBC iPlayer actively block VPN traffic. Providers that succeed at streaming invest heavily in rotating IP addresses and maintaining accessed server lists. Mullvad does not make that investment. Some servers may work with some platforms at any given time, but reliability is inconsistent.

Mullvad offers no SmartDNS feature. It runs no specialty streaming servers. The company’s position is straightforward: it builds privacy tools, not entertainment access tools.

Users who need reliable streaming access should consider a different provider. Combining Mullvad with a separate SmartDNS service is one workaround, but it adds complexity and cost. If streaming matters to you, Mullvad is the wrong choice.

Mullvad VPN Device Compatibility

Mullvad supports 5 simultaneous device connections. That number falls below the industry average. Several competitors now offer 8 to 10 connections or unlimited devices on a single account.

Supported platforms

Native apps cover Windows, macOS, Linux, Android, and iOS. Mullvad’s Linux support stands out. The Linux app is fully featured, not a stripped-down afterthought. It includes the GUI, kill switch, and DAITA support. Linux users often treat Mullvad as the default recommendation for this reason.

The desktop apps are clean and functional. Settings surface advanced options without overwhelming new users. The Android app mirrors desktop functionality closely. The iOS app covers essentials but historically lags behind other platforms in feature releases.

Mullvad publishes WireGuard configuration files for manual setup. This enables use on routers, NAS devices, and other platforms without native app support. Router-level installation covers an entire household under a single connection slot.

No browser extensions exist. Mullvad does not offer a browser extension because it considers system-wide protection more meaningful than browser-only proxies.

What is missing

Mullvad has no Smart TV app. There is no Fire TV Stick app. No dedicated router app with a management interface exists. Users who want VPN protection on entertainment devices need manual configuration or a router-level setup.

The 5-device limit also means larger households may feel constrained. Router installation solves this but requires technical comfort.

Who Should Use Mullvad VPN

Mullvad is built for users who rank privacy above everything else. Journalists, activists, security researchers, and privacy-conscious professionals find exactly what they need here. The anonymous signup, open-source code, and published infrastructure audits create a trust model few competitors match.

Technical users appreciate Mullvad’s approach. The WireGuard implementation is excellent. DAITA and post-quantum encryption address forward-looking threats. Multihop routing adds layered protection. Linux support is best-in-class.

Mullvad also suits users who dislike subscriptions and upsells. The flat €5.00 per month rate requires no commitment. Pay for one month. Stop anytime. No cancellation process. No retention offers. No dark patterns.

Who should look elsewhere

Users who want streaming access should pick a different provider. Mullvad’s 4/10 streaming score reflects a deliberate choice, not a fixable flaw.

Families needing many simultaneous connections will find the 5-device cap limiting. Users who want a polished smart TV or Fire Stick experience will find no native apps for those platforms.

Complete beginners may prefer a provider with more hand-holding. Mullvad’s account system, while simple, assumes users can manage a random number without password recovery. The apps are straightforward, but the overall experience prioritizes function over friendliness.

Resources for this page

Charts and reference images from our research, free to view and share.

• 

• Mullvad Review: Privacy-First VPN, No Account RequiredPDF · 1.2 MB

Frequently Asked Questions

AllHow it worksSafety & PrivacySpeed & StreamingPricingSetup & Support

How does Mullvad’s no-account signup actually work?

Mullvad skips email and personal registration entirely: you receive a randomly generated account number and pay with card, PayPal, Bitcoin, or even cash by mail. There’s no username or password, only that number. Swedish police searched Mullvad’s offices in 2023 and left without taking anything, which Mullvad attributes to holding no customer data. Cash and Monero keep payment anonymous, but card and PayPal payments leave a payment record.

Is Mullvad safe to use even though Sweden belongs to the Fourteen Eyes alliance?

Yes, because Mullvad’s architecture prevents data collection regardless of jurisdiction. Sweden’s Fourteen Eyes membership matters far less than what the company actually stores, and it stores almost nothing tied to your identity. Independent infrastructure audits by Cure53, Assured and Radically Open Security found no customer-activity logging on the servers they were given, and the reports are published without login, though the audited servers were test machines rather than production.

What actually happened when Swedish police raided Mullvad in 2023?

In April 2023 Swedish police searched Mullvad’s Gothenburg office under a warrant to seize computers with customer data, following a German request, and left without taking anything or obtaining any customer information. That is a real-world signal for Mullvad’s no-log claims, though it is not an audit of production servers. Its parent company, Amagicom AB, operates under Swedish jurisdiction.

What is DAITA, and does Mullvad protect against future quantum computer attacks too?

DAITA (Defence Against AI-based Traffic Analysis) injects random padding and artificial traffic to defeat pattern-recognition attacks that can identify users through packet sizes and timing even under encryption. Few other VPN providers ship this. Mullvad pairs it with post-quantum Kyber-1024 encryption on WireGuard connections, guarding against harvest-now-decrypt-later attacks from future quantum computers.

How does Mullvad perform in real-world speed tests?

Mullvad ranks #7 of 22 in our Speed Lab, aggregated from published third-party tests, ahead of most mainstream competitors. WireGuard, its default protocol, delivers the strongest results. Long-distance routes, like Europe to Asia, see more noticeable slowdowns since Mullvad’s server network is smaller than some rivals’.

Does Mullvad access Netflix, Disney+, or other streaming platforms?

Reliability is inconsistent, and Mullvad scores just 4/10 in our streaming rating by design. It has reportedly worked with BBC iPlayer, 9Now, and Channel 4, but Netflix, Disney+, and Prime Video are often blocked since Mullvad runs no SmartDNS feature or dedicated streaming servers. If reliable streaming matters, pair Mullvad with a separate SmartDNS service or choose a streaming-focused provider instead.

How many devices can I run Mullvad on, and what if I need more?

One Mullvad account covers 5 simultaneous devices across Windows, macOS, Linux, Android, and iOS, below the industry average, and there’s no browser extension since Mullvad prioritizes system-wide protection. There’s also no native smart TV or Fire Stick app. For larger households, installing Mullvad’s WireGuard configuration files on a compatible router covers every device under a single connection slot.

How much does Mullvad cost, and are there discounts for longer plans?

Mullvad has one flat plan starting from €5.00/month with no discount tiers for longer commitments, unlike most competitors that reward multi-year signups. You can pay by card, PayPal, Bitcoin, or even cash by mail, matching its anonymous-signup philosophy. There’s no free trial, but you pay as you go and unused days on a billing period remain refundable.

Does Mullvad offer a money-back guarantee?

Mullvad has no free trial and instead operates on a pay-as-you-go model. Since there’s no long-term contract to break, you simply stop paying whenever you want, and unused days on your current billing period are refundable. This fits the flat €5.00/month pricing with no multi-year lock-in that would otherwise complicate a refund request.

How do I run Mullvad on a smart TV, router, or other device without a native app?

Mullvad has no native app for smart TVs, Fire TV Stick, or dedicated router firmware, but it publishes WireGuard configuration files for manual setup on any compatible router or NAS device. Installing at the router level protects every device on your home network under a single connection slot, which sidesteps the 5-device account limit entirely for whole-household coverage.

What if Mullvad’s kill switch fails or a specific server won’t reach a streaming site?

Mullvad’s kill switch activates by default and is built so it can’t be easily bypassed, so a disconnect blocks traffic rather than exposing your real IP. If a server fails to reach a streaming platform, try a different one, since Mullvad runs no dedicated streaming infrastructure and results vary. Combining it with a separate SmartDNS service is a workaround, though it adds cost and complexity.

What is multihop routing, and does Mullvad support it?

Yes, Mullvad routes traffic through two separate VPN servers in different countries before it reaches its destination, making traffic correlation attacks significantly harder than a single-hop connection. It pairs with obfuscation options like Shadowsocks and a SOCKS5 proxy for censored networks, plus OpenVPN as an alternative to the default WireGuard protocol for added flexibility.