Exit IP Fingerprinting vulnerability found | Patch rollout in progress:

A security researcher found a vulnerability in the way Mullvad servers assign exit IP addresses to user devices, allowing websites to fingerprint the same user accessing them through different servers. Changing servers has been rendered useless for unlinkability purposes. Mullvad has acknowledged the vulnerability in a blog post and is currently patching its servers to mitigate the issue. Here is a list of the servers that have been patched.

Go to events
Verified

Repeated checks over time passed

Mullvad

Mullvad

Mullvad is a VPN service that helps keep your online activity, identity, and location private

Mullvad is a vpn service that accepts Monero, Bitcoin, Lightning, Fiat, and 1 more. It has a guaranteed no-KYC policy and has a score of 9/10. There are 68 user ratings averaging 4.9/5.

Scores

9
Overall
Excellent
100
Privacy
Excellent
77
Trust
Good
lvl. 0/4
Guaranteed no KYC
Terms explicitly state KYC will never be requested.

-12 trust from active incidents. See details

Privacy 100 × 60% + Trust 77 × 40% = Overall 9/10
Learn about scores All attributes list

Terms of Service Review

Mullvad is a Swedish VPN service that uses anonymously generated account numbers instead of emails or passwords. It claims a strict no-logging policy and accepts anonymous payments via cash and crypto.

No Crypto or Cash Refunds

While a 14-day refund is offered for traditional payment methods, refunds are explicitly denied for cash (due to anti-money laundering regulations) and cryptocurrency payments.

Anonymous Accounts

To use the service, you only need a generated Mullvad account number. No personal information, such as names or emails, is required to create an account.

No Activity Logging

The privacy policy explicitly states that the service never stores any activity logs or metadata. Problem reports from the app automatically redact IP addresses and sensitive information.

Minimal Content Filtering

The service does not redirect traffic or filter domains, except when requested by an IP address owner or when known botnet addresses cause server null-routing by hosting providers.

Accounting Data Retention

If you pay via traditional methods (bank wire, credit card, Swish), payment data is kept for up to seven years to comply with the Swedish Accounting Act.

Port Blocking & DNS

Mullvad blocks TCP port 25 to prevent email spam, as well as ports 137, 138, 139, and 445. It also natively hijacks DNS requests (port 53) to prevent DNS leaks.

Reviewed from mullvad.net/en/help/terms-service

ToS reviews are AI-generated and should be used as a reference only.

Security incidents

How trust is affected

Events

View all
  1. Android app passes security assessment

    The Mullvad VPN Android app has successfully passed a security assessment by Leviathan Security Group. The app has updated minor issues in order to more closely align with the Mobile App Profile specification. This is the second year in a row where the app passes the assessment.

    Source
  2. Attribute removed

    Attribute "Account required" was removed from Mullvad

  3. Attribute added

    Attribute "Token-based login" was added to Mullvad

  4. Attribute added

    Attribute "Own infrastructure" was added to Mullvad

  5. Attribute added

    Attribute "P2P / torrenting allowed" was added to Mullvad

  6. Attribute added

    Attribute "Account required" was added to Mullvad

  7. Attribute added

    Attribute "RAM-only infrastructure" was added to Mullvad

  8. KYC update

    KYC level changed from 1 to 0

  9. KYC update

    KYC level changed from 0 to 1

  10. Attribute change

    An attribute was removed (details unavailable)

  11. KYC update

    KYC level changed from 1 to 0

  12. KYC update

    KYC level changed from 0 to 1

  13. Attribute added

    Attribute "Basic Customer Support" was added to Mullvad

  14. Attribute added

    Attribute "Legally Registered Entity" was added to Mullvad

  15. Domain change

    Service URLs updated from https://mullvad.net/ to https://mullvad.net

Learn about events

Evidence and Review History

Verified

Passed repeated checks over time and showed consistent behavior.

  • No review checks have been published yet
  • Last review Apr 25
  • Verified Apr 25
  • Operating since Mar 1, 2009

Comments

About comments

  • Comments are visible after approval.
  • Moderation is light.
  • Double-check before trusting.
5
90%
4
7%
3
3%
2
0%
1
0%

AI Summary

Updated

Users report that Mullvad provides a reliable VPN service with a strict focus on privacy and transparency. While many praise the consistent performance and cross-platform clients, several note difficulties accessing certain websites and streaming platforms due to security filters.

  • anonymous signup
  • Monero payments
  • no logs policy
  • blocked ips
  • no port forwarding
  • poor support
nightly_prospect_1364
New account
Single review

Best VPN on the market. I trust mullvad 100%.

shifting_reinforcement_739
New account
Negative Karma

one of the best vpn of all time!! under swedish law and no logs policy

resounding_avant-garde_2023

the gold standard for VPNs. no fuss, just a great service. reliable, fast connections and a fair price, CLI works nicely, good amount of useful features and trustworthy ops. the ads i've seen for this service are slightly cringe, but eh!

idiosyncratic_colonization_8895

I've been using Mullvad as my primary VPN across desktop (Linux/Windows), GrapheneOS (Android), and iOS for several years.

What I value most:

  • Token-based accounts with zero personal data required — no email, no name, no phone number. This works perfectly with GrapheneOS.
  • Accepts Monero and Bitcoin, which keeps the entire account fully anonymous end-to-end.
  • Consistent speeds and reliable clients on all platforms tested.
  • Transparent communication about security issues (e.g. exit IP fingerprinting disclosure) and active patching.

How I combine it with other tools:

  • On iPhone, I use Obscura VPN on top of Mullvad. Obscura's split-trust architecture means my real IP only touches Obscura's ingress, while traffic exits through independent Mullvad servers — good for censorship-resistant mobile use.
  • On GrapheneOS, I also test NymVPN (mixnet+dVPN) for high-anonymity scenarios, but Mullvad remains my daily driver for reliability.

Downsides:

  • Mullvad IPs are increasingly blocked by some websites and Cloudflare-protected services.
  • No port forwarding, which limits some use cases.
  • No long-term subscription discounts (flat monthly rate only).

Overall: The gold standard for privacy-first VPNs. Highly recommended as a primary VPN, especially for GrapheneOS and advanced privacy setups.

decadent_wisp_7350

I have used Mullvad for 1 month after multiple years with Azire. The connection speed has almost doubled across all the servers I use, which is fantastic. Good: lightning payments and no intermediary payment processors, flat fee (though I would have a yearly discounted subscription to reward long-term customers). Bad: a slight increase in websites banning Mullvad's IPs and an increase in cloudflare security challenges.

winning_examiner_4159
Single review

I've been using Mullvad for a while now and it's probably one of the best on par with iVPN. It doesn't require any KYC to register, you receive an account number and then you pay with either Debit, Cash or Crypto (Monero recommended). Max 5 devices per account which is fine you can remove and add at anytime. Only 5 Euro per month which is (Shown on the official pricing page): $5.70 £4.32 SEK 55.47 A$8.26 CA$8.08

dynamic_clover_2006

Best VPN, used mullvad for 6+ years. no false advertising, doesn't require ANY information also VPN client gets updates frequently

informative_backside_8137

best vpn provider, easy payment and registration

ruddy_coverall_175

Certainly one of the best VPN ever.

beautiful_gridiron_1423

Probably the best VPN I've used so far. Maybe a bit more expensive than others in comparison, but definitely worth every penny.

mounting_felicity_5003
Single review

best vpn on the market, use it everyday

shattered_ash_1411
Single review

Lo tengo instalado en el telefono android y en el ordenador. Funciona muy bien, aunque hay algunas webs que detectan que estoy usando una VPN y no me dejan acceder.

peculiar_javelin_8170

Mullvad is very good, i use it everyday

mad_eyeshade_1978
Negative Karma

just I can say perfect, fast and secure

practicable_derangement_4219
Negative Karma

This company provides quality and excellent service at reasonable prices. I highly recommend it.

frequent_playmate_1145

As expensive as this vpn is for me, I’ll do anything to make sure I get it. It’s very fast and works well for everything I need it for. It’s really worth it.

laconic_mesh_7403

I use it regularly and am very happy with it; it’s been a great help in getting around the DPI restrictions in my country and keeping my activities private

cursory_doc_7511
Single review

i love this even though it costs $5/m it's the best

nebulous_goblet_8867

Top notch VPN provider ive been using Mullvad since YEARS. Also vey good uptime from their VPN servers.

ajar_clich_3138
0 5/5 0%

The VPN pleasantly surprised me with its performance. The connection is fast.

respectable_tube_6652
Negative Karma

Nice vpn service. I really love the way it works.

intense_plasma_6333

It's a very good VPN, they do allow crypto payments and I never had any issue with them. The only thing I actually miss is port forwarding, but too many people tried to abuse it. The extension in Mullvad Browser is very useful, if the server's IP is blocked, you can just choose to use their proxy and you'll be able to access the website or service that blocked it.

old-line_carbohydrate_4996

It's a good VPN. I've been using it for several years now.

then_winery_3282

Great vpn. I would rate 5 starts if they brought back port forwarding.

fond_certification_3979

Great VPN if you care about privacy. Been using it for years, paid with Monero, with consistently fast server speeds and reliable performance.

spatial_parvenu_905
Single review

Solid VPN service, love the crypto payments. Only issue I've ever had is the server IPs occasionally being blocked by some websites.

ingratiating_mutter_230

Best VPN ever no doubt about that

wiry_relativity_1530

No information needed on signup, they accept XMR and provide IPv6 access. I have no complaints except perhaps that there is no port forwarding which is understandable.

colored_final_470

Answers to law enforcement, when law enforcement pressured them to remove port forwarding they did.

insoluble_eagle_2971
Active user

The best VPN service. The client app is very stable, and it's great that they have a Firefox extension. However, the support is poor; even when you point out technical issues with the servers or the app, they tend to insist the problem is on the customer's end, and it takes a long time to resolve issues. If you want to use it cheaply, you should buy a voucher card from their authorized reseller, Laptop with Linux.

insoluble_eagle_2971

Examples of issues that persisted for a long time due to Mullvad's sloppy support: https://github.com/mullvad/mullvadvpn-app/issues/5706

clear_volleyball_8886
Single review

Honestly the only VPN I can really trust, I personally haven't had any hiccups whilst using it: it works flawlessly on degoogled GrapheneOS, Linux, MacOS, and even IOS (even though you probably shouldn't be using IOS if you care about your privacy, it's still nice that mullvad offers a nice IOS client). Also, the lockdown feature has prevented me from leaking my IP a few times. Absolutely the gold standard when it comes to a VPN - not only in terms of privacy, but also in terms of usability.

economic_abdomen_1128
Active user

5 euro a month! Offers high quality VPN service, no logs, high privacy, XMR payment accepted.

self-help_spirit_1171

Best and trustworthy VPN, also accept XMR as payament. definitely the best option.

two-story_claret_3619

The best but they need to swap out IPs once in awhile!!

dissident_weasel_1667
Single review

I've been with them for seven years and the price has always been the same. Inflation doesn't affect them, and their service is wonderful.

door-to-door_cohesion_3572

Excellent services, using since it since 2 years. Gold standard of privacy

wrought-iron_taboo_3929

Used it 2 years - Payment in crypto, no personal information, easy to set up for non techie. Can automatically start from the beginning of each connection.

wise_snifter_2821
Single review

using it now for almost 2 years with no issues!

unseemly_helper_2738

I've used this for several years. Never an issue and support is helpful. It's probably the only VPN I'd trust.

wide-eyed_twitch_9983
Single review

Been using it for 5+ years, never had an issue

autobiographical_legality_3022
Single review

Mullvad is great. No personal information needed; no email, no phone number, not even your full legal name if you pay with cash via anonymous snail mail with no return address

ferocious_daybed_4540

Best vpn ever, crypto even gets a 10% discount and the registration is without any bs and identity free. Now thats something i like to see

cumbersome_pompadour_1382

XMR - Get Code - Get Incredible VPN. Its thats simple. Got my monitor split connected to multiple device and can smoothly switch the countries on both whenever needed. I'm a customer for life

punishing_contemporary_9953

Mullvad is great. It just works really well & no KYC B.S. ever needed.

hopeless_infirmary_6984

anonymity is key these days. Mullvad is one of the few that provide this, love that I can pay with XMR.

indecisive_nettle_5914

It's fast, good, and a trustworthy company.

philosophic_cockroach_2594

I have been using Mullvad for a couple of years now and never had any problems. The only thing that is not ideal is that they removed port forwarding but i can live without it.

vigorous_glove_2523

VPN that is committed to privacy/anonymity. Has advanced features such as Multihop, DAITA, and quantum resistant VPN tunnels. 5/5

smoldering_clustering_7161

great VPN, like any VPN you have to trust them, but they seem to be commited to the cause

silken_conglomerate_800

Used them for the last 12 months and I have been very happy with the service, their VPNs are fast, anonymous and global. They let you pay in crypto, which always makes me happy.

alright_bagpipe_4610

Create Service, which I'm using for years. Just pay with Monero and that's it.

baleful_tween_8313

should be your first vpn provider choice , excellent

unknown_private_2174
Single review

Decent app & service but not censorship-resistant at all. Not even trying to be. If a government decides to nuke VPN access, Mullvad is the first one to leave the chat.

restrictive_creek_5084

Been using for over a year. WONDERFUL. no issues!!!😊

forgiving_controller_8867

I've being a Mullvad user for years (probably around 4) , and I have nothing to complaint. Very user friendly with a lot of countries options to connect. The client tool is always improving and it has a fair price.

resident_negro_416
Single review

Have been using for years, easy payment by cash if you're in EU or crypto. Support welcomes feedback and new privacy-focused payment method suggestions for implementation. They also have been raided by Sweden police and found absolutely nothing on their servers.

grizzled_barbecue_1203

It's so good that sometimes I think it's a honeypot :)

passive_vitamin_449

I now only use them paid in Monero :)

invading_atom_8819
Active user

Perfect VPN! Trustable regarding no logs, payment via crypto possible and you don't need an E-Mail to login. UI and some functions could be added, however otherwise it is perfect. No KYC and Prepaid payment scheme.

lurid_toddy_750

no hassle, just works. never had any vpn experience this good.

changing_amnesty_2826

Honestly, Mullvad VPN feels like the open-source lovechild of digital privacy and network engineering. They didn't just slap Tor support in - they collaborated with Tor devs to bake anonymity into their browser. Paying with Monero? Of course.

Their WireGuard implementation is buttery smooth, and watching their DNS sinkholes vaporize trackers gives me that warm, fuzzy feeling. The cross-platform clients? So clean you'd think they actually dogfood their own stack.

Seriously, this is what happens when infrastructure geeks prioritize privacy over profit margins. Thank you guys!

grisly_slouch_2147

Mullvad is the OG's VPN, they take Monero since day one. They are truly fighting for privacy. Forget about Proton, use Mullvad or iVPN!!!

mercantile_articulation_7127

Been using them fir years. Highly recommended!

centrifugal_foresight_5531

One of the best options out there if you care about privacy. No email, no KYC just a random ID and you’re in. Speeds are decent and it works well with most services. Dropping one star only because some streaming sites don’t work and the mobile app could use more features. Still highly recommended.

nthpyrodev

Never had an issue with Mullvad. Very reliable.

tolerant_security_644

Great service. i think kycnot.me follows the same idea as Mullvad for login.

pluja
Admin

Yes, we do! :)

rubbery_cabal_2625
Active user

All VPNs require trust in the provider to some degree, but Mullvad is just about the best you can get in the traditional VPN world. No KYC, no accounts, they don't even require an email. You can pay with crypto or cash. Open source and audited. Privacy-friendly jurisdiction. RAM-only servers. etc

stuffy_corpse_6877
Single review

Big Vouch for Mullvad, I’ve been using them for years. It’s the fastest public VPN I have ever used.

Mullvad still has OpenVPN support, but it’s being removed in 2026. Your AI summary is incorrect. What do you mean by “questionable ads”?

Pros: Wireguard and OpenVPN support (OpenVPN is leaving in 2026) No username or password required to sign up Ram servers No bullshit promotion/discount codes so there’s no FOMO No logs DAITA Support Extremely fast speeds, maxes out my gigabit connection DNS Ad blocker Some first party servers Regular infrastructure & client audits Got raided and the feds came out with nothing Accepts Monero & Cash OpenVPN & Wireguard config generator (Good if you want to use your own clients) Multi hop support Honest marketing, they don’t pay influencers.

Cons: IPs can sometimes be blocked on YouTube, Reddit especially when using DAITA as it’s on limited servers. No port forwarding Doesn’t always play nice with streaming services, this isn’t an issue for me. Shoutout Plex and Jellyfin.

If you care about privacy and want to blend in with the crowd, get Mullvad.

pluja
Admin

The AI summary is a summary of what has been said in the comment section. A user mentioned something about Mullvad's recent advertising. The summary is not wrong, since both things have been mentioned in the comments, maybe the users who commented this information were wrong.

self-evident_liking_7093
Active user

Been using it for the last five years without issue. Depending on where you live I recommend cash by mail as for me it has always worked within 1 to 2 weeks.

vice_school_2082
Single review

Great VPN, smart login systém, but often blocked by services

great_highlight_5388

That's what you get for a privacy-first VPN. Of course people are going to use the IP's for nefarious things

gigantic_clock_8716

last time I bought their subscription they didn't provide protocols for DPI bypass (VLESS/VMESS/Trojan/etc), so they were unusable in censorship-heavy countries. please correct me in replies if it's not the case anymore

earned_affront_2403

Mullvad suggests Amnezia VPN obfuscation for their WireGuard connections 1, but if I understand correctly, basically all WireGuard servers support that because using a vanilla WireGuard configuration in Amnezia VPN clients limits obfuscation methods to backwards-compatible with vanilla WireGuard. More on the AmneziaWG protocol 2. specifically about obfuscation for vanilla WireGuard servers, in short: only Jc, Jmin and Jmax parameters are backwards-compatible, they just send a bunch of junk to confuse DPI before establishing a connection 3. Might be slightly outdated as messages are from 2023, maybe AmneziaWG improved since then. Mullvad also supports xtls (VLESS Reality xtls-rprx-vision) on some bridges 4.

gigantic_clock_8716

Yup, it's correct, you can connect to a vanilla WG server with AmneziaWG client. Amnezia doesn't work anymore though, that's the problem :( Tested it in China and Russia extensively.

foolhardy_flutist_5501

I used Amnezia in Russia in September 2025 and it worked, but you need a different port and not with common providers (e.g. Vultr, Hetzner, etc... all blocked). Fiddling with Jc/min/max helps too. If you don't set any of those parameters, then Amnezia falls back to standard WireGuard which does not work.

mushy_intolerance_7426

Fixed 5 bucks VPN. No issue at all on their service. But recent advertising seems money wasting and questionable against their statement, like they said no affiliates, no data selling. Well, Mullvad is free to switch business model (no discount for period) so I just switch when I feel more uncomfortable. Right now everything is smooth.

coveted_flatland_7358

Mulvad is one of the best VPNs around, certainly. They also accept Monero.

self-help_cabbie_9791

Hands down the best there is on the market and dirt cheap.

Trêvoid

works well without issue, payment in XMR

hydraulic_kitchenette_8364

Hands down best VPN out there.

wide_deodorant_4724

Good VPN provider, but it's bad that they removed OpenVPN support. Wasting money on billboard ads seems to have higher priority, than supporting variety of protocols.

impoverished_these_1140
Single review

The gold standard to be honest

social_pet_1554

I love Mullvad VPN and have been using it for more than a year. It's very fast and my internet loss is about 2%, which is perfectly fine.

Also, you can create an account without KYC, so without giving your name and email address, which is very important.

I also find the Mullvad browser with Mullvad VPN very good.

omnipotent_disappointment_3329

A very good VPN provider. Reliable, open source, and audited. However, their IP addresses are well-known, so YouTube and some websites with strict Cloudflare protections may block them. Switching to less popular server locations usually solves the problem.

anachronistic_sequence_9462

The best VPN, I have been a betatester of theirs for years. You can pay multiple months through resellers.