Mullvad

Last updated

Mullvad VPN
Mullvad logo.svg
Mullvad desktop client.png
Desktop client
Developer Mullvad VPN AB [1]
Type Virtual private network
Launch dateMarch 2009;14 years ago (2009-03)
Platform(s) Android, iOS, Linux, macOS, Windows (official app)
Website mullvad.net OOjs UI icon edit-ltr-progressive.svg

Mullvad is a commercial VPN service based in Sweden. Launched in March 2009, Mullvad operates using the WireGuard and OpenVPN protocols. It also supports Shadowsocks as a bridge protocol for censorship circumvention. Mullvad's VPN client software is released under the GPLv3, a free and open-source software license. [2] [3] [4]

Contents

History

Mullvad was launched in March 2009 by Amagicom AB. [5] Its name is Swedish for mole.

Mullvad began supporting connections via the OpenVPN protocol in 2009. [6] Mullvad was an early adopter and supporter of the WireGuard protocol, announcing the availability of the new VPN protocol in March 2017 [7] and making a "generous donation" supporting WireGuard development between July and December 2017. [8]

In September 2018, the cybersecurity firm Cure53 performed a penetration test on Mullvad's macOS, Windows and Linux applications. [9] Seven issues were found which were addressed by Mullvad. [10] Cure53 tested only the applications and supporting functions. No assessment was made on the Mullvad server side and back end. [9]

In October 2019, Mullvad partnered with Mozilla. [11] Mozilla's VPN service, Mozilla VPN, utilizes Mullvad's WireGuard servers. [12] [13]

In April 2020, Mullvad partnered with Malwarebytes and provided WireGuard servers for their VPN service, Malwarebytes Privacy. [14]

In May 2022, Mullvad started officially accepting Monero. [15]

On 18 April 2023, Mullvad's head office in Gothenburg was visited by officers from the National Operations Department of the Swedish Police, who had a search warrant to seize computers containing customer data. Mullvad demonstrated that, in accordance with their policies, no such data existed on their systems. After consulting with the prosecutor, the officers left without seizing any equipment or obtaining customer information. Mullvad shared this information in a blog post two days later making the incident public knowledge and mentioning this was the first time their offices had been visited with a search warrant. [16] In a letter sent to Mullvad 9 days after the search the Swedish Police stated they conducted the search at the request of Germany for an ongoing investigation. The investigation involved a blackmail attack that hit several institutions in the state of Mecklenburg-Western Pomerania which uncovered IP addresses that led back to the Mullvad VPN service. [17]

On 29 May 2023 Mullvad announced that they would be removing support for port forwarding, effective on 1 July 2023. This was done due to malicious use from users leading to law enforcement involvement, Mullvad IP addresses getting blacklisted, and hosting providers cancelling their services. [18]

Service

A TechRadar review noted 2019 that "Mullvad's core service is powerful, up-to-date, and absolutely stuffed with high-end technologies." [2] Complementing its use of the open-source OpenVPN and WireGuard protocols, Mullvad includes "industrial strength" encryption (employing AES-256 GCM methodology), 4096-bit RSA certificates with SHA-512 for server authentication, perfect forward secrecy, "multiple layers" of DNS leak protection, IPv6 leak protection, "multiple stealth options" to help bypass government or corporate VPN blocking, and built-in support for port forwarding. [2]

Mullvad provides VPN client applications for computers running under Windows, macOS and Linux operating systems. As of April 2020, native iOS and Android Mullvad VPN clients using the WireGuard protocol are available. iOS and Android mobile operating system users can also configure and use built-in VPN clients or the OpenVPN or WireGuard apps to access Mullvad's service. [19]

Privacy

No email address or other identifying information is requested during Mullvad's registration process. Rather, a unique 16-digit account number is anonymously generated for each new user. This account number is henceforth used to log in to the Mullvad service. [20]

To help ensure the privacy of its users, Mullvad accepts the anonymous payment methods of cash, Bitcoin, Bitcoin Cash and Monero. (Payment for the service can also be made via bank wire transfer, credit card, PayPal, and Swish). [2] [21] In June 2022, the service announced that it will no longer offer new recurring subscriptions, as this would further reduce the amount of personal information that will have to be stored. [22]

Mullvad's no-logging policy precludes logging of VPN users' IP addresses, the VPN IP address used, browsing activity, bandwidth, connections, session duration, timestamps, and DNS requests. [2] [20]

Mullvad has been actively campaigning against the EU's Regulation to Prevent and Combat Child Sexual Abuse, which would require service providers to scan all users' online communications, even encrypted services. [23] [24]

Reception

While Mullvad has been noted for taking a strong approach to privacy and maintaining good connection speeds, the VPN client setup and interface has been noted as being more onerous and technically involved than some other VPN providers especially on some client platforms. [25] However, a follow-up review by the same source in October 2018 notes, "Mullvad has a much improved, modern Windows client (and one for Mac, too)." A PC World review, also from October 2018, concludes, "With its commitment to privacy, anonymity (as close as you can realistically get online), and performance Mullvad remains our top recommendation for a VPN service." [19]

In November 2018, TechRadar noted Mullvad as one of five VPN providers to answer to a set of trustworthiness questions posed by the Center for Democracy and Technology. [26] [27] In March 2019, a TechRadar review noted slightly substandard speeds. [21] However, a more recent and more thorough TechRadar review dated June 11, 2019 stated that "speeds are excellent." [2] While the latter review notes a shortcoming for mobile users in that Mullvad provided no mobile VPN client apps. [2] There is now a mobile app for both Android and iOS available.

The non-profit Freedom of the Press Foundation, in their "Choosing a VPN" guide, lists Mullvad amongst the five VPNs that meet their recommended settings and features for VPN use as a tool for protecting online activity. [28]

Browser

On April 3, 2023, the Mullvad browser was released, built by the Tor Project team and distributed by Mullvad. It has similar safety levels as the Tor Browser, but works independently of the Tor network and is meant to be used with a VPN service instead. [29] The Mullvad browser has been designed to minimize the threat of tracking and fingerprinting. [30] [31]

Search Engine

On 20 June 2023 Mullvad announced their search engine Mullvad Leta. Mullvad Leta uses the Google Search API as a proxy and caches each search. The service is only accessible to paid Mullvad VPN accounts. [32] When a user searches something the service first checks if it has a cache of the search, which can be up to 30 days old, before making a call to the Google search API. [33]

See also

Related Research Articles

<span class="mw-page-title-main">Web browser</span> Software used to navigate the internet

A web browser is an application for accessing websites and the Internet. When a user requests a web page from a particular website, the browser retrieves its files from a web server and then displays the page on the user's screen. Browsers are used on a range of devices, including desktops, laptops, tablets, and smartphones. In 2020, an estimated 4.9 billion people have used a browser. The most used browser is Google Chrome, with a 65% global market share on all devices, followed by Safari with 18%.

<span class="mw-page-title-main">Tor (network)</span> Free and open-source anonymity network based on onion routing

Tor, short for The Onion Router, is free and open-source software for enabling anonymous communication. It directs Internet traffic via a free, worldwide, volunteer overlay network that consists of more than seven thousand relays.

<span class="mw-page-title-main">Malwarebytes</span> Internet security company

Malwarebytes Inc. is an American Internet security company that specializes in protecting home computers, smartphones, and companies from malware and other threats. It has offices in Santa Clara, California; Clearwater, Florida; Tallinn, Estonia; Bastia Umbra, Italy; and Cork, Ireland.

<span class="mw-page-title-main">DuckDuckGo</span> American software company and Internet search engine

DuckDuckGo (DDG) is an American software company that offers a number of software products oriented towards helping people protect their privacy online, most notably, a private search engine, a tracker-blocking browser extension, email protection, and app tracking protection.

<span class="mw-page-title-main">Orbot</span> Free software project to provide anonymity on the Internet from an Android smartphone

Orbot is a free proxy app that provides anonymity on the Internet for users of the Android and iOS operating systems. It allows traffic from apps such as web browsers, email clients, map programs, and others to be routed via the Tor network.

Mozilla is a free software community founded in 1998 by members of Netscape. The Mozilla community uses, develops, publishes and supports Mozilla products, thereby promoting exclusively free software and open standards, with only minor exceptions. The community is supported institutionally by the non-profit Mozilla Foundation and its tax-paying subsidiary, the Mozilla Corporation.

<span class="mw-page-title-main">Proton Mail</span> End-to-end encrypted email service

Proton Mail is a Swiss end-to-end encrypted email service founded in 2013 headquartered in Plan-les-Ouates, Switzerland. It uses client-side encryption to protect email content and user data before they are sent to Proton Mail servers, unlike other common email providers such as Gmail and Outlook.com. The service can be accessed through a webmail client, the Tor network, or dedicated iOS and Android apps.

<span class="mw-page-title-main">The Tor Project</span> Free and open-source software project for enabling anonymous communication

The Tor Project, Inc. is a 501(c)(3) research-education nonprofit organization based in Winchester, New Hampshire. It is founded by computer scientists Roger Dingledine, Nick Mathewson, and five others. The Tor Project is primarily responsible for maintaining software for the Tor anonymity network.

<span class="mw-page-title-main">Brave (web browser)</span> Chromium-based open-source web browser

Brave is a free and open-source web browser developed by Brave Software, Inc. based on the Chromium web browser. Brave is a privacy-focused browser, which automatically blocks most advertisements and website trackers in its default settings. Users can turn on optional ads that reward them for their attention in the form of Basic Attention Tokens (BAT), which can be used as a cryptocurrency or to make payments to registered websites and content creators.

ExpressVPN is a VPN service offered by a Hong Kong based company registered in the British Virgin Islands-as Express Technologies Ltd. The software is marketed as a privacy and security tool that encrypts users' web traffic and masks their IP addresses.

NordVPN is a VPN service provided by Nordsec Ltd with applications for Microsoft Windows, macOS, Linux, Android, iOS, and Android TV. Manual setup is available for wireless routers, NAS devices, and other platforms.

<span class="mw-page-title-main">IVPN</span>

IVPN is a VPN service offered by IVPN Limited based in Gibraltar. Launched in 2009, IVPN operates using the WireGuard, OpenVPN, and IKEv2 protocols.

<span class="mw-page-title-main">Bitwarden</span> Open-source password manager

Bitwarden is a freemium open-source password management service that stores sensitive information such as website credentials in an encrypted vault. The platform offers a variety of client applications including a web interface, desktop applications, browser extensions, mobile apps, and a command-line interface. Bitwarden offers a free US or European cloud-hosted service as well as the ability to self-host.

KeepSolid VPN Unlimited is a personal virtual private network software product available for iOS, macOS, Android, Windows, and Linux.

<span class="mw-page-title-main">PureVPN</span> Virtual private network company

PureVPN is a commercial VPN service and a part of PureSquare. It is owned by GZ Systems Ltd. Founded in 2007, the company is based in the British Virgin Islands.

<span class="mw-page-title-main">Mozilla VPN</span> Virtual private network service

Mozilla VPN is an open-source virtual private network web browser extension, desktop application, and mobile application developed by Mozilla. It launched in beta as Firefox Private Network on September 10, 2019, and officially launched on July 15, 2020, as Mozilla VPN.

NordPass is a proprietary password manager launched in 2019. It is meant to help its users to organise their passwords and secure notes, keeping them in a single place — an encrypted password vault. This service comes in both free and premium versions, though the free version lacks much of the paid functionality like multi-device login.

Surfshark is a brand of VPN services offered by a Netherlands-based company of the same name.

<span class="mw-page-title-main">Windscribe</span> Virtual private network provider

Windscribe is a commercial, cross-platform virtual private network (VPN) service provider that is based in Canada, but operates internationally.

A virtual private network (VPN) service provides a proxy server to help users bypass Internet censorship such as geoblocking and users who want to protect their communications against data profiling or MitM attacks on hostile networks.

References

  1. "Doing the corporate shuffle (Updated)". Mullvad VPN. 3 February 2020. Retrieved 5 February 2020.
  2. 1 2 3 4 5 6 7 Utilities, Mike Williams 2019-06-11T18:58:52Z. "Mullvad VPN review". TechRadar.com. Archived from the original on 13 June 2019. Retrieved 7 December 2019.{{cite web}}: CS1 maint: numeric names: authors list (link)
  3. Newman, Lily Hay (3 April 2023). "Tor Project's New Privacy-Focused Browser Lets You Layer a VPN". Wired . Retrieved 23 December 2023.
  4. "mullvadvpn-app/LICENSE.md at main · mullvad/mullvadvpn-app". Mullvad via GitHub.
  5. "What is privacy?". Mullvad VPN. Archived from the original on 6 December 2019. Retrieved 7 December 2019.
  6. "Services". Archived from the original on 25 September 2009.
  7. "Test WireGuard with Mullvad". Mullvad. 27 June 2019. Retrieved 27 June 2019.
  8. "Donations". WireGuard.com. Silver company donors. Archived from the original on 24 June 2019. Retrieved 24 June 2019.
  9. 1 2 https://cure53.de/pentest-report_mullvad_v2.pdf
  10. "Read results of security audit on Mullvad app - Blog". Mullvad VPN.
  11. "Partnerships and Resellers". Mullvad. Archived from the original on 4 December 2019.
  12. "We test Mozilla's new Wireguard-based $5/mo VPN service". Ars Technica . 22 July 2020. Retrieved 18 December 2021.
  13. "Firefox Private Network". Mozilla Foundation . Archived from the original on 4 December 2019.
  14. Labs, Malwarebytes (23 April 2020). "Introducing Malwarebytes Privacy". Malwarebytes Labs. Retrieved 29 September 2020.
  15. "We now accept Monero - Blog". Mullvad VPN. Retrieved 5 May 2022.
  16. "Mullvad VPN was subject to a search warrant. Customer data not compromised". Mullvad VPN. 20 April 2023. Archived from the original on 17 June 2023.
  17. "Update: The Swedish authorities answered our protocol request". Mullvad VPN. 2 May 2023. Archived from the original on 26 June 2023. Retrieved 29 June 2023.
  18. "Removing the support for forwarded ports". Mullvad VPN. 29 May 2023. Archived from the original on 23 June 2023. Retrieved 29 June 2023.
  19. 1 2 "Mullvad 2018 review: A fantastic VPN has a great new look". PC World . 17 October 2018. Archived from the original on 9 December 2019. Retrieved 9 December 2019.
  20. 1 2 "Mullvad review: A VPN that's all about privacy". Macworld.com. 28 August 2019. Archived from the original on 14 September 2019. Retrieved 14 December 2019.
  21. 1 2 Athow, Desire (19 March 2019). "The best Linux VPN 2019". TechRadar.com. Archived from the original on 27 June 2019. Retrieved 27 June 2019.
  22. Castro, Chiara (22 June 2022). "Mullvad VPN axes recurring subscriptions in the name of privacy". TechRadar.com. Retrieved 22 June 2022.
  23. Nasi, Michele (7 March 2023). "Scansione delle chat degli utenti: l'Europa potrebbe spiare i contenuti personali". IlSoftware.it (in Italian). Retrieved 10 March 2023.
  24. Claburn, Thomas. "German Digital Committee heaps scorn on Chat Control". The Register. Retrieved 20 April 2023.
  25. Paul, Ian (19 June 2017). "Mullvad review: The VPN that doesn't want to get to know you". PC World . Archived from the original on 22 December 2017.
  26. Li, Harold. "Use this checklist to find a VPN you can trust". TechRadar.com. Archived from the original on 3 November 2018. Retrieved 27 June 2019.
  27. "Unedited Answers: Signals of Trustworthy VPNs". Center for Democracy and Technology . 7 March 2019. Archived from the original on 18 April 2019. Retrieved 27 June 2019.
  28. "An in-depth guide to choosing a VPN". freedom.press . 15 February 2022. Retrieved 11 April 2023.
  29. "We've Teamed Up With Mullvad VPN to Launch the Mullvad Browser". The Tor Project . 3 April 2023. Retrieved 6 April 2023.
  30. Rudra, Sourav (4 April 2023). "Mullvad VPN and Tor Project Unite to Create a New Browser That Puts Privacy First". It's FOSS. Retrieved 6 April 2023.
  31. Clark, Mitchell (3 April 2023). "The Mullvad browser protects privacy using standard VPNs". The Verge . Retrieved 6 April 2023.
  32. "Introducing Mullvad Leta: a search engine used in the Mullvad Browser". Mullvad VPN. 20 June 2023. Archived from the original on 29 June 2023. Retrieved 29 June 2023.
  33. "Mullvad Leta FAQ". Mullvad Leta. Archived from the original on 26 June 2023. Retrieved 29 June 2023.