Softpedia >Windows >Internet >Secure Browsing / VPN >Mullvad VPN >  Changelog

Mullvad VPN Changelog

What's new in Mullvad VPN 2024.2 Beta 1

Apr 15, 2024
  • Added:
  • Add automatic MTU detection for desktop platforms. This currently only uses information about
  • dropped packets and does not take fragmentation into account.
  • Add ability to import server IP overrides in GUI.
  • Changed:
  • Change default obfuscation setting to auto.
  • Migrate obfuscation settings for existing users from off to auto.
  • Change default retry connection attempts.
  • Fixed:
  • Continual excessive attempts to update the API IP were made after testing access methods.
  • Fix pointless API access method rotations for concurrent requests.
  • Fix daemon rotating logs on startup even if another daemon is already running.
  • Fix missing redirect to out of time-view when running out of time.
  • Fix incorrectly showing "App lost contact with system service" notification on suspend.

New in Mullvad VPN 2024.1 (Mar 22, 2024)

  • Added:
  • Add CLI support for applying patches to the settings with mullvad import-settings.
  • Add account UUID to verbose 'mullvad account get -v' output.
  • Respect OS prefer-reduced-motion setting.
  • Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates a patch containing all patchable settings, which only includes relay IP overrides.
  • Make mullvad status prints if lockdown mode is enabled when disconnected.
  • Add option to configure custom API access methods. Custom API access methods allows the user to circumvent censorship by proxying API traffic.
  • Add confirmation dialog when deleting a custom list.
  • Add support for custom SOCKS5 OpenVPN bridges running locally.
  • Changed:
  • CLI command mullvad relay set tunnel wireguard entry-location changed to mullvad relay set tunnel wireguard entry location, as the location subcommand can now be swapped for custom-list to select entry relays using a custom list.
  • Remove --location flag from mullvad status CLI. Location and IP will now always be printed (if available). mullvad status listen no longer prints location info.
  • Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
  • Upgrade the background map to a new WebGL 3D map. This should both look better and be more performant.
  • Update Electron from 26.3.0 to 28.1.3.
  • Improve the "Connecting to system service"-view with information about the situation and troubleshooting tips.
  • Update support email address to new email address, [email protected].
  • Windows:
  • Add information to error notification about an error that is often caused by an incompatibility with VMWare.
  • Fixed:
  • Validate that hostname matches correct server type for CLI commands mullvad relay set location, mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.
  • Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly configured MTU.
  • Fix custom list name validation by not allowing empty names.

New in Mullvad VPN 2024.1 Beta 1 (Feb 19, 2024)

  • Added:
  • Add CLI support for applying patches to the settings with mullvad import-settings.
  • Changed:
  • CLI command mullvad relay set tunnel wireguard entry-location changed to
  • mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  • swapped for custom-list to select entry relays using a custom list.
  • Fixed:
  • Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  • mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.

New in Mullvad VPN 2023.6 (Dec 6, 2023)

  • Added:
  • Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  • mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
  • Add custom lists to location selector in desktop app.
  • Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  • proxy API traffic through a peer before connecting to a tunnel. They are managed through
  • mullvad api-access, and the initially supported network protocols are Shadowsocks and
  • SOCKS5.
  • Add social media content blocker.
  • Add ability to override server IPs to the CLI.
  • Changed
  • Update Electron from 25.2.0 to 26.3.0.
  • Update OpenVPN to 2.6.8 from 2.6.0.
  • Linux:
  • Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.
  • Removed:
  • Windows:
  • Remove wireguard-go (userspace WireGuard) support.
  • Fixed:
  • Show correct endpoint in CLI for custom relays.
  • Lower risk of being rate limited.
  • Fix error dialog when failing to write to console by handling the thrown error.
  • Fix error dialog displayed when the daemon was killed.
  • Fix desktop app freezing when navigations occur in very quick succession.
  • Windows:
  • Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).
  • Security:
  • Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the peer.
  • Windows:
  • Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  • the directory in ProgramData.

New in Mullvad VPN 2023.6 Beta 1 (Nov 28, 2023)

  • Added:
  • Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  • mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
  • Add custom lists to location selector in desktop app.
  • Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  • proxy API traffic through a peer before connecting to a tunnel. They are managed through
  • mullvad api-access, and the initially supported network protocols are Shadowsocks and
  • SOCKS5.
  • Add social media content blocker.
  • Add ability to override server IPs to the CLI.
  • Changed:
  • Update Electron from 25.2.0 to 26.3.0.
  • Linux:
  • Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.
  • Removed:
  • Windows:
  • Remove wireguard-go (userspace WireGuard) support.
  • Fixed:
  • Show correct endpoint in CLI for custom relays.
  • Lower risk of being rate limited.
  • Fix error dialog when failing to write to console by handling the thrown error.
  • Fix error dialog displayed when the daemon was killed.
  • Fix desktop app freezing when navigations occur in very quick succession.
  • Windows:
  • Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).
  • Security:
  • Windows:
  • Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  • the directory in ProgramData.

New in Mullvad VPN 2023.5 (Oct 10, 2023)

  • Added:
  • Add --help and --version options to the desktop GUI application.
  • Add creation date below device name in the device list screen.
  • Add account view button in main view in the desktop app.
  • Add time left and device name in the header bar in the desktop app.
  • Changed:
  • In the CLI, update the tunnel subcommand to resemble relay more. For example, by adding a
  • unified mullvad tunnel get command and removing individual get subcommands like
  • mullvad tunnel ipv6 get.
  • Update the CLI multihop settings to make it possible to set the entry location without toggling
  • multihop on or off.
  • In the CLI, the mullvad account get command will now print the account number (if there is one)
  • after the device has been revoked.
  • Update the CLI relay, multihop & bridge selection interface to accept a hostname as sole argument,
  • inheriting the behavior of mullvad relay set hostname. This is in addition to accepting a
  • geographical location as basis for filtering relays.
  • Silence OpenVPN "replay attack" warnings.
  • Update Electron from 23.2.0 to 25.2.0.

New in Mullvad VPN 2023.5 Beta 2 (Oct 5, 2023)

  • Fixed:
  • macOS:
  • Ensure that the default tunnel route is added back after waking from hibernation. Previously, the
  • tunnel became unusable despite the app appearing to be connected.
  • Work around issue where the default route was lost after disconnecting after switching between
  • networks.
  • Fix slow offline detection.
  • Fix inability to switch from a network to a higher-priority network without the tunnel timing out.

New in Mullvad VPN 2023.5 Beta 1 (Jul 31, 2023)

  • Added:
  • Add --help and --version options to the desktop GUI application.
  • Add creation date below device name in the device list screen.
  • Add account view button in main view in the desktop app.
  • Add time left and device name in the header bar in the desktop app.
  • Changed:
  • In the CLI, update the tunnel subcommand to resemble relay more. For example, by adding a
  • unified mullvad tunnel get command and removing individual get subcommands like
  • mullvad tunnel ipv6 get.
  • Update the CLI multihop settings to make it possible to set the entry location without toggling
  • multihop on or off.
  • In the CLI, the mullvad account get command will now print the account number (if there is one)
  • after the device has been revoked.
  • Update the CLI relay, multihop & bridge selection interface to accept a hostname as sole argument,
  • inheriting the behavior of mullvad relay set hostname. This is in addition to accepting a
  • geographical location as basis for filtering relays.
  • Silence OpenVPN "replay attack" warnings.
  • Update Electron from 23.2.0 to 25.2.0.
  • Windows:
  • In the CLI, add a unified mullvad split-tunnel get command to replace the old commands
  • mullvad split-tunnel pid list and mullvad split-tunnel get.
  • Fixed:
  • Update relay list after logging in. Previously, if the user wasn't logged in when the daemon
  • started, the relay list would only be updated after attempting to connect to the VPN.

New in Mullvad VPN 2023.4 (Jun 28, 2023)

  • Added:
  • Log select settings on each connection attempt.
  • Changed:
  • Update Electron from 21.1.1 to 23.2.0.
  • Fixed:
  • Fix location search in desktop app only searching for English location names.
  • Fix automatic WireGuard key rotation not being initialized correctly when not running the GUI.
  • Fix duplicated notifications in some situations.
  • Fix notification setting being inverted. When non-important notifications were disabled it instead
  • disabled important ones and showed non-important ones.
  • Work around issues with PQ and multihop caused by fragmentation in the tunnel. The workaround
  • doesn't fix fragmentation issues in general but prevents the PSK exchange packets from being
  • fragmented by setting an explicit maximum segment size.
  • Fix misaligned read in shadowsocks leading to a panic on some platforms.

New in Mullvad VPN 2023.4 Beta 1 (May 4, 2023)

  • Added:
  • Log select settings on each connection attempt.
  • Changed:
  • Update Electron from 21.1.1 to 23.2.0.
  • Deprecated:
  • Fixed:
  • Fix location search in desktop app only searching for English location names.
  • Fix automatic WireGuard key rotation not being initialized correctly when not running the GUI.
  • Fix duplicated notifications in some situations.
  • Fix notification setting being inverted. When non-important notifications were disabled it instead
  • disabled important ones and showed non-important ones.
  • Work around issues with PQ and multihop caused by fragmentation in the tunnel. The workaround
  • doesn't fix fragmentation issues in general but prevents the PSK exchange packets from being
  • fragmented by setting an explicit maximum segment size.

New in Mullvad VPN 2023.3 (Apr 5, 2023)

  • Added:
  • Add Kyber1024 KEM algorithm into the Post-Quantum secure key exchange algorithm. This means the
  • Quantum-resistant-tunnels feature now mixes both Classic McEliece and Kyber for added protection.
  • Add notification dot to tray icon and system notification throttling.
  • Add troubleshooting information to some in-app notifications.
  • Add setting for quantum resistant tunnels to the desktop GUI.
  • Enable TCP_NODELAY for the socket used by WireGuard over TCP. Improves latency and performance.
  • Changed:
  • Update the Post-Quantum secure key exchange gRPC client to use the stabilized
  • PskExchangeV1 endpoint
  • Add "auto" setting for the quantum-resistant tunnel feature, and make it the default. If it was
  • previously set to off, it will now be set to auto instead. That currently means the same thing as
  • "off", but this might change in the future.
  • Update OpenVPN to 2.6.0 from 2.5.3.
  • Update OpenSSL to 1.1.1t from 1.1.1j.
  • Post-Quantum secure tunnels and multihop can now be used at the same time.
  • Change WireGuard key rotation interval to 14 days. It was 7 days.
  • Windows:
  • Remove automatic fallback to wireguard-go. This is done as a first step before fully
  • deprecating it on Windows.
  • Removed:
  • Remove port 443 as valid port for WireGuard over TCP. Keep only port 80 and 5001. The reason is
  • to free up port 443 for other TCP based obfuscation later.
  • Fixed:
  • Fix close to expiry notification not showing unless app is opened once within the last three days
  • in the desktop app.
  • Retry if PQ PSK negotiation fails for any reason.
  • Fix accumulated tunnel state notifications sometimes displayed after suspend.

New in Mullvad VPN 2023.3 Beta 1 (Mar 29, 2023)

  • Added:
  • Add Kyber1024 KEM algorithm into the Post-Quantum secure key exchange algorithm. This means the
  • Quantum-resistant-tunnels feature now mixes both Classic McEliece and Kyber for added protection.
  • Add notification dot to tray icon and system notification throttling.
  • Add troubleshooting information to some in-app notifications.
  • Add setting for quantum resistant tunnels to the desktop GUI.
  • Enable TCP_NODELAY for the socket used by WireGuard over TCP. Improves latency and performance.
  • Changed:
  • Update the Post-Quantum secure key exchange gRPC client to use the stabilized
  • PskExchangeV1 endpoint
  • Add "auto" setting for the quantum-resistant tunnel feature, and make it the default. If it was
  • previously set to off, it will now be set to auto instead. That currently means the same thing as
  • "off", but this might change in the future.
  • Update OpenVPN to 2.6.0 from 2.5.3.
  • Update OpenSSL to 1.1.1t from 1.1.1j.
  • Post-Quantum secure tunnels and multihop can now be used at the same time.
  • Windows:
  • Remove automatic fallback to wireguard-go. This is done as a first step before fully
  • deprecating it on Windows.
  • Removed:
  • Remove port 443 as valid port for WireGuard over TCP. Keep only port 80 and 5001. The reason is
  • to free up port 443 for other TCP based obfuscation later.
  • Fixed:
  • Fix close to expiry notification not showing unless app is opened once within the last three days
  • in the desktop app.
  • Retry if PQ PSK negotiation fails for any reason.
  • Fix accumulated tunnel state notifications sometimes displayed after suspend.

New in Mullvad VPN 2023.2 (Mar 7, 2023)

  • Fixed:
  • Fix desktop app not quitting properly after switching from unpinned to pinned window.
  • Fix service not starting when LSA protection is enabled (which is the default on Windows 11 22H2).
  • Fix some issues with setting system DNS by using SetInterfaceDnsSettings when it's available (on
  • Windows 10, version 1809 and above).

New in Mullvad VPN 2023.1 (Feb 20, 2023)

  • Added:
  • Add quit button to tray context menu on Linux and Window.
  • Add search bar to location list in desktop app.
  • Remove all settings when the app is uninstalled silently.
  • Changed:
  • Update Electron from 19.0.13 to 21.1.1.
  • Fixed:
  • When a country is selected, and the constraints only match relays that are not included on the
  • country level, select those relays anyway.
  • Fix regression where WireGuard relays were connected to over OpenVPN after a couple of failed
  • attempts, when the tunnel type was set to any.
  • Fix missing connect timeout when connecting to a WireGuard relay over TCP.
  • Fix failure to apply firewall rules that could occur when connecting timed out.
  • Fix sorting of devices in the "too many devices"-view to properly sort on device creation time.
  • Don't fail to show the mullvad-daemon help text if some of the default paths cannot be obtained.
  • Ignore adapters that have no valid GUID when removing obsolete Wintun interfaces during install.
  • Previously, the installer would abort.
  • Revert to using netsh for DNS config, as some Windows builds did not deal with changes correctly.
  • TALPID_DNS_MODULE can be used to override this.
  • Fix deadlock that could occur when the default route changed while initializing split tunneling.

New in Mullvad VPN 2022.5 (Oct 14, 2022)

  • Added:
  • Add obfuscation settings under "WireGuard settings".
  • Add custom option to WireGuard port selector.
  • Windows:
  • The default VPN protocol is slowly being changed from OpenVPN to WireGuard.
  • The app fetches the ratio between the protocols from the API.
  • Linux:
  • GUI: Add electron flags to run Wayland native if in a compositor/desktop known to work well
  • Add ARM64 (aarch64) builds. This is the first release with Linux ARM support.
  • Changed:
  • Reject invalid WireGuard ports in the CLI.
  • Reorganize settings into more logical categories.
  • Upgrade wireguard-go to 20220703234212 (Windows: v0.5.3).
  • Prune bridges far away from the selected relay.
  • Stay connected when desktop app is killed or crashes. The only situation where the app now
  • disconnects on quit is when the user presses the quit button.
  • Update Electron from 18.0.3 to 19.0.13.
  • Expand allowed range of multicast destinations to include all of 239.0.0.0/8 (administratively
  • scoped addresses), when local network sharing is enabled.
  • Default to selecting Sweden as the entry location when using WireGuard multihop. Previously,
  • a random location was used.
  • Experimental: Upgrade the support for quantum-resistant WireGuard tunnels to a newer protocol.
  • Windows:
  • Remove dependency on ipconfig.exe. Call DnsFlushResolverCache to flush the DNS cache.
  • Upgrade Wintun to 0.14.1.
  • Linux:
  • The daemon binary and systemd unit file will now be placed in /usr/bin/ and
  • /usr/lib/systemd/system respectively, to aid with starting the system service on systems where
  • /opt isn't mounted during early boot.
  • Fixed:
  • Connect to TCP endpoints over IPv6 if IPv6 is enabled for WireGuard.
  • Fix udp2tcp not working when quantum-resistant tunnels are enabled.
  • Quit app gracefully if renderer process is killed or crashes.
  • Enable reconnect in blocked state in desktop app.
  • Fix error handling during device removal in the desktop app.
  • Enable interface settings when app is logged out
  • Fix 'mullvad status -v' to include the port of the endpoint when connecting over TCP.
  • Check whether the device is valid when reconnecting from the error state.
  • Stop reconnecting when the account has run out of time.
  • Windows:
  • Only use the most recent list of apps to split when resuming from hibernation/sleep if applying
  • it was successful.
  • Don't fail install if the device tree contains nameless callout driver devices.
  • Linux:
  • Don't prevent early boot service from running if logging to a file fails.
  • Fix app crashing immediately when using some icon themes.
  • Security:
  • When the system service is being shut down and the target state is secured, maintain the
  • blocking firewall rules. Unless it's possible to deduce that the system isn't shutting down and the
  • system service is being stopped by the user intentionally. This is to prevent leaks that might
  • occur during system shutdown. Fixes 2022 Mullvad app audit issue item MUL22-02.
  • Windows:
  • Upgrade win-split-tunnel driver to version 1.2.2.0. Fixes incomplete validation of input buffers
  • that could result in out-of-bounds reads. Fixes 2022 Mullvad app audit issue item MUL22-01.
  • Linux:
  • Added traffic blocking during early boot, before the daemon starts, to prevent leaks in the case
  • that the system service starts after a networking daemon has already configured a network
  • interface.

New in Mullvad VPN 2022.5 Beta 2 (Oct 5, 2022)

  • Added:
  • Add custom option to WireGuard port selector.
  • Changed:
  • Experimental: Upgrade the support for quantum-resistant WireGuard tunnels to a newer protocol.

New in Mullvad VPN 2022.4 (Aug 19, 2022)

  • Added:
  • Windows daemon now looks up the MTU on the default interface and uses this MTU instead of the
  • default 1500. The 1500 is still the fallback if this for some reason fails. This may stop
  • fragmentation.

New in Mullvad VPN 2022.3 (Aug 11, 2022)

  • Fixed:
  • Fix showing incompatible relay filtering options in desktop app. The filtering options are now
  • Dependent on the other filters.
  • Fix app occasionally getting stuck in the offline state after being suspended.
  • Security:
  • Fix potential leak window when stopping the service and auto-connect is enabled and always
  • Require VPN is disabled. When stopped, usually due to a reboot, the daemon would disconnect
  • Before entering a blocking state.

New in Mullvad VPN 2022.3 Beta 2 (Jun 30, 2022)

  • Fix DNS issue on non-English Windows installations. Don't parse the output of ipconfig.exe to determine if the tool succeeded.

New in Mullvad VPN 2022.3 Beta 1 (Jun 28, 2022)

  • Added:
  • Add option to filter relays by ownership in the desktop apps.
  • Experimental: Add support for quantum-resistant PSK exchange to the CLI.
  • Add CLI command for listing excluded processes.
  • Fixed:
  • Display consistent colors regardless of monitor color profile on desktop.
  • Fix time added view displayed due to incorrect local clock.
  • Be more scrupulous about removing temporary files used by the installer and uninstaller.
  • Fix issue where local name resolution fails. This requires users to ensure that non-tunnel
  • interfaces are configured correctly to use local custom DNS.
  • Configure DNS correctly when the DNS client service is disabled or not responding.

New in Mullvad VPN 2022.2 (Jun 13, 2022)

  • Added:
  • Extend DNS blocking with the following new categories: "Adult content" and "gambling".
  • Obfuscate traffic to the Mullvad API using bridges if it cannot be reached directly.
  • Add device management to desktop app. This simplifies knowing which device is which and adds the
  • option to log out other devices when there are already 5 connected when logging in.
  • Add tray icon tooltip with connection info in desktop app.
  • Add relay and bridge constraints for restricting relay selection to rented or Mullvad-owned
  • relays. Allows filtering servers by ownership in the CLI.
  • Include creation timestamp for devices in the CLI.
  • Detect mounting and dismounting of volumes, such as VeraCrypt volumes or USB drives,
  • and exclude paths from the tunnel correctly when these occur. This sometimes only works
  • when the GUI frontend is running.
  • Add toggle for split tunneling state.
  • Changed:
  • Update settings format to v6.
  • Move WireGuard TCP obfuscation settings into mullvad obfuscation command in CLI.
  • Decrease the size of fonts, some icons and other design elements in the desktop app. This makes it
  • possible to fit more into the same area and makes text easier to read.
  • Don't block the tunnel state machine while starting the tunnel monitor. This also means that
  • the machine will not transition directly from the disconnected to the disconnecting state
  • if an error occurs.
  • Change behavior of escape key in the desktop app. It now navigates backwards one step instead of
  • to the main view. To navigate back to the main view Shift+Escape can be used.
  • Update Electron from 16.0.4 to 18.0.3.
  • Randomize bridge selection with a bias in favor of close bridges.
  • Make login field keep previous value when submitting an incorrect account number in desktop app.
  • Decrease the time it takes to connect to WireGuard relays by sending an ICMP packet immediately.
  • Pause API interactions when the daemon has not been used for 3 days.
  • Simplified output of mullvad status command.
  • List devices on an account sorted by creation date, oldest to newest, instead of alphabetically.
  • Fixed:
  • Fix the sometimes incorrect time added text after adding time to the account.
  • Fix scrollbar no longer responsive and usable when covered by other elements.
  • Improve tunnel bypass for the API sometimes not working in the connecting state.
  • Fix resource leak caused by location check.
  • Fix issue where sockets didn't close after disconnecting from WireGuard servers over TCP
  • by updating udp-over-tcp to 0.2.
  • Parse old account history formats correctly when they are empty.
  • Use suspend-aware timers for relay list updates and version checks on all platforms.
  • Don't attempt to use bridges when using OpenVPN over UDP and bridge mode is set to auto.
  • Use the entry endpoint when the relay selector fails to find a relay using the preferred
  • constraints and the tunnel protocol is "any". Previously, the entry endpoint was ignored in this
  • case.
  • Fix logout failing if the API cannot be reached in the GUI
  • Fix "Open Mullvad VPN" tray context menu item not working after toggling unpinned window setting.
  • Fix apps not always visible in split tunneling view after browsing for an app and then removing it
  • from the excluded applications.
  • Fix navigation resetting to main view when toggling the unpinned window setting.
  • Log splitting event reason correctly.
  • Security:
  • Update split tunnel driver to 1.2.1.0. This fixes potential DNS leaks seen when excluding at least
  • one application.

New in Mullvad VPN 2022.2 Beta 1 (May 16, 2022)

  • Added:
  • Extend DNS blocking with the following new categories: "Adult content" and "gambling".
  • Obfuscate traffic to the Mullvad API using bridges if it cannot be reached directly.
  • Add device management to desktop app. This simplifies knowing which device is which and adds the
  • Option to log out other devices when there are already 5 connected when logging in.
  • Add tray icon tooltip with connection info in desktop app.
  • Add relay and bridge constraints for restricting relay selection to rented or Mullvad-owned elays.
  • Detect mounting and dismounting of volumes, such as VeraCrypt volumes or USB drives, and exclude paths from the tunnel correctly when these occur. This sometimes only works when the GUI frontend is running.
  • Add toggle for split tunneling state.
  • Changed:
  • Update settings format to v6.
  • Move WireGuard TCP obfuscation settings into mullvad obfuscation command in CLI.
  • Decrease the size of fonts, some icons and other design elements in the desktop app. This makes it
  • Possible to fit more into the same area and makes text easier to read.
  • Don't block the tunnel state machine while starting the tunnel monitor. This also means that
  • The machine will not transition directly from the disconnected to the disconnecting state
  • If an error occurs.
  • Change behavior of escape key in the desktop app. It now navigates backwards one step instead of
  • To the main view. To navigate back to the main view Shift+Escape can be used.
  • Update Electron from 16.0.4 to 18.0.3.
  • Randomize bridge selection with a bias in favor of close bridges.
  • Make login field keep previous value when submitting an incorrect account number in desktop app.
  • Decrease the time it takes to connect to WireGuard relays by sending an ICMP packet immediately.
  • Pause API interactions when the daemon has not been used for 3 days.
  • Simplified output of mullvad status command.
  • Fixed:
  • Fix the sometimes incorrect time added text after adding time to the account.
  • Fix scrollbar no longer responsive and usable when covered by other elements.
  • Improve tunnel bypass for the API sometimes not working in the connecting state.
  • Fix resource leak caused by location check.
  • Fix issue where sockets didn't close after disconnecting from WireGuard servers over TCP
  • By updating udp-over-tcp to 0.2.
  • Parse old account history formats correctly when they are empty.
  • Use suspend-aware timers for relay list updates and version checks on all platforms.
  • Don't attempt to use bridges when using OpenVPN over UDP and bridge mode is set to auto.
  • Use the entry endpoint when the relay selector fails to find a relay using the preferred
  • Constraints and the tunnel protocol is "any". Previously, the entry endpoint was ignored in this
  • Case.
  • Fix "Open Mullvad VPN" tray context menu item not working after toggling unpinned window setting.
  • Fix apps not always visible in split tunneling view after browsing for an app and then removing it
  • From the excluded applications.
  • Fix navigation resetting to main view when toggling the unpinned window setting.
  • Log splitting event reason correctly.
  • Security:
  • Update split tunnel driver to 1.2.1.0. This fixes potential DNS leaks seen when excluding at least one application.

New in Mullvad VPN 2022.1 Beta 2 (Feb 22, 2022)

  • Added:
  • Show warning message when blocking internet while logged out, and make it possible to unblock the
  • connection from the login view.
  • Fixed:
  • Prevent settings file being truncated before being read. This caused the daemon to read an empty
  • settings file, restore to default settings and log out.
  • Improve performance for automatically scrolling text in desktop app.
  • Increase availability of the API by allowing to issue requests to the API when connecting to the
  • relay even if account data might be invalid.
  • Security:
  • Enable "Always require VPN" by default if the settings cannot be parsed. This reduces the number
  • of errors that lead to the daemon unexpectedly starting into non-blocking mode.

New in Mullvad VPN 2022.1 Beta 1 (Feb 14, 2022)

  • Added:
  • Add information about the always on kill switch in the desktop app.
  • Add WireGuard multihop setting and entry location selection to desktop app.
  • Add malware blocking to the desktop app. Implemented via DNS on the relays.
  • Add changes dialog which will include the most notable changes in each new version.
  • Changed:
  • Keep unspecified constraints unchanged in the CLI when providing specific tunnel constraints
  • instead of setting them to default values.
  • Obscure account number in account view and add button for copying instead of copying when text is
  • pressed.
  • Disable logging of translation errors in production. This will among other things prevent error
  • messages from translating the country in the disconnected state.
  • Update Electron from 15.0.0 to 16.0.4.
  • Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  • few attempts.
  • Stop preferring OpenVPN when bridge mode is enabled.
  • CLI command for setting a specific server by hostname is no longer case sensitive.
  • Example: mullvad relay set hostname SE9-WIREGUARD should now work.
  • Update the default Shadowsocks password to mullvad and cipher to aes-256-gcm in the CLI
  • when using it to configure a custom Shadowsocks bridge. The Mullvad bridges recently changed
  • these parameters on port 443 (which is the default port).
  • Windows:
  • Update wireguard-nt to 0.10.1.
  • Make wireguard-nt the default driver for WireGuard. This is used instead of wireguard-go and
  • Wintun.
  • Increase firewall transaction timeout from 2 to 5 seconds to lower the chance of errors when
  • setting the firewall policy.
  • Update split tunnel driver to 1.2.0.0. Notably, this driver release allows firewall filters
  • added by other software to block excluded apps.
  • Removed:
  • Windows:
  • Drop support for pre-Windows 10 systems.
  • Fixed:
  • Always kill sslocal if the tunnel monitor fails to start when using bridges.
  • Show relay location constraint correctly in the CLI when it is set to any.
  • Prevent gRPC from trying to run the app-daemon IPC communication through a HTTP proxy when the
  • environment variable http_proxy is set. This caused the app to fail to connect to the daemon.
  • Disable built-in DNS resolver in Electron. Prevents Electron from establishing connections to
  • DNS servers set in system network preferences.
  • Fix tray context menu showing or executing wrong actions, using wrong language or in other
  • ways not update properly.
  • Windows:
  • Fix app size after changing display scale.
  • Fix daemon not starting if all excluded app paths reside on non-existent/unmounted volumes.
  • Remove tray icon of current running app version when upgrading.
  • Allow Mullvad wireguard-nt tunnels to work simultaneously with other wg-nt tunnels.
  • Fix notifications on Windows not showing if window is unpinned and hidden.
  • Wait for IP interfaces to arrive before trying to configure them when using wireguard-nt.
  • Fix panic that occurs in the split tunnel monitor when a path consisting only of a prefix,
  • such as "C:", is excluded using the CLI.
  • Security:
  • Restrict which applications are allowed to communicate with the API while in a blocking state.
  • This prevents malicious scripts on websites from trying to do so. On Windows, only
  • mullvad-problem-report.exe and mullvad-daemon.exe executables are allowed to reach the API,
  • whereas on Linux and macOS only root processes are able to reach the API.

New in Mullvad VPN 2021.6 (Nov 18, 2021)

  • Fix the font for Russian. Issue introduced in 2021.6-beta1.
  • Bundle a version of Source Sans Pro containing Cyrillic.

New in Mullvad VPN 2021.6 Beta 1 (Nov 3, 2021)

  • Added:
  • Windows:
  • Add black monochromatic tray icon for Windows when using light color for tray.
  • Changed:
  • Update Electron from 11.4.9 to 15.0.0.
  • Revamp main view with blurred background behind semi-transparent buttons and switch to
  • correct font for logo. Also a slightly less bold font in other parts of the app.
  • Android:
  • Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required).
  • Removed:
  • Remove the old Let's encrypt root certificate from the API REST client. Only bundle and
  • use the latest certificate.
  • Fixed:
  • Fix desktop app showing a future date for when WireGuard key was generated.
  • Fix desktop app split tunneling view to not overflow on very long application names.
  • Prevent API requests from being made prior to the tunnel state machine being set up.
  • Rarely, failed requests could result in a deadlock.
  • Fix segmentation fault when closing app (the GUI).
  • Windows:
  • Fix detection of Windows 11. Problem reports will now correctly report Windows 11 instead
  • of Windows 10.
  • Fix race condition in split tunneling initialization. Listen to route changes before reading
  • out the default route.
  • Fix bug in split tunneling code that could make the kernel driver and mullvad-daemon out of
  • sync around which programs should be excluded when the driver took longer to respond.
  • Use route-based offline monitoring. Fixes issues where the daemon falsely entered the offline
  • state, for example when using virtual switches in Hyper-V.
  • Improve repositioning of app window after connecting/disconnecting external monitor.
  • Android:
  • Fix reconnect on app resume. Don't reconnect the tunnel every time the app is opened.
  • Fix invalid URLs. Rely on browser locale rather than app/system language.
  • MacOS:
  • Prevent app from showing when dragging tray icon on macOS.
  • Move window after dragging tray icon to new position.
  • Linux:
  • Greatly simplify behavior around custom DNS when using systemd-resolved, by not setting DNS config on interfaces other
  • than our tunnel interface.

New in Mullvad VPN 2021.5 (Oct 25, 2021)

  • Translations for new texts in the UI.

New in Mullvad VPN 2021.5 Beta 2 (Oct 19, 2021)

  • Fixed:
  • macOS:
  • Fix issue with getting PF status due to an ABI change on macOS 12 Beta 9.

New in Mullvad VPN 2021.5 Beta 1 (Oct 12, 2021)

  • Added:
  • Added possibility to filter locations by provider in the desktop app.
  • Add WireGuard over TCP CLI option for all relays.
  • Add GUI environment variable MULLVAD_DISABLE_UPDATE_NOTIFICATION. If set to 1, GUI notification will be disabled when an update is available.
  • Add setting for changing between IPv4 and IPv6 for the connection to WireGuard servers on desktop.
  • Android:
  • Added toggle for Split tunneling view to be able to show system apps
  • Windows:
  • Resolve symbolic links and junctions for excluded apps.
  • Add opt-in support for NT kernel WireGuard driver. It can be enabled in the CLI.
  • Changed:
  • Only use the account history file to store the last used account.
  • Update the out of time-view and new account-view to make it more user friendly.
  • Change the app update notification when the suggested version is a beta, to include that it's a beta.
  • Upgrade OpenVPN from 2.5.1 to 2.5.3.
  • Update Electron from 11.2.3 to 11.4.9.
  • Move OpenVPN and WireGuard settings in the advanced settings view into separate settings views.
  • Return to main view in desktop app after being hidden/closed for two minutes.
  • Linux:
  • Always send DNS requests inside the tunnel for excluded processes when using public custom DNS.
  • Windows:
  • Upgrade Wintun from 0.10.4 to 0.13.
  • Reduce tunnel setup time for OpenVPN by disabling DAD.
  • Fixed:
  • Fix link to download page not always using the beta URL when it should.
  • Fix deadlock that may occur when the API cannot be reached while entering the connecting state.
  • Fix bug causing desktop app to log in if account number field was filled when removing account history.
  • Fix lack of account expiry updates when using the app in unpinned mode and improve updating of account expiry overall.
  • Fix incorrect WireGuard relay filtering when exit and entry locations overlap.
  • Fix wrong translations when switching to/from unpinned window after changing language in the desktop app.
  • Fix in-app notification button not working for some notifications.
  • Fix incorrectly positioned navigation bar title when navigating back to a scrolled down view.
  • Fix connectivity check for WireGuard multihop when the exit hop is down.
  • Fix incorrect location and connection status while disconnecting and incorrect location in the beginning while connecting in the desktop app.
  • Improve responsiveness of the controls and status text in the main view in the desktop app.
  • Read macOS scrollbar visibility settings to decide whether or not the scrollbars should hide when not scrolling.
  • Fix IPv6 connections to WireGuard servers by not dropping select neighbor advertisements and solicitations.
  • Linux:
  • Make offline monitor aware of routing table changes.
  • Assign local DNS servers to more appropriate interfaces when using systemd-resolved.
  • Disable DNS over TLS for tunnel's DNS config when using systemd-resolved.
  • Fix DNS when combining a static resolv.conf with ad blocking DNS.
  • Check connectivity correctly on IPv6-only networks.
  • Windows:
  • Fix failure to restart the daemon when resuming from "fast startup" hibernation.
  • Fix OpenVPN not responding to shutdown signals when they are sent early on, causing it to close after 30 seconds.
  • Disable notification actions for persistent notifications since they were called when pressing close.
  • Remove deleted network devices from consideration in the offline monitor. Previously, the offline monitor may have falsely reported the machine to be online due to a race condition.
  • Recover firewall state correctly when restarting the service after a crash. This would fail when paths were excluded.
  • Fix daemon not starting when a path is excluded on a drive that has since been removed.
  • Prefer WireGuard if the constraints preclude OpenVPN and the tunnel protocol is "auto", instead of failing due to "no matching relays".
  • Retry tunnel device creation multiple times to work around issues early after boot or hibernation.
  • Android:
  • Fix erasing wireguard MTU value in some scenarios.
  • Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon properly after initialization.

New in Mullvad VPN 2021.4 (Jun 30, 2021)

  • This release is identical to 2021.4-beta1 except that it has translations for new texts in the UI.

New in Mullvad VPN 2021.4 Beta 1 (Jun 9, 2021)

  • Added:
  • When MULLVAD_MANAGEMENT_SOCKET_GROUP is set, only allow the specified group to access the
  • management interface UDS socket. This means that only users in that group can use the CLI and GUI.
  • Support WireGuard over TCP for custom VPN relays in the CLI. (Our relays don't support this yet).
  • Make app native on Apple Silicon.
  • Support WireGuard multihop using an entry endpoint constraint in the CLI.
  • Add Ad and tracker blocking to the desktop app. Implemented via DNS on the relays.
  • Add split tunneling as a beta feature. Allows excluding some applications from the VPN tunnel.
  • Changed:
  • Upgrade OpenVPN from 2.5.0 to 2.5.1.
  • Replace CLI command mullvad custom-dns with the new command mullvad dns.
  • Upgrade wireguard-go to 20210521230051 (Windows: v0.3.14)
  • Fixed:
  • Fix relay selection failing to pick a WireGuard relay when no tunnel protocol is specified.
  • Fix time left not always being translated in desktop app settings.
  • Fix API address cache to use the supplied ports instead of always using port 443.
  • Do not try to parse an empty account history.
  • Prevent tray icons from being extracted to %TEMP% directory.
  • Fix failure to create Wintun adapter due to a residual network interface by upgrading Wintun to
  • 0.10.4.
  • Wait indefinitely for IP interfaces to attach to the tunnel device to prevent early timeouts,
  • and errors setting interface metrics.
  • Prevent Microsoft Store from dropping packets in WireGuard tunnels.

New in Mullvad VPN 2021.3 (Jun 8, 2021)

  • This release is for desktop only. This release is identical to 2021.3-beta2:
  • This release has no functional changes compared to 2021.3-beta1. The only difference is that the installer and the binaries are signed with our new code signing certificate. The old one is expiring.
  • The new certificate is brand new and Windows does not really trust it yet. So there might be warnings when installing this for a while.

New in Mullvad VPN 2021.3 Beta 2 (Apr 23, 2021)

  • This release has no functional changes compared to 2021.3-beta1. The only
  • difference is that the installer and the binaries are signed with our
  • new code signing certificate. The old one is expiring.
  • The new certificate is brand new and Windows does not really trust it yet.
  • So there might be warnings when installing this for a while.

New in Mullvad VPN 2021.3 Beta 1 (Apr 13, 2021)

  • Added:
  • Preserve log of old daemon instance when upgrading on Desktop.
  • Linux
  • Always enable src_valid_mark config option when connecting to allow policty based routing.
  • Changed:
  • Allow whitespace in account token in CLI.
  • Read account token from standard input unless given as an argument in CLI.
  • Make WireGuard automatic key rotation interval mandatory and between 1 and 7 days.
  • Show default, minimum, and maximum key rotation intervals in CLI.
  • Attempt to send problem reports using other endpoints if using the primary one fails.
  • Fixed:
  • Fix GUI not showing correct view if disconnected from the daemon during app startup.
  • Fix incorrectly displayed "inconsistent version" text in settings if disconnected from daemon on
  • startup.
  • Linux
  • Further improve offline monitor to properly receive ENETUNREACH.
  • Android
  • Fix status bar having the wrong color after logging out.
  • Security:
  • Always reconnect appropriately after an upgrade. Previously, installing the app twice in
  • succession, with auto-connect disabled, would cause it to re-launch in the disconnected state.

New in Mullvad VPN 2021.2 (Feb 19, 2021)

  • Fix failure when Wintun adapter name conflicts with that of a non-Wintun adapter.
  • Fix detection of SetupAPI patch when not installed by KB2921916.

New in Mullvad VPN 2021.1 (Feb 11, 2021)

  • Fix crash on desktop when entering problem report view when using an outdated app version.

New in Mullvad VPN 2021.1 Beta 2 (Feb 4, 2021)

  • Fixed:
  • Make it impossible to apply an empty list of custom DNS server IPs.
  • Windows:
  • Only load and unload the Wintun driver once instead of on every connection.
  • Will hopefully fix an issue where it gave an error

New in Mullvad VPN 2021.1 Beta 1 (Jan 26, 2021)

  • Added:
  • Add header containing OS version to version-check API call to enable OS specific compatibility and
  • vulnerability checks.
  • Add TALPID_DISABLE_OFFLINE_MONITOR environment variable to allow users to disable offline
  • detection.
  • Changed:
  • Allow the API to be accessed while in a blocking state.
  • Prefer the last used API endpoint when the service starts back up, as well as in other tools such
  • as the problem report tool.
  • Migrate cache to a directory readable by all users, consistent with Android and Linux.
  • Change the default value of the GUI auto-connect setting to "off" and respect the setting when
  • logging in.
  • Fixed:
  • Fix Turkish translations for on/off in the bridge settings. They were inverted, so it was
  • confusing to change the setting.
  • Stop returning bogus version information when there is no version cache
  • Resolve single-label hostnames correctly.
  • Security:
  • Default to connecting when the daemon starts if the target state cache cannot be read or parsed.
  • Deny network access to the OpenVPN plugin pipe, which allowed for anonymous write access when
  • passwordless file sharing was enabled.

New in Mullvad VPN 2020.8 Beta 2 (Dec 12, 2020)

  • Added:
  • Android:
  • Add a screen to view the logs included in a problem report.
  • Changed:
  • Upgrade wireguard-go to v0.0.20201118.
  • Reduce logging about time outs when conneting to a WireGuard tunnel.
  • Fixed:
  • Android:
  • Fix login appearing to be cancelled after leaving the login screen while logging in.
  • Fix login input area missing some times when opening the login screen.

New in Mullvad VPN 2020.7 (Nov 19, 2020)

  • This release has no differences for Windows and macOS compared to 2020.6. This release is just to address a number of DNS, routing and other networking issues present on Linux in version 2020.6.

New in Mullvad VPN 2020.6 (Nov 2, 2020)

  • Except for updated GUI translations, the rest is identical to 2020.6-beta3, see that change log for all changes since last stable release.

New in Mullvad VPN 2020.6 Beta 3 (Oct 7, 2020)

  • Added:
  • Linux:
  • Add support for WireGuard's kernel module if it's loaded.
  • Add tray context menu with actions.
  • Changed:
  • Linux:
  • Open and focus app when opened from context menu instead of toggling the window.
  • Fixed:
  • Start key rotation when WireGuard key is first created.
  • Remove firewall filters (unblock internet access) when "Always require VPN" is enabled and the app
  • is uninstalled.
  • Android:
  • Fix rare crash that could happen when starting the background service.
  • Fix rare crash that happened with large text sizes and long location names on the main screen.
  • Fix UI not updating in split screen mode when the window is unfocused.
  • Fix split tunneling not being correctly configured after restarting the app.
  • Fix app reopening after pressing the Quit button because app was running multiple tasks.
  • Fix inconsistent behavior of the quick-settings tile when logged out. It would sometimes enter the
  • blocking state and sometimes open the UI for the user to login. Now it always opens the UI.
  • Mark the VPN connection as not metered, so that Android properly reports if the connection is or
  • isn't metered based solely on the underlying network, and not on the VPN connection.
  • Linux:
  • Fix split tunneling rules preventing systemd-resolved from performing DNS lookups for excluded
  • processes.
  • Honor routes other than the default route with mullvad-exclude. This is mainly to improve
  • routing within LANs.
  • Security:
  • Stop resetting the firewall after an upgrade to not leak after an upgrade.

New in Mullvad VPN 2020.5 (Jun 26, 2020)

  • Add Korean, Polish and Thai languages to the desktop app.

New in Mullvad VPN 2020.5 Beta 2 (Jun 17, 2020)

  • Changed:
  • Send an ICMP reject message or TCP reset packet when blocking outgoing packets to prevent timeouts.
  • Fixed:
  • Show both WireGuard and OpenVPN servers in location list when protocol is set to automatic on
  • Linux and macOS.
  • Fix missing in app notification about unsupported version.
  • Prevent auto-connect on login if the account is out of time.
  • Fix race that caused WireGuard key upload to fail which could cause the "too many keys" error and
  • the tunnel to invalidly fall back to OpenVPN.
  • Windows:
  • Fix race in network adapter monitor that could result in data corruption and crashes.
  • Upgrade miow dependency to stop daemon from crashing when the management interface named pipes
  • were accessed with accesschk.exe and some web browsers.
  • Fix race that may rarely occur during install when obtaining the GUID of a newly created TAP
  • adapter.
  • Security:
  • Tighten the firewall rules that were allowing traffic to the relay server over the physical
  • network interface. On Linux and macOS now only processes running under root are allowed to send
  • traffic to this port and IP. On Windows only the Mullvad VPN binaries are allowed to send.
  • This fixes audit ticket MUL-02-002.
  • Windows:
  • Tighten the firewall rule allowing traffic on port 53 to the relay server IP on the physical
  • interfaces if the VPN tunnel is established on port 53 to only allow UDP. This fixes
  • audit ticket MUL-02-004.
  • Deny access to the management interface named pipe for the NT AUTHORITYNETWORK group.
  • This makes the named pipe no longer accessible under the IPC$ network share.
  • This fixes audit ticket MUL-02-007.

New in Mullvad VPN 2020.4 Beta 3 (Apr 30, 2020)

  • Added:
  • Add shell completions for the mullvad CLI. Installed for bash and zsh on Linux and zsh on macOS.
  • Changed:
  • Downgrade to Electron 7 due to issues with tray icon in Electron 8.
  • Use rustls instead of OpenSSL for TLS encryption to the API and GeoIP location service.
  • Windows:
  • When required, attempt to enable IPv6 for network adapters instead of failing.
  • Android:
  • Update the WireGuard Key screen so that it looks the same as on the desktop app. It is now reached
  • through the Advanced settings screen.
  • Fixed:
  • Enable IPv6 in WireGuard regardless of the specified MTU value, previously IPv6 was disabled if
  • the MTU was below 1380.
  • Windows:
  • Improve offline detection logic.
  • Enable missing IPv6 interface on the WireGuard TUN adapter when it has been disabled.
  • Android:
  • Change button colors on problem report no email confirmation dialog to match the desktop version.
  • Fix crash when attempting to run app from the non-default location, such as the SD card or from a
  • different user profile.
  • Security:
  • macOS:
  • Ship native Node modules unpacked to prevent malware checks by macOS on each run. The malware
  • checks delayed app startup when "block when disconnected" was enabled and performed system network
  • requests to Apple.
  • Android:
  • Fix failure to create tunnel when app is started with auto-connect enabled. This would sometimes
  • lead to a traffic leak.

New in Mullvad VPN 2020.4 Beta 2 (Apr 8, 2020)

  • Added:
  • Add possibility to create account in the desktop app.
  • Add possibility to pay with voucher in the desktop app.
  • Changed:
  • Allow fc00::/7 instead of fd00::/8 in the firewall when local network sharing is enabled.
  • Should unblock all unique local addresses.
  • Upgrade from Electron 7 to Electron 8.
  • Formalize what operating system versions we support in the readme. In practice
  • this means dropped support for Android 5 and 6 and Fedora 28 and 29 right away, Ubuntu 16.04
  • support will end as soon as Ubuntu 20.04 comes out.
  • Windows:
  • Windows 7 only: Address packet loss issues with OpenVPN on some systems by reverting the TAP
  • adapter driver to an older NDIS 5 driver.

New in Mullvad VPN 2020.3 Beta 1 (Feb 20, 2020)

  • Security:
  • Fix stack overflow caused by WireGuard key rotation timers. When the daemon crashed it was restarted automatically. But it did not connect (depending on settings), leaving a leak.

New in Mullvad VPN 2020.2 Beta 1 (Feb 13, 2020)

  • Added:
  • Add reconnect button to the desktop app.
  • Add monochrome option for the tray icon on Windows and Linux.
  • Show OS notification when account is close to expiry on desktop platforms.
  • Warn users running old app versions when creating problem report.
  • Android:
  • Add option to enable or disable local network sharing.
  • Show account history in login fragment
  • Changed:
  • Change project copyright and company name from Amagicom AB to Mullvad VPN AB
  • Only reconnect when settings change if a relevant tunnel protocol is used.
  • Adjust padding of tray icon on Windows and Linux to better match other icons.
  • Change the zoomlevel of the map in the desktop app to make it less zoomed in.
  • Bundle new API IP with the app (Old: 193.138.218.73, new: 193.138.218.78)
  • Removed:
  • Remove city/country labels on map in the desktop app.
  • Fixed:
  • Fix app sometimes getting stuck in connecting state when using WireGuard.
  • Android:
  • Fix crash when removing the service from foreground on Android versions below API level 24.
  • Fix crash that happened in certain situations when retrieving the relay list.
  • Fix crash caused by initialization race condition.
  • Windows:
  • Fix "exhausted namespace" installation error on some non-English systems.
  • Security:
  • Stop DNS leak that could happen on all desktop platforms if "Local network sharing" was enabled
  • and the device had a default DNS resolver on the local private network. The leak could happen
  • during these states: While connecting, when blocked due to an error happening and when
  • disconnected if the "block when disconnected" setting was enabled.
  • This issue has been present on all previous versions of the app.
  • Windows:
  • Prevent DNS leak that could happen while connected if "Local network sharing" was enabled
  • and the device had a default DNS resolver on the local private network. This issue was
  • only present in the 2020.1 release.

New in Mullvad VPN 2020.1 Beta (Feb 5, 2020)

  • Added:
  • Add translations for Finnish and Danish.
  • Copy WireGuard key when clicking on it.
  • Windows:
  • Sign all binaries in the app instead of just the installer.
  • Changed:
  • Increase OpenVPN ping timeout from 20 to 25 seconds. Might make working tunnels disconnect
  • a bit less frequently.
  • Use traffic data from WireGuard to infer connectivity, instead of continuously pinging.
  • Should improve stability of the connection and reduce power use.
  • Update wireguard-go to v0.0.20200121
  • Remove WireGuard keys from accounts when they are removed from the local account history.
  • Upgrade from Electron 6 to Electron 7.
  • Disable WireGuard protocol option if there's no WireGuard key.
  • Windows:
  • Use a branded TAP driver for OpenVPN to prevent conflicts with other software and solve issues
  • related to driver upgrades. Also use the NDIS 6 driver on Windows 7.
  • Be more aggressive when installing routes, in effect taking ownership of existing duplicate route
  • entries. This allows the daemon to initialize properly even if a previous instance did not have a
  • clean shutdown.
  • Fixed:
  • Don't try to replace WireGuard key if account has too many keys already.
  • Fix bogus update notification caused by an outdated cache.
  • Fix layout issues when showing messages in WireGuard key view.
  • Fix translation of "System default" after selecting "System default" in language settings.
  • Windows:
  • Fix regression due to which a TAP adapter issue was not given as the specific block reason when
  • the tunnel could not be started.
  • Fix occasional failure to shut down the old daemon process during installation by killing it if
  • necessary.
  • Make WireGuard work with IPv6 enabled even if there is no functioning TAP adapter for OpenVPN.
  • Restart daemon when coming back from system hibernation with terminated user session, since
  • it's perceived as a cold boot from the user's perspective, so the app should act accordingly.
  • Change the optimization level for releases from the default value to s, as a temporary fix for
  • the system service crashing on Windows for newer CPU models.
  • Security:
  • Add automatic key rotation for WireGuard (every 7 days by default). This limits the potential
  • for an attacker to correlate traffic with a public key and identity, and reduces the harm of
  • software that might leak the private tunnel IP (since it is no longer fixed).
  • Windows:
  • Stop OpenVPN from loading C:etcsslopenssl.cnf on start. This file was being loaded when an
  • OpenVPN tunnel was being created. Any user could create the file, and the process loading it runs
  • as the SYSTEM user. Since the config file allows loading arbitrary code, it was an attack vector
  • allowing local unprivileged users to run code as SYSTEM.

New in Mullvad VPN 2019.10 (Dec 12, 2019)

  • Fixed:
  • Fix improved WireGuard port selection
  • Windows:
  • Register 'NSI' service as a dependency of the daemon service.
  • Set daemon service SID type as 'unrestricted'.
  • Properly tear down routes after disconnecting from WireGuard relays.
  • Fix bug that prohibited WireGuard from working over port 53.

New in Mullvad VPN 2019.9 (Oct 11, 2019)

  • Added:
  • Add ability to submit vouchers from the CLI.

New in Mullvad VPN 2019.9 Beta 1 (Oct 9, 2019)

  • Added:
  • Add ability to change the desktop GUI language from within Settings.
  • Add ability to create new accounts from the CLI.
  • Windows:
  • Add CLI tools (the resource/ directory) to the system PATH.
  • macOS:
  • Notarize release builds with AppleMaking them run without warning on 10.15 Catalina.
  • Android:
  • Add settings button in launch and login screensMaking it possible to reach the problem report.
  • Add support for Android 5.x Lollipop.
  • Allow logging in without connectivity.
  • Changed:
  • Account and WireGuard keys links in the App will now log the user in automatically.
  • Update FAQ URL to https://mullvad.net/help/tag/mullvad-app/.
  • Removed:
  • Remove support for MULLVAD_LOCALE environment variable.
  • Android:
  • Remove connect action button in notification when logged out.
  • Fixed:
  • Fix mullvad relay update to trigger a relay list download even if the existing cache is new.
  • Don't include problem-report arguments in error loggingStops user email from ending up in the
  • log file on error.
  • Fix handling of tunnel file descriptor for WireGuardDuplicating and closing it correctly.
  • Android:
  • Show WireGuard key age in local timezone instead of UTC.
  • Android 6 and older: Fix notification button icons.
  • Fix collapsing tunnel information causing tunnel out IP address information to be lost.
  • Various stability fixes.
  • Windows:
  • More adjustments in online/offline detection logicShould prevent more users from being stuck
  • in the offline stateShould also make the app notice network disconnects faster.

New in Mullvad VPN 2019.8 (Sep 24, 2019)

  • Updated translations for new strings in the app

New in Mullvad VPN 2019.8 Beta 1 (Sep 20, 2019)

  • Added:
  • Add ability to replace the WireGuard key with a new one. Allows manual key rotation.
  • Show age of currently set WireGuard key.
  • Add bridge selection under "Select location" view, when the bridge mode is set to "On".
  • Changed:
  • Decreased default MTU for WireGuard to 1380 to improve performance over 4G
  • WireGuard key page now shows a label explaining why buttons are disabled when in a blocked state
  • WireGuard key generation will try to replace old key if one exists.
  • Show banner about new app versions only if current platform has changes in latest release.
  • Don't make a GeoIP lookup by default in CLI status command. Add --location flag for enabling it.
  • Sort relay locations and hostnames with natural sorting. Meaning se10 will show up after se2.
  • Show inactive relays as disabled instead of hiding them completely from location selection list.
  • Upgrade Electron from version 4 to version 6.
  • Windows:
  • Change uninstaller registry key name from Mullvad VPN to a generated GUID.
  • Fixed:
  • Fix old settings deserialization to allow migrating settings from versions older than 2019.6.
  • Fix various small issues in GUI<->daemon communication.
  • Make GUI WireGuard key verification resilient to failure.
  • Fix issue where daemon would try and connect with UDP when the tunnel protocol is set to OpenVPN
  • and the bridge mode is set to "On".
  • Don't start ping monitor loop if first ping fails when checking WireGuard connection.
  • Respect localization when sorting the relay locations list.
  • Removed:
  • Windows:
  • Removed logic that implemented monitoring and enforcement of DNS settings.

New in Mullvad VPN 2019.7 (Aug 12, 2019)

  • Added:
  • Add more details to the block reason shown in GUI when the daemon fails to generate tunnel parameters.
  • Fixed:
  • Check and adjust relay and bridge constraints when they are updated, so no incompatible combinations are used.

New in Mullvad VPN 2019.6 (Jul 15, 2019)

  • Add simplified Chinese translations.

New in Mullvad VPN 2019.6 Beta 1 (Jul 8, 2019)

  • Added:
  • Add a switch to turn off system notifications under Preferences in the GUI.
  • Windows
  • Add migration logic to restore lost settings after major Windows update.
  • Fixed:
  • Fix the mix of traditional and simplified Chinese. Separating them to two locales and fall back
  • to English where translations are missing.
  • Windows:
  • Adjust network interface checks in offline detection logic. Prevents the app from being stuck
  • in the offline state when the computer is in fact online.

New in Mullvad VPN 2019.5 (Jun 17, 2019)

  • Add Norwegian translations

New in Mullvad VPN 2019.5 Beta (Jun 14, 2019)

  • Added:
  • Add support for roaming between connections when using wireguard.
  • Allow mDNS/discover to 239.255.255.251 when local network sharing is enabled. This change fixes
  • the Wi-Fi calling via iPhone when both devices are on the same network.
  • Allow incoming DHCPv4 requests and outgoing responses if allow local network is enabled. Enables
  • being a DHCPv4 server.
  • Add GUI translations for Italian, Japanese, Dutch, Portugese, Russian and Turkish.
  • Add missing GUI translations for Czech Republic, USA and UK in the select location view.
  • Add translations for the current location displayed on the main screen in the GUI.
  • Allow a subset of NDP (Router solicitation, router advertisement and redirects) in the firewall.
  • Add automatic Shadowsocks bridge usage. Will automatically try to obfuscate the tunnel via
  • Shadowsocks after a number of failed connection attempts.
  • Automatically include frontend logs in problem report when ran from CLI.
  • Changed:
  • Relax the allow local network rules slightly. only checking either source or destination IP field
  • instead of both. They are still unroutable.
  • CLI commands that are just intermediate commands, and require another level of subcommands, will
  • automatically print the available subcommands, instead of an error if none is given.
  • Removed:
  • Remove the help subcommand in the CLI. Instead get help with the --help long flag.
  • Fixed:
  • Stop allowing the wrong IPv6 net fe02::/16 in the firewall when allow local network was enabled.
  • Instead allow the correct multicast nets ff02::/16 and ff05::/16.
  • Fix the regression that allowed to get past the login screen using the invalid account token.
  • Fix the GUI crash caused by a derefence of the already released remote object in Electron.
  • Windows:
  • Add better offline detection.

New in Mullvad VPN 2019.4 Beta 1 (May 3, 2019)

  • Added:
  • When IPv6 is enabled, get both exit IP versions from am.i.mullvad.net and show.
  • Add translations for country and city names in the relay list and map.
  • Fixed:
  • Reset the tray icon padlock to the unsecured state when losing connectivity with the daemon.
  • Windows:
  • Increase timeout when updating DNS settings. Should make the DNS management fail less often.
  • Use dynamic naming of TAP adapter to avoid collisions with existing adapters.
  • Security:
  • Windows:
  • Make the firewall rules permanent until reboot, or until the daemon removes them. Should make
  • the kill switch active even if the daemon dies unexpectedly.

New in Mullvad VPN 2019.3 (Apr 2, 2019)

  • Windows:
  • Correct dependencies on installer logger plugin to resolve installation issues on Windows 7/8.

New in Mullvad VPN 2019.2 (Apr 1, 2019)

  • Removed:
  • Remove the Mullvad OpenVPN intermediate transition CA. Used when transitioning from the old to
  • the new root CA. Now the app only bundles and trust the new Mullvad root CA valid until 2028.
  • Fixed:
  • Read the relay list from cache only if it's newer than the version bundled in the app.

New in Mullvad VPN 2019.1 Beta 1 (Jan 25, 2019)

  • Added:
  • Handle "block when disconnected" extra kill-switch level in the GUI, showing the disconnected
  • state as blocked when appropriate and also having a toggle switch for the setting in the Advanced
  • Settings screen.
  • Add a drop-down warning to notify the user when the account credits are running low.
  • Allow the 169.254.0.0/16 private network in addition to the other networks allowed when local
  • network sharing is enabled.
  • Improve the confirmation dialog when submitting a bug report without an email specified.
  • Changed:
  • Disable buttons and menus that open external links when the app knows that there is no internet
  • connection.
  • The auto-start and auto-connect toggles in the GUI have been reworked so that auto-connect
  • configures the GUI to automatically connect when it starts and so that it will only auto-connect
  • on boot when both settings are set.
  • Fixed:
  • Stop GUI from glitching during the short reconnect state.
  • Dismiss notifications automatically after four seconds in all platforms.
  • Fix error printed from the CLI when issuing relay update.
  • Fix relay list update interval. Should now handle sleep better.
  • Prevent GUI from sending connect commands to the daemon every time it establishes a connection to
  • it. Only send connect once (if auto-connect is enabled.)
  • Prevent possible reconnect loop where the GUI would indefinitely reconnect to the daemon.
  • Fix the bug which enabled users to return to the login view if they went to settings while
  • logging in.
  • Handle in the GUI, if something external changes the account token in the daemon. I.e. triggered
  • by CLI unsetting or resetting it.
  • Windows:
  • Gracefully block when TAP adapter is missing or disabled, instead of retrying to connect.

New in Mullvad VPN 2018.6 (Dec 12, 2018)

  • What's new in this version:
  • CLI users can now use the command block-when-disconnected to activate an extra kill switch that blocks all network traffic, even when you yourself have disconnected from Mullvad.
  • We continue to improve error messages that provide more specific details about the issue at hand.
  • The pop-up system notifications disappear when you open the app, instead of covering it.
  • (Windows The padlock icon in the taskbar is now visible instead of hidden.
  • A few bug fixes:
  • In the connection screen, click on "connection details" (previously "MORE" and you should now always see both your IP and exit IP.
  • Windows users, we've hopefully decreased a number of headaches for you:
  • Various antivirus software will now complain a bit less about the app's installation.
  • The VPN connection will be restored more quickly after the computer has been in sleep mode.
  • When you are successfully connected to Mullvad, the network connection tray icon should no longer show a warning triangle signaling that you have no internet (even though you do.
  • We got rid of the WMI error in the installer.
  • If your internet broke after disconnecting from Mullvad: the disconnecting process may now take a bit longer but your internet will remain intact afterward.

New in Mullvad VPN 2018.5 Beta 1 (Nov 12, 2018)

  • Ask the API for the public IPv4 address

New in Mullvad VPN 2018.4 (Oct 16, 2018)

  • Fixed:
  • Fix so changing the OpenVPN mssfix setting triggers setting up a new tunnel with the new setting.

New in Mullvad VPN 2018.4 Beta 2 (Oct 9, 2018)

  • Monitor and enforce IPv6 DNS settings on network interfaces (previously IPv4-only).

New in Mullvad VPN 2018.4 Beta 1 (Oct 1, 2018)

  • Added:
  • Allow packets to the fe80::/10 and fe02::/16 IPv6 networks when local network sharing is enabled.
  • Should allow IPv6 over the LAN, and mDNS host discovery which in turn should allow Apple AirDrop
  • and Handover among other IPv6 based LAN discovery services.
  • Changed:
  • Logging in no longer requires a connection with the Mullvad API server.
  • Replace repeated Disconnecting followed by Connecting notifications with a single
  • Reconnecting notification.
  • Fixed:
  • Don't temporarily show the unsecured state in the GUI when the app is reconnecting or blocking.
  • Periodically update list of relays in the GUI.
  • Redact IPv6 address that start or end with double colons in problem reports.
  • Improve tray icon response time by disabling the double click handling.
  • Security:
  • Prevent Electron from executing/navigating to files being drag-and-dropped onto the app GUI. This
  • fixes MUL-01-001

New in Mullvad VPN 2018.3 (Sep 17, 2018)

  • Security:
  • Lock the installation directory to C:Program FilesMullvad VPN. This prevents potential local
  • privilege escalation by ensuring all binaries executed by the SYSTEM user, as part of the
  • Mullvad system service, are stored where unprivileged users can't modify them

New in Mullvad VPN 2018.3 Beta 1 (Sep 14, 2018)

  • It is now possible to choose a specific server from the Locations menu.
  • Chromecast, Sonos speakers, and similar wireless devices work while the app is connected. Just ensure that "Local network sharing" is turned on in the Preferences menu.
  • All scrollbars are now draggable.
  • You now have the option of disabling IPv6, found in the Advanced menu.
  • A warning sign in the Settings menu now clearly shows if you're running an outdated version of the app.
  • If the app is unable to create a secure connection, it will now display an error message while also blocking the internet.
  • For terminal users, the command for displaying a list of server locations has been simplified to mullvad relay locations
  • Fixed the issue in which some users were stuck in the "Connecting to daemon" view.
  • When uninstalling the app, your app's local log files and cache are also erased. You are given the option to also delete your settings.
  • Should you have problems when installing the app, an installation log file is now created and saved on your device for troubleshooting.

New in Mullvad VPN 2018.2 (Sep 10, 2018)

  • This stable release is identical to 2018.2-beta3

New in Mullvad VPN 2018.2 Beta 1 (Jul 3, 2018)

  • While our new, next-generation VPN app differs in many ways from its predecessor, here are a few changes to be aware of:
  • A map clearly indicates where in the world you are connected to one of Mullvad's servers. When disconnected, the map will show your actual location.
  • The kill switch is always on. In other words, if the app accidentally disconnects, your internet traffic will be blocked until a secure connection is reestablished or you manually disconnect from the app.
  • DNS leak protection is always on. There is no option to disable it.
  • If you run out of time on your account while connected, your internet traffic will be blocked until you manually disconnect from the app or add more time.

New in Mullvad VPN 67 (Feb 9, 2018)

  • Ask the API for the public IPv4 address

New in Mullvad VPN 66 (Jan 30, 2018)

  • Improvements:
  • Reworked the parts communicating with the Mullvad infrastructure.
  • Removed the encryption methods 128 bit AES, Camellia, SEED and 3DES (Mullvad servers do not support these any more).
  • Ending support for older versions:
  • The newest version of our desktop client is an important one for Windows and Linux. In about a month's time, versions older than 66 will no longer be supported. This change will be noticeable if you haven't updated by then, and your client will not work properly. Download version 66 now to ensure a smooth transition.

New in Mullvad VPN 65 (Oct 25, 2017)

  • "Any" is now the default country. This setting will choose a server in Sweden or the Netherlands.
  • The settings.ini backup files include the date so that recovery of account numbers should be easier if the file gets corrupted.
  • We have removed obfsproxy.
  • Fixes an issue causing the serverlist to not be updated
  • Included information on how to improve your privacy when connected the first time and when entering the account number
  • Windows specific:
  • Fixes an issue where multiple gateways are detected, and the client is then unable to connect to a VPN server.
  • Bundle OpenVPN 2.4.4

New in Mullvad VPN 64 (Sep 5, 2017)

  • Improved removal of usernames in problem reports
  • Use user / pass as login instead of certificates
  • Changes made to how backupservers.txt is utilized, should mitigate the "no servers matching" issue
  • Will now show a link if there is a newer version available
  • sndbuf / rcvbuf now only accepts a value between 8192-999999
  • Resolve the issue with multiple default gateways under Windows
  • Fix issue when setting metric on adapters that uses non ascii characters in their names
  • Bundle OpenVPN 2.4.3
  • Reduce the "List index out of bounds" issues, for example when when no gateway is detected

New in Mullvad VPN 63 (May 29, 2017)

  • Show error to user instead of crash if bootstrapping credentials on first
  • connect fails.
  • Add extra fallback for how to reach master. Should improve the situations for
  • users on networks that hijack packets on port 53
  • Automatically install pip dependencies when installing from source dist
  • Enable "Block the internet on connection failure" by default
  • Enable "Stop DNS leaks" by default
  • Increase privacy in error reports by removing MAC addresses, usernames and account numbers
  • Increase speed by preferring UDP connections to our servers over TCP
  • Upgrade bundled OpenVPN to 2.4.2
  • Allow custom arguments to OpenVPN
  • Windows specific:
  • Install NDIS5 version of TAP driver on Windows 7. Should improve throughput on
  • some Windows 7 machines.
  • Make sure the TAP interface has the lowest metric to speed up DNS queries on
  • Windows 10 Creators Update

New in Mullvad VPN 62 (Mar 15, 2017)

  • Make fewer connection attempts when fetching the server list before setting
  • up a tunnel. Should improve the time it takes to connect the VPN tunnel
  • Add fallback for failed string decoding. Removes some crashes on systems with
  • certain languages. Experienced on Chinese Windows
  • Make account expired dialog non-modal, thus not blocking the entire client
  • Helps keep the leak protection active for cases where account time runs out
  • during active usage of the tunnel
  • Add Turkish translation
  • Add revoked server certificates to CRL
  • Try to detect Windows shutdown and stop trying to change routes in that state
  • Upgrade OpenVPN to 2.4.0 and OpenSSL to 1.0.2k

New in Mullvad VPN 61 (Nov 23, 2016)

  • Add more country and region names for better display of server location.
  • Adapt links in client to URL structure of new Mullvad website.
  • Remove possibility to create trial account from the client. Use the homepage,
  • https://mullvad.net instead.
  • Change the way our account server is contacted. Helps people with DNS
  • problems.
  • Windows specific:
  • Upgrade bundled OpenVPN to 2.3.13 and OpenSSL to 1.0.1u.
  • Fix bug that prevented the GUI from showing up.
  • Handle errors while setting DNS in a better way so client does not crash.
  • Turn 'Stop DNS leaks' on by default. This works better for most users.
  • Fix bug that sometimes added incorrect gateway when restoring settings on
  • exit.

New in Mullvad VPN 60 (Aug 10, 2016)

  • Check settings for errors on load. Prevents some crashes when settings.ini is malformed. Fixes rare 'Is not a boolean'-error.
  • Fix bug that prevented connection details from being shown when connected to a server in a previously unknown country.
  • Add advanced option for controlling if the client should automatically connect when starting. Default is still to connect automatically.
  • Add support for more specific server regions than just countries.
  • Change default country from any (random selection) to Sweden.
  • Clean out unused OpenVPN directives from the configuration.
  • Windows specific:
  • Fix bug that would restore persistent routing table entries as non-persistent.

New in Mullvad VPN 59 (May 27, 2016)

  • Show UI before doing any network requests for faster client startup.
  • Better description of some UI elements.
  • Small UI bug fixes.
  • Fall back to UTF-8 on systems without a default encoding/locale.
  • Remove code tests from releases.
  • Remove logging in obfsproxy to be more portable between obfsproxy versions.
  • Add possibility to specify network socket buffer sizes in the advanced
  • settings. Can increase throughput in some cases. Mainly on high latency UDP.
  • Windows specific:
  • Greatly speed up DNS management by not waiting for a network timeout.
  • Upgrade OpenVPN to 2.3.11 and OpenSSL to 1.0.1t.
  • Upgrade TAP network driver to 9.21.2.
  • Increase default socket buffer sizes from 8 kiB to 128 kiB on Windows 7 for better throughput on high latency connections over UDP.

New in Mullvad VPN 58 (Jan 20, 2016)

  • Fix bug preventing client from connecting if no firewall is active. Mainly affects Windows but could potentially occur on other platforms as well.

New in Mullvad VPN 57 (Jan 19, 2016)

  • Add new setting to block incoming UDP traffic.
  • Fix a bug where the help button in non-major client versions leads to an
  • invalid page url.
  • Windows specific:
  • Fix bug caused by unexpected output when parsing routing tables.
  • Fix bug in the parsing of network interface lists.
  • Upgrade the bundled OpenVPN binary to 2.3.9.
  • Enable the new '--block-outside-dns' feature in OpenVPN.
  • Bundle and enable the 'block-incoming-udp' plugin in OpenVPN.
  • Remove the DNS-leak warning message from the GUI since '--block-outside-dns'
  • fixes the problem.

New in Mullvad VPN 56 (Dec 19, 2015)

  • Include platform information in the log to help debugging.
  • Include more platform information in problem report such as OS architecture
  • and locale.
  • Windows specific:
  • Fix bug caused by unexpected output when parsing routing tables.
  • Include information about client and OS version in installer log.
  • Fix bug caused by non-ascii characters in OS error messages.
  • Correctly report OS version on Windows 10.

New in Mullvad VPN 55 (Nov 30, 2015)

  • Clarify installation instructions in README.
  • Remove all direct configuration calls from the GUI controls.
  • Windows specific:
  • Handle encoding problems triggered by OS error output.
  • Refactor route management class for handling multiple interfaces properly.
  • Add a warning about potential DNS leaks on Windows 8 and 10 and recommend
  • enabling 'Block internet on connection failure' to fully prevent leaks.
  • Fix bug caused by storing IPv6 DNS server addresses in an incorrect format.

New in Mullvad VPN 54 (Nov 11, 2015)

  • Let clientversion be a string to allow point-versions
  • Simplify default gateway monitor scheduler
  • Fix bugs triggered by OS error ouput with non-ascii characters
  • Update the IP address in the included DNS backup file to the current one
  • Fix bug causing client to get stuck with non-matching key and certificate
  • Improve handling and killing of OpenVPN processes
  • Fix issue with locked OpenVPN log files by using an incrementing counter
  • in the file name
  • Limit the connect timeout to only apply to setting up the tunnel

New in Mullvad VPN 53 (Sep 23, 2015)

  • More effective and cleaner shutdown of OpenVPN.
  • Do not depend on output in specific language for executed commands.
  • Fixes problems with non English operating systems.
  • Remove the exclude_swedish feature.
  • Check if Windows Firewall service is running. If not then disable the
  • block_local_network option and require tunneling of IPv6.
  • Fix small GUI glitch around version numbers.
  • Make the installer check if Mullvad is running, if so tell the user
  • to quit Mullvad before upgrading.

New in Mullvad VPN 52 (Sep 18, 2015)

  • Better error logging and problem reports
  • Correctly verify master cert, not a security issue but checked cert too often
  • Remove disable_ipv6 option. Now not having tunnel_ipv6 is the same thing
  • Client can recover from a corrupted settings file
  • Fix bug with lock file and making sure only one client is running
  • Improved server selection
  • Fix bug where changing settings during an active VPN connection sometimes created problems
  • Fix text encoding bug for users with non ASCII letters in their username.
  • Drop support for Windows XP. The client will no longer run on Windows XP.
  • Upgraded TAP driver.
  • Fix bug preventing tunneling IPv6 traffic when blocking local network
  • Better management of file locks, getting rid of a common Windows 10 bug.

New in Mullvad VPN 51 (Aug 4, 2015)

  • Settings and logs moved to platform standard directories.
  • Improved problem reports and their content.
  • Output warnings and errors in the terminal.
  • All settings are included in settings.conf, none are hidden.
  • Fix rare bug on machines that can't resolve "localhost".
  • Windows specific:
  • Support for Windows 10.
  • Fix bug with Stop DNS leaks that some users experienced.

New in Mullvad VPN 50 (Jul 24, 2015)

  • Add option to block the local network using firewall rules to prevent the DNS
  • hijack exploit.
  • Fix a bug which made it impossible to use obfsproxy.

New in Mullvad VPN 4.9 (Mar 5, 2015)

  • It contains a patch against the FREAK vulnerability. Users of our client for Windows and OSX need to upgrade to the new version. Users of plain OpenVPN should download new configuration files and update their OpenVPN client.

New in Mullvad VPN 4.8 (Feb 25, 2015)

  • It primarily solves an issue with Stop DNS leaks on systems with a non-english Windows install.

New in Mullvad VPN 4.7 (Feb 21, 2015)

  • It solves a few DNS leak issues and uses AES-256 as the default encryption cipher.

New in Mullvad VPN 4.6 (Dec 6, 2014)

  • It displays both the currently installed version and the latest available version. It also fixes a bug that produced too many error dialogs.

New in Mullvad VPN 4.5 (Oct 25, 2014)

  • It fixes a bug that would cause the GUI to hang and thus show the wrong connection status.

New in Mullvad VPN 4.2 (Mar 28, 2014)

  • Changes since version 41:
  • Relevant windows are now frames, not dialogs
  • UI overhaul. There are now two tabs in the settings window; status and settings
  • The status tab shows time left, connection status, current IP, country and the server which you are connected to
  • You are able to connect, disconnect and quit from the status tab
  • Settings window is now opened if trying to start mullvad
  • when it's already running
  • Improved shutdown of the client
  • Always run as python2 to work without change on more system configurations
  • Now correctly removes all IPv6 blocks
  • Not being able to connect to our master server should less likely result in DNS problems when "Stop DNS leaks" is enabled
  • No more blocking of connection attempts to master through our vpn servers when "Block internet on connection failure" is enabled
  • Various code cleanups and bugfixes
  • Windows specific:
  • Added autostart feature
  • Forcefully kill openvpn if failing to close with telnet
  • Now restores multiple DNS servers if "Block DNS leaks" is enabled, not just one
  • Updated openvpn and TAP-drivers to version 2.3.2 and build version 07/02/2012 respectively
  • The UI overhaul (described above) should improve the experience on windows 8 when using modern UI

New in Mullvad VPN 3.8 (Jun 27, 2013)

  • Version 38 is now available for download featuring improved connection monitoring.

New in Mullvad VPN 3.7 (Jun 27, 2013)

  • It fixes a number of problems, the most important being starting on freshly installed Windows XP