VSVPNScorecard
← All VPNs

Mullvad

Flat-rate, account-number anonymity from Sweden.

mullvad.net
96/100Overall score
Jurisdiction
Sweden (fourteen eyes)
Founded
2009
Owner
Mullvad VPN AB (Amagicom AB)
Best price
$5.80/mo
Devices
5
Free tier
No
Privacy88
Security100
Transparency100
Ethics100

Best for

  • · Privacy purists
  • · Anonymous signup & payment
  • · Whistleblowers and journalists

Not ideal for

  • · Large streaming libraries (no port forwarding, modest network)
  • · Bargain hunters wanting multi-year discounts

Strengths

  • Account-number signup with no email or personal data
  • Flat €5/mo, no manipulative tiers or upsells
  • Accepts cash and Monero; RAM-only servers
  • Repeatedly audited; survived a real police search with no data to give

Weaknesses

  • No free trial and only a 14-day refund (not on cash payments)
  • Removed port forwarding in 2023, weakening some P2P use
  • Sweden sits within the 14 Eyes alliance

Protocols & encryption

The tunnelling protocols this service offers and the cryptography behind them.

WireGuard

Modern

A modern, lean protocol (~4,000 lines of code) that is fast and easy to audit. Its cryptography is fixed and state-of-the-art, with no weak options to misconfigure.

Data cipher
ChaCha20-Poly1305
Key exchange
Curve25519 (ECDH)
Integrity
BLAKE2s

OpenVPN

Trusted

The mature, widely-trusted open-source standard. Flexible and heavily audited over two decades, though slower than WireGuard.

Data cipher
AES-256-GCM
Key exchange
RSA-4096 / ECDH
Integrity
SHA-256 / SHA-512 HMAC
This provider's setup
Stated data cipher
ChaCha20 (WireGuard) / AES-256 (OpenVPN)
Stated handshake
Curve25519
Perfect forward secrecy
Yes
Post-quantum resistant
Yes
RAM-only servers
Yes
Kill switch
Yes
First-party DNS (leak protection)
Yes
IPv6
Supported

Post-quantum: Quantum-resistant WireGuard tunnels using Classic McEliece 460896 + ML-KEM-1024 (Kyber lineage); a post-handshake exchange sets a WireGuard pre-shared key. Default on desktop since the 2025 releases.

Full data sheet

Every attribute we track, coloured by whether it helps or hurts your privacy.

Company & jurisdiction
Based inSweden
Eyes alliance14 Eyes
Enemy of the InternetNo
OwnerMullvad VPN AB (Amagicom AB)
Conglomeraten/a
Founded2009
Logging
Traffic / activityNone kept
DNS requestsNone kept
TimestampsNone kept
BandwidthNone kept
Source IP addressNone kept

No activity or connection logs; only a live count of active connections to enforce the 5-device limit.

Payment & anonymity
Anonymous signupYes
Accepts cashYes
Accepts cryptoYes
PGP keyYes
Protocols & features
OpenVPNYes
WireGuardYes
Proprietary protocoln/a
Multi-hopYes
ObfuscationYes
Kill switchYes
First-party DNSYes
RAM-only serversYes
Port forwardingNo
P2P / torrentingYes
IPv6Supported
Encryption
Data cipherChaCha20 (WireGuard) / AES-256 (OpenVPN)
HandshakeCurve25519
Transparency
Open-source clientsYes, all apps
Independent audits2
Transparency reportYes
Court / seizure-testedProven

In April 2023 Swedish police executed a search warrant at Mullvad's office and left empty-handed, there was no customer data to seize.

Infrastructure
Simultaneous devices5
Countries45
Serversn/a
Linux supportGUI app
Pricing
Month-to-month$5.80
Best $/mo$5.80
On planflat rate (no discount)
Free trialn/a
Refund window14 days
Free tierNo
Ethics
Logging policyConsistent
Marketing honestyNo overclaiming

Independent audits

  • Assured AB· 2025 · web application penetration testreport ↗
  • Cure53· 2020 · apps + infrastructure

Owned by Amagicom AB. Pricing is a deliberate single flat rate whether you pay monthly or yearly; crypto payments get a 10% discount.

Sources

Last verified 2026-06-17. Point-in-time data, so always confirm on the provider's own site.

Summarise this site with AI