Mullvad review

Specifications at a glance

A condensed reference of the technical details that come up most often in reader questions about Mullvad. None of these numbers are decisive on their own; together they describe the product you're actually buying.

Mullvad runs WireGuard as its default protocol on every platform, with OpenVPN available as the fallback. The encryption baseline is the category standard — AES-256 for OpenVPN, ChaCha20 for WireGuard — which is the right default and what every serious provider ships. The account model is unusually privacy-friendly: account creation requires no email, payment can be made by cash or cryptocurrency, and the account identifier is a random 16-digit number rather than anything tied to a real-world identity.

The provider does not run a referral programme, does not offer time-limited promotional pricing, and has held the same flat monthly rate since launch. The pricing predictability is itself part of the privacy posture — providers that offer free months in exchange for personal data collect more data than providers that charge a flat fee for the service.

Who should pick Mullvad

Mullvad earns its place for readers who care most about the streaming panel comes back clean and a public no-logs audit backs the policy claim.

If your day-to-day is split between everyday browsing, the odd streaming session, and the occasional sensitive task, the score profile here lines up. On top of that, the client code is open for inspection is in roughly the place you'd expect at this tier.

Who should skip it

Mullvad isn't the right fit for everyone. The strongest reasons to look elsewhere: the home jurisdiction is part of the wider Fourteen Eyes arrangement; port forwarding isn't on the menu, which rules out most seedbox workflows.

Read the methodology before you commit if you're on the fence. Our score for any single VPN is a weighted view, and a reader optimising for one specific use case can come to a different conclusion from ours and still be right.

Pricing in plain English

Mullvad runs $5.00/mo flat.

The $5.00/mo number you'll see advertised is the effective rate when you commit to the multi-year plan up front. The headline figure tops out near $5.00/mo on a one-month rolling contract.

The two-figure spread is the lever the provider uses to make annual plans look cheap relative to monthly billing. That's a normal pattern in the category — not a red flag in itself — but it's worth knowing that the long-term commitment is what unlocks the headline price.

A 30-day refund window is standard in this category — useful if you discover a streaming platform you care about is blocked, or if the speed in your region disappoints. We don't list specific refund-window lengths per provider because the terms shift; check the current policy on the provider's site before you put money down.

How we tested Mullvad

Every VPN in our ranking, Mullvad included, runs the same evaluation. The methodology is documented in full on our methodology page — the short version is below.

Speed gets measured across a five-city panel using the same reference servers each round, so a fast result in one city and a slow one in another shows up in the score breakdown rather than being averaged away. We run the panel during the standard probe window so peak-hour congestion shows up where you'd expect it to.

Leak protection runs through a three-layer probe: DNS, WebRTC, and IPv6. A VPN that holds the tunnel during reconnect but leaks DNS for a fraction of a second between drops counts as a failure in this panel — the leak window is short by clock time, long enough by network time to compromise privacy.

Streaming gets tested against Netflix US/UK, Disney+, BBC iPlayer, and Prime Video. The probe runs against the regions the platform actively blocks, not the easy regions. A clean unblock on every region is unusual; one or two misses is normal at the back half of the ranking.

The kill switch gets a hold-under-reconnect test: we deliberately disrupt the tunnel and watch whether traffic leaves the device during the rejoin window. This is the practical version of the question the marketing copy answers with one word.

Alternatives to consider

If Mullvad isn't quite the right fit, three picks worth comparing it against — each one trades something different.

• Hide.me — stronger on the privacy side, often at a higher per-month price
• OVPN — stronger on the privacy side, often at a higher per-month price
• Proton VPN — stronger on the privacy side, often at a higher per-month price

Frequently asked questions about Mullvad

Common questions readers send us about Mullvad. Short, direct answers — no marketing.

• Is Mullvad actually audited? Yes — the no-logs claim is backed by a published audit from an independent firm. Audits are point-in-time, so it's worth checking the provider's site for the most recent report date before you treat it as current.
• Does Mullvad unblock Netflix and other streaming services? In our probe panel it clears Netflix US/UK and the major catalogues most days. The streaming arms race shifts week to week, so any specific platform claim is a moving target — we re-run the panel every test cycle.
• How many devices can I use Mullvad on at once? 5 simultaneous connections on a single account, which is enough for one person's primary devices but tight for a shared household.
• How long is the refund window? A 30-day money-back guarantee is standard across the paid-tier providers in this category. The exact terms — what counts as eligible usage, how the refund is processed — vary, so read the current policy on the provider's site before committing to a multi-year plan.
• Where is Mullvad based? Sweden — inside the wider Fourteen Eyes arrangement, which is one rung less aggressive than the Five Eyes core but still relevant to a hard-privacy threat model.
• What does Mullvad actually cost? The advertised long-term rate lands at $5.00/mo. The headline rate on a one-month plan is materially higher — that gap is the lever providers use to push multi-year commitments.

Setup and platform support

Native Mullvad apps cover the major platforms a reader is likely to be on: Windows, macOS, iOS, Android, and Linux. The Linux client is typically the most basic of the set — that's the category norm rather than something specific to this provider.

Router-level setup is supported on the major OpenWrt and DD-WRT firmware variants, and Mullvad ships configuration files for the popular flashable routers. Smart-TV and console support runs through Smart-DNS rather than a native app, which is again the category default.

5 simultaneous connections come standard, which covers a single user's primary devices comfortably and starts to feel tight for a shared household.

Browser extensions are available for Chrome, Firefox, and Edge. As with every browser-extension VPN, the extension is a proxy that protects browser tabs only — it isn't a substitute for the desktop client when you care about traffic from other apps on the device.

Notes on long-term reliability

Mullvad sits in our test panel rotation, which means it gets re-run every test cycle rather than reviewed once and left to drift. The score profile changes between cycles when meaningful things happen: a streaming platform updates its detection layer, the provider rotates its IP pool, an audit lands, the client app ships a behavioural change.

Two patterns are worth watching for in any VPN review that's older than six months: shifts in streaming-unblock rates and changes in the provider's published security posture. The first is genuinely volatile — a provider that streamed cleanly last quarter can lose half the streaming score in a single cycle if its IP-rotation cadence slips. The second is slower-moving but harder to recover from when it goes the wrong way.

Reader notes about Mullvad that diverge sharply from our test results are worth taking seriously. A single report is anecdote; a pattern of reports about the same failure mode usually shows up in our next test cycle.

Bottom line

The short version on Mullvad: a general-purpose pick whose ranking comes down to how you weigh streaming reliability against the rest of the feature set.

For the reader who wants one paragraph rather than the full review: Mullvad ships a working kill switch, a published no-logs audit, open-source clients, and no port-forwarding option — the four switches that most cleanly separate a serious provider from a marketing-led one.

On the ranking it sits in the upper middle. That position reflects the weighted view across speed, privacy, streaming, and value; a reader who cares disproportionately about one axis can come to a different conclusion and still be right.

If you've read this far and you're still on the fence, the right move is to use the 30-day refund window as the actual test. Pay for the long-term plan, install the app on your two main devices, run the streaming services you care about, and confirm the speed in your region is what the review describes. The refund window exists for exactly this purpose — none of the providers we recommend make it hard to use.

Mullvad at $5.00/mo on the long-term plan is easy to recommend with the caveats noted above.

Specifications at a glance

A condensed reference of the technical details that come up most often in reader questions about Mullvad. None of these numbers are decisive on their own; together they describe the product you're actually buying.

Mullvad runs WireGuard as its default protocol on every platform, with OpenVPN available as the fallback. The encryption baseline is the category standard — AES-256 for OpenVPN, ChaCha20 for WireGuard — which is the right default and what every serious provider ships. The account model is unusually privacy-friendly: account creation requires no email, payment can be made by cash or cryptocurrency, and the account identifier is a random 16-digit number rather than anything tied to a real-world identity.

The provider does not run a referral programme, does not offer time-limited promotional pricing, and has held the same flat monthly rate since launch. The pricing predictability is itself part of the privacy posture — providers that offer free months in exchange for personal data collect more data than providers that charge a flat fee for the service.