Download Mullvad VPN

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2026.5 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2026.4: Added - Add explicit log levels for mullvad log set-level command: off, error, warn, info, debug and trace. Changed - Do not show dialog when rendering the map fails due to disabled GPU acceleration. - Clicking on the tray icon will toggle the window instead of just showing it. - Old mullvad log set-level command has been renamed to mullvad log set-rust-log. Linux - Make all timestamps embedded in .deb and .rpm packages deterministic by deriving them from the git commit being built instead of the time of the build. Required for reproducible builds. - Set the BUILDHOST header of .rpm packages to a fixed value instead of the hostname of the build machine. Required for reproducible builds. - De-couple mullvad-daemon.service "After=" dependencies from systemd.resolved and NetworkManager. - Start mullvad-early-boot-blocking.service before network-pre.target instead of basic.target. Windows - Sign the uninstaller, Electron binaries, and native modules. Some NSIS binaries are still unsigned. - Switch winreg out for windows_registry. - Add timeout to device cleanup tasks during installs. - Increase timeout on flushing DNS cache. Removed Windows - Stop removing leftover Wintun adapters during installation. Wintun dropped support for adapter pools, so this has not been necessary since 2022.5-beta1. Fixed - Reject invalid DAITA fraction limits in tunnel config responses before starting…

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2026.5

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2026.4 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2026.3: Added - Add Ukrainian as a new language in the app. - installer-downloader logs are aggregated by mullvad-problem-report. Changed - Update gotatun to 0.8.1. Windows - Update wireguard-nt to version 1.1. This retires the Mullvad fork at https://github.com/mullvad/wireguard-nt. macOS - Use arch-specific installers to deliver updates. This makes updates around 50% smaller. Fixed - Align ciphers for custom shadowsocks API access methods between clients and mullvad-daemon. Any existing, invalid access method is removed with a settings migration. macOS - Fix split tunneling related parse error on macOS 27. Linux - Fix issue where gotatun would fail to start on Linux systems where the IPv6 stack had been disabled. Windows - Fix misleading "split tunneling" error when offline. - Fix unhandled error: "Reached the end of the file. (os error 38)" Security - Linux and macOS: Fix management interface socket being created with less restrictive permissions when using MULLVAD_MANAGEMENT_SOCKET_GROUP. This addresses the advisory GHSA-p9rr-wc9m-qmwg. Linux - Plug hole in Custom DNS firewall rules for LAN resolvers.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2026.4

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2026.3 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2026.2: Added - Add port setting for LWO obfuscation. - Add list of recent server selections in the select location view. - Add context menu to locations in the select location view. - GotaTun is now used as the userspace WireGuard implementation on all desktop platforms, not just macOS. It replaces wireguard-go. Changed - Optimize LWO performance. This gives a 1.5 to 3 times speedup in our benchmarks. - Change default retry connection attempts. LWO is now the third default constraint. The relative order among the following constraints is preserved. Linux - Switch memory allocator to jemalloc to reduce fragmentation. - mullvad-early-boot-blocking.service now waits for local file system to be mounted (After=local-fs.target). This was assumed before, but not required (and is still not required). - mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM. - mullvad-daemon now exits without tearing down firewall rules on SIGUSR1. This is used to avoid leaking network traffic when restarting systemd service. macOS - Restart the GUI after an update if it was running. - mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM. Fixed - Fix duplicate "Connected"/"Disconnected" desktop notifications caused by the daemon sending multiple consecutive tunnel state events for the same state. - Fix GUI appearing stuck in "Disconnecting"…

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2026.3

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2026.2 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2026.1: Added Linux - Make it possible to build for RISC-V from source. - Add --daemon-only build option for deb and rpm packages for CLI usage. Changed - Location setting no longer defaults to Sweden, instead it uses your current location if it has available relays, and falls back to Sweden otherwise. - mullvad-daemon now defaults to ERROR log level when -v is not specified. mullvad-daemon -vv is used in system services to maintain previous DEBUG log level. - Update GotaTun from version 0.2.0 to 0.5.1. This improves compliance with the WireGuard spec by adding handshake jitter and implementing padding to multiples of 16 bytes, fixes a minor vulnerability when generating peer indices, and fixes another when registering incoming decoy packets for DAITA. - Disable SNI for Mullvad API traffic. This prevents DPI based on domain name when obfuscation is disabled. - Redact other users' home paths in logs. macOS - GotaTun is now used as the WireGuard implementation. It replaces wireguard-go. Fixed Windows - Fix regression in 2026.1 that could cause split tunneling to become unavailable. Security macOS - Mitigate multiple local privilege escalation attacks from admin user to root in the preinstall and postinstall scripts.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2026.2

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2026.1 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.14: Changed - Change WireGuard port to no longer affect the port used for LWO. - Change Mullvad Bridges access method to randomly pick any Mullvad-owned bridge. Previously the access method was constrained to the five bridges closest to the exit relay. - Changed CLI command mullvad obfuscation to mullvad anti-censorship - The tunnel setup will not error out if sending ICMP is prohibited by the operating system. Linux - Change "Go back" keyboard shortcut from Esc to Alt + Left Arrow or Alt + [. - Use Wayland by default on Linux if available, otherwise fall back to X11. macOS - Change "Go back" keyboard shortcut from Esc to Cmd + Left Arrow or Cmd + [. Windows - Change "Go back" keyboard shortcut from Esc to Alt + Left Arrow or Alt + [. - Make Mullvad service run in case the split tunnel driver fails to load. Fixed - Fix "Time left" label in main view not updating when time passes. Windows - Update split tunnel driver to 1.2.5.0. This fixes audit issue MLLVD-CR-24-102, and a BSOD when the driver was improperly unloaded. - Detect and kill processes preventing updates. macOS - Ignore utun interfaces when figuring out default routes. This prevents split tunneling from failing when running some other software. Security Windows - Warn user before clearing firewall rules during failed downgrades. This fix only applies to downgrades to this version and future versions.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2026.1

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.14 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.13: [2025.14] - 2025-12-09 This release is identical to 2025.14-beta3. [2025.14-beta3] - 2025-12-01 Fixed - Fix a regression introduced in 2025.14-beta1 where the WireGuard port selection was not respected. [2025.14-beta2] - 2025-11-26 Added - Add port 443 to list of valid UDP2TCP ports. Fixed - Fix issues where the in-app updates view is not in sync with the daemon after system is supended or daemon is restarted. [2025.14-beta1] - 2025-11-11 Changed - Change mullvad reconnect to print an error message and exit with a non-zero exit code if issued in the disconnected state. - Move settings in WireGuard settings view into the VPN settings view. - Rename Enable IpV6 setting to In-tunnel IPv6. - Rename IP version setting to Device IP version. - Merge Obfuscation settings and WireGuard port setting into new Anti-censorship view. Removed - Remove OpenVPN support from the app. - See blog post for more info: https://mullvad.net/en/blog/removing-openvpn-15th-january-2026 - Remove "Automatic" as a setting for the "Quantum-resistant tunnel" option.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.14

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.13 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.12: Added - Add settings reset command to the CLI ('mullvad reset-settings'). - Make feature indicators in connection panel navigate to the relevant setting when clicked. - Add Lightweight WireGuard Obfuscation method (LWO). This is a cheap obfuscation method that prevents packets from being identified as standard WireGuard packets. - Add possibility to manage devices from account view. Changed - Add validation for API access methods to only allow unique names. Access methods with duplicated names will be renamed. - Change how externally triggered navigation is handled in the UI. This could potentially reduce issues where users get stuck in the out-of-time view. - Update Electron from 36.5.0 to 37.6.0. - Run version check hourly and when interacting with the app instead of once per day. - Add support for gradual rollouts of new app releases Fixed - Fix bug introduced in 2025.13-beta1 with translations sometimes not being formatted correctly. macOS - Fix high CPU usage on macOS 26 by updating Electron. This affected the app when it was visible. Linux - Install AppArmor profile on all Linux distributions that support AppArmor abi 4.0.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.13

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.12 --exact

Release notes

This release is for Windows only. This release is based on 2025.10 with the addition of a fix for a BSOD that some users experienced. Here is a list of all changes since last stable release 2025.11: Added - Add helpful warnings when clearing account history. This helps users not lose their account numbers. Windows - Add additional logging for tunnel devices and split tunneling to problem reports. - Log WFP sessions when transaction lock timeout occurs. Changed - Move placement of login button from inside the account number input to under account number. Windows - Implement UDP GSO for QUIC on client socket. This improves download speeds slightly. Fixed - Fix version being labeled unsupported unexpectedly. So far, this only an issue when using development builds. - QUIC obfuscation only using one in-address when connecting. It will now randomly select one of the available in-addresses for each connection attempt. - quinn_udp crate flooding mullvad-daemon.log with warnings. Windows - Mitigate BSOD caused by split tunnel driver during boot. macOS - Fix apps attempting to use IPv6 with in-tunnel IPv6 disabled. - Re-add missing loopback alias if removed. This fixes some issues with DNS resolution. Security Windows - Block traffic to exit node from non-Mullvad processes. This fixes a leak where traffic could be encrypted once, but leave the entry node unencrypted, if and only if the destination were the exit node. E.g., this might occur if a browser tries to open a TCP connection…

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.12

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.11 --exact

Release notes

This release is for desktop only. Here are the changes since last stable release 2025.10: This release is for Windows only. This release reverts all functionality to how the app worked in version 2025.9 to fix a BSOD (boot loop) bug. Only a few users experienced the issue, but we deemed it critical enough to revert everything until we have a better understanding of the problem.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.11

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.10 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.9: Added - Add helpful warnings when clearing account history. This helps users not lose their account numbers. Windows - Add additional logging for tunnel devices and split tunneling to problem reports. - Log WFP sessions when transaction lock timeout occurs. Changed - Move placement of login button from inside the account number input to under account number. Windows - Implement UDP GSO for QUIC on client socket. This improves download speeds slightly. Fixed - Fix version being labeled unsupported unexpectedly. So far, this only an issue when using development builds. - QUIC obfuscation only using one in-address when connecting. It will now randomly select one of the available in-addresses for each connection attempt. - quinn_udp crate flooding mullvad-daemon.log with warnings. macOS - Fix apps attempting to use IPv6 with in-tunnel IPv6 disabled. - Re-add missing loopback alias if removed. This fixes some issues with DNS resolution. Security Windows - Block traffic to exit node from non-Mullvad processes. This fixes a leak where traffic could be encrypted once, but leave the entry node unencrypted, if and only if the destination were the exit node. E.g., this might occur if a browser tries to open a TCP connection to the exit node IP.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.10

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.9 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.8: Added - Add QUIC obfuscation (WireGuard only). It will be used automatically when connecting fails with other methods. Fixed macOS - Add support for parsing eslogger output version 10. This fixes split tunneling on macOS 26. - Avoid interpreting negative numbers from eslogger as PIDs.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.9

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.8 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.7: Added - Add in-app updates to Windows and macOS. This new feature lets you download, verify, and install new versions from within the app. Linux - Make it possible to run the app with cgroups v1 fully disabled. Note that split tunneling is currently unavailable when this is the case. Windows - Add a button to start the Mullvad VPN system service if it's unavailable at launch Changed macOS - Use a local DNS resolver on the 127.0.0.0/8 network, regardless of macOS version. Windows - Make firewall rules applied while upgrading the app not persist on reboot, unless "Lockdown mode" or "Auto-connect along with "Launch app on start-up" is enabled. This serves as a safety fallback if the update fails and the user is left with blocking firewall rules and no app. Fixed macOS - Add grace period when best default route goes away to reduce frequency of random reconnects. Security - Prevent unprivileged users from impersonating the gRPC server. This was relatively harmless previously but is required due to in-app updates. Windows - Enable control flow integrity checks (CFG) for some C++ code. This excludes wintun, wireguard-nt, and OpenVPN. This addresses MLLVD-CR-24-101 to the extent that we found it valuable.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.8

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.7 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.6: Added - Add notification that shows when the user is connected to WireGuard with a port that is not supported. Linux - The deb package repositores now have static codenames on top of the existing distro version specific codenames. The stable repository always have the "stable" codename, and the beta repository has the "beta" codename. Changed - Replace Classic McEliece with HQC as one of the post-quantum safe key exchange mechanisms used for the quantum-resistant tunnels. The main benefits here are that HQC uses a lot less CPU to compute the keypair, and the public key sent to the server is drastically smaller. Fixed - Automatically connect when IP version becomes available. Linux - Fix syntax error in Apparmor profile. - Fix issue where settings were lost after an upgrade if mullvad-daemon was not restarted before mullvad-early-boot-blocking.service. That is, before a reboot. Windows - Fix issue where daemon got stuck trying to connect only over IPv4 (or only IPv6). macOS - Fully uninstall the app when it is removed by being dropped in the bin. Security macOS - Fix potential local privilege escalation when app was incorrectly removed by being dropped in the bin but still leaving behind a launch daemon. This fixes CVE-2025-46351 reported by Egor Filatov (Positive Technologies).

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.7

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.6 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.5: Added - Add a notification for notifying users about the sunsetting of OpenVPN. Changed Windows - Rename win-shortcuts native module to windows-utils. Removed - Remove "Automatic" option for tunnel protocol. The default is now WireGuard. Fixed - Fix mullvad-cli panicking if it tried to write to a closed pipe on Linux and macOS. - Fix bug where new users are not forwarded to the main view after payment. - Will no longer try to connect over IPv4 if IPv4 is not available. Windows - Fix error setting up tunnel when MTU was incorrectly set to a value below 1280 for IPv6. - Fix node native module being unpacked to a temporary folder. - Fix BSOD caused by routing loop in wireguard-nt. macOS - Fix bug in parsing of network services from SCDynamicStore.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.6

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.5 --exact

Release notes

This release is for desktop only. This release is identical to 2025.5-beta1: Here is a list of all changes since last stable release 2025.4: Added Windows - Add support for DAITA V2. - Add back wireguard-go (userspace WireGuard) support. Removed - Stop bundling https://github.com/mullvad/apisocks5 as a standalone binary. Fixed macOS - Fix daemon ending up in blocked state if the user toggled split tunneling without having granted Full Disk Access to mullvad-daemon. This could only ever be accomplished from the CLI. - Fix routing issue caused by upgrading tun. Removed - Remove Google's resolvers from encrypted DNS proxy.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.5

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.4 --exact

Release notes

This release is for desktop only. This release is identical to 2025.4-beta1. Here is a list of all changes since last stable release 2025.3. Fixed Windows - Fix GUI crashing at launch on some systems.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.4

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.3 --exact

Release notes

This is a desktop only release. Here is a list of all changes since last stable release 2025.2. Added Windows - Add support for Windows ARM64. Changed - (Linux and macOS only) Update to DAITA v2. The main difference is that many different machines are provided by relays instead of a bundled list. The bundled `maybenot_machines` file was removed. - Move changelog from a dialog to a separate view. - Reduce the setup time of PQ tunnels by pre-computing McEliece keys. - Change order of items in settings view to show DAITA and multihop at the top. - Update Electron from 30.0.4 to 33.4.0. Fixed - (macOS and Windows only) Add the correct route when using obfuscation with Wireguard.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.3

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.2 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2025.1. Fixed - Fix crash when Wireguard tunnel setup timed out.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.2

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2025.1 --exact

Release notes

This release is for desktop only. Here is a list of all changes since last stable release 2024.8. Added - Add a new access method: Encrypted DNS Proxy. Encrypted DNS proxy is a way to reach the API via proxies. The access method is enabled by default. macOS - Detect whether full disk access is enabled in the split tunneling view. - Add button to restart system service in split tunneling view. This can help mitigate edge-case issues when enabling full disk access. Changed - Replace the draft key encapsulation mechanism Kyber (round 3) with the standardized ML-KEM (FIPS 203) dito in the handshake for Quantum-resistant tunnels. - Make Smart Routing override multihop if both are enabled. To manually set the entry relay, explicitly enable the "Direct only" option in the DAITA settings. - Update maybenot from 1.1.3 to 2.0.1. Windows - Enable quantum-resistant tunnels by default (when set to `auto`). Fixed - Handle network switching better when using WG over Shadowsocks. - Fix multihop entry location list sometimes being shown when multihop is disabled. macOS - Fix GUI getting stuck when opening the split tunneling view. - Fix packets being duplicated on LAN when split tunneling is enabled. - Fix DNS issues caused by forcibly using a local DNS resolver in all states. Note that this fix is not present on macOS versions between 14.6 and 15.1. Security Windows - Block WSL/Hyper-V traffic in secured states (except the connected state). The normal firewall (WFP) filters normally do not…

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2025.1

Pin this version: winget install --id MullvadVPN.MullvadVPN --version 2024.8 --exact

Release notes

This release is for desktop only.This release addresses issues identified in a recent audit. Here is a list of all changes since last stable release 2024.7.Security - Remove invalidly set up alternative stack for fault signal handlers on unix based systems. This prevents potential stack overflow and heap memory corruption. Fixes audit issue MLLVD-CR-24-01. - Remove/disable not signal safe code from fault signal handler on unix based systems. Fixes audit issue MLLVD-CR-24-02. Windows - Fix issue where the installer would allow any executable named taskkill.exe in the working directory to run as admin. This fixes audit issue MLLVD-CR-24-06. Linux - Prevent attackers able to send ARP requests to the device running Mullvad from figuring out the in-tunnel IP. Fixes 2024 audit issue MLLVD-CR-24-03.

Full release notes from the publisher

Manifest: manifests/m/MullvadVPN/MullvadVPN/2024.8

Release notes

Publisher changelog