Disclosure: This post contains affiliate links; we may earn a commission at no extra cost to you.
Mullvad is the rare VPN designed to learn as little as practical about its customers. Sign-up generates a numbered account rather than requiring an email, pricing is a flat €5 per month, and cash payment remains available for people willing to trade convenience for less payment linkage. Its apps are open source, WireGuard support is excellent, and privacy engineering is unusually transparent. Streaming is not a priority, there are only five simultaneous connections, and port forwarding is gone.
Mullvad at a glance
| Category | Details |
|---|---|
| Best for | Privacy purists who want minimal account data |
| Headquarters | Sweden |
| Main protocol | WireGuard |
| Device limit | 5 simultaneous connections |
| Apps | Windows, macOS, Linux, Android, iOS, router/manual configurations |
| Refund policy | 14-day money-back guarantee (varies by payment method) |
| Main drawback | No email recovery, inconsistent streaming, no port forwarding |
Editor’s pick: Mullvad
Related reading: Mullvad vs Proton VPN: Which Privacy VPN in 2026?
Pricing without games
Mullvad charges around €5 for one month whether the user buys one month or a year of service time. Taxes and exchange rates can affect the local total. There is no artificially low three-year headline followed by a renewal surprise.
The flat rate is more expensive than some introductory long-term deals and cheaper than most premium monthly plans. It also reduces lock-in. Add only the service time needed, then renew manually or use an available recurring method.
Mullvad offers a 14-day money-back guarantee for many payment types, but cash and certain cryptocurrency transactions can be excluded or operationally difficult to refund. Check the current refund policy before payment.
Numbered accounts
Clicking “Generate account” creates a 16-digit account number. That number is both the identifier and the credential needed to use paid time. No email or conventional password is required.
This reduces the personal data held by Mullvad but makes credential management critical. Anyone with the account number may consume connections or view service time. Store it in a password manager, do not email it to yourself, and rotate to a new account if exposed.
Payment can still link identity. Credit cards, PayPal, bank transfers, and app stores create third-party records. Cash mailed with the payment token minimizes online payment linkage but can be lost and requires careful instructions. Cryptocurrency is pseudonymous, not automatically anonymous.
Five-device limit
One account supports five simultaneous connections. A router counts as one connection while covering devices behind it, but mobile devices leaving home need their own apps. Five is enough for one person and restrictive for a family.
Mullvad has apps for Windows, macOS, Linux, Android, and iOS, plus router/manual options. Linux support is a particular strength. There are no polished smart-TV apps comparable with mass-market streaming VPNs; router or platform-specific WireGuard configurations may be needed.
WireGuard and OpenVPN
Mullvad was an early WireGuard adopter and makes it the default modern protocol. Its apps also support OpenVPN where maintained, though platform direction increasingly favors WireGuard. Bridges and obfuscation options help on restrictive networks.
WireGuard delivers fast handshakes, strong cryptography, and efficient mobile performance. Mullvad manages the relationship between account, tunnel keys, and server infrastructure to avoid exposing more data than required. Advanced users can generate configurations for compatible devices.
Speed depends on route and server. Choose a nearby city, test multiple providers within that city, and compare latency and stability. Mullvad publishes server ownership or rental status, hosting provider, and technical details, which helps users choose.
Privacy and audits
Mullvad is based in Sweden. It publishes a detailed privacy policy, server list, infrastructure information, app source, security audits, and incident reports. Swedish and EU law still applies; no jurisdiction makes a provider immune from lawful orders.
The company says it does not log traffic, DNS requests, connection timestamps, bandwidth, or source IP addresses. Independent audits have examined apps and infrastructure. Scope and date matter, so readers should consult the latest reports.
Mullvad’s office was searched by Swedish police in 2023; the company reported that authorities left without customer data because relevant data did not exist. That event is stronger operational evidence than a marketing slogan, while still not proving every possible future situation.
DAITA, multihop, and obfuscation
DAITA is designed to resist traffic analysis by adding defensive traffic patterns and modifying packet characteristics on supported platforms and servers. It increases bandwidth and can reduce performance. It is for higher-risk models, not routine video streaming.
Multihop routes through two VPN servers. It separates the entry observer from the exit but adds latency. Shadowsocks or other bridge/obfuscation methods can make blocking harder, though no mode guarantees operation in every censored country.
Kill switch and lockdown
Mullvad’s app includes a built-in kill switch and Lockdown mode. The normal kill switch blocks traffic during unexpected disconnects; Lockdown mode prevents internet access unless the VPN is connected, including after a manual disconnect.
Test local-network sharing and captive portals before travel. A strict lockdown can prevent hotel Wi-Fi sign-in until temporarily adjusted. Re-enable protection immediately afterward.
Streaming and torrenting
Mullvad does not optimize around unblocking commercial streaming catalogs and can fail with popular services. Its shared addresses prioritize privacy rather than maintaining constant Netflix access. Choose another VPN if streaming is the main purpose.
P2P traffic is supported, but Mullvad discontinued port forwarding. Torrenting still works for outbound connections, though peer reachability and seeding can be worse. Bind the client to the tunnel interface and test the visible IP.
Weaknesses
Five devices is modest. No email recovery means losing the account number loses access. Streaming support is inconsistent, dedicated IP is absent, port forwarding is unavailable, and live-chat support is not the polished 24/7 experience of some commercial rivals.
Flat monthly pricing can cost more than a discounted two-year plan for a long-term low-risk user. Mullvad deliberately avoids aggressive affiliate marketing, which is editorially refreshing but means fewer coupons.
FAQ
Is Mullvad anonymous?
No VPN makes a user anonymous. Mullvad minimizes account data, but payments, browser fingerprints, logins, cookies, and device behavior can still identify someone.
How much does Mullvad cost?
around €5 per month at the current flat rate, regardless of purchased duration.
Does Mullvad work with Netflix?
Sometimes, but streaming unblocking is not its focus and should not be expected reliably.
Does it support port forwarding?
No. Mullvad removed port forwarding.
Final verdict
Mullvad is the best VPN for buyers who prioritize minimal account data, transparent infrastructure, simple pricing, and technical privacy over streaming convenience. It is not the best family or entertainment VPN. Protect the account number, choose payment according to the threat model, and use DAITA or multihop only when their added cost serves a real need.
A sensible first-day configuration
Install from Mullvad’s official site or verified app-store listing, save the account number in a password manager, and select WireGuard with the nearest provider-owned or trusted rented server. Enable Lockdown mode only after confirming local printers, captive portals, and work tools. Run leak and forced-disconnect tests, then record one ordinary speed baseline. Adding every advanced privacy feature at once makes troubleshooting difficult and can produce needless latency.