Mullvad Review 2026: Speed, Privacy & the Full Picture

Mullvad doesn't run a single promotion, doesn't email you a discount code, and won't remember your birthday. It has charged the same flat €5 a month since 2009, and that stubbornness is the whole pitch: this is a VPN built by people who seem more interested in being right than being liked. If you've read our what is a VPN primer and you're now hunting for the most privacy-committed option on the market, Mullvad is usually the first name that comes up.

A quick note before we start: Mullvad runs no affiliate or referral program of any kind, and it never has. There's no discount code we could give you even if we wanted to. Everything below is our own testing and research — not a paid placement.

Speed & Performance

Mullvad defaults to WireGuard on every platform and, as of January 15, 2026, that's the only tunneling protocol it offers — OpenVPN support was formally discontinued that day. Independent testing this year has clocked speeds up to 10 Gbps on Mullvad's fastest servers, and WireGuard's lightweight handshake means connection times are close to instant.

Where Mullvad gives something up is server count. It runs roughly 700 servers across 50-plus countries — a fraction of what NordVPN or ProtonVPN operate. In practice this means fewer nearby-server options if you're outside Europe or North America, and it's the main reason Mullvad isn't the pick for people chasing the absolute lowest ping worldwide. If raw global coverage matters more to you than anonymity, our NordVPN review is a better fit.

Privacy, Security & Jurisdiction

This is where Mullvad separates itself from almost everything else in the industry. You don't sign up with an email address — you're issued a random 16-digit account number, and that number is your only credential. Pay with cash mailed to their Gothenburg office, Bitcoin, Monero, or a card, and Mullvad has no name, email, or billing address to tie to your traffic even if it wanted to.

The no-logs claim isn't just marketing copy. Cure53 has audited Mullvad's infrastructure four times (2018, 2020, 2022, and June 2024), and Assured AB completed additional infrastructure and web-app assessments in 2025 and 2026. In April 2023, Swedish police entered Mullvad's Gothenburg office with a warrant looking for customer data. They left with nothing, because there was nothing to find — about as real-world a stress test as a no-logs policy can get.

Jurisdiction is the one asterisk. Sweden sits inside the 14 Eyes intelligence-sharing alliance, which unsettles some privacy purists on paper. In practice, an alliance can only compel a company to hand over data it actually has, and the account-number system means Mullvad has nothing worth compelling. The service also ships DAITA (Defense Against AI-guided Traffic Analysis), a traffic-obfuscation feature now live on 40-plus servers in 15 countries, aimed at defeating next-generation traffic-pattern surveillance rather than just DPI.

Streaming

Streaming is Mullvad's honest weak point, and the company doesn't pretend otherwise. It makes no effort to unblock Netflix, Disney+, or other geo-locked libraries, and multiple 2026 testers report inconsistent results if you try anyway. If unblocking is your priority, this isn't your VPN — see our best VPN 2026 roundup for streaming-first picks.

Torrenting & P2P

P2P is allowed on every server with no exceptions, and WireGuard's speed ceiling makes Mullvad genuinely fast for large downloads. The one caveat: Mullvad removed port forwarding in 2023 for security reasons, a decision that annoyed some long-time torrent users who relied on it for optimizing seed ratios, but it hasn't hurt raw download speeds in our research.

Interface & Usability

The apps are deliberately plain — a map, a connect button, a settings menu, and not much else. There's no bundled ad blocker, no dashboard full of upsells, no "threat protection" suite. Clients are open source and available on GitHub for anyone who wants to verify the code themselves. Support is email-only; there's no live chat, which fits the company's low-key, low-marketing personality but won't suit users who want instant hand-holding.

Pricing

One plan, one price: €5 per month (about $5.75), whether you pay monthly or annually, with a 10% discount for cryptocurrency payments. There's no long-term-plan trick where the advertised price disappears at renewal — the €5 rate hasn't moved since 2009, which on its own beats almost every "70% off your first term" VPN deal once you look at year-three pricing.

Our Verdict

Mullvad isn't trying to be everyone's VPN. It won't unblock Disney+, its server list is short, and there's no discount to chase. What it offers instead is the closest thing to a verifiably anonymous VPN account on the consumer market, backed by real audits and a real police raid that came up empty. If your threat model is "I want a company that genuinely cannot identify me," Mullvad is very hard to beat. If you want one VPN that does privacy, streaming, and speed equally well, look at ProtonVPN instead.

How Mullvad Has Handled Its Own Security Incidents

No security product has a perfectly clean history, and Mullvad is no exception — what matters is how a company responds. In early 2020, Mullvad disclosed a privilege-escalation vulnerability affecting its Windows client (versions 2020.3 and earlier), narrowly scoped to systems with a Windows account literally named "build." It was patched in version 2020.4, and the company's public disclosure of the issue, rather than staying quiet about it, is part of why its Cure53 audit relationship began shortly after.

Beyond the four Cure53 engagements, Mullvad has also commissioned narrower audits for specific components: X41 D-Sec reviewed the payment and account API in white-box mode, NCC Group ran a standardized MASA security assessment on the Android app, and Radically Open Security (RoS), a Netherlands-based firm, conducted a third infrastructure audit distinct from the Cure53 engagements. That's five different independent firms poking at different parts of the same product over several years — a genuinely unusual depth of external scrutiny for a company that spends nothing on advertising.

User sentiment reflects the tradeoffs discussed above: Mullvad holds roughly a 4.1-star rating across around 1,300 App Store reviews and 4.3 stars across roughly 7,400 Google Play reviews, with over a million downloads on Android alone. Trustpilot sentiment is more mixed (around 3.7 stars), which tracks with the recurring complaint that email-only support feels slow next to VPNs with live chat.

Who Mullvad Is Best For

Mullvad makes the most sense for people whose primary goal is minimizing what a VPN provider could ever hand over about them — journalists, researchers, or simply privacy-minded users who'd rather pay a flat, unglamorous fee than get upsold on features they won't use. It's a poor fit if streaming unblocking, a huge server list, or 24/7 live chat matter to your day-to-day use. The Android app now uses a newer in-house WireGuard implementation called GotaTun, part of a broader effort to reduce reliance on third-party networking libraries across platforms.

Frequently Asked Questions