Mullvad

Overview

Mullvad occupies a unique position in the VPN market by prioritising privacy above all else, including commercial growth. Founded in 2009 in Gothenburg, Sweden, the service requires no email address, name, or any personal information to sign up. Users receive a randomly generated 16-digit account number, and that is the entirety of their identity within the system. Payment can be made by card, bank transfer, cryptocurrency (Bitcoin and Monero), or even cash posted in an envelope — the last option being essentially untraceable.

The pricing model is equally straightforward: a flat rate of five euros per month, no discounts for annual commitments, no premium tiers, and no upselling. This approach reflects Mullvad's philosophy that a VPN should be a simple, privacy-preserving tool rather than a platform for extracting maximum revenue. The server network consists of over 800 servers across 40+ countries, with a growing proportion being owned rather than rented infrastructure.

Privacy and Security

Mullvad's approach to privacy is arguably the most rigorous in the industry. The absence of any account-linked personal data means there is nothing to hand over even if legally compelled. In April 2023, Swedish police executed a search warrant at Mullvad's offices; the company confirmed that no customer data was seized because no such data existed. This real-world test of the no-logs policy provided concrete evidence of its effectiveness.

All Mullvad-owned servers run with full disk encryption and operate without persistent storage of connection logs. The company publishes regular transparency reports and has undergone independent security audits by Cure53 and Assured AB. The DAITA (Defence Against AI-guided Traffic Analysis) feature, introduced in 2024, adds constant-rate padding to VPN traffic patterns, making it resistant to advanced machine learning-based traffic analysis — a cutting-edge privacy measure that no other commercial VPN currently offers. Multi-hop connections are available, routing traffic through two Mullvad servers for additional security.

Performance

Mullvad delivers strong performance using WireGuard, its default protocol. On nearby European servers, speeds typically reach 85-92% of baseline, which is competitive with the market leaders. The network is smaller than many competitors, but server quality is generally high, with consistent performance and minimal congestion. OpenVPN is available as an alternative, though WireGuard is recommended for most users given its superior speed and lower overhead.

Where Mullvad falls short is streaming. The service makes no effort to unblock geo-restricted streaming platforms, and Netflix, BBC iPlayer, and similar services will generally detect and block Mullvad connections. This is a deliberate choice — Mullvad positions itself as a privacy tool, not an entertainment unblocker. Torrenting, however, works well on all servers, and the built-in DNS content blocker handles ads and trackers effectively.

Verdict

Mullvad is not the right VPN for everyone, but for its target audience — privacy-conscious users who want genuine anonymity — it is unmatched. The combination of anonymous sign-up, anonymous payment options, proven no-logs credentials (tested by law enforcement), open-source software, and cutting-edge features like DAITA creates a privacy package that no competitor can currently equal. The trade-offs are a smaller server network, limited streaming support, and a less polished mobile experience. Users who prioritise privacy above convenience and entertainment access will find Mullvad to be the gold standard.