GhostlyInc VPN review lab
Mullvad VPN Test 2026: Anonymous Accounts, WireGuard-Only Apps and Real-World Limits
Mullvad is my top VPN choice when providers should know as little as possible about you. This 2026 review highlights account numbers over emails, cash and Monero payments, no affiliate incentives, WireGuard-only set-up, DAITA, audits, and privacy trade-offs to consider.
Quick verdict
Mullvad excels in anonymity but is no longer the top choice for self-hosting VPNs
Choose Mullvad if anonymous sign-up, clear pricing, open-source clients, and a low-marketing privacy ethos are priorities. For self-hosting, it only makes sense when you do not need incoming VPN ports; public services, seedboxes, or game servers should use another route because port forwarding was removed in 2023 and OpenVPN support ended on 15 January 2026.
Buyer overview
Mullvad advantages, limitations, and suitable users
Mullvad avoids flashy VPN bundles, focusing on minimising identifiers, predictable pricing, and providing technical details for discerning users.
Why Mullvad remains distinctive
- Anonymous account number system with no need for email, username, name, or password.
- Cash, Monero, Bitcoin, bank transfer, card, PayPal, and regional payments clearly outline privacy trade-offs.
- Flat €5 monthly pricing avoids renewal tricks and false urgency.
- Open-source clients, external audits, and detailed server transparency back Mullvad's privacy claims.
- Robust Linux app with firewall protection, custom DNS, split tunnelling, multihop, DAITA, and WireGuard controls.
- No paid reviews or affiliate programme reduces coupon-driven coverage incentives.
- Well suited for privacy researchers, journalists, Linux users, and those seeking low-identifier subscriptions.
What has changed or still requires caution
- Port forwarding was removed in 2023, weakening self-hosting and some P2P workflows compared to older reviews.
- OpenVPN support ended on 15 January 2026; WireGuard is now the recommended protocol.
- Server coverage is smaller than NordVPN or Proton VPN, particularly outside Europe and North America.
- Streaming access is inconsistent as Mullvad does not optimise for streaming libraries.
- No live chat or account recovery if you lose your account number.
- Advanced privacy features like DAITA may increase bandwidth usage or cause some websites to malfunction.
- A May 2026 exit-IP fingerprinting issue requires caution when switching servers to prevent linkability.
Contents
Research notes update
Changes since the previous Mullvad review
The previous review contained outdated assumptions. I reviewed Mullvad's current server list, pricing, no-logging policy, affiliate policy, OpenVPN removal, port forwarding notices, recent audits, and community discussions before updating.
Port forwarding has been removed
Mullvad announced port forwarding removal in May 2023 and removed existing ports on 1 July 2023, altering advice for seedboxes, game servers, and self-hosted services.
OpenVPN has been discontinued
Mullvad discontinued OpenVPN on 15 January 2026, now directing users to WireGuard. Router guides and fallback scripts require updating.
Payment and account systems have been audited
Mullvad's January 2026 audit details an X41 D-Sec white-box review of authentication, device provisioning, payments, and WireGuard key distribution.
Exit-IP fingerprinting is currently being addressed
In May 2026, Mullvad revealed a server-switch linkability issue. It doesn't expose your real IP, but high-risk users should regenerate keys by logging out and in when switching until mitigation is complete.
Privacy model
Anonymous account numbers, payment methods, audits, and Swedish jurisdiction
Mullvad's privacy approach is concrete, starting before VPN connection. You generate an account number, add time, and can avoid providing email, name, or password.
Mullvad reduces account data required at sign-up
The account number system is a practical privacy advantage. You can start without email, password, or name, and control payment metadata exposure.
Cash and Monero are significant payment options
Postal cash and Monero payments are slower or more complex than card payments but suit users wanting payment records separate from VPN access.
Sweden is not a magic solution, but the design assists
Mullvad contends Swedish VPN laws do not mandate secret traffic logging. More importantly, the service is designed to hold minimal user data.
Technical reality check
WireGuard-only in 2026: simpler, faster, but less tolerant of legacy set-ups
Mullvad now centres on WireGuard, improving performance and engineering focus, but router users, legacy OpenVPN configs, and old automation guides must be updated.
| What changes | Current status | What this means for you |
|---|---|---|
| Forwarded ports | Removed feature | Avoid Mullvad for incoming connections, public seedboxes, or self-hosted services reliant on VPN port forwarding. |
| OpenVPN | Removed feature | Use WireGuard configs for routers and servers. If your network blocks WireGuard, test Mullvad's obfuscation options first. |
| WireGuard | Main protocol | This is the default route for performance, app features, and future development. |
| DAITA | Available in applications | Effective against traffic analysis, but test bandwidth, CPU, and site compatibility before always enabling. |
| GotaTun | Audited WireGuard implementation for Android | Mullvad is transitioning WireGuard internals to Rust, with further platform development planned post-Android. |
Linux and router use
Linux performs well, but servers and routers require WireGuard maintenance
The Linux app remains one of Mullvad's strongest features, offering firewall lock, split tunnelling, custom DNS, DAITA, multihop, and WireGuard controls without a marketing dashboard. Server set-up is more manual: export WireGuard configs and manage firewall rules yourself.
Ideal for privacy-focused daily users
- Use the app for nftables leak protection, custom DNS, multihop, obfuscation, DAITA, and automatic key rotation in one workflow.
- Test DAITA and quantum-resistant tunnels separately as both affect CPU usage, bandwidth, and compatibility.
- If websites fail, retest with DNS blockers, DAITA, multihop, and obfuscation off before blaming the exit location.
No OpenVPN back-up, no forwarded ports
- Migrate legacy OpenVPN router profiles to WireGuard. OpenVPN servers are offline or being decommissioned after 15 January 2026.
- Do not base new self-hosted services on Mullvad port forwarding, which has been unavailable since its removal in 2023.
- For split routing, explicitly bind services and verify DNS, IPv6, reconnection, and kill-switch behaviour under failure.
Network reach and speed
Server coverage is smaller than NordVPN or Proton VPN, but transparency exceeds mere numbers
Mullvad's public server list showed 579 servers across 50 countries and 90 cities in May 2026. Smaller than NordVPN or Proton VPN, but offers detailed info on city, provider, ownership, capacity, status, and DAITA support.
Top choice in Europe and North America
If you require many locations in Africa, Asia, or South America, compare exact cities before subscribing. Mullvad is deliberately smaller than major commercial networks.
Server details are unusually transparent
The server page reveals ownership, provider, capacity, status, messages, bridge servers, and DAITA support, offering more insight than just server numbers.
Fast performance on clear routes
Recent forum feedback is mixed: many praise stability, others report route-specific WireGuard or DAITA issues. Test your city, ISP, device, and features.
Daily use
Streaming, torrenting, travel, and the fingerprinting warning
Mullvad is ideal for private browsing, public Wi-Fi, research, and low-identifier subscriptions. It is less suitable for streaming-first VPNs or P2P set-ups needing incoming connections.
Choose another VPN if streaming is your priority
Mullvad works with some services but lacks streaming-optimised servers. NordVPN is typically easier for streaming-focused users.
Suitable for legal P2P, less effective for incoming connections
P2P transfers function, but lack of port forwarding may reduce connection efficiency. Bind your torrent client to the VPN interface and check for leaks.
Suitable for public Wi-Fi and research
The app's kill switch, DNS handling, and obfuscation options make it useful on hotels, trains, airports, and shared networks. Test local banking and work tools as some exit IPs may be blocked.
Regenerate keys to prevent server-switch linkability
If your threat model relies on switching servers to break session links, log out and back in before switching until Mullvad's mitigation covers your servers.
Plans
Flat pricing is key: €5 monthly, no artificial urgency
Mullvad's pricing is straightforward: €5 per month whether for one month, a year, or a decade. No long-term discounts may deter bargain hunters but avoids renewal traps and coupon tactics.
Who should subscribe to Mullvad
- You want the provider to know less about you than most VPN account systems permit.
- You prefer clear pricing over annual discount gimmicks and renewal surprises.
- You can use WireGuard without needing port forwarding, dedicated IPs, or streaming profiles.
Cash, Monero, and standard payments each involve distinct compromises
- Cash and Monero reduce identity links, though cash processing is slower and cryptocurrency carries operational risks.
- Card, PayPal, Swish, bank transfer, and regional payment methods offer convenience but less anonymity.
- Mullvad states cryptocurrency payments get a discount due to lower fees and administration.
Setup checklist
My recommended Mullvad configuration for privacy-focused users
Mullvad benefits from careful set-up. These steps provide a stronger privacy baseline than just installing the app and relying on defaults.
- 1
Create your account with privacy safeguards
Create your account number in a clean browser or Tor session for anonymity, then store it offline. Losing it means losing access.
- 2
Select your payment method deliberately
Use cash or Monero to minimise identity links. Use card or PayPal when convenience outweighs payment anonymity.
- 3
Enable features individually
Begin with basic WireGuard, check DNS and IPv6 leaks, then test DAITA, multihop, obfuscation, custom DNS, and split tunnelling individually.
- 4
Test failure responses
Simulate sleep, network drops, router reconnects, and app restarts. Ensure the kill switch blocks traffic and no app bypasses the VPN unexpectedly.
Research notes and sources
Sources reviewed for this Mullvad update
Official Mullvad pages are vital here as older reviews often mention features Mullvad has removed.
Frequently Asked Questions
Mullvad VPN questions answered
Concise answers for selecting, paying for, and configuring Mullvad VPN.
Is Mullvad still a good choice in 2026?
Yes, if you want anonymous sign-up, clear pricing, open-source clients, and strong privacy defaults. Less suitable if you need streaming-first support, port forwarding, OpenVPN, or the largest server network.
Does Mullvad continue to support port forwarding?
No. Mullvad stopped adding forwarded ports in May 2023 and removed existing ones on 1 July 2023.
Is OpenVPN still supported by Mullvad?
No. Mullvad ended OpenVPN support on 15 January 2026. New set-ups should use WireGuard and test obfuscation if VPN traffic is blocked.
Can I register with Mullvad without providing personal data?
Yes. Mullvad creates an account number and requires no email, username, name, or password. Your payment method influences subscription anonymity.
Can I pay Mullvad using cash or Monero?
Yes. Mullvad accepts cash and Monero, plus Bitcoin, bank transfer, credit card, PayPal, Swish, and various regional payment methods. Cash is slower with refund limits but reduces payment linkage.
Is Mullvad suitable for Linux?
Yes. Mullvad is a strong Linux VPN choice, offering practical privacy controls and using the system firewall for leak protection. Router and server users should export WireGuard configs and manually test firewall behaviour.
Is Mullvad suitable for streaming?
It can work, but streaming isn't Mullvad's priority. For reliable streaming, NordVPN is generally the simpler recommendation.
What is the Mullvad exit-IP fingerprinting problem?
In May 2026, Mullvad disclosed that switching VPN servers might allow websites to infer the same anonymous user moved between servers. It doesn't reveal your real IP, but users with stricter threat models should log out and back in before switching until mitigations are in place.
Bottom line
Use Mullvad when anonymity is the priority, not additional features
Mullvad remains a top privacy choice in 2026 due to its account model, payment options, audit culture, and no-affiliate policy. However, WireGuard-only infrastructure, no port forwarding, no streaming focus, and a smaller network make it less universal than NordVPN or Proton VPN.