Mullvad Review: The Pros and Cons of This VPN

One surprising fact: over 40% of privacy-focused internet users in the U.S. tried a new VPN in the past year to avoid tracking and improve security.

This Mullvad Review shows what you need to know about a Swedish, privacy-first service. You’ll see how it performed in real-world tests for privacy, security, speed, streaming, torrenting, gaming, apps, support, and overall value.

Expect an informational, test-based assessment — not marketing claims. I’ll preview the main wins: a privacy-first account setup, strong leak protection, and P2P-friendly policies.

I’ll also note drawbacks that matter day to day: inconsistent speeds on some servers, streaming reliability issues, and email-only customer support.

In short, this vpn is a solid pick for privacy-first users, torrenters, and some gamers. If you need flawless streaming or 24/7 live chat, you may want a different service. Stats like server counts can vary by source, and I’ll call out those differences transparently.

For users who prize anonymity and audited security, this provider stands out. You get a service built around minimal sign-up data, simple account numbers, and a clear focus on privacy and leak protection rather than entertainment extras.

The position is deliberate. Privacy-first vpn choices aim to collect as little as possible and publish audits and operational details. In contrast, all-in-one providers prioritize unblocking streaming apps, easy setup, and extra features for casual users.

As a U.S. user you’ll see solid North America coverage and fast connection times in many tests. Strong leak protection and transparent policy practices are clear advantages for privacy-focused web use and P2P.

You give up some convenience: certain U.S. locations showed slower performance at peak hours, and streaming access to services like Hulu and Prime Video was less reliable in tests.

• Choose it if anonymous use and P2P matter most.
• Consider another vpn if seamless streaming is your primary need.

Hands-on results highlight clear wins for privacy and P2P, plus a few practical drawbacks.

You get strong privacy protections: minimal account data, anonymous payment options, and audited no-logs claims. Independent audits over multiple years support those claims, which matters if you value anonymity.

Security wins include WireGuard and OpenVPN support, consistent leak test passes (DNS, WebRTC, IPv6), and a reliable kill switch. Optional filtering tools help block ads and trackers on some platforms.

For torrenting, P2P is allowed on all servers. Download performance held up well in tests, even after recent port forwarding changes. If you torrent, these results are a clear advantage.

Streaming results were mixed. Netflix, Disney+, and Max sometimes work, but many tests failed with Hulu, Prime Video, BBC iPlayer, and ITVX. If seamless media access matters to you, expect inconsistent outcomes.

Support is email-only and can be slow. Multiple reports show multi-day waits for replies. That can be frustrating when you need fast fixes or help with device setup.

Skip it if streaming is your top priority, if you want live chat help, or if frequent CAPTCHAs disrupt your browsing. Otherwise, privacy-focused users and torrenters will likely appreciate the core features and test results.

Pricing is intentionally simple: one flat euro fee billed month to month. In practice, that means a consistent €5 charge that converts to roughly $5.44–$5.94 depending on your bank’s exchange rate and any foreign transaction fees.

What you’ll actually pay varies slightly by day and by card or crypto provider. If you pay with a credit card you may see a small exchange fee. Paying with crypto or vouchers can avoid some costs, but your chosen payment method matters.

This vpn uses a single monthly plan and does not offer long-term discounts. That keeps billing predictable, but it also means your annual bill will be higher than competitors that push steep multi-year deals.

For example, paying every month costs about $65–$72 per year at current rates. Competing multi-year promotions can drop the effective yearly price much lower, so choose based on how long you’ll keep the service.

Reviewers have noted two user-friendly options: a short 3-hour trial mentioned in one source and a commonly cited 30-day refund window in others. For a quick test, the short trial can help; for longer evaluation, the 30-day policy offers more protection for the customer.

Value lens: If you want a vpn for a single month at a time, the flat plan is straightforward and fair. If your goal is the lowest long-term price, the lack of discounts may make other providers more attractive.

Signing up uses a simple 16-digit code instead of the usual email-and-password form. You get an account number at creation and use that code to log in, so you never hand over an email address or set a password.

Why this matters for privacy: fewer identifiers tied to your vpn account reduce the chance that your service usage links back to you. That lowers common tracking risks compared with standard email-based signups.

Reviewers note several anonymous payment paths: cash mailed in, cryptocurrency, and vouchers (including in-person cash buys in some regions). Each option helps you avoid tying card details to your vpn use.

Be realistic: cash-by-mail involves postage records, crypto can leave blockchain traces, and voucher vendors may record purchases. Anonymous payments reduce but do not erase all potential data trails.

• Minimal operational data is kept: aggregated connection counts and bandwidth metrics to run the service.
• Keep your account number secure and pick a payment method that matches your privacy needs and convenience.

You’ll find a modest but clearly documented server network spread across many countries. Sources vary, but the commonly cited figure is about 724 servers across 49 countries, and totals can change as the provider adds or retires machines.

Different sites report different country counts (for example, 36 or 43). That happens because servers move, data centers adjust, and reporting lags by source. Anchor on the ~724/49 figure as a practical snapshot of the network.

No virtual locations means servers are physical machines located in the advertised country. Privacy-minded users prefer this because it reduces ambiguity about where traffic exits and improves legal clarity.

The website lists which servers are owned and which are rented. That transparency helps you verify infrastructure and assess protection risks tied to third-party data centers.

About 30 Bridge servers support double-hop and Shadowsocks-style routing. Use them when you want extra obfuscation or harder traffic analysis, but expect a speed tradeoff compared with single-hop servers.

Reliability is more than raw speed — it means quick connects, stable sessions, and predictable reconnections when you move between Wi-Fi and cellular.

Reviewers reported connection times often around 3 seconds. That short time matters when you switch networks or change servers during the day.

Everyday stability usually held up well, but intermittent slowdowns appeared during peak hours. Shared IPs and fewer total servers can make your connection vary without warning.

Server crowding happens when too many users share the same IP or machine. On a smaller network, that crowding creates more variability for U.S. users in busy metro areas.

“You may not see load indicators in the app, so expect some trial-and-error when picking a server.”

• Practical tip: pick the nearest city server first.
• If performance dips, try a second nearby servers location to compare times.
• Remember that network conditions and peak time load affect speeds more than distance alone.

Real-world speed checks showed quick peaks but also notable dips depending on server and time. You can expect strong bursts with the right setup, yet variability is common during busy hours.

WireGuard was the fastest protocol in tests and usually gives the best speed. OpenVPN trailed but remains a reliable fallback for compatibility and stability.

One dataset reported about a ~27% speed loss on nearby servers and ~39% on distant ones. Other tests showed outliers: a near U.S. server occasionally dropped ~45%.

Reviewers blamed crowding, shared IPs, and a smaller network size for inconsistent results. Peak load and server choice often drive throughput more than raw distance.

• Set expectations: fast potential with variability by time and server.
• Test at home: run multiple tests at different times, try 2–3 nearby locations, and retest when speed changes.

“Expect variability—pick servers and times that match your needs.”

In hands-on tests, media apps sometimes work — but inconsistent access is the rule, not the exception. You can see working streaming in a few cases, yet you should not rely on flawless playback for every title or region.

Services that may work

• Netflix (multiple regions reported to work occasionally).
• Max, Disney+ (sometimes after troubleshooting), and ESPN+.

Common failures

• Hulu and Amazon Prime Video often block connections.
• BBC iPlayer and ITVX repeatedly failed in multiple tests.

The main reason is simple: shared VPN IPs get flagged by services, and smaller server pools make rotation harder. This provider does not prioritize streaming-optimized servers or rapid IP churn.

Troubleshooting steps: switch servers in the same country, change protocol, try a different browser, clear cookies, and test again. Even so, many users still hit blocks.

“If Hulu or Prime are must-haves, pick a vpn known for consistent streaming access.”

You’ll notice this provider often gets recommended for torrenting because it focuses on strong privacy, reliable leak protection, and an open P2P policy.

P2P is allowed on all servers, so you don’t need to hunt for special nodes. That makes it easy to pick a nearby server and start downloading without extra rules or routing choices.

In practical tests, a 700MB copyright-free file took about ~10 minutes without a VPN and ~16 minutes on a U.S. server. Expect some slowdown: speeds vary by load, not just distance.

Port forwarding was removed after controversy. That change can reduce incoming connections and make seeding slower for some setups.

If you relied on forwarded ports for high seedability, you may see fewer peers and longer upload times now.

• Use WireGuard for best speed and lower latency.
• Choose a nearby server to cut round-trip time.
• Keep the kill switch enabled to avoid accidental exposure.

“Torrenting can be legal, but you are responsible for lawful use and avoiding copyright infringement.”

When you route traffic through an encrypted tunnel, milliseconds add up and affect in-game responsiveness. Expect your ping to rise because your packets take an extra hop to a VPN server.

Nearby U.S. servers often keep latency low enough for casual and many competitive games. Reviewers report that staying under ~85ms generally avoids noticeable lag in most titles.

Choose distant locations and you can expect higher ping and lower frame-to-server responsiveness. International routing often pushes latency too high for twitch gameplay.

When it helps: a vpn can bypass ISP throttling, improve routing to a specific region, or give extra protection on public Wi‑Fi.

When it hurts: competitive matches are sensitive to latency, and crowded or distant servers will increase your ping and reduce your speed and stability.

Practical setup tips:

• Pick the closest city-level server for best ping.
• Test 2–3 nearby endpoints and compare connection and speed before you play.
• Disable multihop/Bridge options when low latency is a priority.

“If you want ranked play to feel smooth, prioritize low latency over extra obfuscation.”

A clear security stack explains exactly what encrypts and protects your internet sessions. Below is a plain-English look at the tech that keeps your traffic private and what tests showed in practice.

Encryption uses AES-256 to scramble your traffic. Reviewers ran DNS, WebRTC, and IPv6 checks and found no leaks in controlled tests.

Some reports even confirmed full IPv6 routing was handled safely, so your connections stayed protected across address types.

Pick WireGuard for speed and modern crypto. Choose OpenVPN when you need broad compatibility.

For censorship resistance, Shadowsocks is available via Bridge, but expect slower throughput with that option.

The kill switch is on by default for desktop apps and includes a Lockdown-style mode that blocks internet access if the vpn drops.

Split tunneling is available on Windows, Android, and Linux, so you can send specific apps or devices outside the tunnel (handy for banking or local printers).

DNS content blockers let you filter ads, trackers, malware, gambling, and adult sites. They reduce unwanted content but do not replace dedicated browser blockers.

“These protections combine to give strong, practical defense for most everyday uses.”

Understanding what a provider records is key when you choose a privacy-focused vpn. Below you’ll find a clear, practical look at what the policy says, what limited data the service keeps, and which independent audits back those claims.

No-logs in practice

The service asserts it does not collect activity logs. That means no records of websites you visit, no DNS request histories, and no per-session timestamps tied to your account.

Operationally, it still tracks minimal anonymized metrics needed to run a network, such as current simultaneous connections and aggregate bandwidth. Those metrics are not linked to your account number and are used only for capacity planning and troubleshooting.

Why anonymization matters

Anonymized connection counts and bandwidth figures let operators manage capacity without holding identifiable information. If law enforcement requests data, there’s little usable information to produce when anonymization and no-logs practices are followed.

Independent firms have audited parts of the apps and infrastructure. Named assessments include Cure53, Radically Open Security, and Assured AB, with reports published publicly. Those audits examine code, client behavior, and operational controls.

Multiple audits from different teams strengthen confidence because they test different components and methods. You should value regular, public assessments when comparing providers.

Being based in Sweden places the service inside a 14 Eyes country. That raises theoretical risk, but a genuine no-logs posture limits what authorities can legally obtain.

In short: jurisdiction matters, yet strong technical limits on stored information reduce practical exposure.

In 2020 a Windows privilege escalation issue affected older client versions under specific conditions. The company disclosed the flaw, released patches, and subsequent audits verified fixes. That sequence—disclosure, patch, audit—helps restore confidence when handled transparently.

Quick checklist to evaluate privacy claims:

• Look for published audits and recent test results.
• Confirm minimal signup identifiers and anonymous payment options.
• Check that past security issues were disclosed and patched with follow-up audits.

Linux support stands out, offering both GUI and CLI tools that many rivals lack. That makes the platform a practical choice for power users who prefer manual control or scripts.

The provider offers apps for Windows, macOS, iOS, Android, and Linux. Core vpn functions work across each app, so basic protection and leak prevention are consistent for most devices.

Windows and macOS deliver the most complete desktop feature set. Mobile apps keep the essentials but sometimes drop advanced options.

Notable limits reported: Bridge or multihop options may be absent on mobile, and iOS can lack desktop-only controls. Expect differences in how features appear and operate.

Connection number: most reviewers cite five simultaneous connections. That lets you protect a laptop, phone, tablet, and one extra computer.

• Allocate one device for travel Wi‑Fi protection.
• Reserve a second laptop for torrenting or heavy transfers.
• Use the remaining slots for everyday browsing and a mobile phone.

For manual installs or advanced configs, check the provider’s website documentation when an app does not expose a setting.

Some websites will ask you to complete CAPTCHAs much more often when you browse via a shared VPN IP. That happens because many sites flag reused exit addresses as suspicious. Abuse prevention systems, high-volume traffic, and poor IP reputation all trigger extra checks.

How to reduce the problem:

Shared exit IPs carry the browsing patterns of many users. Sites treat these patterns like automated traffic and prompt for verification. This is a reputation and volume issue more than a flaw in the service.

• Switch servers or pick a less-used location to lower CAPTCHA frequency.
• Temporarily disconnect for sensitive tasks that require fewer checks.
• Try the provider’s SOCKS5 proxy option — reviewers say it can cut down prompts for some sites.
• Clear cookies and test a different browser after changing endpoints.

The apps lean utilitarian. Advanced features sometimes require manual configuration or reading guides on the website. That means more work up front but more control once you learn the options.

Upside: the website documentation is strong, with clear manuals, step-by-step setup guides, and advanced networking information for power users.

When issues pop up, you’ll rely on email support rather than an instant chat window. That design means no live chat or 24/7 chat team to give you immediate fixes when a connection drops before travel or a deadline.

Operationally, email-only support means you describe the problem in a message, wait for a reply, and often go through several back-and-forths. If you need a real-time walkthrough, you won’t get it via chat.

Reviewers report technical, knowledgeable replies, but also note delays. One source cited roughly a three-day wait for a detailed answer. That pattern is common: good quality, slower time to resolution.

• Set expectations: you won’t get instant chat help for urgent issues.
• Advanced users may prefer the depth of email replies; beginners often want live chat guidance.
• To speed things up, include OS, app version, protocol, server location, and exact error messages in your first email.
• At about $5–$6 per month, note that many competitors add 24/7 live chat — so support style is a real differentiator.

“Responses can be excellent and technical, but multi-day waits are not unusual.”

Put simply: choose this vpn when privacy beats streaming convenience. You get strong privacy controls, anonymous account setup, audited security, and solid P2P behavior that make it a top pick for torrenting and cautious browsing.

Reasons to buy: minimal signup data, reliable leak protection, and a straightforward €5/month price that favors month-to-month flexibility.

Reasons to pass: streaming is inconsistent across major services, the server network is smaller than some rivals (so crowding affects speeds), and support is email-only without live chat.

In short, pick it if privacy, security, and torrenting matter most. Skip it if seamless streaming, instant support, or the lowest long-term price are your top priorities in the U.S.