Mullvad VPN

mullvadvpn-app is an open-source desktop app that provides a client for the Mullvad VPN service. It enables users to establish encrypted tunnels to mask their internet traffic and enhance online privacy across multiple operating systems. The software is available as a native installation for Windows, macOS, and Linux, and as a mobile application for Android and iOS.

On desktop platforms, the application architecture consists of three primary components: a system daemon called mullvad-daemon, a graphical user interface for general users, and a command line interface for advanced configuration. It is designed as a privacy-preserving client that goes to great lengths to stop traffic leaks. By default, the software applies the most secure and private options, requiring users to explicitly modify settings if they wish to allow more loose rules for their network traffic.

Key features

• Support for WireGuard and quantum-resistant tunnels
• WireGuard multihop and obfuscation via Shadowsocks, QUIC, or LWO
• Split tunneling for selective traffic routing on supported platforms
• Integrated content blockers for advertisements and other trackers
• Custom DNS server configuration for enhanced privacy
• Optional local network access control
• WireGuard over TCP support for bypassing restrictive firewalls
• Regular external security audits with public, unredacted reports

The application is built using Electron and Node.js for the frontend, while the backend system service manages the tunnel and security logic. To maintain high security standards, the development process requires PGP signatures for all merge commits to the main branch and specific signatures for critical files. The software undergoes external penetration tests and security reviews every two years to ensure the integrity of its privacy claims and to identify potential vulnerabilities in the codebase.

This tool is a privacy-preserving VPN client for users who require transparent, audited software to manage their encrypted communications and secure their internet access.