2024.1

This release is for desktop only.

Here is a list of all changes since last stable release 2023.6.

Added

• Add CLI support for applying patches to the settings with mullvad import-settings.
• Add account UUID to verbose 'mullvad account get -v' output.
• Respect OS prefer-reduced-motion setting.
• Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates
  a patch containing all patchable settings, which only includes relay IP overrides.
• Make mullvad status prints if lockdown mode is enabled when disconnected.
• Add option to configure custom API access methods. Custom API access methods allows the user to
  circumvent censorship by proxying API traffic.
• Add confirmation dialog when deleting a custom list.
• Add support for custom SOCKS5 OpenVPN bridges running locally.

Changed

• CLI command mullvad relay set tunnel wireguard entry-location changed to
  mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  swapped for custom-list to select entry relays using a custom list.
• Remove --location flag from mullvad status CLI. Location and IP will now always
  be printed (if available). mullvad status listen no longer prints location info.
• Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
• Upgrade the background map to a new WebGL 3D map. This should both look better and be more
  performant.
• Update Electron from 26.3.0 to 28.1.3.
• Improve the "Connecting to system service"-view with information about the situation and
  troubleshooting tips.
• Update support email address to new email address, support@mullvadvpn.net.

Linux

• Rename interface name from wg-mullvad to wg0-mullvad.
• Enable quantum resistant tunnels by default (when set to auto). On other platforms, auto still
  always means the same thing as off.

Windows

• Add information to error notification about an error that is often caused by an incompatibility
  with VMWare.

Fixed

• Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix custom list name validation by not allowing empty names.
• Fix map scaling issues when changing display scale settings and when running under Wayland on
  Linux.

Linux

• Prevent fragmentation when multihop is enabled by setting a default route MTU.
• Fix Bash shell completions for subcommands in the CLI.
• Fix out IP missing forever when am.i.mullvad.net returns error.

macOS

• Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
  address.
• Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
  when the default route was removed while connecting.
• Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
  an MTU on the default route.
• Fix bug that caused high CPU usage.
• Fix bugs that caused the log to be filled with socket errors, by handling closed sockets
  gracefully.

android/2024.1-beta1

Added

Android

• Add 3D map to the connect screen.
• Add support for all screen orientations.
• Add possibility to filter locations by provider.
• Add toggle for enabling or disabling split tunneling.
• Add auto-connect and lockdown guide on platforms with system vpn settings.

Changed

Android

• Migrate to Compose Navigation which also improves screen transition animations.
• Increase focus highlight opacity.
• Set auto-connect setting as legacy on platforms with system vpn settings.
• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Update support email address to new email address, support@mullvadvpn.net.

Fixed

Android

• Improve DPAD navigation.
• Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.

Security

Android

• Change from singleTask to singleInstance to fix Task Affinity Vulnerability in Android 8.

2024.1-beta2

This release is for desktop only.

Here is a list of all changes since 2024.1-beta1.

Added

• Add account UUID to verbose 'mullvad account get -v' output.
• Respect OS prefer-reduced-motion setting.
• Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates
  a patch containing all patchable settings, which only includes relay IP overrides.
• Make mullvad status prints if lockdown mode is enabled when disconnected.
• Add option to configure custom API access methods. Custom API access methods allows the user to
  circumvent censorship by proxying API traffic.
• Add confirmation dialog when deleting a custom list.
• Add support for custom SOCKS5 OpenVPN bridges running locally.

Fixed

• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix custom list name validation by not allowing empty names.

Linux

• Fix Bash shell completions for subcommands in the CLI.
• Fix out IP missing forever when am.i.mullvad.net returns error.

macOS

• Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
  address.
• Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
  when the default route was removed while connecting.
• Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
  an MTU on the default route.

Changed

• Remove --location flag from mullvad status CLI. Location and IP will now always
  be printed (if available). mullvad status listen no longer prints location info.
• Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
• Upgrade the background map to a new WebGL 3D map. This should both look better and be more
  performant.
• Update Electron from 26.3.0 to 28.1.3.
• Improve the "Connecting to system service"-view with information about the situation and
  troubleshooting tips.
• Update support email address to new email address, support@mullvadvpn.net.

Linux

• Enable quantum resistant tunnels by default (when set to auto). On other platforms, auto still
  always means the same thing as off.

Windows

• Add information to error notification about an error that is often caused by an incompatibility
  with VMWare.

2024.1-beta1

This release is for desktop only.

Here is a list of all changes since 2023.6.

Added

• Add CLI support for applying patches to the settings with mullvad import-settings.

Changed

• CLI command mullvad relay set tunnel wireguard entry-location changed to
  mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  swapped for custom-list to select entry relays using a custom list.

Linux

• Rename interface name from wg-mullvad to wg0-mullvad.

Fixed

• Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.

Linux

• Prevent fragmentation when multihop is enabled by setting a default route MTU.

android/2023.10

Here is a list of all changes since last stable release android/2023.9:

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.10-beta1

This release is for Android only.

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

2023.6

This release is for desktop only.

Here is a list of all changes since last stable release 2023.5.

Added

• Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
• Add custom lists to location selector in desktop app.
• Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  proxy API traffic through a peer before connecting to a tunnel. They are managed through
  mullvad api-access, and the initially supported network protocols are Shadowsocks and
  SOCKS5.
• Add social media content blocker.
• Add ability to override server IPs to the CLI.

Changed

• Update Electron from 25.2.0 to 26.3.0.
• Update OpenVPN to 2.6.8 from 2.6.0.

Linux

• Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.

Removed

Windows

• Remove wireguard-go (userspace WireGuard) support.

Fixed

• Show correct endpoint in CLI for custom relays.
• Lower risk of being rate limited.
• Fix error dialog when failing to write to console by handling the thrown error.
• Fix error dialog displayed when the daemon was killed.
• Fix desktop app freezing when navigations occur in very quick succession.

Windows

• Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).

Security

• Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the peer.

Windows

• Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  the directory in ProgramData (CVE-2023-50446).

android/2023.9

This release is for Android only. Here is a list of all changes since last stable release android/2023.8:

Added

Android

• Add missing translations for in-app purchases and a few settings.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.8

This release is for Android only. Here is a list of all changes since last stable release android/2023.7:

Added

Android

• Add Google Play in-app purchases to the build distributed via Google Play.
• Add social media content blocker.
• Add support for setting per-app language in system settings.
• Add share and copy button to the log view which can be used to copy or in other ways share the log text.
  This was partially added to due to limitations in Compose which result in it not being possible to
  select and copy text in the log view.

Changed

Android

• Improve device and expiry information throughout the app.
• Migrate remaining views to Compose and MVVM (welcome, out-of-time, login, problem report, logs,
  voucher dialog, in-app notifications).

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.8-beta2

This release is for Android only.

Here is a list of changes:

Fixed

Android

• Fix top bar flickering in some scrollable views.
• Fix welcome screen sometimes showing on app restart after adding time.
• Fix inconsistencies with the account history in the login view.
• Fix OS crash when sharing long logs by instead sharing the log content as a file.
• Improve in-app purchase and verification flow in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.