2023.5-beta1

This release is for desktop only.

Added

• Add --help and --version options to the desktop GUI application.
• Add creation date below device name in the device list screen.
• Add account view button in main view in the desktop app.
• Add time left and device name in the header bar in the desktop app.

Changed

• In the CLI, update the tunnel subcommand to resemble relay more. For example, by adding a
  unified mullvad tunnel get command and removing individual get subcommands like
  mullvad tunnel ipv6 get.
• Update the CLI multihop settings to make it possible to set the entry location without toggling
  multihop on or off.
• In the CLI, the mullvad account get command will now print the account number (if there is one)
  after the device has been revoked.
• Update the CLI relay, multihop & bridge selection interface to accept a hostname as sole argument,
  inheriting the behavior of mullvad relay set hostname. This is in addition to accepting a
  geographical location as basis for filtering relays.
• Silence OpenVPN "replay attack" warnings.
• Update Electron from 23.2.0 to 25.2.0.

Windows

• In the CLI, add a unified mullvad split-tunnel get command to replace the old commands
  mullvad split-tunnel pid list and mullvad split-tunnel get.

Fixed

• Update relay list after logging in. Previously, if the user wasn't logged in when the daemon
  started, the relay list would only be updated after attempting to connect to the VPN.

macOS

• Fix inability to sync iCloud and Safari bookmarks while connected to the VPN.

Removed

• Remove the CLI subcommand mullvad relay set hostname.

2023.4

This release is for desktop only.

Here is a list of all changes since last stable release 2023.3.

Added

• Log select settings on each connection attempt.

Changed

• Update Electron from 21.1.1 to 23.2.0.

macOS

• Change macOS app signing key and certificates. Replace those issued to Amagicom AB (the parent
  company of Mullvad VPN AB) with new certificates issued directly to Mullvad VPN AB.

Deprecated

Linux

• Deprecated support for Debian 10. This also means dropping support for glibc older
  than 2.31 and Linux kernels older than 5.10.

Fixed

• Fix location search in desktop app only searching for English location names.
• Fix automatic WireGuard key rotation not being initialized correctly when not running the GUI.
• Fix duplicated notifications in some situations.
• Fix notification setting being inverted. When non-important notifications were disabled it instead
  disabled important ones and showed non-important ones.
• Work around issues with PQ and multihop caused by fragmentation in the tunnel. The workaround
  doesn't fix fragmentation issues in general but prevents the PSK exchange packets from being
  fragmented by setting an explicit maximum segment size.
• Fix misaligned read in shadowsocks leading to a panic on some platforms.

macOS

• Fix tray window behaviour when opening mission control and switching between full-screen
  workspaces.
• Fix issue where app stopped responding on ARM Macs.

Linux

• Fix RPM package containing unecessary files causing conflicts with other electron-builder based
  packages.

android/2023.3

Changed

Android

• Change so that all links and texts leading to the mullvad webpage display a modified version of
  the webpage that does not include links to the account page in order to comply with
  the Google Play payment policies. This doesn't apply to F-Droid builds.
• Hide the FAQs and Guides button for Google Play users.

android/2023.2

Changed

Android

• Change so that all links and texts leading to the account web page (which also includes a payment
  flow) are either hidden or leads to the app itself (notification actions) in order to comply with
  the Google Play payment policies. This doesn't apply to F-Droid builds.

android/2023.1

Here is a list of all changes since last stable release android/2022.3:

Added

Android

• Add themed icon.
• Add DNS content blockers.
• Add "Manage account" button to the account view.

Changed

Android

• Clarify some of the error messages throughout the app.
• Increase WireGuard key rotation interval to 14 days.
• Change the DNS/MTU input to rely on dialogs in order to improve the UX on some devices.
• Hide "Buy more credit" buttons in the default release build published to Google Play, our website
  and GitHub. The buttons are still visible for F-Droid builds.

Fixed

Android

• Fix adaptive app icon which previously had a displaced nose and some other oddities.
• Fix app version sometimes missing in the settings menu.
• Fix missing payment info in out-of-time view.

android/2023.1-beta2

Added

Android

• Add "Manage account" button to the account view.

Fixed

Android

• Fix missing payment info in out-of-time view.

android/2023.1-beta1

Added

Android

• Add themed icon.
• Add DNS content blockers.

Changed

Android

• Clarify some of the error messages throughout the app.
• Increase WireGuard key rotation interval to 14 days.
• Change the DNS/MTU input to rely on dialogs in order to improve the UX on some devices.
• Hide "Buy more credit" buttons in the default release build published to Google Play, our website
  and GitHub. The buttons are still visible for F-Droid builds.

Fixed

Android

• Fix adaptive app icon which previously had a displaced nose and some other oddities.
• Fix app version sometimes missing in the settings menu.

2023.4-beta1

This release is for desktop only.

Added

• Log select settings on each connection attempt.

Changed

• Update Electron from 21.1.1 to 23.2.0.

macOS

• Change macOS app signing key and certificates. Replace those issued to Amagicom AB (the parent
  company of Mullvad VPN AB) with new certificates issued directly to Mullvad VPN AB.

Deprecated

Linux

• Deprecated support for Debian 10. This also means dropping support for glibc older
  than 2.31 and Linux kernels older than 5.10.

Fixed

• Fix location search in desktop app only searching for English location names.
• Fix automatic WireGuard key rotation not being initialized correctly when not running the GUI.
• Fix duplicated notifications in some situations.
• Fix notification setting being inverted. When non-important notifications were disabled it instead
  disabled important ones and showed non-important ones.
• Work around issues with PQ and multihop caused by fragmentation in the tunnel. The workaround
  doesn't fix fragmentation issues in general but prevents the PSK exchange packets from being
  fragmented by setting an explicit maximum segment size.

macOS

• Fix tray window behaviour when opening mission control and switching between full-screen
  workspaces.
• Fix issue where app stopped responding on ARM Macs.

Linux

• Fix RPM package containing unecessary files causing conflicts with other electron-builder based
  packages.

2023.3

Added

• Add Kyber1024 KEM algorithm into the Post-Quantum secure key exchange algorithm. This means the
  Quantum-resistant-tunnels feature now mixes both Classic McEliece and Kyber for added protection.
• Add notification dot to tray icon and system notification throttling.
• Add troubleshooting information to some in-app notifications.
• Add setting for quantum resistant tunnels to the desktop GUI.
• Enable TCP_NODELAY for the socket used by WireGuard over TCP. Improves latency and performance.

Changed

• Update the Post-Quantum secure key exchange gRPC client to use the stabilized
  PskExchangeV1 endpoint
• Add "auto" setting for the quantum-resistant tunnel feature, and make it the default. If it was
  previously set to off, it will now be set to auto instead. That currently means the same thing as
  "off", but this might change in the future.
• Update OpenVPN to 2.6.0 from 2.5.3.
• Update OpenSSL to 1.1.1t from 1.1.1j.
• Post-Quantum secure tunnels and multihop can now be used at the same time.
• Change WireGuard key rotation interval to 14 days. It was 7 days.

Windows

• Remove automatic fallback to wireguard-go. This is done as a first step before fully
  deprecating it on Windows.

Removed

• Remove port 443 as valid port for WireGuard over TCP. Keep only port 80 and 5001. The reason is
  to free up port 443 for other TCP based obfuscation later.

Fixed

• Fix close to expiry notification not showing unless app is opened once within the last three days
  in the desktop app.
• Retry if PQ PSK negotiation fails for any reason.
• Fix accumulated tunnel state notifications sometimes displayed after suspend.

2023.3-beta1

Added

• Add Kyber1024 KEM algorithm into the Post-Quantum secure key exchange algorithm. This means the
  Quantum-resistant-tunnels feature now mixes both Classic McEliece and Kyber for added protection.
• Add notification dot to tray icon and system notification throttling.
• Add troubleshooting information to some in-app notifications.
• Add setting for quantum resistant tunnels to the desktop GUI.
• Enable TCP_NODELAY for the socket used by WireGuard over TCP. Improves latency and performance.

Changed

• Update the Post-Quantum secure key exchange gRPC client to use the stabilized
  PskExchangeV1 endpoint
• Add "auto" setting for the quantum-resistant tunnel feature, and make it the default. If it was
  previously set to off, it will now be set to auto instead. That currently means the same thing as
  "off", but this might change in the future.
• Update OpenVPN to 2.6.0 from 2.5.3.
• Update OpenSSL to 1.1.1t from 1.1.1j.
• Post-Quantum secure tunnels and multihop can now be used at the same time.

Windows

• Remove automatic fallback to wireguard-go. This is done as a first step before fully
  deprecating it on Windows.

Removed

• Remove port 443 as valid port for WireGuard over TCP. Keep only port 80 and 5001. The reason is
  to free up port 443 for other TCP based obfuscation later.

Fixed

• Fix close to expiry notification not showing unless app is opened once within the last three days
  in the desktop app.
• Retry if PQ PSK negotiation fails for any reason.
• Fix accumulated tunnel state notifications sometimes displayed after suspend.