Releases: mullvad/mullvadvpn-app
2026.2-beta1
This release is for desktop only.
Here is a list of all changes since last release 2026.1:
Added
Linux
- Make it possible to build for RISC-V from source.
- Add
--daemon-onlybuild option for deb and rpm packages for CLI usage.
Changed
- Location setting no longer defaults to Sweden, instead it uses your current location if it
has available relays, and falls back to Sweden otherwise. mullvad-daemonnow defaults toERRORlog level when-vis not specified.
mullvad-daemon -vvis used in system services to maintain previousDEBUGlog level.- Update GotaTun from version
0.2.0to0.5.1. This improves compliance with the
WireGuard spec by adding handshake jitter and implementing padding to multiples of 16 bytes,
fixes a minor vulnerability when generating peer indices, and fixes another when registering
incoming decoy packets for DAITA. - Disable SNI for Mullvad API traffic. This prevents DPI based on domain name when obfuscation is
disabled. - Redact other users' home paths in logs.
macOS
- GotaTun is now used as the WireGuard implementation. It replaces wireguard-go.
Fixed
Windows
- Fix regression in 2026.1 that could cause split tunneling to become unavailable.
Security
macOS
- Mitigate multiple local privilege escalation attacks from admin user to root in the
preinstall
andpostinstallscripts.
android/2026.4-beta2
Fixed
- Fix crash when showing the Custom DNS dialog that was introduced in 2026.4-beta1.
- Fix QUIC obfuscation not always being used if relays only had IPv6 addresses for QUIC.
android/2026.4-beta1
Caution
We advise from using this version and instead recommend using 2026.4-beta2 or a later version. This release contains a crash when showing the Custom DNS dialog. If the app crashes the tunnel will go down.
Added
- Add Ukrainian as a new language in the app.
- Add in-app language selector for Android 13 and up.
- Add reconnect action to tunnel status notification.
- Add search for Split Tunneling.
Changed
- Drop support for Android 8/8.1 (Android 9/API level 28 or later is now required).
- Show a two-column layout with a list and detail pane on the settings and VPN settings screens if the screen is wide enough (e.g. TV or tablet in landscape).
- Obfuscating the app icon has now been moved to Settings -> Appearance -> App Icon.
android/2026.3
Here is a list of all changes since last stable release android/2026.2:
Added
- Add link to notifications system settings from notifications screen.
- Add support for account deletion.
Changed
- Hide password by default on login screen.
- Disable autofill for password in api access method edit screen.
android/2026.3-beta3
Changed
- Disable autofill for password in api access method edit screen.
Fixed
- Fix D-pad navigation in settings.
- Fix input handling in delete account confirmation.
2026.1
Warning
A few Windows users have reported that the connection is blocked unless split tunneling is disabled in this release. This does not affect the security of the app.
This release is for desktop only.
Here is a list of all changes since last stable release 2025.14:
Changed
- Change
WireGuard portto no longer affect the port used for LWO. - Change
Mullvad Bridgesaccess method to randomly pick any Mullvad-owned bridge.
Previously the access method was constrained to the five bridges closest to the exit relay. - Changed CLI command
mullvad obfuscationtomullvad anti-censorship - The tunnel setup will not error out if sending ICMP is prohibited by the operating system.
Linux
- Change "Go back" keyboard shortcut from
EsctoAlt + Left ArroworAlt + [. - Use Wayland by default on Linux if available, otherwise fall back to X11.
macOS
- Change "Go back" keyboard shortcut from
EsctoCmd + Left ArroworCmd + [.
Windows
- Change "Go back" keyboard shortcut from
EsctoAlt + Left ArroworAlt + [. - Make Mullvad service run in case the
split tunnel driver fails to load.
Fixed
- Fix "Time left" label in main view not updating when time passes.
Windows
- Update split tunnel driver to 1.2.5.0. This fixes audit issue
MLLVD-CR-24-102,
and a BSOD when the driver was improperly unloaded. - Detect and kill processes preventing updates.
macOS
- Ignore utun interfaces when figuring out default routes. This prevents split tunneling from
failing when running some other software.
Security
Windows
- Warn user before clearing firewall rules during failed downgrades. This fix only applies to
downgrades to this version and future versions.
android/2026.3-beta2
Changed
- Disabled autofill for delete account textfield
Fixed
- Fix eager connection timeout in GotaTun
2026.1-beta2
This release is for desktop only.
Here is a list of all changes since last release 2026.1-beta1:
Fixed
macOS
- Revert "Allow incoming connections to the
mullvad-daemonservice when Application Firewall is
enabled." due to routing issues.
android/2026.3-beta1
Added
- Add link to notifications system settings from notifications screen
- Add support for account deletion
Changed
- Hide account number by default on login screen.
2026.1-beta1
This release is for desktop only.
Here is a list of all changes since last release 2025.14:
Changed
- Change
WireGuard portto no longer affect the port used for LWO. - Change
Mullvad Bridgesaccess method to randomly pick any Mullvad-owned bridge.
Previously the access method was constrained to the five bridges closest to the exit relay. - Changed CLI command
mullvad obfuscationtomullvad anti-censorship - The tunnel setup will not error out if sending ICMP is prohibited by the operating system.
Linux
- Change "Go back" keyboard shortcut from
EsctoAlt + Left ArroworAlt + [. - Use Wayland by default on Linux if available, otherwise fall back to X11.
macOS
- Change "Go back" keyboard shortcut from
EsctoCmd + Left ArroworCmd + [.
Windows
- Change "Go back" keyboard shortcut from
EsctoAlt + Left ArroworAlt + [. - Make Mullvad service run in case the split tunnel driver fails to load.
Fixed
- Fix "Time left" label in main view not updating when time passes.
Windows
- Update split tunnel driver to 1.2.5.0. This fixes audit issue
MLLVD-CR-24-102,
and a BSOD when the driver was improperly unloaded. - Detect and kill processes preventing updates.
macOS
- Ignore utun interfaces when figuring out default routes. This prevents split tunneling from
failing when running some other software. - Allow incoming connections to the
mullvad-daemonservice when Application Firewall is
enabled. This may unblock DNS requests to the local DNS resolver running in the daemon process.
Security
Windows
- Warn user before clearing firewall rules during failed downgrades. This fix only applies to
downgrades to this version and future versions.