mullvadvpn-app

Here is a list of all changes since last stable release android/2024.2:

Changed

• Always show account history if present on login screen.
• Clarifications to in-app lockdown guide.

Deprecated

• Auto-connect is now legacy on all android devices. This setting will be replaced with a new one
  for devices without native OS support.

Fixed

• Improve device revoked detection.

This release is for desktop only.

Here is a list of all changes since last stable release 2024.3.

Added

• Add custom bridge settings in GUI. A custom bridge server can be used to cirvunment censorship when regular Mullvad bridge servers don't work

• Bundle https://github.com/mullvad/apisocks5 as a standalone binary.

macOS

• Add support for split tunneling.

Changed

• Update Electron from 28.1.3 to 30.0.4.

Fixed

Windows

• Fix a race condition which could cause a BSOD when DAITA was enabled during disconnects.

Changed

• Always show account history if present on login screen.
• Clarifications to in-app lockdown guide.

Deprecated

• Auto-connect is now legacy on all android devices. This setting will be replaced with a new one
  for devices without native OS support.

Fixed

• Improve device revoked detection.

Here is a list of all changes since last stable release android/2024.1:

Added

• Add the ability to create and manage custom lists in the location selection screen.
• Add the ability to import server IP overrides using text or file.

Fixed

• Remove potentially sensitive tunnel state information from lifecycle log.

Security

• Fix DNS leaks in blocking states or when no valid DNS has been configured due to an underlying OS issue. In these cases a dummy DNS will be set to prevent leaks.

This release is for desktop only.

This release is identical to 2024.3-beta1.

Here is a list of all changes since last stable release 2024.2.

Added

Windows

• Add DAITA (Defence against AI-guided Traffic Analysis) setting. On supported servers, this makes
  website fingerprinting more difficult by sending random padding packets along with padding all
  packets to the same size.

Changed

• Don't fail to start daemon when the offline monitor fails to be initialized.

Fixed

Linux

• Fix GUI not working on Ubuntu 24.04 by adding an AppArmor profile.
• Service failed to start when IPv6 was disabled in the kernel.

Security

• Fix DNS leaks in blocking states or when no valid DNS has been configured due to an underlying OS
  issue. In these cases a dummy DNS will be set to prevent leaks.

This release is for desktop only.

Here is a list of all changes since last stable release 2024.2.

Added

Windows

• Add DAITA (Defence against AI-guided Traffic Analysis) setting. On supported servers, this makes
  website fingerprinting more difficult by sending random padding packets along with padding all
  packets to the same size.

Changed

• Don't fail to start daemon when the offline monitor fails to be initialized.

Fixed

Linux

• Fix GUI not working on Ubuntu 24.04 by adding an AppArmor profile.
• Service failed to start when IPv6 was disabled in the kernel.

This release is for desktop only.

Here is a list of all changes since last stable release 2024.1.

Added

• Add automatic MTU detection for desktop platforms. This currently only uses information about
  dropped packets and does not take fragmentation into account.
• Add ability to import server IP overrides in GUI.

Changed

• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Change default retry connection attempts.

Fixed

• Continual excessive attempts to update the API IP were made after testing access methods.
• Fix pointless API access method rotations for concurrent requests.
• Fix daemon rotating logs on startup even if another daemon is already running.
• Fix missing redirect to out of time-view when running out of time.
• Fix incorrectly showing "App lost contact with system service" notification on suspend.
• Fix bug where the app would fail to select an existing relay in some scenarios, causing the
  user to wrongly end up in a blocked state.

macOS

• DNS was not properly restored in some cases when using custom DNS.

Security

macOS

• Flush states on tunnel state changes. Previously, pre-existing connections could leak when
  internet sharing was enabled on a device.

Windows

• Update electron-builder to 24.13.3 to fix CVE-2024-27303, which enabled privilege escelation when
  running the installer.

Added

• Add the ability to create and manage custom lists of relays.
• Add the ability to import server IP overrides using text or file.

Changed

• Change default retry connection attempts.

Fixed

• Fix pointless API access method rotations for concurrent requests.
• Fix broken IPv6 connectivity by making sure the relay selector attempts IPv6 connections.

This release is for desktop only.

Here is a list of all changes since 2024.1.

Added

• Add automatic MTU detection for desktop platforms. This currently only uses information about
  dropped packets and does not take fragmentation into account.
• Add ability to import server IP overrides in GUI.

Changed

• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Change default retry connection attempts.

Fixed

• Continual excessive attempts to update the API IP were made after testing access methods.
• Fix pointless API access method rotations for concurrent requests.
• Fix daemon rotating logs on startup even if another daemon is already running.
• Fix missing redirect to out of time-view when running out of time.
• Fix incorrectly showing "App lost contact with system service" notification on suspend.

Here is a list of all changes since last stable release android/2023.10:

Added

Android

• Add 3D map to the connect screen.
• Add support for all screen orientations.
• Add possibility to filter locations by provider.
• Add toggle for enabling or disabling split tunneling.
• Add auto-connect and lockdown guide on platforms with system vpn settings.

Changed

Android

• Migrate to Compose Navigation which also improves screen transition animations.
• Increase focus highlight opacity.
• Set auto-connect setting as legacy on platforms with system vpn settings.
• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Update support email address to new email address, [email protected].

Fixed

Android

• Improve DPAD navigation.
• Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix crash in Split Tunneling screen caused by apps provding icons bigger than 100MB.

This release is for desktop only.

Here is a list of all changes since last stable release 2023.6.

Added

• Add CLI support for applying patches to the settings with mullvad import-settings.
• Add account UUID to verbose 'mullvad account get -v' output.
• Respect OS prefer-reduced-motion setting.
• Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates
  a patch containing all patchable settings, which only includes relay IP overrides.
• Make mullvad status prints if lockdown mode is enabled when disconnected.
• Add option to configure custom API access methods. Custom API access methods allows the user to
  circumvent censorship by proxying API traffic.
• Add confirmation dialog when deleting a custom list.
• Add support for custom SOCKS5 OpenVPN bridges running locally.

Changed

• CLI command mullvad relay set tunnel wireguard entry-location changed to
  mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  swapped for custom-list to select entry relays using a custom list.
• Remove --location flag from mullvad status CLI. Location and IP will now always
  be printed (if available). mullvad status listen no longer prints location info.
• Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
• Upgrade the background map to a new WebGL 3D map. This should both look better and be more
  performant.
• Update Electron from 26.3.0 to 28.1.3.
• Improve the "Connecting to system service"-view with information about the situation and
  troubleshooting tips.
• Update support email address to new email address, [email protected].

Linux

• Rename interface name from wg-mullvad to wg0-mullvad.
• Enable quantum resistant tunnels by default (when set to auto). On other platforms, auto still
  always means the same thing as off.

Windows

• Add information to error notification about an error that is often caused by an incompatibility
  with VMWare.

Fixed

• Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix custom list name validation by not allowing empty names.
• Fix map scaling issues when changing display scale settings and when running under Wayland on
  Linux.

Linux

• Prevent fragmentation when multihop is enabled by setting a default route MTU.
• Fix Bash shell completions for subcommands in the CLI.
• Fix out IP missing forever when am.i.mullvad.net returns error.

macOS

• Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
  address.
• Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
  when the default route was removed while connecting.
• Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
  an MTU on the default route.
• Fix bug that caused high CPU usage.
• Fix bugs that caused the log to be filled with socket errors, by handling closed sockets
  gracefully.

Added

Android

• Add 3D map to the connect screen.
• Add support for all screen orientations.
• Add possibility to filter locations by provider.
• Add toggle for enabling or disabling split tunneling.
• Add auto-connect and lockdown guide on platforms with system vpn settings.

Changed

Android

• Migrate to Compose Navigation which also improves screen transition animations.
• Increase focus highlight opacity.
• Set auto-connect setting as legacy on platforms with system vpn settings.
• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Update support email address to new email address, [email protected].

Fixed

Android

• Improve DPAD navigation.
• Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.

Security

Android

• Change from singleTask to singleInstance to fix Task Affinity Vulnerability in Android 8.

This release is for desktop only.

Here is a list of all changes since 2024.1-beta1.

Added

• Add account UUID to verbose 'mullvad account get -v' output.
• Respect OS prefer-reduced-motion setting.
• Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates
  a patch containing all patchable settings, which only includes relay IP overrides.
• Make mullvad status prints if lockdown mode is enabled when disconnected.
• Add option to configure custom API access methods. Custom API access methods allows the user to
  circumvent censorship by proxying API traffic.
• Add confirmation dialog when deleting a custom list.
• Add support for custom SOCKS5 OpenVPN bridges running locally.

Fixed

• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix custom list name validation by not allowing empty names.

Linux

• Fix Bash shell completions for subcommands in the CLI.
• Fix out IP missing forever when am.i.mullvad.net returns error.

macOS

• Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
  address.
• Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
  when the default route was removed while connecting.
• Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
  an MTU on the default route.

Changed

• Remove --location flag from mullvad status CLI. Location and IP will now always
  be printed (if available). mullvad status listen no longer prints location info.
• Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
• Upgrade the background map to a new WebGL 3D map. This should both look better and be more
  performant.
• Update Electron from 26.3.0 to 28.1.3.
• Improve the "Connecting to system service"-view with information about the situation and
  troubleshooting tips.
• Update support email address to new email address, [email protected].

Linux

• Enable quantum resistant tunnels by default (when set to auto). On other platforms, auto still
  always means the same thing as off.

Windows

• Add information to error notification about an error that is often caused by an incompatibility
  with VMWare.

Here is a list of all changes since last stable release android/2023.9:

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

This release is for desktop only.

Here is a list of all changes since 2023.6.

Added

• Add CLI support for applying patches to the settings with mullvad import-settings.

Changed

• CLI command mullvad relay set tunnel wireguard entry-location changed to
  mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  swapped for custom-list to select entry relays using a custom list.

Linux

• Rename interface name from wg-mullvad to wg0-mullvad.

Fixed

• Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.

Linux

• Prevent fragmentation when multihop is enabled by setting a default route MTU.

This release is for Android only.

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

This release is for Android only. Here is a list of all changes since last stable release android/2023.8:

Added

Android

• Add missing translations for in-app purchases and a few settings.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

This release is for desktop only.

Here is a list of all changes since last stable release 2023.5.

Added

• Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
• Add custom lists to location selector in desktop app.
• Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  proxy API traffic through a peer before connecting to a tunnel. They are managed through
  mullvad api-access, and the initially supported network protocols are Shadowsocks and
  SOCKS5.
• Add social media content blocker.
• Add ability to override server IPs to the CLI.

Changed

• Update Electron from 25.2.0 to 26.3.0.
• Update OpenVPN to 2.6.8 from 2.6.0.

Linux

• Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.

Removed

Windows

• Remove wireguard-go (userspace WireGuard) support.

Fixed

• Show correct endpoint in CLI for custom relays.
• Lower risk of being rate limited.
• Fix error dialog when failing to write to console by handling the thrown error.
• Fix error dialog displayed when the daemon was killed.
• Fix desktop app freezing when navigations occur in very quick succession.

Windows

• Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).

Security

• Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the peer.

Windows

• Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  the directory in ProgramData.

This release is for Android only. Here is a list of all changes since last stable release android/2023.7:

Added

Android

• Add Google Play in-app purchases to the build distributed via Google Play.
• Add social media content blocker.
• Add support for setting per-app language in system settings.
• Add share and copy button to the log view which can be used to copy or in other ways share the log text.
  This was partially added to due to limitations in Compose which result in it not being possible to
  select and copy text in the log view.

Changed

Android

• Improve device and expiry information throughout the app.
• Migrate remaining views to Compose and MVVM (welcome, out-of-time, login, problem report, logs,
  voucher dialog, in-app notifications).

NOTE: The attached binaries does not include support for Google Play in-app purchases.