mullvadvpn-app

This release is for Android only.

Here is a list of all changes since last stable release 2021.1.

Added

Android

• Add toggle for Split tunneling view to be able to show system apps
• Add support of adaptive icons (available only from Android 8).

Changed

• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  few attempts.

Android

• Improve stability by running the UI and the tunnel management logic in separate processes.
• Remove dialog warning that only custom local DNS servers are supported, since public custom DNS
  servers are now supported.
• Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required).
• Change so that swiping the notification no longer kills the service since that isn't a common way
  of handling the lifecycle in Android. Instead rely on the following mechanisms to kill the
  service:
  • Swiping to remove app from the Recents/Overview screen.
  • Android Background Execution Limits.
  • The System Settings way of killing apps ("Force Stop").
• Change Quick Settings tile label to reflect the action of clicking the tile. Also add a subtitle
  on supported Android versions (Q and above) to reflect the state.
• Hide the tunnel state notification from the lock screen.

Fixed

Android

• Fix banner sometimes incorrectly showing (e.g. "BLOCKING INTERNET").
• Fix tunnel state notification sometimes re-appearing after being dismissed.
• Fix invalid URLs. Rely on browser locale rather than app/system language.
• Automatically disable custom DNS when no servers have been added.
• Fix issue where erasing wireguard MTU value did not clear its setting.
• Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon
  properly after initialization.
• Fix UI sometimes not updating correctly while no split screen or after having a dialog from
  another app appear on top.
• Fix request to connect from notification or quick-settings tile not connecting if VPN permission
  isn't granted to the app. The app will now show the UI to ask for the permission and correctly
  connect after it is granted.
• Fix quick-settings tile sometimes showing the wrong tunnel state.
• Fix TV-only apps not appearing in the Split Tunneling screen.
• Fix status bar having the wrong color after logging out.
• Fix app sometimes crashing during startup on Android TVs.
• Fix app crash caused by quick settings tile.

This release is for desktop only.

Here is a list of all changes since last stable release 2021.6.

Added

• Add information about the always on kill switch in the desktop app.
• Add WireGuard multihop setting and entry location selection to desktop app.
• Add malware blocking to the desktop app. Implemented via DNS on the relays.
• Add changes dialog which will include the most notable changes in each new version.
• Show warning message when blocking internet while logged out, and make it possible to unblock the
  connection from the login view.

Changed

• Keep unspecified constraints unchanged in the CLI when providing specific tunnel constraints
  instead of setting them to default values.
• Obscure account number in account view and add button for copying instead of copying when text is
  pressed.
• Disable logging of translation errors in production. This will among other things prevent error
  messages from translating the country in the disconnected state.
• Update Electron from 15.0.0 to 16.0.4.
• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  few attempts.
• Stop preferring OpenVPN when bridge mode is enabled.
• CLI command for setting a specific server by hostname is no longer case sensitive.
  Example: mullvad relay set hostname SE9-WIREGUARD should now work.
• Update the default Shadowsocks password to mullvad and cipher to aes-256-gcm in the CLI
  when using it to configure a custom Shadowsocks bridge. The Mullvad bridges recently changed
  these parameters on port 443 (which is the default port).

Windows

• Update wireguard-nt to 0.10.1.
• Make wireguard-nt the default driver for WireGuard. This is used instead of wireguard-go and
  Wintun.
• Increase firewall transaction timeout from 2 to 5 seconds to lower the chance of errors when
  setting the firewall policy.
• Update split tunnel driver to 1.2.0.0. Notably, this driver release allows firewall filters
  added by other software to block excluded apps.

Removed

Windows

• Drop support for pre-Windows 10 systems.

Fixed

• Always kill sslocal if the tunnel monitor fails to start when using bridges.
• Show relay location constraint correctly in the CLI when it is set to any.
• Prevent gRPC from trying to run the app-daemon IPC communication through a HTTP proxy when the
  environment variable http_proxy is set. This caused the app to fail to connect to the daemon.
• Disable built-in DNS resolver in Electron. Prevents Electron from establishing connections to
  DNS servers set in system network preferences.
• Fix tray context menu showing or executing wrong actions, using wrong language or in other
  ways not update properly.
• Prevent settings file being truncated before being read. This caused the daemon to read an empty
  settings file, restore to default settings and log out.
• Improve performance for automatically scrolling text in desktop app.
• Increase availability of the API by allowing to issue requests to the API when connecting to the
  relay even if account data might be invalid.

macOS

• Resolve issues with the app blocking internet connectivity after sleep or when connecting to new
  wireless networks.
• Fix issue where the app would get stuck in offline state after a reboot or a reinstall by using
  route monitor instead of relying on SCNetworkReachability API to infer whether the host is
  offline.

Windows

• Fix app size after changing display scale.
• Fix daemon not starting if all excluded app paths reside on non-existent/unmounted volumes.
• Remove tray icon of current running app version when upgrading.
• Allow Mullvad wireguard-nt tunnels to work simultaneously with other wg-nt tunnels.
• Fix notifications on Windows not showing if window is unpinned and hidden.
• Wait for IP interfaces to arrive before trying to configure them when using wireguard-nt.
• Fix panic that occurs in the split tunnel monitor when a path consisting only of a prefix,
  such as "C:", is excluded using the CLI.

Linux

• Remove auto-launch file, GUI settings and other files created by the app in user directories, when
  uninstalling/purging.

Security

• Restrict which applications are allowed to communicate with the API while in a blocking state.
  This prevents malicious scripts on websites from trying to do so. On Windows, only
  mullvad-problem-report.exe and mullvad-daemon.exe executables are allowed to reach the API,
  whereas on Linux and macOS only root processes are able to reach the API.
• Enable "Always require VPN" by default if the settings cannot be parsed. This reduces the number
  of errors that lead to the daemon unexpectedly starting into non-blocking mode.

Added

• Show warning message when blocking internet while logged out, and make it possible to unblock the
  connection from the login view.

Fixed

• Prevent settings file being truncated before being read. This caused the daemon to read an empty
  settings file, restore to default settings and log out.
• Improve performance for automatically scrolling text in desktop app.
• Increase availability of the API by allowing to issue requests to the API when connecting to the
  relay even if account data might be invalid.

Security

• Enable "Always require VPN" by default if the settings cannot be parsed. This reduces the number
  of errors that lead to the daemon unexpectedly starting into non-blocking mode.

Added

• Add information about the always on kill switch in the desktop app.
• Add WireGuard multihop setting and entry location selection to desktop app.
• Add malware blocking to the desktop app. Implemented via DNS on the relays.
• Add changes dialog which will include the most notable changes in each new version.

Changed

• Keep unspecified constraints unchanged in the CLI when providing specific tunnel constraints
  instead of setting them to default values.
• Obscure account number in account view and add button for copying instead of copying when text is
  pressed.
• Disable logging of translation errors in production. This will among other things prevent error
  messages from translating the country in the disconnected state.
• Update Electron from 15.0.0 to 16.0.4.
• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  few attempts.
• Stop preferring OpenVPN when bridge mode is enabled.
• CLI command for setting a specific server by hostname is no longer case sensitive.
  Example: mullvad relay set hostname SE9-WIREGUARD should now work.
• Update the default Shadowsocks password to mullvad and cipher to aes-256-gcm in the CLI
  when using it to configure a custom Shadowsocks bridge. The Mullvad bridges recently changed
  these parameters on port 443 (which is the default port).

Windows

• Update wireguard-nt to 0.10.1.
• Make wireguard-nt the default driver for WireGuard. This is used instead of wireguard-go and
  Wintun.
• Increase firewall transaction timeout from 2 to 5 seconds to lower the chance of errors when
  setting the firewall policy.
• Update split tunnel driver to 1.2.0.0. Notably, this driver release allows firewall filters
  added by other software to block excluded apps.

Removed

Windows

• Drop support for pre-Windows 10 systems.

Fixed

• Always kill sslocal if the tunnel monitor fails to start when using bridges.
• Show relay location constraint correctly in the CLI when it is set to any.
• Prevent gRPC from trying to run the app-daemon IPC communication through a HTTP proxy when the
  environment variable http_proxy is set. This caused the app to fail to connect to the daemon.
• Disable built-in DNS resolver in Electron. Prevents Electron from establishing connections to
  DNS servers set in system network preferences.
• Fix tray context menu showing or executing wrong actions, using wrong language or in other
  ways not update properly.

macOS

• Resolve issues with the app blocking internet connectivity after sleep or when connecting to new
  wireless networks.
• Fix issue where the app would get stuck in offline state after a reboot or a reinstall by using
  route monitor instead of relying on SCNetworkReachability API to infer whether the host is
  offline.

Windows

• Fix app size after changing display scale.
• Fix daemon not starting if all excluded app paths reside on non-existent/unmounted volumes.
• Remove tray icon of current running app version when upgrading.
• Allow Mullvad wireguard-nt tunnels to work simultaneously with other wg-nt tunnels.
• Fix notifications on Windows not showing if window is unpinned and hidden.
• Wait for IP interfaces to arrive before trying to configure them when using wireguard-nt.
• Fix panic that occurs in the split tunnel monitor when a path consisting only of a prefix,
  such as "C:", is excluded using the CLI.

Linux

• Remove auto-launch file, GUI settings and other files created by the app in user directories, when
  uninstalling/purging.

Security

• Restrict which applications are allowed to communicate with the API while in a blocking state.
  This prevents malicious scripts on websites from trying to do so. On Windows, only
  mullvad-problem-report.exe and mullvad-daemon.exe executables are allowed to reach the API,
  whereas on Linux and macOS only root processes are able to reach the API.

Fixed

Android

• Fix app crash caused by quick settings tile.

Fixed

Android

• Fix app sometimes crashing during startup on Android TVs.

Added

Android

• Add toggle for Split tunneling view to be able to show system apps
• Add support of adaptive icons (available only from Android 8).

Changed

• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  few attempts.

Android

• Improve stability by running the UI and the tunnel management logic in separate processes.
• Remove dialog warning that only custom local DNS servers are supported, since public custom DNS
  servers are now supported.
• Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required).
• Change so that swiping the notification no longer kills the service since that isn't a common way
  of handling the lifecycle in Android. Instead rely on the following mechanisms to kill the
  service:
  • Swiping to remove app from the Recents/Overview screen.
  • Android Background Execution Limits.
  • The System Settings way of killing apps ("Force Stop").
• Change Quick Settings tile label to reflect the action of clicking the tile. Also add a subtitle
  on supported Android versions (Q and above) to reflect the state.
• Hide the tunnel state notification from the lock screen.

Fixed

Android

• Fix banner sometimes incorrectly showing (e.g. "BLOCKING INTERNET").
• Fix tunnel state notification sometimes re-appearing after being dismissed.
• Fix invalid URLs. Rely on browser locale rather than app/system language.
• Automatically disable custom DNS when no servers have been added.
• Fix issue where erasing wireguard MTU value did not clear its setting.
• Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon
  properly after initialization.
• Fix UI sometimes not updating correctly while no split screen or after having a dialog from
  another app appear on top.
• Fix request to connect from notification or quick-settings tile not connecting if VPN permission
  isn't granted to the app. The app will now show the UI to ask for the permission and correctly
  connect after it is granted.
• Fix quick-settings tile sometimes showing the wrong tunnel state.
• Fix TV-only apps not appearing in the Split Tunneling screen.
• Fix status bar having the wrong color after logging out.

Except the below, this is identical to 2021.6-beta1, see that change log for all changes since last stable release.

Fixed

• Fix the font for Russian. Issue introduced in 2021.6-beta1.
  Bundle a version of Source Sans Pro containing Cyrillic.

Added

Windows

• Add black monochromatic tray icon for Windows when using light color for tray.

Changed

• Update Electron from 11.4.9 to 15.0.0.
• Revamp main view with blurred background behind semi-transparent buttons and switch to
  correct font for logo. Also a slightly less bold font in other parts of the app.

Android

• Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required).

Removed

• Remove the old Let's encrypt root certificate from the API REST client. Only bundle and
  use the latest certificate.

Fixed

• Fix desktop app showing a future date for when WireGuard key was generated.
• Fix desktop app split tunneling view to not overflow on very long application names.
• Prevent API requests from being made prior to the tunnel state machine being set up.
  Rarely, failed requests could result in a deadlock.
• Fix segmentation fault when closing app (the GUI).

Windows

• Fix detection of Windows 11. Problem reports will now correctly report Windows 11 instead
  of Windows 10.
• Fix race condition in split tunneling initialization. Listen to route changes before reading
  out the default route.
• Fix bug in split tunneling code that could make the kernel driver and mullvad-daemon out of
  sync around which programs should be excluded when the driver took longer to respond.
• Use route-based offline monitoring. Fixes issues where the daemon falsely entered the offline
  state, for example when using virtual switches in Hyper-V.
• Improve repositioning of app window after connecting/disconnecting external monitor.

Android

• Fix reconnect on app resume. Don't reconnect the tunnel every time the app is opened.
• Fix invalid URLs. Rely on browser locale rather than app/system language.

macOS

• Prevent app from showing when dragging tray icon on macOS.
• Move window after dragging tray icon to new position.

Linux

• Greatly simplify behavior around custom DNS when using systemd-resolved, by not setting DNS config on interfaces other
  than our tunnel interface.

This release is for desktop only.

This release is identical to 2021.5-beta2 except that it has translations for new texts in the UI.

This release only has changes for macOS.

Fixed

macOS

• Fix issue with getting PF status due to an ABI change on macOS 12 Beta 9.

Added

• Added possibility to filter locations by provider in the desktop app.
• Add ability to use WireGuard over TCP towards all relays via the desktop CLI. However,
  this service is not yet available on all relays. At the time of writing, this only
  works towards se6-wireguard, se9-wireguard and se17-wireguard.
• Add GUI environment variable MULLVAD_DISABLE_UPDATE_NOTIFICATION. If set to 1, GUI
  notification will be disabled when an update is available. This is not intended to be set by
  normal users.
• Add setting for changing between IPv4 and IPv6 for the connection to WireGuard servers on
  desktop.

Android

• Added toggle for Split tunneling view to be able to show system apps

Windows

• Resolve symbolic links and junctions for excluded apps.
• Add opt-in support for NT kernel WireGuard driver. It can be enabled in the CLI.
  Should give better performance. Especially over Wi-Fi.

Changed

• Only use the account history file to store the last used account.
• Update the out of time-view and new account-view to make it more user friendly.
• Change the app update notification when the suggested version is a beta, to include that it's a
  beta.
• Upgrade OpenVPN from 2.5.1 to 2.5.3.
• Update Electron from 11.2.3 to 11.4.9.
• Move OpenVPN and WireGuard settings in the advanced settings view into separate settings views.
• Return to main view in desktop app after being hidden/closed for two minutes.

Linux

• Always send DNS requests inside the tunnel for excluded processes when using public custom DNS.

Windows

• Upgrade Wintun from 0.10.4 to 0.13.
• Reduce tunnel setup time for OpenVPN by disabling DAD.

Fixed

• Fix link to download page not always using the beta URL when it should.
• Fix deadlock that may occur when the API cannot be reached while entering the connecting state.
• Fix bug causing desktop app to log in if account number field was filled when removing account
  history.
• Fix lack of account expiry updates when using the app in unpinned mode and improve updating of
  account expiry overall.
• Fix incorrect WireGuard relay filtering when exit and entry locations overlap.
• Fix wrong translations when switching to/from unpinned window after changing language in the
  desktop app.
• Fix in-app notification button not working for some notifications.
• Fix incorrectly positioned navigation bar title when navigating back to a scrolled down view.
• Fix connectivity check for WireGuard multihop when the exit hop is down.
• Fix incorrect location and connection status while disconnecting and incorrect location in the
  beginning while connecting in the desktop app.
• Improve responsiveness of the controls and status text in the main view in the desktop app.
• Read macOS scrollbar visibility settings to decide wheter or not the scrollbars should hide when
  not scrolling.
• Fix IPv6 connections to WireGuard servers by not dropping select neighbor advertisements and
  solicitations.

Linux

• Make offline monitor aware of routing table changes.
• Assign local DNS servers to more appropriate interfaces when using systemd-resolved.
• Disable DNS over TLS for tunnel's DNS config when using systemd-resolved.
• Fix DNS when combining a static resolv.conf with ad blocking DNS.
• Check connectivity correctly on IPv6-only networks.

Windows

• Fix failure to restart the daemon when resuming from "fast startup" hibernation.
• Fix OpenVPN not responding to shutdown signals when they are sent early on, causing it to close
  after 30 seconds.
• Disable notification actions for persistent notifications since they were called when pressing
  close.
• Remove deleted network devices from consideration in the offline monitor. Previously, the offline
  monitor may have falsely reported the machine to be online due to a race condition.
• Recover firewall state correctly when restarting the service after a crash. This would fail when
  paths were excluded.
• Fix daemon not starting when a path is excluded on a drive that has since been removed.
• Prefer WireGuard if the constraints preclude OpenVPN and the tunnel protocol is "auto", instead
  of failing due to "no matching relays".
• Retry tunnel device creation multiple times to work around issues early after boot or hibernation.

Android

• Fix erasing wireguard MTU value in some scenarious.
• Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon
  properly after initialization.

This release is for desktop only.

This release is identical to 2021.4-beta1 except that it has translations for new texts in the UI.

This release is for desktop only.

Added

• When MULLVAD_MANAGEMENT_SOCKET_GROUP is set, only allow the specified group to access the
  management interface UDS socket. This means that only users in that group can use the CLI and GUI.
• Support WireGuard over TCP for custom VPN relays in the CLI. (Our relays don't support this yet).
• Make app native on Apple Silicon.
• Support WireGuard multihop using an entry endpoint constraint in the CLI.
• Add Ad and tracker blocking to the desktop app. Implemented via DNS on the relays.

Windows

• Add split tunneling as a beta feature. Allows excluding some applications from the VPN tunnel.

Android

• Added support of adaptive icons (available only from Android 8).

Changed

• Upgrade OpenVPN from 2.5.0 to 2.5.1.
• Replace CLI command mullvad custom-dns with the new command mullvad dns.
• Upgrade wireguard-go to 20210521230051 (Windows: v0.3.14)

Linux

• Only allow packets with the mark set to 0x6d6f6c65 to communicate with the relay server.
  Previously, bridges were expected to run as root instead.
• Use an ICMP socket instead of relying on a ping binary in $PATH to establish if a tunnel is
  working.

Android

• Improve stability by running the UI and the tunnel management logic in separate processes.
• Remove dialog warning that only custom local DNS servers are supported, since public custom DNS
  servers are now supported.

macOS

• Update shape of macOS icon to be in line with Apple's guidelines.

Fixed

• Fix relay selection failing to pick a WireGuard relay when no tunnel protocol is specified.
• Fix time left not always being translated in desktop app settings.
• Fix API address cache to use the supplied ports instead of always using port 443.
• Do not try to parse an empty account history.

Windows

• Prevent tray icons from being extracted to %TEMP% directory.
• Fix failure to create Wintun adapter due to a residual network interface by upgrading Wintun to
  0.10.4.
• Wait indefinitely for IP interfaces to attach to the tunnel device to prevent early timeouts,
  and errors setting interface metrics.
• Prevent Microsoft Store from dropping packets in WireGuard tunnels.

Linux

• Fix find mullvad-vpn.desktop in XDG_DATA_DIRS instead of using hardcoded path.

MacOS

• Set correct permissions for daemon's launch file in installer.
• Fix downgrades on macOS silently keeping previous version.
• Fix other menubar context menus not always closing when opening app on macOS 11.

Android

• Fix UI sometimes not updating correctly while no split screen or after having a dialog from
  another app appear on top.
• Fix request to connect from notification or quick-settings tile not connecting if VPN permission
  isn't granted to the app. The app will now show the UI to ask for the permission and correctly
  connect after it is granted.
• Fix quick-settings tile sometimes showing the wrong tunnel state.
• Fix TV-only apps not appearing in the Split Tunneling screen.

Security

Linux

• Drop packets being forwarded unless they are approved by the same rules as incoming or outgoing
  traffic.

This release is for Android only.

This release is identical to 2021.1-beta1.

This release is for desktop only.

This release is identical to 2021.3-beta2.

This release is for Windows only.

This release has no functional changes compared to 2021.3-beta1. The only
difference is that the installer and the binaries are signed with our
new code signing certificate. The old one is expiring.

The new certificate is brand new and Windows does not really trust it yet.
So there might be warnings when installing this for a while.

This release is for desktop only.

Added

• Preserve log of old daemon instance when upgrading on Desktop.

Linux

• Always enable src_valid_mark config option when connecting to allow policty based routing.

Changed

• Allow whitespace in account token in CLI.
• Read account token from standard input unless given as an argument in CLI.
• Make WireGuard automatic key rotation interval mandatory and between 1 and 7 days.
• Show default, minimum, and maximum key rotation intervals in CLI.
• Attempt to send problem reports using other endpoints if using the primary one fails.

Fixed

• Fix GUI not showing correct view if disconnected from the daemon during app startup.
• Fix incorrectly displayed "inconsistent version" text in settings if disconnected from daemon on
  startup.

Linux

• Further improve offline monitor to properly receive ENETUNREACH.

Android

• Fix status bar having the wrong color after logging out.

Security

• Always reconnect appropriately after an upgrade. Previously, installing the app twice in
  succession, with auto-connect disabled, would cause it to re-launch in the disconnected state.

This release is for Android only. From now on, Android releases will have this new header format
that is the same as the git tag they receive: android/<version>.

Added

• Enable isolation of the Electron renderer process to protect against potentially malicious third
  party dependencies.
• Add 51820 to list of WireGuard ports in app settings.
• Add option to connect to WireGuard relays over IPv6.
• Add Burmese translations.

Android

• Allow reaching the API server when connecting, disconnecting or in a blocked state.
• Add FAQs & Guides menu entry to the Settings screen.
• Add TV banner for better user experience and requirements.
• Style StatusBar and NavigationBar to make our app a bit more beautiful.

Changed

• Update Electron from 11.0.2 to 11.2.1 which includes a newer Chromium version and
  security patches.
• Allow provider constraint to specify multiple hosting providers.
• Only download a new relay list if it has been modified.
• Connect to the API only via TLS 1.3
• Shrink account history capactity from 3 account entries to 1.

Android

• WireGuard key is now rotated sooner: every four days instead of seven.

Windows

• Upgrade Wintun from 0.9.2 to 0.10.1.

Fixed

• Fix delay in showing/hiding update notification when toggling beta program.
• Improve responsiveness when reconnecting after some failed connection attempts.

Windows

• Fix "cannot find the file" error while creating a Wintun adapter by upgrading Wintun.
• Retry when creating a WireGuard tunnel fails due to no default routes being found.

Linux

• Stop using NM for managing DNS if it's newer than 1.26.

Linux

• Fix DNS issues where NM would overwrite Mullvad tunnel's DNS config in systemd-resolved.
• Fix issues with hosts where the firewall is doing reverse path filtering.

Android

• Fix input area sometimes disappearing when returning to the Login screen.

This release is for desktop only.

This release is identical to 2021.2-beta1, see that change log for all changes since last stable release.