Almost every rival will let you connect for free this afternoon. Mullvad VPN will not: the app is free and open source on Windows, macOS, Linux, Android, and iOS, but it generates a random account number instead of asking for an email, then sits idle until that number has paid time on it. Everything else this VPN refuses is just as deliberate, from streaming access to port forwarding. The question worth settling before you download it is whether a service that sells privacy and nothing else earns your money from the first minute.
Mullvad VPN’s anonymous account, and what you give up for it
There is no email address, no password, and no profile. Creating an account produces a generated number, and that number is the whole account: you type it into the app, add time to it, and connect. Payment can go through a card, cryptocurrency, or cash sent in an envelope with a printed token. That design has been tested outside a lab. Swedish police once arrived at the Gothenburg office with a warrant intending to seize customer data and left with nothing, because none was stored. Independent auditors go through the apps and the infrastructure repeatedly, and the reports are published in full.
The cost is everything a mainstream VPN uses to win you over. No free tier and no trial, so the app is dead weight until you pay. No port forwarding, dropped after the addresses started getting blacklisted. No streaming-optimized servers, no bundled password manager, no identity monitoring. One account covers five devices and that ceiling cannot be raised. Development is active, but recent releases went into widening the traffic-analysis defense across platforms and making post-quantum key exchange the default, not into feature breadth.
DAITA and quantum-resistant tunnels, in plain terms
The service runs on WireGuard alone. OpenVPN was retired from both the apps and the servers, so anything still configured for it has stopped working, and any write-up still listing two protocols is out of date. WireGuard with ChaCha20 means a narrower attack surface and a faster handshake, at the cost of the flexibility a second protocol gave people on awkward networks.
DAITA, the defense against AI-guided traffic analysis, addresses a problem encryption does not solve. An observer who cannot read your traffic can still watch the size and timing of your packets, and matching that pattern against known sites is enough to guess where you went. DAITA pads packets to uniform sizes and injects filler traffic so the pattern stops being legible. The quantum-resistant tunnel is a separate idea: a post-quantum key exchange in the handshake, so traffic captured today cannot be unlocked later by hardware that does not exist yet.
The rest is practical. Multihop routes the connection through two servers in different jurisdictions, so the entry and exit points never belong to the same operator. Shadowsocks and the other obfuscation modes disguise the tunnel as ordinary traffic on networks that block VPNs on sight. DNS content blocking filters ads, trackers, and malware domains at the tunnel level, with no extension to install. Split tunnelling, which lets a chosen app skip the tunnel, is offered on the desktop and Android builds. The kill switch differs by platform too: on desktop the app drives the system firewall itself, with lockdown mode keeping it closed whenever the tunnel is down, while the mobile builds lean on the operating system’s own VPN controls, which is why the equivalent settings live outside the app on Android and iOS.
How do you set up an account, and what if the number is lost?
Getting to a working tunnel takes about a minute. The app generates an account or accepts a number you already hold, and once time has been added to it the connect button works. Two settings deserve a look before you close the window: DAITA is off by default and has to be switched on in the VPN settings, and lockdown mode holds the firewall shut whenever the tunnel is down.
Then write the account number down somewhere permanent, because this is what catches people. There is no password reset and no recovery email, so if the number is gone your only route back is tracing the payment that funded it, and payments stay traceable for roughly twenty days. Cash envelopes get shredded shortly after they arrive. Emailing support to recover an account also means handing over the address the numbered account existed to avoid. The anonymity works in both directions, including the one that hurts.
Mullvad VPN versus Proton VPN, IVPN, and NordVPN
Proton VPN is the obvious alternative for anyone unwilling to pay before testing: it runs a free plan, keeps port forwarding, and treats streaming access as a feature to maintain rather than a fight to skip, at the cost of an account tied to an email address. IVPN is the closest philosophical match, running the same account-ID model with no email and publishing its own audits. NordVPN is the opposite pole: a far larger network with purpose-built streaming and P2P servers, in exchange for an email-based account. Pick Mullvad VPN when you want the provider to know as little about you as possible. Pick Proton VPN if you want to test before paying or need geo-unblocking, and NordVPN if server count and streaming reliability matter more than anonymity from the company itself.
WireGuard speeds, and the bandwidth DAITA quietly spends
On nearby servers the tunnel sits close to an unprotected line, which is what WireGuard is good at: low overhead and fast reconnects from a light handshake. Long routes are another matter, because the network is mid-sized by industry standards, so a hop from Europe to Asia lands on fewer options and gives up more throughput than the giant providers do. The privacy features cost something too. DAITA adds padding and cover traffic, so switching it on spends bandwidth on purpose and slows real transfers, and multihop doubles the distance travelled. The post-quantum exchange runs during the handshake, so it affects how quickly the tunnel comes up, not how fast it runs after that.
The narrow reader Mullvad VPN is built for
This suits people who want the company running the VPN to know as little about them as their network provider does, and who accept paying for that before testing anything. Anyone whose real goal is unblocking a streaming catalogue, seeding through a forwarded port, or collecting security extras should pick a different service. If a numbered account and a short honest feature list are what you were after, Mullvad VPN is worth the download.
