A Sweden-based privacy-purist VPN with anonymous account numbers, a flat €5 monthly price, multiple independent audits and an explicitly minimal data-collection architecture — tested across privacy, transparency and value.
Mullvad is a Sweden-based VPN operated by Mullvad VPN AB, in business since 2009 and one of the most distinctive products in the consumer VPN market. Where most providers compete on server count, streaming reliability or feature breadth, Mullvad's editorial positioning is unambiguously privacy-first: anonymous account numbers, no email collection, flat pricing with no discounts, and a publicly published catalogue of independent security audits.
The product is built around three core principles: anonymity by design (no personal data collected at signup — only a randomly generated 16-digit account number), flat pricing (€5 per month, with no introductory rates, multi-year discounts or upsells) and transparency (multiple full audit reports published openly, plus open-source apps). The advertised network spans 700+ servers in 40+ countries — modest by mainstream standards, but with most servers running on RAM-only or self-owned hardware.
Mullvad is not designed for streaming-platform unblocking and explicitly does not optimise for that use case. It is designed for users whose primary interest is verifiable privacy.
Mullvad's WireGuard implementation delivers excellent throughput on most modern broadband and fibre lines. The smaller server count is, in practice, less of a performance concern than it might seem — Mullvad concentrates capacity at higher-quality nodes rather than spreading thin across thousands of cheap rented servers.
For users on gigabit fibre, Mullvad consistently delivers near-native speeds on nearby exit countries. Long-haul transcontinental hops behave like every consumer VPN: protocol-bound, with the usual trade-offs.
Mullvad's privacy posture is the clearest in the consumer VPN market. The signup flow generates a random 16-digit account number — no email, name or billing identity is required to use the service. Payment is processed separately and is decoupled from the account number, with the provider supporting credit cards, several cryptocurrencies, and even physical cash sent in the post for users who want to fully decouple payment from identity.
Mullvad has commissioned and published multiple independent security and infrastructure audits, including reviews of its app code, server infrastructure and no-logs policy. The reports are published in full on the provider's website — most consumer VPNs publish only audit summaries, if anything.
The provider is registered in Sweden, which is part of the 14 Eyes intelligence-sharing alliance. Mullvad's mitigation strategy is data minimisation — there is no user-identifying data to compel disclosure of, because none is collected. Users with maximally adversarial threat models should still consult Mullvad's published guidance on threat models the service is and isn't designed to defeat.
Mullvad does not market itself as a streaming-unblocking VPN, and the editorial team behind it has been openly sceptical of streaming as a primary use case. Some streaming platforms work intermittently, but Mullvad will not invest engineering effort in defeating VPN-detection systems for entertainment platforms.
If your priority is reliable Netflix / BBC iPlayer / Disney+ access from abroad, choose a VPN that explicitly markets itself for streaming. Mullvad is the wrong tool for this job and is honest about that.
Mullvad publishes open-source apps on Windows, macOS, Linux, iOS and Android. The interface is unusually clean for a consumer VPN — minimal upsells, no aggressive marketing copy, straightforward connect/disconnect and server selection. Advanced controls (multi-hop, custom DNS, DAITA, post-quantum tunnels) are exposed in settings rather than buried.
The desktop apps include a built-in lockdown mode that blocks all traffic outside the VPN tunnel — useful for users who want a hard always-on guarantee.
Mullvad's pricing is its most distinctive commercial choice: a flat €5 per month, with no discounts, no multi-year plans, no introductory rates and no upsells. The price has held essentially flat since 2009 — exceptional in an industry built on discount-driven affiliate marketing.
Payment is decoupled from the account: you can fund your account number with credit card, several cryptocurrencies, or by mailing cash. The 30-day money-back guarantee covers new subscriptions per Mullvad's terms.
Mullvad provides email-based support and an extensive public knowledge base. There is no live chat — consistent with the company's lean operating model. The knowledge base is unusually high quality, including detailed documentation of threat models, protocol implementation choices and infrastructure architecture that most consumer VPNs do not publish.
Mullvad advertises a 30-day money-back guarantee. Because the service is funded by topping up an anonymous account number, "cancellation" simply means letting your credit run out — there is no recurring billing relationship to terminate. Refunds for unused balance are handled per Mullvad's terms.
Streaming-first users, large households needing many simultaneous devices, and discount-hunters will all find a better fit elsewhere — and Mullvad would not disagree.
Mullvad is the closest thing the consumer VPN market has to a privacy-purist gold standard. The combination of anonymous account numbers, flat pricing, open-source apps, multi-audit transparency and engineering investments in post-quantum and traffic-analysis defences puts it in a category of one for buyers whose primary concern is verifiable privacy.
It is the wrong choice for streaming, large-household coverage, or maximum server choice — and it does not pretend otherwise. For everyone else it is exceptional, and at €5/mo flat with a 30-day refund window, the risk of evaluating it is essentially zero.
Mullvad charges a flat €5/month with no discounts. For the binding terms and current payment options, visit the provider's website.
View our 2026 VPN comparison