android/2024.2-beta1

Added

• Add the ability to create and manage custom lists of relays.
• Add the ability to import server IP overrides using text or file.

Changed

• Change default retry connection attempts.

Fixed

• Fix pointless API access method rotations for concurrent requests.
• Fix broken IPv6 connectivity by making sure the relay selector attempts IPv6 connections.

2024.2-beta1

This release is for desktop only.

Here is a list of all changes since 2024.1.

Added

• Add automatic MTU detection for desktop platforms. This currently only uses information about
  dropped packets and does not take fragmentation into account.
• Add ability to import server IP overrides in GUI.

Changed

• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Change default retry connection attempts.

Fixed

• Continual excessive attempts to update the API IP were made after testing access methods.
• Fix pointless API access method rotations for concurrent requests.
• Fix daemon rotating logs on startup even if another daemon is already running.
• Fix missing redirect to out of time-view when running out of time.
• Fix incorrectly showing "App lost contact with system service" notification on suspend.

android/2024.1

Here is a list of all changes since last stable release android/2023.10:

Added

Android

• Add 3D map to the connect screen.
• Add support for all screen orientations.
• Add possibility to filter locations by provider.
• Add toggle for enabling or disabling split tunneling.
• Add auto-connect and lockdown guide on platforms with system vpn settings.

Changed

Android

• Migrate to Compose Navigation which also improves screen transition animations.
• Increase focus highlight opacity.
• Set auto-connect setting as legacy on platforms with system vpn settings.
• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Update support email address to new email address, [email protected].

Fixed

Android

• Improve DPAD navigation.
• Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix crash in Split Tunneling screen caused by apps provding icons bigger than 100MB.

2024.1

This release is for desktop only.

Here is a list of all changes since last stable release 2023.6.

Added

• Add CLI support for applying patches to the settings with mullvad import-settings.
• Add account UUID to verbose 'mullvad account get -v' output.
• Respect OS prefer-reduced-motion setting.
• Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates
  a patch containing all patchable settings, which only includes relay IP overrides.
• Make mullvad status prints if lockdown mode is enabled when disconnected.
• Add option to configure custom API access methods. Custom API access methods allows the user to
  circumvent censorship by proxying API traffic.
• Add confirmation dialog when deleting a custom list.
• Add support for custom SOCKS5 OpenVPN bridges running locally.

Changed

• CLI command mullvad relay set tunnel wireguard entry-location changed to
  mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  swapped for custom-list to select entry relays using a custom list.
• Remove --location flag from mullvad status CLI. Location and IP will now always
  be printed (if available). mullvad status listen no longer prints location info.
• Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
• Upgrade the background map to a new WebGL 3D map. This should both look better and be more
  performant.
• Update Electron from 26.3.0 to 28.1.3.
• Improve the "Connecting to system service"-view with information about the situation and
  troubleshooting tips.
• Update support email address to new email address, [email protected].

Linux

• Rename interface name from wg-mullvad to wg0-mullvad.
• Enable quantum resistant tunnels by default (when set to auto). On other platforms, auto still
  always means the same thing as off.

Windows

• Add information to error notification about an error that is often caused by an incompatibility
  with VMWare.

Fixed

• Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix custom list name validation by not allowing empty names.
• Fix map scaling issues when changing display scale settings and when running under Wayland on
  Linux.

Linux

• Prevent fragmentation when multihop is enabled by setting a default route MTU.
• Fix Bash shell completions for subcommands in the CLI.
• Fix out IP missing forever when am.i.mullvad.net returns error.

macOS

• Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
  address.
• Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
  when the default route was removed while connecting.
• Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
  an MTU on the default route.
• Fix bug that caused high CPU usage.
• Fix bugs that caused the log to be filled with socket errors, by handling closed sockets
  gracefully.

android/2024.1-beta1

Added

Android

• Add 3D map to the connect screen.
• Add support for all screen orientations.
• Add possibility to filter locations by provider.
• Add toggle for enabling or disabling split tunneling.
• Add auto-connect and lockdown guide on platforms with system vpn settings.

Changed

Android

• Migrate to Compose Navigation which also improves screen transition animations.
• Increase focus highlight opacity.
• Set auto-connect setting as legacy on platforms with system vpn settings.
• Change default obfuscation setting to auto.
• Migrate obfuscation settings for existing users from off to auto.
• Update support email address to new email address, [email protected].

Fixed

Android

• Improve DPAD navigation.
• Upgrade wireguard-go. This might improve connectivity on some devices such as chromebooks.
• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.

Security

Android

• Change from singleTask to singleInstance to fix Task Affinity Vulnerability in Android 8.

2024.1-beta2

This release is for desktop only.

Here is a list of all changes since 2024.1-beta1.

Added

• Add account UUID to verbose 'mullvad account get -v' output.
• Respect OS prefer-reduced-motion setting.
• Add CLI command for exporting settings patches: mullvad export-settings. Currently, it generates
  a patch containing all patchable settings, which only includes relay IP overrides.
• Make mullvad status prints if lockdown mode is enabled when disconnected.
• Add option to configure custom API access methods. Custom API access methods allows the user to
  circumvent censorship by proxying API traffic.
• Add confirmation dialog when deleting a custom list.
• Add support for custom SOCKS5 OpenVPN bridges running locally.

Fixed

• Fix connectivity issues that would occur when using quantum-resistant tunnels with an incorrectly
  configured MTU.
• Fix custom list name validation by not allowing empty names.

Linux

• Fix Bash shell completions for subcommands in the CLI.
• Fix out IP missing forever when am.i.mullvad.net returns error.

macOS

• Fix default route not being restored when disconnecting when the gateway was a link-local IPv6
  address.
• Fix app sometimes getting stuck in error state when the connection is unstable. This occurred
  when the default route was removed while connecting.
• Improve multihop performance by preventing fragmentation in the tunnel. This is done by setting
  an MTU on the default route.

Changed

• Remove --location flag from mullvad status CLI. Location and IP will now always
  be printed (if available). mullvad status listen no longer prints location info.
• Change CLI interface for custom SOCKS5 bridges as part of supporting bridges running locally.
• Upgrade the background map to a new WebGL 3D map. This should both look better and be more
  performant.
• Update Electron from 26.3.0 to 28.1.3.
• Improve the "Connecting to system service"-view with information about the situation and
  troubleshooting tips.
• Update support email address to new email address, [email protected].

Linux

• Enable quantum resistant tunnels by default (when set to auto). On other platforms, auto still
  always means the same thing as off.

Windows

• Add information to error notification about an error that is often caused by an incompatibility
  with VMWare.

2024.1-beta1

This release is for desktop only.

Here is a list of all changes since 2023.6.

Added

• Add CLI support for applying patches to the settings with mullvad import-settings.

Changed

• CLI command mullvad relay set tunnel wireguard entry-location changed to
  mullvad relay set tunnel wireguard entry location, as the location subcommand can now be
  swapped for custom-list to select entry relays using a custom list.

Linux

• Rename interface name from wg-mullvad to wg0-mullvad.

Fixed

• Validate that hostname matches correct server type for CLI commands mullvad relay set location,
  mullvad bridge set location, and mullvad relay set tunnel wireguard entry location.

Linux

• Prevent fragmentation when multihop is enabled by setting a default route MTU.

android/2023.10

Here is a list of all changes since last stable release android/2023.9:

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

android/2023.10-beta1

This release is for Android only.

Fixed

Android

• Fix relay selector attempting to connect to OpenVPN relays in some circumstances.

NOTE: The attached binaries does not include support for Google Play in-app purchases.

2023.6

This release is for desktop only.

Here is a list of all changes since last stable release 2023.5.

Added

• Add customizable relay lists to the CLI on desktop. Custom lists can be managed through
  mullvad custom-lists and can be selected through mullvad relay set and mullvad bridge set.
• Add custom lists to location selector in desktop app.
• Add custom API access methods to the CLI on desktop. Custom API access methods allow the user to
  proxy API traffic through a peer before connecting to a tunnel. They are managed through
  mullvad api-access, and the initially supported network protocols are Shadowsocks and
  SOCKS5.
• Add social media content blocker.
• Add ability to override server IPs to the CLI.

Changed

• Update Electron from 25.2.0 to 26.3.0.
• Update OpenVPN to 2.6.8 from 2.6.0.

Linux

• Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.

Removed

Windows

• Remove wireguard-go (userspace WireGuard) support.

Fixed

• Show correct endpoint in CLI for custom relays.
• Lower risk of being rate limited.
• Fix error dialog when failing to write to console by handling the thrown error.
• Fix error dialog displayed when the daemon was killed.
• Fix desktop app freezing when navigations occur in very quick succession.

Windows

• Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).

Security

• Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the peer.

Windows

• Fix possible privilege escalation by setting stricter permissions on mullvad directories such as
  the directory in ProgramData (CVE-2023-50446).