Mullvad VPN: baixar versions anteriors

This release is for desktop only.
Here is a list of all changes since last stable release 2026.3:
Added
- Add Ukrainian as a new language in the app.
- installer-downloader logs are aggregated by mullvad-problem-report.
Changed
- Update gotatun to 0.8.1.
Windows
- Update wireguard-nt to version 1.1. This retires the Mullvad fork at
https://github.com/mullvad/wireguard-nt.
macOS
- Use arch-specific installers to deliver updates. This makes updates around 50% smaller.
Fixed
- Align ciphers for custom shadowsocks API access methods between clients and mullvad-daemon. Any
existing, invalid access method is removed with a settings migration.
macOS
- Fix split tunneling related parse error on macOS 27.
Linux
- Fix issue where gotatun would fail to start on Linux systems where the
IPv6 stack had been disabled.
Windows
- Fix misleading "split tunneling" error when offline.
- Fix unhandled error: "Reached the end of the file. (os error 38)"
Security
- Linux and macOS: Fix management interface socket being created with less restrictive permissions
when using MULLVAD_MANAGEMENT_SOCKET_GROUP. This addresses the advisory GHSA-p9rr-wc9m-qmwg.
Linux
- Plug hole in Custom DNS firewall rules for LAN resolvers.

This release is for desktop only.
Here is a list of all changes since last stable release 2026.2:
Added
- Add port setting for LWO obfuscation.
- Add list of recent server selections in the select location view.
- Add context menu to locations in the select location view.
- GotaTun is now used as the userspace WireGuard implementation on all desktop platforms, not just
macOS. It replaces wireguard-go.
Changed
- Optimize LWO performance. This gives a 1.5 to 3 times speedup in our benchmarks.
- Change default retry connection attempts. LWO is now the third default
constraint. The relative order among the following constraints is preserved.
Linux
- Switch memory allocator to jemalloc to reduce fragmentation.
- mullvad-early-boot-blocking.service now waits for local file system to be mounted
(After=local-fs.target). This was assumed before, but not required (and is still not required).
- mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.
- mullvad-daemon now exits without tearing down firewall rules on SIGUSR1.
This is used to avoid leaking network traffic when restarting systemd service.
macOS
- Restart the GUI after an update if it was running.
- mullvad-daemon now installs the same shutdown handler for SIGHUP as SIGINT and SIGTERM.
Fixed
- Fix duplicate "Connected"/"Disconnected" desktop notifications caused by the daemon sending
multiple consecutive tunnel state events for the same state.
- Fix GUI appearing stuck in "Disconnecting" state when daemon transitions directly from error to
disconnected.
- Fix QUIC obfuscation not always being used if relays only had IPv6 addresses for QUIC.
- Fix a bug with Shadowsocks-based API access methods where some ciphers were configurable by
Mullvad VPN clients while not being supported by the system service.
- Fix IPv6 addresses not being allowed as endpoints for Socks5 and Shadowsocks API access methods.
Linux
- Fix 'mullvad split-tunnel clear' getting stuck.
Windows
- Fix potential access violation during cleanup on ARM64.
- Fix conflicts caused by some other VPN clients that depend on Mullvad's split tunnel driver. Note
that split tunneling still cannot be used simultaneously in different clients.
- Fix timeout when loading split tunnel driver during boot.
Security
- Remove ability for renderer process to execute arbitrary binaries. This is a defence-in-depth
measure to ensure that the renderer process does not have any capabilities beyond that of a
regular user of the app. Affects platforms with the in-app updates feature, i.e. macOS and
Windows. Fixes GHSA-h72f-j6r4-c3jc

This release is for desktop only.
Here is a list of all changes since last stable release 2026.1:
Added
Linux
- Make it possible to build for RISC-V from source.
- Add --daemon-only build option for deb and rpm packages for CLI usage.
Changed
- Location setting no longer defaults to Sweden, instead it uses your current location if it
has available relays, and falls back to Sweden otherwise.
- mullvad-daemon now defaults to ERROR log level when -v is not specified.
mullvad-daemon -vv is used in system services to maintain previous DEBUG log level.
- Update GotaTun from version 0.2.0 to 0.5.1. This improves compliance with the
WireGuard spec by adding handshake jitter and implementing padding to multiples of 16 bytes,
fixes a minor vulnerability when generating peer indices, and fixes another when registering
incoming decoy packets for DAITA.
- Disable SNI for Mullvad API traffic. This prevents DPI based on domain name when obfuscation is
disabled.
- Redact other users' home paths in logs.
macOS
- GotaTun is now used as the WireGuard implementation. It replaces wireguard-go.
Fixed
Windows
- Fix regression in 2026.1 that could cause split tunneling to become unavailable.
Security
macOS
- Mitigate multiple local privilege escalation attacks from admin user to root in the preinstall
and postinstall scripts.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.14:
Changed
- Change WireGuard port to no longer affect the port used for LWO.
- Change Mullvad Bridges access method to randomly pick any Mullvad-owned bridge.
Previously the access method was constrained to the five bridges closest to the exit relay.
- Changed CLI command mullvad obfuscation to mullvad anti-censorship
- The tunnel setup will not error out if sending ICMP is prohibited by the operating system.
Linux
- Change "Go back" keyboard shortcut from Esc to Alt + Left Arrow or Alt + [.
- Use Wayland by default on Linux if available, otherwise fall back to X11.
macOS
- Change "Go back" keyboard shortcut from Esc to Cmd + Left Arrow or Cmd + [.
Windows
- Change "Go back" keyboard shortcut from Esc to Alt + Left Arrow or Alt + [.
- Make Mullvad service run in case the
split tunnel driver fails to load.
Fixed
- Fix "Time left" label in main view not updating when time passes.
Windows
- Update split tunnel driver to 1.2.5.0. This fixes audit issue MLLVD-CR-24-102,
and a BSOD when the driver was improperly unloaded.
- Detect and kill processes preventing updates.
macOS
- Ignore utun interfaces when figuring out default routes. This prevents split tunneling from
failing when running some other software.
Security
Windows
- Warn user before clearing firewall rules during failed downgrades. This fix only applies to
downgrades to this version and future versions.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.13:
[2025.14] - 2025-12-09
This release is identical to 2025.14-beta3.
[2025.14-beta3] - 2025-12-01
Fixed
- Fix a regression introduced in 2025.14-beta1 where the WireGuard port selection was not respected.
[2025.14-beta2] - 2025-11-26
Added
- Add port 443 to list of valid UDP2TCP ports.
Fixed
- Fix issues where the in-app updates view is not in sync with the daemon after system is supended
or daemon is restarted.
[2025.14-beta1] - 2025-11-11
Changed
- Change mullvad reconnect to print an error message and exit with a non-zero exit code if issued
in the disconnected state.
- Move settings in WireGuard settings view into the VPN settings view.
- Rename Enable IpV6 setting to In-tunnel IPv6.
- Rename IP version setting to Device IP version.
- Merge Obfuscation settings and WireGuard port setting into new Anti-censorship view.
Removed
- Remove OpenVPN support from the app.
- See blog post for more info: https://mullvad.net/en/blog/removing-openvpn-15th-january-2026
- Remove "Automatic" as a setting for the "Quantum-resistant tunnel" option.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.12:
Added
- Add settings reset command to the CLI ('mullvad reset-settings').
- Make feature indicators in connection panel navigate to the relevant setting when clicked.
- Add Lightweight WireGuard Obfuscation method (LWO). This is a cheap obfuscation method that
prevents packets from being identified as standard WireGuard packets.
- Add possibility to manage devices from account view.
Changed
- Add validation for API access methods to only allow unique names. Access methods with
duplicated names will be renamed.
- Change how externally triggered navigation is handled in the UI. This could potentially reduce
issues where users get stuck in the out-of-time view.
- Update Electron from 36.5.0 to 37.6.0.
- Run version check hourly and when interacting with the app instead of once per day.
- Add support for gradual rollouts of new app releases
Fixed
- Fix bug introduced in 2025.13-beta1 with translations sometimes not being formatted
correctly.
macOS
- Fix high CPU usage on macOS 26 by updating Electron. This affected the app when it was visible.
Linux
- Install AppArmor profile on all Linux distributions that support AppArmor abi 4.0.

This release is for Windows only.
This release is based on 2025.10 with the addition of a fix for a BSOD that some users experienced.
Here is a list of all changes since last stable release 2025.11:
Added
- Add helpful warnings when clearing account history. This helps users not lose their account
numbers.
Windows
- Add additional logging for tunnel devices and split tunneling to problem reports.
- Log WFP sessions when transaction lock timeout occurs.
Changed
- Move placement of login button from inside the account number input to under account number.
Windows
- Implement UDP GSO for QUIC on client socket. This improves download speeds slightly.
Fixed
- Fix version being labeled unsupported unexpectedly. So far, this only an issue when using
development builds.
- QUIC obfuscation only using one in-address when connecting. It will now randomly select one of
the available in-addresses for each connection attempt.
- quinn_udp crate flooding mullvad-daemon.log with warnings.
Windows
- Mitigate BSOD caused by split tunnel driver during boot.
macOS
- Fix apps attempting to use IPv6 with in-tunnel IPv6 disabled.
- Re-add missing loopback alias if removed. This fixes some issues with DNS resolution.
Security
Windows
- Block traffic to exit node from non-Mullvad processes. This fixes a leak where traffic could be
encrypted once, but leave the entry node unencrypted, if and only if the destination were the exit
node. E.g., this might occur if a browser tries to open a TCP connection to the exit node IP.

This release is for desktop only.
Here are the changes since last stable release 2025.10:
This release is for Windows only. This release reverts all functionality to how the app worked in
version 2025.9 to fix a BSOD (boot loop) bug. Only a few users experienced the issue, but we deemed
it critical enough to revert everything until we have a better understanding of the problem.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.9:
Added
- Add helpful warnings when clearing account history. This helps users not lose their account
numbers.
Windows
- Add additional logging for tunnel devices and split tunneling to problem reports.
- Log WFP sessions when transaction lock timeout occurs.
Changed
- Move placement of login button from inside the account number input to under account number.
Windows
- Implement UDP GSO for QUIC on client socket. This improves download speeds slightly.
Fixed
- Fix version being labeled unsupported unexpectedly. So far, this only an issue when using
development builds.
- QUIC obfuscation only using one in-address when connecting. It will now randomly select one of
the available in-addresses for each connection attempt.
- quinn_udp crate flooding mullvad-daemon.log with warnings.
macOS
- Fix apps attempting to use IPv6 with in-tunnel IPv6 disabled.
- Re-add missing loopback alias if removed. This fixes some issues with DNS resolution.
Security
Windows
- Block traffic to exit node from non-Mullvad processes. This fixes a leak where traffic could be
encrypted once, but leave the entry node unencrypted, if and only if the destination were the exit
node. E.g., this might occur if a browser tries to open a TCP connection to the exit node IP.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.8:
Added
- Add QUIC obfuscation (WireGuard only). It will be used automatically when connecting fails with
other methods.
Fixed
macOS
- Add support for parsing eslogger output version 10. This fixes split tunneling on macOS 26.
- Avoid interpreting negative numbers from eslogger as PIDs.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.7:
Added
- Add in-app updates to Windows and macOS. This new feature lets you download, verify, and install
new versions from within the app.
Linux
- Make it possible to run the app with cgroups v1 fully disabled. Note that split tunneling is
currently unavailable when this is the case.
Windows
- Add a button to start the Mullvad VPN system service if it's unavailable at launch
Changed
macOS
- Use a local DNS resolver on the 127.0.0.0/8 network, regardless of macOS version.
Windows
- Make firewall rules applied while upgrading the app not persist on reboot, unless "Lockdown mode"
or "Auto-connect along with "Launch app on start-up" is enabled. This serves as a safety fallback
if the update fails and the user is left with blocking firewall rules and no app.
Fixed
macOS
- Add grace period when best default route goes away to reduce frequency of random reconnects.
Security
- Prevent unprivileged users from impersonating the gRPC server. This was relatively harmless
previously but is required due to in-app updates.
Windows
- Enable control flow integrity checks (CFG) for some C++ code. This excludes wintun,
wireguard-nt, and OpenVPN. This addresses MLLVD-CR-24-101 to the extent that we found
it valuable.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.6:
Added
- Add notification that shows when the user is connected to WireGuard with a port that is not
supported.
Linux
- The deb package repositores now have static codenames on top of the existing distro version
specific codenames. The stable repository always have the "stable" codename,
and the beta repository has the "beta" codename.
Changed
- Replace Classic McEliece with HQC as one of the post-quantum safe key exchange
mechanisms used for the quantum-resistant tunnels. The main benefits here are that HQC
uses a lot less CPU to compute the keypair, and the public key sent to the server
is drastically smaller.
Fixed
- Automatically connect when IP version becomes available.
Linux
- Fix syntax error in Apparmor profile.
- Fix issue where settings were lost after an upgrade if mullvad-daemon was not restarted
before mullvad-early-boot-blocking.service. That is, before a reboot.
Windows
- Fix issue where daemon got stuck trying to connect only over IPv4 (or only IPv6).
macOS
- Fully uninstall the app when it is removed by being dropped in the bin.
Security
macOS
- Fix potential local privilege escalation when app was incorrectly removed by being dropped
in the bin but still leaving behind a launch daemon. This fixes CVE-2025-46351 reported by
Egor Filatov (Positive Technologies).

This release is for desktop only.
Here is a list of all changes since last stable release 2025.5:
Added
- Add a notification for notifying users about the sunsetting of OpenVPN.
Changed
Windows
- Rename win-shortcuts native module to windows-utils.
Removed
- Remove "Automatic" option for tunnel protocol. The default is now WireGuard.
Fixed
- Fix mullvad-cli panicking if it tried to write to a closed pipe on Linux and macOS.
- Fix bug where new users are not forwarded to the main view after payment.
- Will no longer try to connect over IPv4 if IPv4 is not available.
Windows
- Fix error setting up tunnel when MTU was incorrectly set to a value below 1280 for IPv6.
- Fix node native module being unpacked to a temporary folder.
- Fix BSOD caused by routing loop in wireguard-nt.
macOS
- Fix bug in parsing of network services from SCDynamicStore.

This release is for desktop only.
This release is identical to 2025.5-beta1:
Here is a list of all changes since last stable release 2025.4:
Added
Windows
- Add support for DAITA V2.
- Add back wireguard-go (userspace WireGuard) support.
Removed
- Stop bundling https://github.com/mullvad/apisocks5 as a standalone binary.
Fixed
macOS
- Fix daemon ending up in blocked state if the user toggled split tunneling without having granted
Full Disk Access to mullvad-daemon. This could only ever be accomplished from the CLI.
- Fix routing issue caused by upgrading tun.
Removed
- Remove Google's resolvers from encrypted DNS proxy.

This release is for desktop only.
This release is identical to 2025.4-beta1.
Here is a list of all changes since last stable release 2025.3.
Fixed
Windows
- Fix GUI crashing at launch on some systems.

This is a desktop only release.
Here is a list of all changes since last stable release 2025.2.

Added
Windows
- Add support for Windows ARM64.

Changed
- (Linux and macOS only) Update to DAITA v2.
The main difference is that many different machines are
provided by relays instead of a bundled list.
The bundled `maybenot_machines` file was removed.
- Move changelog from a dialog to a separate view.
- Reduce the setup time of PQ tunnels by pre-computing McEliece keys.
- Change order of items in settings view to show DAITA and multihop at the top.
- Update Electron from 30.0.4 to 33.4.0.

Fixed
- (macOS and Windows only) Add the correct route when using obfuscation with Wireguard.

This release is for desktop only.
Here is a list of all changes since last stable release 2025.1.

Fixed
- Fix crash when Wireguard tunnel setup timed out.

This release is for desktop only.
Here is a list of all changes since last stable release 2024.8.

Added
- Add a new access method: Encrypted DNS Proxy.
Encrypted DNS proxy is a way to reach the API via proxies.
The access method is enabled by default.
macOS
- Detect whether full disk access is enabled in the split tunneling view.
- Add button to restart system service in split tunneling view.
This can help mitigate edge-case issues when enabling full disk access.

Changed
- Replace the draft key encapsulation mechanism Kyber (round 3) with the standardized
ML-KEM (FIPS 203) dito in the handshake for Quantum-resistant tunnels.
- Make Smart Routing override multihop if both are enabled.
To manually set the entry relay, explicitly enable the "Direct only" option in the DAITA settings.
- Update maybenot from 1.1.3 to 2.0.1.

Windows
- Enable quantum-resistant tunnels by default (when set to `auto`).

Fixed
- Handle network switching better when using WG over Shadowsocks.
- Fix multihop entry location list sometimes being shown when multihop is disabled.
macOS
- Fix GUI getting stuck when opening the split tunneling view.
- Fix packets being duplicated on LAN when split tunneling is enabled.
- Fix DNS issues caused by forcibly using a local DNS resolver in all states.
Note that this fix is not present on macOS versions between 14.6 and 15.1.

Security
Windows
- Block WSL/Hyper-V traffic in secured states (except the connected state).
The normal firewall (WFP) filters normally do not apply for VMs.
This mitigates the issue by ensuring that it does not leak (as easily) when the VPN tunnel is up.
Previously, WSL would leak while in the blocked or connecting state, or while lockdown mode was active.

This release is for desktop only.This release addresses issues identified in a recent audit. Here is a list of all changes since last stable release 2024.7.Security
- Remove invalidly set up alternative stack for fault signal handlers on unix based systems. This prevents potential stack overflow and heap memory corruption. Fixes audit issue MLLVD-CR-24-01.
- Remove/disable not signal safe code from fault signal handler on unix based systems. Fixes audit issue MLLVD-CR-24-02.
Windows
- Fix issue where the installer would allow any executable named taskkill.exe in the working directory to run as admin. This fixes audit issue MLLVD-CR-24-06.
Linux
- Prevent attackers able to send ARP requests to the device running Mullvad from figuring out the in-tunnel IP. Fixes 2024 audit issue MLLVD-CR-24-03.

This release is for desktop only.
This release is identical to 2024.7-beta1.
Here is a list of all changes since last stable release 2024.6.

Fixed
macOS
- Fix DNS not working due to broken PF redirect.

This release is for desktop only.
Here is a list of all changes since last stable release 2024.5.

Added
- Add WireGuard over Shadowsocks obfuscation. It can be enabled in "WireGuard settings".
This will also be used automatically when connecting fails with other methods.
- Add feature indicators to the main view along with redesigning the connection details.
- Add "Smart Routing" feature which simplifies connecting to DAITA-enabled relays.

Changed
- Never use OpenVPN as a fallback protocol when any of the following features is enabled:
multihop, quantum-resistant tunnels, or DAITA.
- Improved output format of mullvad status command, which now also prints feature indicators.
- Move DAITA and multihop to the root settings view along with moving multihop into a dedicated view with more information.
macOS
- Disable split tunnel interface when disconnected.
This prevents traffic from being sent through the daemon when the VPN is disconnected.
- Enable IPv6 by default. This fixes DNS and routing being broken on some systems.
- Proxy DNS queries through a local resolver.

Fixed
Linux
- Set tunnel name to `wg0-mullvad` for userspace WireGuard.
macOS
- Exclude programs when executed using a relative path from a shell.
- Reduce packet loss when using split tunneling.
- Don't block fragmented packets in the PF firewall.
Fixes various issues relating to connecting (and general instability) when IP fragmentation is present.
- Fix Apple services not working by forcing stray connections out through the VPN tunnel.
This fix only applies to Wireguard, OpenVPN is still affected.
- Disable DNS redirect when custom DNS is set to localhost.

This release is for desktop only.
Here is a list of all changes since last stable release 2024.4.

Added
- Add DAITA (Defence against AI-guided Traffic Analysis) setting for Linux and macOS.
- Add --json flag to mullvad status CLI.

Changed
- Ignore obfuscation protocol constraints when the obfuscation mode is set to auto.
macOS
- Enable quantum resistant tunnels by default (when set to auto).

Fixed
- Fix mullvad cli bug causing mullvad status listen command to miss events if they occurred too quickly.
- Fix bug causing app to enter blocked state when toggling DAITA on and off.
- macOS and Linux: Fix potential crash when disconnecting with DAITA enabled.
macOS
- Fix intermittent failures to connect with PQ enabled.

This release is for desktop only.
This release is identical to 2024.4-beta1.
Here is a list of all changes since last stable release 2024.3.
Added
- Add custom bridge settings in GUI. A custom bridge server can be used to cirvunment censorship when regular Mullvad bridge servers don't work
- Bundle https://github.com/mullvad/apisocks5 as a standalone binary.
macOS
- Add support for split tunneling.
Changed
- Update Electron from 28.1.3 to 30.0.4.
Fixed
Windows
- Fix a race condition which could cause a BSOD when DAITA was enabled during disconnects.

This release is for desktop only.
This release is identical to 2024.3-beta1.
Here is a list of all changes since last stable release 2024.2.
Added
Windows
- Add DAITA (Defence against AI-guided Traffic Analysis) setting. On supported servers, this makes website fingerprinting more difficult by sending random padding packets along with padding all packets to the same size.
Changed
- Don't fail to start daemon when the offline monitor fails to be initialized.
Fixed
Linux
- Fix GUI not working on Ubuntu 24.04 by adding an AppArmor profile.
- Service failed to start when IPv6 was disabled in the kernel.

Added
- Add customizable relay lists to the CLI on desktop.
Custom lists can be managed through
- Add custom lists to location selector in desktop app.
- Add custom API access methods to the CLI on desktop.
Custom API access methods allow the user to
- Add social media content blocker.
- Add ability to override server IPs to the CLI.
Changed
- Update Electron from 25.2.0 to 26.3.0.
- Update OpenVPN to 2.6.8 from 2.6.0.
Linux
- Don't block forwarding of traffic when the split tunnel mark (ct mark) is set.
Removed
Windows
- Remove wireguard-go (userspace WireGuard) support.
Fixed
- Show correct endpoint in CLI for custom relays.
- Lower risk of being rate limited.
- Fix error dialog when failing to write to console by handling the thrown error.
- Fix error dialog displayed when the daemon was killed.
- Fix desktop app freezing when navigations occur in very quick succession.
Windows
- Correctly detect whether OS is Windows Server (primarily for logging in daemon.log).
Security
- Update OpenVPN to 2.6.8 to fix CVE-2023-46850, which could cause freed memory to be sent to the peer.
Windows
- Fix possible privilege escalation by setting stricter permissions on mullvad directories such as

'Here is a list of all changes since last stable release 2021.6.
Added
• Add information about the always on kill switch in the desktop app.
• Add WireGuard multihop setting and entry location selection to desktop app.
• Add malware blocking to the desktop app. Implemented via DNS on the relays.
• Add changes dialog which will include the most notable changes in each new version.
• Show warning message when blocking internet while logged out, and make it possible to unblock the
• connection from the login view.

Changed
• Keep unspecified constraints unchanged in the CLI when providing specific tunnel constraints
• instead of setting them to default values.
• Obscure account number in account view and add button for copying instead of copying when text is
• pressed.
• Disable logging of translation errors in production. This will among other things prevent error
• messages from translating the country in the disconnected state.
• Update Electron from 15.0.0 to 16.0.4.
• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
• few attempts.
• Stop preferring OpenVPN when bridge mode is enabled.
• CLI command for setting a specific server by hostname is no longer case sensitive.
• Example: mullvad relay set hostname SE9-WIREGUARD should now work.
• Update the default Shadowsocks password to mullvad and cipher to aes-256-gcm in the CLI
• when using it to configure a custom Shadowsocks bridge. The Mullvad bridges recently changed
• these parameters on port 443 (which is the default port).

Windows
• Update wireguard-nt to 0.10.1.
• Make wireguard-nt the default driver for WireGuard. This is used instead of wireguard-go and
• Wintun.
• Increase firewall transaction timeout from 2 to 5 seconds to lower the chance of errors when
• setting the firewall policy.
• Update split tunnel driver to 1.2.0.0. Notably, this driver release allows firewall filters
• added by other software to block excluded apps.

Removed
Windows
• Drop support for pre-Windows 10 systems.

Fixed
• Always kill sslocal if the tunnel monitor fails to start when using bridges.
• Show relay location constraint correctly in the CLI when it is set to any.
• Prevent gRPC from trying to run the app-daemon IPC communication through a HTTP proxy when the
• environment variable http_proxy is set. This caused the app to fail to connect to the daemon.
• Disable built-in DNS resolver in Electron. Prevents Electron from establishing connections to
• DNS servers set in system network preferences.
• Fix tray context menu showing or executing wrong actions, using wrong language or in other
• ways not update properly.
• Prevent settings file being truncated before being read. This caused the daemon to read an empty
• settings file, restore to default settings and log out.
• Improve performance for automatically scrolling text in desktop app.
• Increase availability of the API by allowing to issue requests to the API when connecting to the
• relay even if account data might be invalid.

macOS
• Resolve issues with the app blocking internet connectivity after sleep or when connecting to new
• wireless networks.
• Fix issue where the app would get stuck in offline state after a reboot or a reinstall by using
• route monitor instead of relying on SCNetworkReachability API to infer whether the host is
• offline.

Windows
• Fix app size after changing display scale.
• Fix daemon not starting if all excluded app paths reside on non-existent/unmounted volumes.
• Remove tray icon of current running app version when upgrading.
• Allow Mullvad wireguard-nt tunnels to work simultaneously with other wg-nt tunnels.
• Fix notifications on Windows not showing if window is unpinned and hidden.
• Wait for IP interfaces to arrive before trying to configure them when using wireguard-nt.
• Fix panic that occurs in the split tunnel monitor when a path consisting only of a prefix,
• such as "C:", is excluded using the CLI.

Linux
• Remove auto-launch file, GUI sett