2022.1-beta2

Added

• Show warning message when blocking internet while logged out, and make it possible to unblock the
  connection from the login view.

Fixed

• Prevent settings file being truncated before being read. This caused the daemon to read an empty
  settings file, restore to default settings and log out.
• Improve performance for automatically scrolling text in desktop app.
• Increase availability of the API by allowing to issue requests to the API when connecting to the
  relay even if account data might be invalid.

Security

• Enable "Always require VPN" by default if the settings cannot be parsed. This reduces the number
  of errors that lead to the daemon unexpectedly starting into non-blocking mode.

2022.1-beta1

Added

• Add information about the always on kill switch in the desktop app.
• Add WireGuard multihop setting and entry location selection to desktop app.
• Add malware blocking to the desktop app. Implemented via DNS on the relays.
• Add changes dialog which will include the most notable changes in each new version.

Changed

• Keep unspecified constraints unchanged in the CLI when providing specific tunnel constraints
  instead of setting them to default values.
• Obscure account number in account view and add button for copying instead of copying when text is
  pressed.
• Disable logging of translation errors in production. This will among other things prevent error
  messages from translating the country in the disconnected state.
• Update Electron from 15.0.0 to 16.0.4.
• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  few attempts.
• Stop preferring OpenVPN when bridge mode is enabled.
• CLI command for setting a specific server by hostname is no longer case sensitive.
  Example: mullvad relay set hostname SE9-WIREGUARD should now work.
• Update the default Shadowsocks password to mullvad and cipher to aes-256-gcm in the CLI
  when using it to configure a custom Shadowsocks bridge. The Mullvad bridges recently changed
  these parameters on port 443 (which is the default port).

Windows

• Update wireguard-nt to 0.10.1.
• Make wireguard-nt the default driver for WireGuard. This is used instead of wireguard-go and
  Wintun.
• Increase firewall transaction timeout from 2 to 5 seconds to lower the chance of errors when
  setting the firewall policy.
• Update split tunnel driver to 1.2.0.0. Notably, this driver release allows firewall filters
  added by other software to block excluded apps.

Removed

Windows

• Drop support for pre-Windows 10 systems.

Fixed

• Always kill sslocal if the tunnel monitor fails to start when using bridges.
• Show relay location constraint correctly in the CLI when it is set to any.
• Prevent gRPC from trying to run the app-daemon IPC communication through a HTTP proxy when the
  environment variable http_proxy is set. This caused the app to fail to connect to the daemon.
• Disable built-in DNS resolver in Electron. Prevents Electron from establishing connections to
  DNS servers set in system network preferences.
• Fix tray context menu showing or executing wrong actions, using wrong language or in other
  ways not update properly.

macOS

• Resolve issues with the app blocking internet connectivity after sleep or when connecting to new
  wireless networks.
• Fix issue where the app would get stuck in offline state after a reboot or a reinstall by using
  route monitor instead of relying on SCNetworkReachability API to infer whether the host is
  offline.

Windows

• Fix app size after changing display scale.
• Fix daemon not starting if all excluded app paths reside on non-existent/unmounted volumes.
• Remove tray icon of current running app version when upgrading.
• Allow Mullvad wireguard-nt tunnels to work simultaneously with other wg-nt tunnels.
• Fix notifications on Windows not showing if window is unpinned and hidden.
• Wait for IP interfaces to arrive before trying to configure them when using wireguard-nt.
• Fix panic that occurs in the split tunnel monitor when a path consisting only of a prefix,
  such as "C:", is excluded using the CLI.

Linux

• Remove auto-launch file, GUI settings and other files created by the app in user directories, when
  uninstalling/purging.

Security

• Restrict which applications are allowed to communicate with the API while in a blocking state.
  This prevents malicious scripts on websites from trying to do so. On Windows, only
  mullvad-problem-report.exe and mullvad-daemon.exe executables are allowed to reach the API,
  whereas on Linux and macOS only root processes are able to reach the API.

android/2022.1-beta3

Fixed

Android

• Fix app crash caused by quick settings tile.

android/2022.1-beta2

Fixed

Android

• Fix app sometimes crashing during startup on Android TVs.

android/2022.1-beta1

Added

Android

• Add toggle for Split tunneling view to be able to show system apps
• Add support of adaptive icons (available only from Android 8).

Changed

• Gradually increase the WireGuard connectivity check timeout, lowering the timeout for the first
  few attempts.

Android

• Improve stability by running the UI and the tunnel management logic in separate processes.
• Remove dialog warning that only custom local DNS servers are supported, since public custom DNS
  servers are now supported.
• Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required).
• Change so that swiping the notification no longer kills the service since that isn't a common way
  of handling the lifecycle in Android. Instead rely on the following mechanisms to kill the
  service:
  • Swiping to remove app from the Recents/Overview screen.
  • Android Background Execution Limits.
  • The System Settings way of killing apps ("Force Stop").
• Change Quick Settings tile label to reflect the action of clicking the tile. Also add a subtitle
  on supported Android versions (Q and above) to reflect the state.
• Hide the tunnel state notification from the lock screen.

Fixed

Android

• Fix banner sometimes incorrectly showing (e.g. "BLOCKING INTERNET").
• Fix tunnel state notification sometimes re-appearing after being dismissed.
• Fix invalid URLs. Rely on browser locale rather than app/system language.
• Automatically disable custom DNS when no servers have been added.
• Fix issue where erasing wireguard MTU value did not clear its setting.
• Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon
  properly after initialization.
• Fix UI sometimes not updating correctly while no split screen or after having a dialog from
  another app appear on top.
• Fix request to connect from notification or quick-settings tile not connecting if VPN permission
  isn't granted to the app. The app will now show the UI to ask for the permission and correctly
  connect after it is granted.
• Fix quick-settings tile sometimes showing the wrong tunnel state.
• Fix TV-only apps not appearing in the Split Tunneling screen.
• Fix status bar having the wrong color after logging out.

2021.6

Except the below, this is identical to 2021.6-beta1, see that change log for all changes since last stable release.

Fixed

• Fix the font for Russian. Issue introduced in 2021.6-beta1.
  Bundle a version of Source Sans Pro containing Cyrillic.

2021.6-beta1

Added

Windows

• Add black monochromatic tray icon for Windows when using light color for tray.

Changed

• Update Electron from 11.4.9 to 15.0.0.
• Revamp main view with blurred background behind semi-transparent buttons and switch to
  correct font for logo. Also a slightly less bold font in other parts of the app.

Android

• Drop support for Android 7/7.1 (Android 8/API level 26 or later is now required).

Removed

• Remove the old Let's encrypt root certificate from the API REST client. Only bundle and
  use the latest certificate.

Fixed

• Fix desktop app showing a future date for when WireGuard key was generated.
• Fix desktop app split tunneling view to not overflow on very long application names.
• Prevent API requests from being made prior to the tunnel state machine being set up.
  Rarely, failed requests could result in a deadlock.
• Fix segmentation fault when closing app (the GUI).

Windows

• Fix detection of Windows 11. Problem reports will now correctly report Windows 11 instead
  of Windows 10.
• Fix race condition in split tunneling initialization. Listen to route changes before reading
  out the default route.
• Fix bug in split tunneling code that could make the kernel driver and mullvad-daemon out of
  sync around which programs should be excluded when the driver took longer to respond.
• Use route-based offline monitoring. Fixes issues where the daemon falsely entered the offline
  state, for example when using virtual switches in Hyper-V.
• Improve repositioning of app window after connecting/disconnecting external monitor.

Android

• Fix reconnect on app resume. Don't reconnect the tunnel every time the app is opened.
• Fix invalid URLs. Rely on browser locale rather than app/system language.

macOS

• Prevent app from showing when dragging tray icon on macOS.
• Move window after dragging tray icon to new position.

Linux

• Greatly simplify behavior around custom DNS when using systemd-resolved, by not setting DNS config on interfaces other
  than our tunnel interface.

2021.5

This release is for desktop only.

This release is identical to 2021.5-beta2 except that it has translations for new texts in the UI.

2021.5-beta2

This release only has changes for macOS.

Fixed

macOS

• Fix issue with getting PF status due to an ABI change on macOS 12 Beta 9.

2021.5-beta1

Added

• Added possibility to filter locations by provider in the desktop app.
• Add ability to use WireGuard over TCP towards all relays via the desktop CLI. However,
  this service is not yet available on all relays. At the time of writing, this only
  works towards se6-wireguard, se9-wireguard and se17-wireguard.
• Add GUI environment variable MULLVAD_DISABLE_UPDATE_NOTIFICATION. If set to 1, GUI
  notification will be disabled when an update is available. This is not intended to be set by
  normal users.
• Add setting for changing between IPv4 and IPv6 for the connection to WireGuard servers on
  desktop.

Android

• Added toggle for Split tunneling view to be able to show system apps

Windows

• Resolve symbolic links and junctions for excluded apps.
• Add opt-in support for NT kernel WireGuard driver. It can be enabled in the CLI.
  Should give better performance. Especially over Wi-Fi.

Changed

• Only use the account history file to store the last used account.
• Update the out of time-view and new account-view to make it more user friendly.
• Change the app update notification when the suggested version is a beta, to include that it's a
  beta.
• Upgrade OpenVPN from 2.5.1 to 2.5.3.
• Update Electron from 11.2.3 to 11.4.9.
• Move OpenVPN and WireGuard settings in the advanced settings view into separate settings views.
• Return to main view in desktop app after being hidden/closed for two minutes.

Linux

• Always send DNS requests inside the tunnel for excluded processes when using public custom DNS.

Windows

• Upgrade Wintun from 0.10.4 to 0.13.
• Reduce tunnel setup time for OpenVPN by disabling DAD.

Fixed

• Fix link to download page not always using the beta URL when it should.
• Fix deadlock that may occur when the API cannot be reached while entering the connecting state.
• Fix bug causing desktop app to log in if account number field was filled when removing account
  history.
• Fix lack of account expiry updates when using the app in unpinned mode and improve updating of
  account expiry overall.
• Fix incorrect WireGuard relay filtering when exit and entry locations overlap.
• Fix wrong translations when switching to/from unpinned window after changing language in the
  desktop app.
• Fix in-app notification button not working for some notifications.
• Fix incorrectly positioned navigation bar title when navigating back to a scrolled down view.
• Fix connectivity check for WireGuard multihop when the exit hop is down.
• Fix incorrect location and connection status while disconnecting and incorrect location in the
  beginning while connecting in the desktop app.
• Improve responsiveness of the controls and status text in the main view in the desktop app.
• Read macOS scrollbar visibility settings to decide wheter or not the scrollbars should hide when
  not scrolling.
• Fix IPv6 connections to WireGuard servers by not dropping select neighbor advertisements and
  solicitations.

Linux

• Make offline monitor aware of routing table changes.
• Assign local DNS servers to more appropriate interfaces when using systemd-resolved.
• Disable DNS over TLS for tunnel's DNS config when using systemd-resolved.
• Fix DNS when combining a static resolv.conf with ad blocking DNS.
• Check connectivity correctly on IPv6-only networks.

Windows

• Fix failure to restart the daemon when resuming from "fast startup" hibernation.
• Fix OpenVPN not responding to shutdown signals when they are sent early on, causing it to close
  after 30 seconds.
• Disable notification actions for persistent notifications since they were called when pressing
  close.
• Remove deleted network devices from consideration in the offline monitor. Previously, the offline
  monitor may have falsely reported the machine to be online due to a race condition.
• Recover firewall state correctly when restarting the service after a crash. This would fail when
  paths were excluded.
• Fix daemon not starting when a path is excluded on a drive that has since been removed.
• Prefer WireGuard if the constraints preclude OpenVPN and the tunnel protocol is "auto", instead
  of failing due to "no matching relays".
• Retry tunnel device creation multiple times to work around issues early after boot or hibernation.

Android

• Fix erasing wireguard MTU value in some scenarious.
• Fix initial state of Split tunneling excluded apps list. Previously it was not notified the daemon
  properly after initialization.