android/2023.1

Here is a list of all changes since last stable release android/2022.3:

Added

Android

• Add themed icon.
• Add DNS content blockers.
• Add "Manage account" button to the account view.

Changed

Android

• Clarify some of the error messages throughout the app.
• Increase WireGuard key rotation interval to 14 days.
• Change the DNS/MTU input to rely on dialogs in order to improve the UX on some devices.
• Hide "Buy more credit" buttons in the default release build published to Google Play, our website
  and GitHub. The buttons are still visible for F-Droid builds.

Fixed

Android

• Fix adaptive app icon which previously had a displaced nose and some other oddities.
• Fix app version sometimes missing in the settings menu.
• Fix missing payment info in out-of-time view.

android/2023.1-beta2

Added

Android

• Add "Manage account" button to the account view.

Fixed

Android

• Fix missing payment info in out-of-time view.

android/2023.1-beta1

Added

Android

• Add themed icon.
• Add DNS content blockers.

Changed

Android

• Clarify some of the error messages throughout the app.
• Increase WireGuard key rotation interval to 14 days.
• Change the DNS/MTU input to rely on dialogs in order to improve the UX on some devices.
• Hide "Buy more credit" buttons in the default release build published to Google Play, our website
  and GitHub. The buttons are still visible for F-Droid builds.

Fixed

Android

• Fix adaptive app icon which previously had a displaced nose and some other oddities.
• Fix app version sometimes missing in the settings menu.

2023.4-beta1

This release is for desktop only.

Added

• Log select settings on each connection attempt.

Changed

• Update Electron from 21.1.1 to 23.2.0.

macOS

• Change macOS app signing key and certificates. Replace those issued to Amagicom AB (the parent
  company of Mullvad VPN AB) with new certificates issued directly to Mullvad VPN AB.

Deprecated

Linux

• Deprecated support for Debian 10. This also means dropping support for glibc older
  than 2.31 and Linux kernels older than 5.10.

Fixed

• Fix location search in desktop app only searching for English location names.
• Fix automatic WireGuard key rotation not being initialized correctly when not running the GUI.
• Fix duplicated notifications in some situations.
• Fix notification setting being inverted. When non-important notifications were disabled it instead
  disabled important ones and showed non-important ones.
• Work around issues with PQ and multihop caused by fragmentation in the tunnel. The workaround
  doesn't fix fragmentation issues in general but prevents the PSK exchange packets from being
  fragmented by setting an explicit maximum segment size.

macOS

• Fix tray window behaviour when opening mission control and switching between full-screen
  workspaces.
• Fix issue where app stopped responding on ARM Macs.

Linux

• Fix RPM package containing unecessary files causing conflicts with other electron-builder based
  packages.

2023.3

Added

• Add Kyber1024 KEM algorithm into the Post-Quantum secure key exchange algorithm. This means the
  Quantum-resistant-tunnels feature now mixes both Classic McEliece and Kyber for added protection.
• Add notification dot to tray icon and system notification throttling.
• Add troubleshooting information to some in-app notifications.
• Add setting for quantum resistant tunnels to the desktop GUI.
• Enable TCP_NODELAY for the socket used by WireGuard over TCP. Improves latency and performance.

Changed

• Update the Post-Quantum secure key exchange gRPC client to use the stabilized
  PskExchangeV1 endpoint
• Add "auto" setting for the quantum-resistant tunnel feature, and make it the default. If it was
  previously set to off, it will now be set to auto instead. That currently means the same thing as
  "off", but this might change in the future.
• Update OpenVPN to 2.6.0 from 2.5.3.
• Update OpenSSL to 1.1.1t from 1.1.1j.
• Post-Quantum secure tunnels and multihop can now be used at the same time.
• Change WireGuard key rotation interval to 14 days. It was 7 days.

Windows

• Remove automatic fallback to wireguard-go. This is done as a first step before fully
  deprecating it on Windows.

Removed

• Remove port 443 as valid port for WireGuard over TCP. Keep only port 80 and 5001. The reason is
  to free up port 443 for other TCP based obfuscation later.

Fixed

• Fix close to expiry notification not showing unless app is opened once within the last three days
  in the desktop app.
• Retry if PQ PSK negotiation fails for any reason.
• Fix accumulated tunnel state notifications sometimes displayed after suspend.

2023.3-beta1

Added

• Add Kyber1024 KEM algorithm into the Post-Quantum secure key exchange algorithm. This means the
  Quantum-resistant-tunnels feature now mixes both Classic McEliece and Kyber for added protection.
• Add notification dot to tray icon and system notification throttling.
• Add troubleshooting information to some in-app notifications.
• Add setting for quantum resistant tunnels to the desktop GUI.
• Enable TCP_NODELAY for the socket used by WireGuard over TCP. Improves latency and performance.

Changed

• Update the Post-Quantum secure key exchange gRPC client to use the stabilized
  PskExchangeV1 endpoint
• Add "auto" setting for the quantum-resistant tunnel feature, and make it the default. If it was
  previously set to off, it will now be set to auto instead. That currently means the same thing as
  "off", but this might change in the future.
• Update OpenVPN to 2.6.0 from 2.5.3.
• Update OpenSSL to 1.1.1t from 1.1.1j.
• Post-Quantum secure tunnels and multihop can now be used at the same time.

Windows

• Remove automatic fallback to wireguard-go. This is done as a first step before fully
  deprecating it on Windows.

Removed

• Remove port 443 as valid port for WireGuard over TCP. Keep only port 80 and 5001. The reason is
  to free up port 443 for other TCP based obfuscation later.

Fixed

• Fix close to expiry notification not showing unless app is opened once within the last three days
  in the desktop app.
• Retry if PQ PSK negotiation fails for any reason.
• Fix accumulated tunnel state notifications sometimes displayed after suspend.

2023.2

This release is for desktop only.

Fixed

Windows

• Fix desktop app not quitting properly after switching from unpinned to pinned window.
• Fix service not starting when LSA protection is enabled (which is the default on Windows 11 22H2).
• Fix some issues with setting system DNS by using SetInterfaceDnsSettings when it's available (on
  Windows 10, version 1809 and above).

2023.1

This release is for desktop only.

Here is a list of all changes since last stable release 2022.5.

Added

• Add quit button to tray context menu on Linux and Window.
• Add search bar to location list in desktop app.

Windows

• Remove all settings when the app is uninstalled silently.

Changed

• Update Electron from 19.0.13 to 21.1.1.

Fixed

• When a country is selected, and the constraints only match relays that are not included on the
  country level, select those relays anyway.
• Fix regression where WireGuard relays were connected to over OpenVPN after a couple of failed
  attempts, when the tunnel type was set to any.
• Fix missing connect timeout when connecting to a WireGuard relay over TCP.
• Fix failure to apply firewall rules that could occur when connecting timed out.
• Fix sorting of devices in the "too many devices"-view to properly sort on device creation time.

Windows

• Don't fail to show the mullvad-daemon help text if some of the default paths cannot be obtained.

macOS

• Fix fish shell completions when installed via Homebrew on Apple Silicon Macs.
• Improved reliability of the connectivity check workaround by adding an extra captive portal check
  domain.
• Show "Mullvad VPN" in the Login Items UI instead of "Amagicom AB".
• Detect whether users need to approve the launch daemon in the Login Items UI.

Linux

• Remove last filesystem dependency of early boot blocking unit.
• Ensure RPM package removes all application directories when uninstalled.
• Fix architecture field for ARM RPM builds so the app installs on Fedora based distros.

Windows

• Ignore adapters that have no valid GUID when removing obsolete Wintun interfaces during install.
  Previously, the installer would abort.
• Revert to using netsh for DNS config, as some Windows builds did not deal with changes correctly.
  TALPID_DNS_MODULE can be used to override this.
• Fix deadlock that could occur when the default route changed while initializing split tunneling.

Removed

macOS

• Remove ⌘Q shortcut.

Security

Windows

• DNS loopback traffic is no longer blocked. Note that local resolvers are still unable to forward
  queries to servers that would normally be blocked.

2023.1-beta2

Fixed

• Fix sorting of devices in the "too many devices"-view to properly sort on device creation time.

macOS

• Improved reliability of the connectivity check workaround by adding an extra captive portal check
  domain.
• Show "Mullvad VPN" in the Login Items UI instead of "Amagicom AB".
• Detect whether users need to approve the launch daemon in the Login Items UI.

2023.1-beta1

Added

• Add quit button to tray context menu on Linux and Window.
• Add search bar to location list in desktop app.

Windows

• Remove all settings when the app is uninstalled silently.

Changed

• Update Electron from 19.0.13 to 21.1.1.

Fixed

• When a country is selected, and the constraints only match relays that are not included on the
  country level, select those relays anyway.
• Fix regression where WireGuard relays were connected to over OpenVPN after a couple of failed
  attempts, when the tunnel type was set to any.
• Fix missing connect timeout when connecting to a WireGuard relay over TCP.
• Fix failure to apply firewall rules that could occur when connecting timed out.

macOS

• Fix fish shell completions when installed via Homebrew on Apple Silicon Macs.

Linux

• Remove last filesystem dependency of early boot blocking unit.
• Ensure RPM package removes all application directories when uninstalled.
• Fix architecture field for ARM RPM builds so the app installs on Fedora based distros.

Windows

• Ignore adapters that have no valid GUID when removing obsolete Wintun interfaces during install.
  Previously, the installer would abort.
• Revert to using netsh for DNS config, as some Windows builds did not deal with changes correctly.
  TALPID_DNS_MODULE can be used to override this.
• Fix deadlock that could occur when the default route changed while initializing split tunneling.

Removed

macOS

• Remove ⌘Q shortcut.

Security

Windows

• DNS loopback traffic is no longer blocked. Note that local resolvers are still unable to forward
  queries to servers that would normally be blocked.