Mullvad VPN AB operates a public encrypted DNS resolver providing DNS over HTTPS (DoH) and DNS over TLS (DoT) to protect DNS queries from third-party observation. The service is intended primarily for use when users are not connected to Mullvad's VPN or on devices where a VPN is impractical, and it is available to anyone without a Mullvad subscription.
The encrypted DNS offering supports content blocking (ads, trackers, malware, adult content, gambling, social media), QNAME minimization to limit information shared during resolution, and is served from an anycast network to route queries to geographically nearby servers for improved performance and reliability. Mullvad documents supported connection methods and provides resolver endpoints and configuration guidance for common platforms.
Operationally, Mullvad's DoH/DoT resolvers are implemented with the Unbound DNS resolver and hardened with firewall rules, network best practices, and audit-driven mitigations; the deployment is anycasted across multiple locations and has undergone a third-party security audit. Mullvad publishes much of its software as open source and maintains a GitHub organization with related projects and clients.
The encrypted DNS resolver is offered free of charge and does not require a Mullvad VPN account; Mullvad's broader service and corporate policies emphasise minimal data retention, compliance with GDPR, and processing personal data within the EU/EEA, with the company headquartered in Gothenburg, Sweden.
