{
  "slug": "mullvad-dns",
  "category": "dns-resolvers",
  "name": "Mullvad DNS",
  "description": "Free encrypted DNS resolver from Mullvad with optional ad, tracker and malware blocking. Mullvad has announced it is shutting the public service down.",
  "website": "https://mullvad.net/en/help/dns-over-https-and-dns-over-tls",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "SE",
    "name": "Sweden",
    "eyes": "Fourteen Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "C",
  "score": 63,
  "coverage": 100,
  "summary": "Mullvad DNS scores 63 out of 100 (grade C) on the DNS resolvers criteria. It meets 6 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, security headers, Encrypted DNS and DNSSEC validation. It partly meets transparency report and no query logs. It does not meet open source, independent audit and tells users about requests. It is based in Sweden: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/dns-resolvers/mullvad-dns/",
  "markdown": "https://privacyratings.com/dns-resolvers/mullvad-dns/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "The resolver setup is not published. Only the blocklists and Apple configuration profiles are on GitHub."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://mullvad.net/en/help/no-logging-data-policy",
      "note": "The policy states no usage data is sent to external analytics. There is no app."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://mullvad.net/en/help/dns-over-https-and-dns-over-tls",
      "note": "Free service funded by Mullvad VPN subscriptions. No ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit of the DNS service is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://mullvad.net/en/help/swedish-legislation",
      "note": "Explains which Swedish laws allow authorities to request data and what can be disclosed. No request counts are published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=mullvad.net&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=mullvad.net",
      "note": "Grade A+ (135/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "encrypted_dns": {
      "title": "Encrypted DNS",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://mullvad.net/en/help/dns-over-https-and-dns-over-tls",
      "note": "DoH and DoT are supported."
    },
    "no_query_logs": {
      "title": "No query logs",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://mullvad.net/en/help/no-logging-data-policy",
      "note": "The no-logging policy states DNS requests are not logged. The DNS service has not been audited."
    },
    "dnssec_validation": {
      "title": "DNSSEC validation",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://mullvad.net/en/help/dns-over-https-and-dns-over-tls",
      "note": "Tested: queries for domains with broken DNSSEC signatures return SERVFAIL, and succeed only with checking disabled."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T07:01:24.431Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}