VPN providers
Mozilla VPN privacy rating
VPN service from Mozilla that runs on Mullvad's WireGuard server network. The apps are open source under MPL-2.0 and require a Mozilla account.
Summary
Mozilla VPN scores 56 out of 100 (grade D) on the VPN providers criteria. It meets 5 of 12 criteria: no ads or data sales, transparency report, tells users about requests, open-source apps and modern protocols. It partly meets open source, independent audit, TLS configuration, security headers and audited no-logs policy. It does not meet no trackers or telemetry and anonymous payment. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade B.
Score 56 out of 100. How scoring works
Criteria
-
Partial
Open source Weight 3 of 3
Is all the source code needed to run the product public?
The apps are open source under MPL-2.0. The server network, run by Mullvad, is not.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
Campaign and device data is shared with the Adjust attribution service. App interaction data is off by default.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid subscriptions. No ads.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Full Cure53 report on the client apps is public, but the audit is more than three years old.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Mozilla publishes counts of government and legal requests, most recently each year.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Mozilla states it notifies affected users of requests unless legally prohibited.
-
Partial
Audited no-logs policy Weight 3 of 3
Has an independent audit confirmed that activity and connection logs are not kept?
The privacy notice states neither Mozilla nor Mullvad keeps logs of network traffic. Not audited for Mozilla VPN.
-
No
Anonymous payment Weight 2 of 3
Can an account be created and paid for without an email address, name or card?
A Mozilla account with an email address and payment by card, PayPal, Apple or Google Pay are required.
-
Yes
Open-source apps Weight 2 of 3
Are the apps for every platform open source?
Apps for Windows, macOS, Linux, Android and iOS are open source.
-
Yes
Modern protocols Weight 1 of 3
Is WireGuard (or another modern audited protocol) supported?
WireGuard is the protocol used.
Automated tests
-
Partial
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade B
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B (75/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.