LinuxCommandLibrary

mullvad

command-line interface for Mullvad VPN, a privacy-focused VPN service

TLDR

Connect to VPN

$ mullvad connect
copy
Disconnect from VPN
$ mullvad disconnect
copy
Check connection status
$ mullvad status
copy
Set VPN server location
$ mullvad relay set location [us] [nyc]
copy
List available locations
$ mullvad relay list
copy
Enable auto-connect on boot
$ mullvad auto-connect set on
copy
Enable kill switch
$ mullvad lockdown-mode set on
copy
Check account status
$ mullvad account get
copy

SYNOPSIS

mullvad command [subcommand] [options]

DESCRIPTION

mullvad is the command-line interface for Mullvad VPN, a privacy-focused VPN service based in Sweden. It controls the Mullvad daemon to manage VPN connections and configuration.
The client supports WireGuard and OpenVPN protocols. WireGuard is default and recommended for performance. Server selection can be automatic or manually set by country, city, or specific server. The relay list shows all available endpoints.
Lockdown mode (kill switch) blocks all internet traffic when VPN is disconnected, preventing leaks. LAN access can be allowed for local network resources. Split tunneling excludes specific applications from the VPN tunnel.
DNS options include using Mullvad's DNS, custom servers, or blocking ads/trackers/malware via their DNS. Obfuscation helps bypass VPN blocking in censored networks.
The account system uses numbered tokens rather than email/password. Anonymous payment options include cash and cryptocurrency.

PARAMETERS

connect

Establish VPN connection.
disconnect
Close VPN connection.
reconnect
Reconnect to VPN.
status
Show current connection status.
account subcommand
Manage account (login, logout, get, set).
relay subcommand
Configure relay/server selection.
tunnel subcommand
Configure tunnel protocol options.
dns subcommand
Configure DNS settings.
lockdown-mode subcommand
Configure kill switch (block non-VPN traffic).
auto-connect subcommand
Configure auto-connect on startup.
lan subcommand
Allow/block local network access.
obfuscation subcommand
Configure traffic obfuscation.
split-tunnel subcommand
Exclude apps from VPN tunnel.
bridge subcommand
Configure bridge mode for censored networks.
version
Show version information.

CAVEATS

Requires Mullvad subscription. Daemon must be running (mullvad-daemon service). Some features require root. Split tunneling support varies by platform. WireGuard requires kernel module on Linux. Kill switch may disrupt local services. Account tokens should be kept secure.

HISTORY

Mullvad was founded in 2009 in Sweden by Amagicom AB, focusing on privacy from the start. The CLI tool evolved alongside their desktop clients. Mullvad gained attention for pioneering WireGuard VPN support and their anonymous account system. In 2022, the Swedish police attempted to seize their servers but found no user data due to their no-logging policy. The service has been independently audited multiple times.

SEE ALSO

wg(1), openvpn(1), wireguard(1), nordvpn(1)

> TERMINAL_GEAR

Curated for the Linux community

Copied to clipboard

> TERMINAL_GEAR

Curated for the Linux community