Mullvad VPN: privacy is a universal right is an open-source (GPL-3.0-or-later) Android app by mullvad. The APK we host is 37 MB, it needs Android 9 or newer, and it declares 8 permissions.
The file on this page is Mullvad VPN: privacy is a universal right 2026.12, 37.19 MB, and it installs on Android 9 and newer.
We compared the signing certificate of this build with the certificate recorded the first time net.mullvad.mullvadvpn entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest inside the APK declares 8 permissions, none of which cover contacts, location, SMS, the camera or the microphone.
Its licence is GPL-3.0-or-later. We took this build from F-Droid, and the source for this exact version is linked below.
F-Droid, who build and sign this package, flag it: it relies on a network service that is not open source. We pass that on as they recorded it — we have not tested the app ourselves.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 2026.12
- Size
- 37.19 MB
- Requires Android
- API 28
- Package
- net.mullvad.mullvadvpn
- Signature checked on
- Oct 3, 2026
- Where this file came from
- F-Droid
- Licence
- GPL-3.0-or-later
- Source code
- Source for this version
File SHA-256: 0b3ca70ee0e9205cb6af0cc81b656c00fbcdf2beae13f4dddd94c4768b13aaaf
Signing certificate (SHA-256): e1b66af1ac4869a33b091f81dcbd577bf8dcfe9125ddde3381bfff91813331ec
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- ACCESS_NETWORK_STATE
- FOREGROUND_SERVICE
- INTERNET
- QUERY_ALL_PACKAGES
- POST_NOTIFICATIONS
- FOREGROUND_SERVICE_SYSTEM_EXEMPTED
- RECEIVE_BOOT_COMPLETED
- net.mullvad.mullvadvpn.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
More about this app
Our sister site 2113 Apps has a hand-written guide to Mullvad VPN: privacy is a universal right, with a breakdown of what its APK contains. Read about Mullvad VPN: privacy is a universal right on 2113 Apps
Screenshots


