Shutting down our public encrypted DNS
Transitioning from Mullvad's Public Encrypted DNS to Quad9
Date: September 3, 2026 | Category: News
Mullvad has provided public encrypted DNS (DoH) services since 2022. However, we have decided to operate our own servers sponsor Quad9 instead.
Why this change?
For those utilizing the Mullvad VPN, these servers are essentially redundant because your traffic is already encrypted and our internal DNS infrastructure manages all requests. For users not connected to the VPN, these servers served two primary roles:
- Providing the Mullvad Browser with a default way to hide visited domains from ISPs.
- Offering a free, privacy-centric public service for any general user.
"Running a privacy-focused public DNS service is a highly specialized undertaking, and the Quad9 Foundation is the undisputed leader in the field."
Rather than attempting to replicate a service that Quad9 has already perfected, we believe it is more efficient to allocate our resources toward their financial support. In mathematical terms, we are shifting our resource allocation:
The Transition Path
Migration Guide
If you have manually configured your devices to use our DoH servers, you must switch your settings before November 2nd, 2026.
Impact Summary
| User Group | Impact Level | Action Required |
|---|---|---|
| VPN Users | None | No action needed; internal DNS is used. |
| Browser (Default) | Low | Automatic migration to Quad9. |
| Browser (Manual) | Medium | Manual update to Quad9 settings. |
| iOS/macOS Profiles | High | Replace existing profiles. |
Specific Instructions
- Mullvad Browser:
- If you use the default or ad-blocking
DoHsettings, you will be migrated automatically. - If you manually configured a specific variant (e.g.,
base,extended, orfamily), you must update these manually.
- If you use the default or ad-blocking
- Apple Ecosystem:
- Any installed Mullvad
DoHprofiles on iOS or macOS will cease to function. Please install the official Quad9 profiles for macOS or iOS.
- Any installed Mullvad
Migration Checklist
- Identify if you use Mullvad DNS outside of the VPN.
- Check Mullvad Browser DNS settings.
- Remove old iOS/macOS DNS profiles.
- Install Quad9 replacement profiles.
Technical Reference
For those who want to verify their current DNS resolution via the command line, you can use a tool like dig:
# Example: Checking DNS resolution
dig @9.9.9.9 google.com
By moving to Quad9, we ensure that our users benefit from the most robust and specialized privacy DNS available while we focus on our core VPN strengths.