Mozilla VPN
A WireGuard-based VPN from Mozilla that runs on Mullvad's server network, sold as a privacy-focused subscription.
www.mozilla.org/products/vpn/ ↗- Jurisdiction
- United States (five eyes)
- Founded
- 2020
- Owner
- Mozilla Corporation
- Best price
- $4.99/mo
- Devices
- 5
- Free tier
- Yes
Best for
- · Users who trust the Mozilla brand and want a simple, audited, open-source VPN
- · Firefox users wanting integrated device-wide and browser-level protection
- · People who want Mullvad's infrastructure with a more mainstream app/billing experience
- · General privacy from ISPs and on public Wi-Fi
Not ideal for
- · Users needing maximum anonymity (no crypto/cash payment, account email required, 90-day IP retention)
- · Those wanting to evade censorship needing obfuscation/stealth protocols
- · Heavy multi-device households (5-device cap)
- · Users who need port forwarding or OpenVPN/protocol choice
Strengths
- ✓Runs on Mullvad's well-regarded server network using the modern WireGuard protocol
- ✓Open-source clients (MPL 2.0) with repeated independent Cure53 security audits (2021 and 2023)
- ✓Backed by Mozilla, a privacy-mission organization (Mozilla Corporation, wholly owned by the nonprofit Mozilla Foundation) with no parent ad-tech conglomerate
- ✓Always-on kill switch, multi-hop, custom DNS, ad/tracker/malware blocking, and split tunneling included
- ✓A free browser-only VPN tier is now built into Firefox (50GB/month) for users who want to try it at no cost
Weaknesses
- ✗Mozilla retains your real IP address in server logs for up to 90 days, unlike pure no-log providers
- ✗US (Five Eyes) jurisdiction for the operating company despite Swedish Mullvad infrastructure
- ✗No anonymous options: requires a Mozilla account email, and accepts only card/PayPal (no crypto or cash)
- ✗Limited to 5 simultaneous devices, WireGuard-only (no OpenVPN), no port forwarding, and no advertised obfuscation
Full data sheet
Every attribute we track, coloured by whether it helps or hurts your privacy.
| Based in | United States |
| Eyes alliance | 5 Eyes |
| Enemy of the Internet | No |
| Owner | Mozilla Corporation |
| Conglomerate | Mozilla |
| Founded | 2020 |
| Traffic / activity | None kept |
| DNS requests | None kept |
| Timestamps | None kept |
| Bandwidth | None kept |
| Source IP address | Logged |
Neither Mozilla nor its partner Mullvad keep logs of network activity. Mozilla's subscription-services privacy notice states it temporarily retains your real IP address in server logs for 90 days (fraud prevention/operations). Mozilla's notice and Top10VPN's logging table indicate connection timestamps and date-of-last-connection are NOT logged, so timestamps are now marked 'none' (corrected from the draft's 'some').
| Anonymous signup | No |
| Accepts cash | No |
| Accepts crypto | No |
| PGP key | Unknown |
| OpenVPN | No |
| WireGuard | Yes |
| Proprietary protocol | n/a |
| Multi-hop | Yes |
| Obfuscation | Unknown |
| Kill switch | Yes |
| First-party DNS | Yes |
| RAM-only servers | Unknown |
| Port forwarding | No |
| P2P / torrenting | Unknown |
| IPv6 | Unknown |
| Data cipher | ChaCha20-Poly1305 |
| Handshake | WireGuard (Curve25519 key exchange) |
| Open-source clients | Yes, all apps |
| Independent audits | 2 |
| Transparency report | Unknown |
| Court / seizure-tested | Unknown |
No documented server seizure or subpoena outcome specific to Mozilla VPN is on record. Mozilla's no-network-log claim is supported by independent Cure53 security audits (2021, 2023), but it has not been court-tested.
| Simultaneous devices | 5 |
| Countries | 30 |
| Servers | 500 |
| Linux support | GUI app |
| Month-to-month | $9.99 |
| Best $/mo | $4.99 |
| On plan | 12 months |
| Free trial | None |
| Refund window | 30 days |
| Free tier | Yes |
| Logging policy | Consistent |
| Marketing honesty | No overclaiming |
Independent audits
- Cure53· 2021 · Independent security audit of Mozilla VPN clients/infrastructure (published Aug 31, 2021); 1 high + 2 medium issues found (incl. captive-portal VPN leak), all fixed.report ↗
- Cure53· 2023 · White-box penetration test of the Qt6 apps for macOS, Linux, Windows, iOS, Android; 5 senior testers, May 2023, 21 person-days; 7 issues (2 high/critical incl. DoS via serialized intent, iOS keychain->iCloud WG key leak, daemon access-control gaps), all remediated.report ↗
Mozilla VPN is a managed front-end over Mullvad's WireGuard server network: Mullvad handles encrypted traffic (and keeps no activity logs), while Mozilla operates the apps, accounts, and billing. Operating company is Mozilla Corporation (US/California, Five Eyes), a for-profit subsidiary wholly owned by the nonprofit Mozilla Foundation; the VPN servers are Mullvad's (Sweden, Fourteen Eyes). No-log caveat: Mozilla's privacy notice states no logs of network activity are kept by Mozilla or Mullvad, but Mozilla temporarily retains your IP address in server logs for 90 days. Server count advertised as '500+' and countries as '30+' on the official features page; third-party 2026 reviews report higher figures (up to 1,000+ servers / 57+ countries) because Mozilla's network maps onto Mullvad's larger infrastructure. CORRECTION vs draft: there is no separate 2025 Cure53 audit, the only Mozilla VPN security-audit posts are 2021 (Aug 31) and 2023 (Dec 6); the draft's '2025' entry conflated the 2023 audit with a third-party article updated in Feb 2025. NEW since draft: Mozilla shipped a free browser-only VPN tier in Firefox 149 (launched ~March 24, 2026; 50GB/month, temporarily unlimited through Aug 31, 2026), which is why freeTier is now 'yes' at the product level even though the paid system-wide app has no free tier. Encryption cipher details (ChaCha20-Poly1305, Curve25519) are inherent to WireGuard rather than explicitly stated by Mozilla. Refund: 30-day money-back guarantee, first-time customers only.
Sources
- Mozilla VPN official product page ↗
- Mozilla VPN official features page (500+ servers, 30+ countries, multihop, custom DNS, split tunneling, malware blocking) ↗
- Mozilla VPN official pricing page ($9.99/mo, $4.99/mo annual, 30-day money-back guarantee, 5 devices) ↗
- Mozilla Subscription Services Privacy Notice (no network-activity logs; IP retained 90 days) ↗
- Mozilla VPN kill switch (official support) ↗
- Mozilla VPN connection limits (5 devices, official support) ↗
- Mozilla VPN Security Audit 2021 (Cure53; Mozilla Security Blog, Aug 31 2021) ↗
- Mozilla VPN Security Audit 2023 (Cure53; Mozilla Security Blog, Dec 6 2023, DoS, iOS keychain leak, daemon access controls) ↗
- Mozilla VPN update + 2023 audit results (Mozilla Blog, Dec 6 2023, the post the draft mislabeled as '2025') ↗
- Mozilla VPN client source (GitHub, MPL 2.0) ↗
- Mozilla VPN (Wikipedia), launch, Mullvad infrastructure, license ↗
- Top10VPN Mozilla VPN review, logging table (timestamps NOT logged), 90-day IP retention, Five Eyes ↗
- Security.org Mozilla VPN review 2026, pricing, no free version, 30-day refund, US jurisdiction ↗
- CyberInsider, Mozilla rolls out free built-in VPN in Firefox 149 (50GB/month, March 2026) ↗
- TechRadar, Mozilla scraps Firefox free-VPN data cap through summer 2026 ↗
- State of Mozilla 2024, corporate structure (Foundation owns Corporation/MZLA) ↗
Last verified 2026-06-17. Point-in-time data, so always confirm on the provider's own site.