{"id":152,"date":"2024-08-23T17:10:44","date_gmt":"2024-08-23T17:10:44","guid":{"rendered":"https:\/\/www.socialvpns.com\/2024\/08\/23\/securely-download-mullvad-vpn-with-its-new-loader-application\/"},"modified":"2024-08-23T17:10:44","modified_gmt":"2024-08-23T17:10:44","slug":"securely-download-mullvad-vpn-with-its-new-loader-application","status":"publish","type":"post","link":"https:\/\/www.socialvpns.com\/?p=152","title":{"rendered":"Securely download Mullvad VPN with its new loader application"},"content":{"rendered":"<p>You can now securely download the Mullvad VPN app thanks to the newly launched Mullvad VPN loader application.<\/p>\n<p>The best VPNs are known for their transparency and security, and Mullvad is championing this in its latest feature.<\/p>\n<p>The loader downloads the Mullvad VPN app. It automatically checks it&#8217;s the real deal, verifying the app&#8217;s authenticity. This cuts out any chance of you downloading a malicious copycat app.<\/p>\n<p>The loader is fast and secure, and is available for Mullvad&#8217;s Windows and Mac VPN apps. It can also be re-used to update and install the latest versions of Mullvad VPN.<\/p>\n<p>Automated authentication<\/h2>\n<p>Mullvad has always used PGP signatures to authenticate the software it releases, but previously it has been up to the user to verify it themselves.<\/p>\n<p>The new loader&#8217;s automation removes this hurdle. The loader has the same PGP signature as all other Mullvad releases, meaning you can also verify the loader itself. Mullvad has a guide on verifying signatures.<\/p>\n<p>Before now, the Mullvad VPN desktop app was only hosted by Mullvad on servers in Sweden, with GitHub as a backup. This has now been expanded and the Mullvad VPN app can be securely downloaded from one of a global network of third-party content delivery networks (CDNs).<\/p>\n<p>A CDN is a server that delivers website content to a user. In its blog post, Mullvad says downloading the Mullvad VPN app from a CDN that is closer to a user &#8220;enables faster downloads than was previously possible.&#8221;<\/p>\n<figure>\n<p><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/HxCPfEVp42S9ap2fwr8zwJ.jpg\"><\/p><figcaption>(Image credit: Future)<\/figcaption><\/figure>\n<p>Mullvad is known for being one of the most private VPNs and we contacted the provider to ask about the privacy ramifications arising from CDN use.<\/p>\n<p>Mullvad&#8217;s tech lead said the loader &#8220;cryptographically verifies the integrity of the installer before launching it,&#8221; meaning no malicious software can be downloaded.<\/p>\n<p>According to Mullvad, &#8220;the CDN can see what IPs request the installer&#8221; and &#8220;can infer what OS that IP is running.&#8221; So, unless users use a different VPN to download the installer, the CDN &ndash; a third-party &ndash; will know some personal information about users.<\/p>\n<p>It can&#8217;t see your VPN traffic or if you&#8217;ve even used the VPN. But it can see you&#8217;ve downloaded the installer, which is a small privacy drawback.<\/p>\n<p>This was acknowledged by Mullvad, who said it was &#8220;approved by the company before the project.&#8221;<\/p>\n<p>However, Mullvad CEO Jan Jonsson confirmed that users can still download Mullvad VPN the old way by navigating to the &#8220;Alternative installation&#8221; section of its website.<\/p>\n<p>This means you&#8217;re still downloading the app direct from Mullvad&#8217;s Swedish server, bypassing the CDN. Doing this means you lose the automatic verification of the new loader, but won&#8217;t share your IP address with a third-party.<\/p>\n<p>Users can still verify everything they&#8217;re downloading thanks to Mullvad&#8217;s PGP signatures.<\/p>\n<figure>\n<p><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/dhqCoEY9Gi5mqkLm5rVira.jpg\"><\/p><figcaption>(Image credit: Future)<\/figcaption><\/figure>\n<p>Independently audited<\/h2>\n<p>Mullvad described the correctness of this app as &#8220;paramount.&#8221; Due to its sensitive nature and &#8220;potential attack vectors,&#8221; Mullvad had the app&#8217;s protocol and source code independently audited by Assured.<\/p>\n<p>Assured said it was contracted to &#8220;perform an audit of a new app functionality that allows downloading of new versions of the Mullvad VPN app installer from CDN sources in a secure manner.&#8221;<\/p>\n<p>The group reviewed &#8220;the installer downloader application, the script generating installer releases, and the installer metadata.&#8221;<\/p>\n<p>Following completion of the audit, Assured said &#8220;the new downloader installer solution seems to be well thought out and implemented.&#8221;<\/p>\n<p>Mullvad says the loader &#8220;will be the primary way for our users to get the Mullvad VPN app going forward,&#8221; and offers installation instructions for all devices.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>You can now sec..<\/p>\n","protected":false},"author":1,"featured_media":153,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.socialvpns.com\/wp-content\/uploads\/2025\/06\/vpn-Reviews-3df0rz1lanj.jpg","fifu_image_alt":"","footnotes":""},"categories":[2],"tags":[11,6,7,9,13],"class_list":["post-152","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-vpn","tag-best-vpn-services","tag-vpn","tag-vpn-news","tag-vpn-reviews","tag-vpn-services"],"_links":{"self":[{"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=\/wp\/v2\/posts\/152","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=152"}],"version-history":[{"count":0,"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=\/wp\/v2\/posts\/152\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=\/wp\/v2\/media\/153"}],"wp:attachment":[{"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=152"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=152"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.socialvpns.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=152"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}