Is Mullvad DNS Secure?
Independent privacy and security audit of Mullvad DNS DNS servers, with live monitoring data.
Last updated March 26, 2026
Mullvad DNS passes some security checks but is missing support for certain features. Review the details below.
Security Audit Results
| Check | Result | Details |
|---|---|---|
| DNSSEC Validation | No | Does not validate DNSSEC. Vulnerable to DNS cache poisoning attacks. |
| NXDOMAIN Hijacking | No | Returns proper NXDOMAIN responses for non-existent domains. |
| DNS-over-TLS (DoT) | Supported | Encrypted DNS available on port 853. Prevents ISP snooping on DNS queries. |
| DNS-over-HTTPS (DoH) | Supported | HTTPS-based encrypted DNS available. Works through firewalls and is supported by most browsers. |
| Logging Policy | No logs, no accounts required | |
| Reliability | N/A | Server not currently in our monitoring database. |
Mullvad DNS DNS Addresses
| Type | IP Address | |
|---|---|---|
| Primary | 194.242.2.2 |
|
| Secondary | 194.242.2.3 |
Test Mullvad DNS Yourself
Run a live privacy and security check on 194.242.2.2 from your location. Get DNSSEC, NXDOMAIN, encryption, and latency results in seconds.
Run Privacy Check on 194.242.2.2How Mullvad DNS Compares
See security audits for other DNS providers:
Related Guides
Frequently Asked Questions
Is Mullvad DNS safe to use?
Mullvad DNS passes some security checks but lacks support for certain features like encrypted DNS or DNSSEC. It is adequate for basic use but privacy-conscious users may want a more feature-complete provider.
Does Mullvad DNS log DNS queries?
Mullvad DNS logging policy: No logs, no accounts required. Always review the provider's current privacy policy for the latest details.
Does Mullvad DNS support encrypted DNS?
Mullvad DNS supports both DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH), providing full encryption for your DNS queries.
How reliable is Mullvad DNS?
We do not currently have monitoring data for Mullvad DNS in our database.
What are the DNS addresses for Mullvad DNS?
Primary: 194.242.2.2, Secondary: 194.242.2.3. Configure both for redundancy.