www.it-connect.fr
Mullvad DNS Servers Are Shutting Down on November 2, 2026
Have you manually configured Mullvad's encrypted DNS servers on your PC, router, or iPhone? You have less than two months to make a change, because this service is coming to an end for these DNS resolvers. Here's what you need to know.
On September 3, 2026, Mullvad announced on its blog that it is shutting down its public DNS-over-HTTPS (DoH) servers. As of November 2, 2026, it will no longer be possible to use these DNS resolvers provided by the Swedish VPN provider, which have been in service since 2022. These DoH servers were free, and you did not need to be a Mullvad VPN customer to use them.
Let’s take a quick look at DNS-over-HTTPS, also known as DoH. It works by encapsulating DNS queries in an HTTPS stream, over port 443, instead of sending them in cleartext over port 53. In other words, DNS requests travel through an encrypted stream thanks to HTTPS. As a result, your ISP can no longer see the domains you visit, only a request sent to the resolver’s address. If you want to enable it in your browser, my tutorial on configuring DNS over HTTPS in Firefox, Chrome, Edge and Brave explains the steps to follow.
Mullvad's DoH servers served two purposes outside the VPN: Mullvad Browser uses them by default when the VPN is not active, and anyone can configure them in their operating system, router, or an application. On the other hand, when you are connected to Mullvad VPN, this service is unnecessary. Traffic is already encrypted, and resolution is handled by the provider’s internal resolvers. So nothing changes for VPN customers.
Why Mullvad Is Handing Things Over to Quad9
Mullvad is not giving up on the idea of a public encrypted DNS service. The company simply prefers to fund an existing player rather than maintain its own infrastructure. "Running a public privacy-focused DNS service is a highly specialized endeavor, and the Quad9 foundation is the undisputed leader in this field," Mullvad writes. Mullvad has therefore decided to shut down its DoH service and instead support the work done by Quad9.
For those who are not familiar with Quad9, it is the public resolver associated with the 9.9.9.9 address and operated by a Swiss-based nonprofit foundation. It supports encrypted DNS protocols (DoH, DoT) and blocks domains associated with malware or phishing by default. I have already covered it in several of my articles and videos.
What You Need to Do Before November 2, 2026
Beyond Quad9 and Mullvad, there are many other DNS service providers, more or less focused on privacy (NextDNS, for example). Mullvad is therefore one provider fewer, which will surely prompt some people to change their habits, but there is nothing alarming about this announcement.
In any case, if you are using Mullvad's DoH resolvers, here is what you need to do. And it depends on how you are using their resolver.
- Mullvad Browser with the default settings. You do not need to do anything. Users who kept the default DoH configuration, including the ad-blocking variant, will be automatically migrated to Quad9.
- Mullvad Browser with a custom DoH configuration. Mullvad will not change it. If you manually selected one of these server variants (base, extended, family, etc.), the vendor recommends restoring the default value or setting up another provider of your choice.
- Manual configuration on a system, router, or application. You must replace Mullvad's addresses before November 2. Mullvad points to Quad9's documentation for setup, but nothing prevents you from choosing another resolver.
- iOS and macOS profiles. Signed Mullvad DoH configuration profiles will stop working after that date. They must be replaced with the equivalent profiles published by Quad9.
After that date, devices still configured to use Mullvad's servers will lose DNS resolution, and therefore access to web browsing.
