Shutting down our public encrypted DNS

Mullvad VPN is discontinuing its public encrypted DNS (DoH) servers, which it operated since 2022, and is instead shifting its support to sponsor Quad9. The company states these public servers were primarily for users not connected to Mullvad VPN, offering privacy by obscuring visited domains from ISPs, and serving as a free public privacy service. Mullvad argues that running a specialized public DNS service is resource-intensive and that Quad9 is the established leader in the field, making sponsorship a more efficient way to support the public good. Mullvad Browser users will be automatically migrated to Quad9's servers by default, while users who manually configured Mullvad's DNS servers need to switch to Quad9 by November 2nd, 2026. Existing iOS and macOS DoH profiles will also need to be replaced with Quad9 configurations.

AI Signal Decode

Mullvad's decision to shut down its public DoH servers and sponsor Quad9 highlights a strategic shift from direct service operation to supporting established leaders in specialized privacy infrastructure. While Mullvad VPN's core service encrypts user traffic, including DNS queries, its public DoH servers offered an additional layer of privacy for external users and the Mullvad Browser. The move acknowledges the high operational cost and specialized expertise required to maintain a robust, privacy-focused public DNS service, which Quad9 has demonstrated proficiency in.

The market implication is a consolidation of public encrypted DNS services, favoring organizations with dedicated infrastructure and expertise like Quad9. For end-users, this means a potential increase in reliance on a single, albeit reputable, provider for public DoH services outside of VPN usage. Mullvad VPN's sponsorship signifies a commitment to privacy advocacy by backing a critical privacy tool, rather than directly competing in its provision, allowing them to focus resources on their core VPN offering.

Technically, the migration impacts users who manually configured Mullvad's DoH servers, requiring them to update their settings to Quad9 by a November 2026 deadline. Mullvad Browser users are largely unaffected, as the default settings will automatically transition. This transition underscores the importance of managed services and automatic updates in maintaining user privacy, especially for less technical users who rely on default configurations for security and privacy.