Mullvad VPN Creates iOS Master Switch to Protect Users From Data Leaks

Apple iOS presents unique problems for VPNs, including potential data leaks from certain kinds of traffic. Mullvad VPN, CNET’s top VPN pick for privacy, announced on Tuesday that it is implementing a new fix for this issue but leaving the decision in users’ hands, since it would mean more work managing iOS updates. 

iOS is vulnerable to leaks and LocalNet attacks, where cybercriminals mimic nearby friendly Wi-Fi networks, such as a common cafe Wi-Fi hotspot. There are ways to fix this issue with VPNs, but it requires using methods to specifically force all iOS app data through the VPN, in Mullvad’s case, with an includeAllNetworks configuration.

Mullvad has known about this but has been hesitant to use it because Apple’s iOS updates really don’t like it. This could create a loop where Apple attempts to update Mullvad’s VPN app, bricks the iPhone, forces a reboot, tries to update again, and so on. 

Now, Mullvad has chosen to implement a setting that ensures includeAllNetworks is true, eliminating the leak issue. But the company has made it optional and added a safeguard to stop the bricking loop. When an update arrives, it should now display a Mullvad notification warning users to either turn off the VPN during the update or disable the new includeAllNetworks setting to avoid problems.

A representative from Mullvad didn’t immediately respond to a request for comment. 

We aren’t entirely sure how this new iOS feature is rolling out, but Mullvad says that it’s coming soon. Mullvad also warns users that its workaround isn’t perfect and encourages people on iOS to report the issue to Apple if they encounter updates that cause devices to freeze or brick. 

If you’re interested in a new VPN, you should know that Mullvad does a particularly good job of staying on top of the latest privacy practices, such as implementing post-quantum encryption to future-proof its VPN against ultra-fast quantum hacking. The company has also adopted protocols to protect against AI-guided traffic analysis. Starting at $5 per month, it’s also one of our favorite budget picks.