Mullvad or Proton VPN?

a year ago by MrCatCookies to c/privacy

Well, just that. Wich is stronger against trackers, hackers and doxxing threats? Proton VPN (I'm using this one actually), or Mullvad VPN?

ThatGuyNamedZeus 65 points a year ago

Mullvad is much friendlier to privacy, but their proxies get blocked by A LOT of stuff, they also have a very small number of proxies. Mullvad collects literally nothing about you, but that's a double edged sword. not having any way to verify exactly who paid money into which account number means they can't help you if someone steals your account. I also have it on good authority that mullvad isn't very reliable at getting past more aggressive censorship firewalls. the one in china for example won't allow you to use mullvad unless the sim you're connecting from is a US one.

Proton doesn't record anything you're doing with their VPN and they've had to prove that many times and their "sentinel" program and the 2FA and double password you can enable make it very hard if not impossible for someone to mootch off your account. I very rarely get blocked by anything when I use proton VPN, if I ever do get blocked I just have to change the proxy I'm on. I don't even have to change the location most of the time because proton VPN has a huge number of proxies at each location.

Proton also gives you the ability to save recovery phrases and recovery files if you lose your password(s) or your 2FA

ente auth and ageis auth are great for storing your 2FAs and they allow you to back them up to a file if your account with ente fails in some way or if you forget the password to get into your ageis

as for those recovery files and phrases I talked about. save them in text files on a small capacity flash drive that you don't use for anything else

path: 0 16997732, hotness: undefined, score: 65, children: 12
OhVenus_Baby 6 points a year ago

Who knows how to steal you mull account with out you knowing? This seems over blown atleast from that perspective. I'm sure it's possible but unless you are incredibly slopping opsec I doubt it's even on the list of problems. Given all other things you could be doing.

path: 0 16997732 17012854, hotness: undefined, score: 6, children: 6
ThatGuyNamedZeus 5 points a year ago

it's just a string of numbers with no password

path: 0 16997732 17012854 17014038, hotness: undefined, score: 5, children: 5
OhVenus_Baby 2 points a year ago

How would anyone get the long string though? Realistically speaking. It would be difficult and unlikely.

path: 0 16997732 17012854 17014038 17015424, hotness: undefined, score: 2, children: 4
ThatGuyNamedZeus 4 points a year ago

It's just numbers, no punctuation marks, no letters, no math symbols. No entropy really.

For most people that's not an issue, but some people out there can guess them.

one way to mitigate that problem is simply to not load your mullvad account with more than 1 year of time at any given time. If your mullvad account has like...10 years of time then yeah, lots of people are going to mootch if they figure out which number has that

Or even if they don't mootch, they could just remove the devices on your account and fuck with you

path: 0 16997732 17012854 17014038 17015424 17016049, hotness: undefined, score: 4, children: 3
aeshna_cyanea 4 points a year ago

Mullvad also has hidden servers they give access to on request if you can't access the regular ones. Can help with government censorship etc

path: 0 16997732 17023008, hotness: undefined, score: 4, children: 4
ThatGuyNamedZeus 1 point a year ago

Good to know, but how can you safely request them without giving away that you're using them?

What method does the request go through? What happens when those proxies get blocked by the censorship firewalls too?

path: 0 16997732 17023008 17033332, hotness: undefined, score: 1, children: 3
aeshna_cyanea 1 point a year ago

I just used email lol, and I don't think it's possible to hide that you're connecting to a certain IP. And if they get blocked too I'll email them again D:

path: 0 16997732 17023008 17033332 17037418, hotness: undefined, score: 1, children: 2
ThatGuyNamedZeus 1 point a year ago

the ministry of truth in china would be monitoring where those emails are caming and going at minimum.

In developed countries where people don't get arrested for wrongthink mullvad is great, I'm just saying, be prepared if you plan on going to a place with a censorship firewall

path: 0 16997732 17023008 17033332 17037418 17055548, hotness: undefined, score: 1, children: 1
scytale 46 points a year ago

I prefer Mullvad. Regularly audited, can pay with cash if preferred, everything runs on RAM, and hasn’t had any controversies so far. The only issue for some is no port forwarding. I also like the multi-hop and DAITA features.

path: 0 16997399, hotness: undefined, score: 46, children: 0
jimmy 30 points a year ago

Mullvad. Their servers run on RAM, and they don't have any information about you no email, no username you can even pay with cash. However, Proton has port forwarding, while Mullvad does not.

path: 0 16997589, hotness: undefined, score: 30, children: 5
RotatingParts 10 points a year ago

Mullvad does have split tunneling on Linux and Android. I don't know about Windows.

path: 0 16997589 16997808, hotness: undefined, score: 10, children: 1
jimmy 16 points a year ago

I don't know why I wrote split tunneling, I meant port forwarding. Thanks😀. Windows also has split tunneling.

path: 0 16997589 16997808 16997871, hotness: undefined, score: 16, children: 0
utopiah 1 point a year ago path: 0 16997589 17000100, hotness: undefined, score: 1, children: 2
jimmy 1 point a year ago

If, for some reason, there is any data on the server and a malicious actor pulls it physically out, the data would disappear. There are probably other pros with RAM-only servers that I don't know.

path: 0 16997589 17000100 17020936, hotness: undefined, score: 1, children: 1
utopiah 1 point a year ago

What data if there is no log?

path: 0 16997589 17000100 17020936 17021171, hotness: undefined, score: 1, children: 0
Geodad 23 points a year ago
path: 0 16997317, hotness: undefined, score: 23, children: 5
MrCatCookies 2 points a year ago

Okay, but how does the political stance of Proton workers affect my privacy?

path: 0 16997317 17004537, hotness: undefined, score: 2, children: 3
Geodad 10 points a year ago
path: 0 16997317 17004537 17004567, hotness: undefined, score: 10, children: 2
mybuttnolie 12 points a year ago

Correct me if I'm wrong, but he doesn't have the power to do that. Proton has a board with many members calling the shots.

path: 0 16997317 17004537 17004567 17008760, hotness: undefined, score: 12, children: 1
Geodad 0 points a year ago
path: 0 16997317 17004537 17004567 17008760 17008912, hotness: undefined, score: 0, children: 0
sunzu2 2 points a year ago
path: 0 16997317 16998000, hotness: undefined, score: 2, children: 0
Rabbit 22 points a year ago

I like that you don't have to provide an email address to mullvad.

path: 0 17004853, hotness: undefined, score: 22, children: 3
Scrollone 2 points a year ago

You can also send them money in a letter

path: 0 17004853 17023466, hotness: undefined, score: 2, children: 1
joveice 1 point a year ago

Same for proton

path: 0 17004853 17023466 17023579, hotness: undefined, score: 1, children: 0
joveice 1 point a year ago

Isn't it the same for Proton? I have been using it for so long now that I don't remember

path: 0 17004853 17023577, hotness: undefined, score: 1, children: 0
silentjohn 19 points a year ago

I use Proton currently since it comes with my proton subscription. But I used mullvad for years and prefer it. They're both good, you can't go wrong really.

path: 0 17011385, hotness: undefined, score: 19, children: 0
Vaie 18 points a year ago

Mullvad hasn’t yet shown themselves fed- friendly.

Proton has.

Mullvad is the answer.

path: 0 16997140, hotness: undefined, score: 18, children: 13
utopiah 18 points a year ago

Source please, we in the /privacy community genuinely want to learn so when such things do happen, we all benefit from factual information. Please do not assume we all know what you are referring to. It is particularly in this kind of cases when, for example with Signal what was "shared" with authorities is basically irrelevant, cf https://signal.org/bigbrother/ so we must be precise.

path: 0 16997140 16999930, hotness: undefined, score: 18, children: 10
Vaie 7 points a year ago

Proton has cooperated with subpoenas on multiple occasions leading to the user’s arrest.

While they may challenge them, the point is that they have cooperated and thus are not reliable. There are no reported cases of Mullvad doing the same.

There are ample links from multiple sources that describe this with a simple search.

path: 0 16997140 16999930 17004160, hotness: undefined, score: 7, children: 9
throwawayacc0430 15 points a year ago
path: 0 16997140 16999930 17004160 17005833, hotness: undefined, score: 15, children: 1
ShotDonkey 3 points a year ago

Interesting, thanks.

path: 0 16997140 16999930 17004160 17005833 17014714, hotness: undefined, score: 3, children: 0
EngineerGaming 9 points a year ago
path: 0 16997140 16999930 17004160 17004681, hotness: undefined, score: 9, children: 2
silentjohn 2 points a year ago

Proton has cooperated with subpoenas on multiple occasions leading to the user’s arrest.

My thinking is, if the CIA (or whatever country's equivalent) is on to you, it's pretty much jover.

path: 0 16997140 16999930 17004160 17004681 17011483, hotness: undefined, score: 2, children: 1
utopiah 3 points a year ago

Please do provide a link, especially if it's very easy to find. I'm not saying anything you say is wrong, only that if it's not an opinion, then a link from a trusted source helps other to understand the situation.

path: 0 16997140 16999930 17004160 17005808, hotness: undefined, score: 3, children: 2
GnuLinuxDude 7 points a year ago

It's a somewhat convoluted story. Here are some links

The takeaway is when he logged into his Protonmail they logged his IP address which helped track this individual down. But note that Reddit thread I linked. I also cannot find that much information about "what happened next," or the details of who was arrested and why.

There may be other examples, but this particular case kinda hit the rounds back when it happened.

path: 0 16997140 16999930 17004160 17005808 17006346, hotness: undefined, score: 7, children: 1
Jack_Burton 1 point a year ago

Has Mullvad ever been required to comply for anything though? Or are you saying Mullvad has already, and refused to follow Swedish law?

path: 0 16997140 16999930 17004160 17023624, hotness: undefined, score: 1, children: 0
dubyakay 12 points a year ago

When did Proton show themselves fed-friendly? Also what "fed" are we talking about? The Swiss Federation?

path: 0 16997140 16999054, hotness: undefined, score: 12, children: 1
PunkiBas 4 points a year ago

I guess he's referring to this

path: 0 16997140 16999054 17001673, hotness: undefined, score: 4, children: 0
Tenderizer78 13 points a year ago
path: 0 17017825, hotness: undefined, score: 13, children: 0
MummysLittleBloodSlut 12 points a year ago

I like Mullvad better

path: 0 17000233, hotness: undefined, score: 12, children: 0
pineapplelover 12 points a year ago

If you don't need proton's whole suite of tools I say go for mullvad.

You can also just test them both out for yourself. Try mullvad for one month, proton another. The nice thing with mullvad I believe is that it's way more anonymous in terms of various forms of payment and I believe it has a fixed price.

path: 0 17009681, hotness: undefined, score: 12, children: 0
SkaveRat 10 points a year ago

Mullvad. Not even a question

path: 0 17015717, hotness: undefined, score: 10, children: 1
Scrollone 10 points a year ago

Also, the Proton CEO publicly supports Trump

path: 0 17015717 17023465, hotness: undefined, score: 10, children: 0
SirMaple__ 9 points a year ago

Mullvad any day. Support is awesome.

If you go with Mullvad look for the gift cards out there that are for 6 or 12 months of service. I grabbed one off Amazon.ca for 12 months at $75. Works out to be cheaper than paying per month with the ever changing exchange rates.

I also like the fact that Mullvad has servers in the city I live in where as Proton has them on the west coast or east coast. Not the greatest for those in the middle of the country.

path: 0 17010290, hotness: undefined, score: 9, children: 2
wabasso 1 point a year ago

How does one verify that a gift card bought from Amazon is legit?

path: 0 17010290 17029020, hotness: undefined, score: 1, children: 1
SirMaple__ 3 points a year ago path: 0 17010290 17029020 17029183, hotness: undefined, score: 3, children: 0
nutbutter 9 points a year ago

Mullvad. It's cheaper than Proton. But Proton has more servers. Like Proton even provies Indian IPs, but the servers are hosted in Singapore, which may be something people need, as Mullvad do not have any servers with Indian IPs.

You can also try IVPN, it is almost same like Mullvad, no email for account, pay using Monero etc, but you can get a one week subscription for $2.

path: 0 16998280, hotness: undefined, score: 9, children: 0
communism 5 points a year ago

I prefer Mullvad. I've found it a lot more reliable. I was a paying Proton customer but still had connectivity issues a non-negligible number of times, whereas I've literally never had Mullvad be the cause of connection issues in my years of using it. It's great that they take cash and have literally only an account hash associated with your account.

I've also found that Mullvad customer support are responsive, helpful, and know what they're talking about. I've had experiences with Proton's customer support that were ok, but occasionally had the typical customer service hiccups along the lines of being assigned a new support agent who doesn't read back all the conversation (understandable—I had one bug I was dealing with for months) and you have to explain again what the original issue was and what has been done since.

I think both options are perfectly fine, but I definitely prefer Mullvad, and it's what I recommend to people if they ask me to recommend a VPN service.

path: 0 17009353, hotness: undefined, score: 5, children: 0
RiQuY 4 points a year ago

IVPN imo, just because it offers reverse split tunneling, if you prefer having more countries to choose from you can use Proton.

path: 0 16997265, hotness: undefined, score: 4, children: 0
freshOffTheBoat 2 points a year ago

Maybe try both!! I love both VPNs

path: 0 17028798, hotness: undefined, score: 2, children: 0
toastmeister 2 points a year ago

There'd thundermail coming out soon, which will probably have mullvad included. This also funds firefox too which is nice.

path: 0 17017137, hotness: undefined, score: 2, children: 0
land 1 point a year ago

Has anyone used Mullvad vpn with a media server? I’m currently using AirVPN, but it’s not that good speed-wise. I’ve been looking at Mullvad for a while, but they’ve abandoned port forwarding, which I’m not sure how big of an impact that is.

path: 0 17004592, hotness: undefined, score: 1, children: 4
GnuLinuxDude 2 points a year ago

Depending on how you're accessing this, and how many people you're trying to set this up for, it would probably be easiest to learn how to deploy your own Wireguard network. In my case, my phone automatically connects to my own Wireguard on my server (an 11 year old laptop) and whenever I'm on the go I have full access to my LAN + PiHole DNS filtering.

So, what's the point? The point is that you will be able to securely connect to your media server without exposing it directly to the internet, all without paying for a service to do what you can already do yourself, provided your ISP allows you port forward.

path: 0 17004592 17006220, hotness: undefined, score: 2, children: 3
land 1 point a year ago

I have several people who usually access my media server from abroad. Can you confirm if the WireGuard network you mentioned allows you to “legally torrent” media using it?

path: 0 17004592 17006220 17011110, hotness: undefined, score: 1, children: 2
Jason2357 1 point a year ago

Wireguard is just the vpn software, not a service. Most of these services are running wireguard under the hood now because it’s so good. You can also use wireguard yourself to connect your own machines together, (or friends machines, allowing file sharing like a LAN) but that doesn’t help you with torrenting.

path: 0 17004592 17006220 17011110 17016860, hotness: undefined, score: 1, children: 0
GnuLinuxDude 1 point a year ago

So to be perfectly clear, setting up Wireguard is about bridging two LANs (or devices) to make them virtually appear as if they belong on the same network. For every client that connects they would need to be issued a key and every device would have to be set up. But all the traffic between the two "LANs" would be encrypted and secure.

But I don't think WireGuard is what you're looking for, because this would require setting up all these other people with WireGuard as well. Or doing a more complex setup where you use a VPS and WireGuard and have that serve an exit point instead of your home connection. Or any other number of more complex setups that would work but require a lot more effort... and it sounds like you were just looking for basic port forwarding.

Mullvad took that feature away a couple of years ago (presumably to combat CSAM dissemination). So if you were hoping to just have a secure path for someone to connect to your media server routed through Mullvad, I don't believe that's possible anymore.

path: 0 17004592 17006220 17011110 17014859, hotness: undefined, score: 1, children: 0
Kobo 1 point a year ago

Trackers are browser problem, get ublock origin. You can block trackers by changing your dns resolver i recommend Quad9 or adguard.

You don't really get hacked unless you download and open files or your accounts get recovered by someone sending all your information to customer support pretending to be you.

path: 0 17047590, hotness: undefined, score: 1, children: 0
Kobo 1 point a year ago

Doxxing is a low skill level threat its very easy, google your target's username and find information about them, yeah its that simple. All your user data is linked to your user name and profile picture. What i suggest doing is using the same tools doxxers use (sherlock) to find your long forgotten accounts and then delete them, remember to never use the same username and profile picture.

When a database leaks it will most likely contain your username, email and ip address, this information will be findable by username, email or ip address. If you ever use an account without a vpn using a vpn wont anonymize you from the service. Disable webrtc in your browser it often leaks ip addresses while using vpns also watch out for ip grabbers.

Tldr: dont use same usernames and profile pictures, vpn is 100% secure if used wrong.

path: 0 17048093, hotness: undefined, score: 1, children: 0
sunzu2 0 points a year ago
path: 0 16997979, hotness: undefined, score: 0, children: 0
RockLobstore 0 points a year ago
path: 0 16997928, hotness: undefined, score: 0, children: 0
kami -4 points a year ago

I love that Proton bots/fanboys always get pretty nervous when someone just points out the facts 🤣

path: 0 17008199, hotness: undefined, score: -4, children: 0
bndkt -5 points a year ago

What about NordVPN? I use it and I’m pretty happy.

path: 0 17011484, hotness: undefined, score: -5, children: 2
Stomata 4 points a year ago

They are the trackers

path: 0 17011484 17019849, hotness: undefined, score: 4, children: 0
DrunkAnRoot 4 points a year ago

they log

path: 0 17011484 17017658, hotness: undefined, score: 4, children: 0
Libra -7 points a year ago

A VPN is a VPN, having a different IP address is equally effective against those things no matter which IP it is. The issue is whether or not anyone can associate that IP with yours, and what that comes down to is how willing they are to give up their records when the government asks nicely (or, even more importantly: not so nicely.) I'm not familiar enough with either service to be able to speak to that, but everyone else seems to be talking about features, prices, politics, etc when none of those directly address your questions.

path: 0 16998641, hotness: undefined, score: -7, children: 8
uawarebrah 1 point a year ago

False and fake information.

path: 0 16998641 17002686, hotness: undefined, score: 1, children: 7
Libra -1 points a year ago

lol, k, I definitely respect the opinion of someone who drops a half-assed comment like that without bothering to offer what they believe to be the correct information.

path: 0 16998641 17002686 17003377, hotness: undefined, score: -1, children: 6
sxan 5 points a year ago

I can't presume to know what they meant, specifically, but I think they're probably referring to the fact that a VPN provider has access to all of the data you're transmitting through their exit nodes, and a malicious one could harvest and sell it. Or work with LE and hand over all tracking data, all information about your browsing habits for the past year, all of the times you visited PornHub and Grinr, how many times you visited that trans support website... everything LE could get by surveiling your behavior if you weren't using a VPN.

A VPN is only worth how trustworthy the VPN provider is. Mullvad, for instance, claims to keep no logs, so a search warrant for logged data is useless. This is not true of all VPN providers.

path: 0 16998641 17002686 17003377 17004126, hotness: undefined, score: 5, children: 5
Libra -2 points a year ago

If that's the case then both of you failed to read the part of my comment where I explicitly addressed that:

The issue is whether or not anyone can associate that IP with yours, and what that comes down to is how willing they are to give up their records when the government asks nicely (or, even more importantly: not so nicely.)

I admit I didn't include the possibility of the VPN operator themselves being malicious, but it seems weird to call me out for not addressing the issue of record security re:governments/LE when pretty much the entire point of my comment was to address that specific issue because no one else was, no?

path: 0 16998641 17002686 17003377 17004126 17004660, hotness: undefined, score: -2, children: 4
PhilipTheBucket -9 points a year ago

Tor Browser

path: 0 16998236, hotness: undefined, score: -9, children: 3
throwawayacc0430 11 points a year ago
path: 0 16998236 16998436, hotness: undefined, score: 11, children: 2
PhilipTheBucket 2 points a year ago

I haven't really played around with VPNs to make the comparison. Tor breaks for a significant number of sites, but it's still a pretty small minority; "only works for a small number of sites" is a comical untruth.

If Tor breaks more sites than VPNs do (which I think is likely), I think it is because Tor is secure. It is easier to do malicious things behind Tor because you have, for all intents and purposes, an unbreakable shield of privacy while you are doing those malicious things. And so, site operators tend to block it more readily than they do VPNs.

Whether you want to make the tradeoff in favor of convenience or genuine privacy is, of course, up to you. It's not surprising to me that the Lemmy userbase is more or less unanimous in favor of convenience. Of course it is fine if you want, but you don't need to misrepresent how things are to make it the only possible choice.

path: 0 16998236 16998436 17014199, hotness: undefined, score: 2, children: 0
EngineerGaming 0 points a year ago
path: 0 16998236 16998436 17004711, hotness: undefined, score: 0, children: 0
1984 -19 points a year ago

Mullvad of course. Proton is American right?

path: 0 16999005, hotness: undefined, score: -19, children: 3
dubyakay 15 points a year ago

Proton is Swiss.

path: 0 16999005 16999020, hotness: undefined, score: 15, children: 2
1984 1 point a year ago

Ok. Better.

path: 0 16999005 16999020 16999793, hotness: undefined, score: 1, children: 0
cardfire -1 points a year ago

Exception when gargling orange.

path: 0 16999005 16999020 16999975, hotness: undefined, score: -1, children: 0
privacy
privacy

@lemmy.ml

login for more options
51445
5295
5023

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

  • Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
  • Don't promote proprietary software
  • Try to keep things on topic
  • If you have a question, please try searching for previous discussions, maybe it has already been answered
  • Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
  • Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

go to feed...