It started out as a simple Firefox browser extension, but Mozilla VPN is now a completely independent product that protects all your internet traffic on Windows, Mac, Android, iOS, and Linux.
The network is smaller than some competitors with 400+ servers in 40+ locations and 30+ countries, but it's probably sufficient for most users.
Mozilla VPN is powered by the excellent Mullvad network. Some companies are silent about reselling someone else's network, but Mozilla is very open. Click the "view our full server list" link on the Mozilla VPN website, for example, and this will take you to the server list on the Mullvad site.
Features
Mozilla VPN's feature list has grown significantly since its launch, and the service now outperforms many VPNs that specialize in certain areas.
The network is, for example, compatible with P2P. Support for the fast WireGuard protocol optimizes performance and there is a kill switch to protect you if the VPN fails.
Multi-hop VPN allows you to connect to the VPN from one location (Phoenix, for example) and exit another (perhaps London), making it even more difficult for others to keep track of your activities.
Support for split tunneling (referred to here as app permissions) lets you decide which apps are protected by the VPN and which use your regular internet connection.
Other highlights include IPv6 support and the ability to choose DNS servers that block ads or trackers, or use your preferred DNS.
There are still weaknesses. For example, Mozilla VPN only supports WireGuard. There is no support for configuring the service on routers. And you still can't configure apps to automatically connect when you access a public Wi-Fi network.
There is no live chat support, but Mozilla has a decent number of support articles. You can also send questions to the support team from the website if you have serious problems.
We detected a potential nuisance. Although Mozilla VPN says it works with up to 5 devices, that means specific and registered devices. If you use the service on two mobile phones, two laptops, and a tablet, for example, you won't be able to use it on a new device until you remove the media from one of the others.
A handful of companies do something similar (KeepSolid VPN Unlimited is one), but most providers limit it to only simultaneous connections. You can still connect a certain number of devices at once, but the VPN doesn't care what they are and there are no problems registering or deleting a specific device.
Mozilla VPN pricing
Mozilla VPN has an average price of € 9,99 for your account billed monthly, down to € 7,99 for six months, or € 4,99 on the annual plan.
While not expensive, it is a jump from the Mozilla VPN launch price of € 4,99 billed monthly. Also note that you are paying to access Mullvad's servers. Go directly to Mullvad and you will pay a flat fee of € 5 per month (around € 5,75), regardless of the length of your subscription.
Mozilla VPN's payment options have improved a bit since its launch, and the service now accepts both PayPal and cards. (However, there is no Bitcoin yet).
If you sign up and the service doesn't work for you, no problem, you're protected by a 30-day money-back guarantee. There are no poaching or exclusions, as far as we know (and we spent quite a bit of time researching): If you're not satisfied, just let the company know within the first 30 days and you'll be reimbursed.
Confidentiality and registration
Mozilla sells its VPN in part as "a name you can trust," and that's a big plus. Even if you think Mozilla's reputation stems in large part from the fact that it's not Google or Microsoft, it's still ahead of most VPNs in terms of reliability, and its partner, Mullvad, is one of the most focused on privacy.
Mozilla VPN's website explains its general approach very clearly - "Your privacy comes first", "We don't store your online activity logs on our servers" - and the company provides more information in a short privacy notice.
The company collects your IP address when you register and use the service, as well as technical information about your settings (installed application version, operating system, hardware configuration) and "interaction data": when you connect, when the application asks to the server for information, etc. Mozilla says that the IP is only kept "temporarily", although that doesn't explain how long it can be "temporary".
If you are not satisfied with this, you can turn off some of them. Our Windows app installer asked us if we wanted to send usage data to Mozilla, specifying what was happening and giving us the option to say "no thanks." (If you don't notice the install option, you can also turn it off from settings.)
Mozilla refers users to Mullvad's privacy policy for more details, which is why traffic, DNS queries, IP addresses, session times, and bandwidth used are not logged.
While this doesn't have the level of technical detail we see with some providers, Mozilla wants the document to be read in conjunction with its general privacy policy and general privacy principles ("Collect what we need, de-identify where we can, and delete when we're done"). is not needed”, for example, and “Use and share information in a transparent and beneficial way for the user”).
Audit
Mozilla says it all about privacy, but users shouldn't be left behind by a provider's words on trust. We love seeing independent evidence that a VPN delivers what it promises.
In August 2021, Mozilla provided exactly that by publishing the results of a second audit of Cure53 at its service.
It did not look at the servers, possibly because they are managed by Mullvad and therefore cannot definitively show that there is no log. But Cure53 was able to examine all applications, including the source code, which gave it ample opportunity to identify any privacy and security issues.
Cure53 found a number of vulnerabilities and made some recommendations to improve application design. But key issues have now been addressed, and the Cure53 report concluded that apps have "significantly increased in terms of security" since their last review, uncovering only one "medium" vulnerability.
Zero vulnerability would have been better, of course, but that rarely happens. Cure53 performs exceptionally detailed reviews that detect even the smallest problems, and the organization will always uncover certain concerns.
Overall, we believe the audit is positive news in several ways. The scope was wide and covered all Mozilla applications; the company has shared its source code; the audit results were reasonable and the full report was published. We give Mozilla a lot of credit for going through this level of scrutiny, which most VPNs have yet to do.
applications
To get started with Mozilla VPN, you need to create a Firefox account, but this involves nothing more than providing your email address and age. (Yes, age, we don't know why either).
The account was opened, we handed over our money, and the website directed us to the Downloads page. We grab a copy of the Windows client, download it, and install it in seconds.
The Mozilla VPN client for Windows has a simple, straightforward, and very standard interface. A small console shows your default location and you can click on it to select a different one. A large on / off switch connects and disconnects it as needed, and icons and a status screen clearly show when it's protected and when it's not.
The client doesn't have an "Automatic" setting where it chooses the fastest server for you, and there's no search box, filter, or bookmarking system to quickly find your most-used locations. Login may require a little more scrolling and clicking than we would like.
However, there is some trade-off in Mozilla's use of the ultra-fast WireGuard protocol, which typically connects us in 2-4 seconds. Even a fast OpenVPN connection usually takes 5-6 seconds to establish, and some make you wait 20 seconds or even longer.
configurations
Mozilla VPN Windows setup starts with a simple split tunnel system. This allows certain apps to be configured to use your normal internet connection instead of the VPN, which can be useful for improving performance or troubleshooting (banking apps that won't work if you appear to be in a different country, for example).
A DNS settings screen lets you choose DNS servers that block ads, "harmful domains," or both, and you can also enter your own custom DNS server. (However, you can only enter one DNS IP address, so it can cause problems if that server fails or underperforms.)
A notification page includes an option to display an alert if you connect to an unsecured Wi-Fi network. This is useful, although more powerful apps can also automatically connect to the VPN as needed.
A handful of more technical features include the ability to enable or disable IPv6 and access devices on your local network (or not). However, in general, the client keeps its configuration to a minimum.
As we mentioned earlier, there is no option to change the protocol - it's WireGuard or nothing. But otherwise, there's quite a bit of configurability here, and Mozilla VPN certainly outperforms many of the competition.
Immobilizer
Although Mozilla's Windows client has a kill switch, there is no option to turn it on or off, or to change how it works. This is good for safety as there is no way to accidentally turn it off. But it could be bad news if the kill switch is causing problems in your...