Australian Owned • ABN 35 942 206 406 • Same-day dispatch
Mullvad VPN · GrapheneOS · Australia

Mullvad on every device. Configured properly before dispatch.

Every Privacy Devices phone ships with a paid 12-month Mullvad VPN licence, WireGuard configured, kill-switch enforced at the OS level, and DNS-over-HTTPS through Mullvad's DNS. No app to install, no configuration to do — works from first boot.

Mullvad VPN GrapheneOS — the standard configuration we ship

Mullvad VPN GrapheneOS is the default network-layer setup on every Privacy Devices phone. The combination works because Mullvad's WireGuard implementation runs cleanly inside GrapheneOS's per-app network controls — kill-switch enforcement applies at OS level, not just at app level. That distinction matters: a stock-Android Mullvad VPN connection can drop and leak; a Mullvad VPN GrapheneOS connection enforced via VpnService at the system layer does not.

If you are searching for "Mullvad VPN GrapheneOS Australia" because you want to set it up yourself, the steps are documented on the GrapheneOS forum. If you would rather have it done before the phone arrives, every hardened GrapheneOS phone Australia Privacy Devices ships includes a paid 12-month Mullvad licence pre-loaded, WireGuard configured, kill-switch enforced, and DNS-over-HTTPS pointing at Mullvad's DNS — no app to install, no configuration to do.

Why Mullvad specifically

The "best VPN" arguments online are largely affiliate-marketing battles. Mullvad doesn't run an affiliate programme, doesn't pay influencers, doesn't appear in the Top Ten Best VPN listicles — and that is part of why it is the right choice for someone serious about privacy. The qualities that matter:

No-account, no-email signup

Mullvad accounts are identified by a 16-digit account number you generate on signup. No email, no name, no payment-card-bound identity. You can pay with cash through the post if you want zero financial trail. The legitimate use case isn't "doing illegal things"; it's having a VPN that genuinely cannot be served a request to identify "the user with email X" because no email exists.

Independent audits

Mullvad has been through multiple independent security audits — most recently by Cure53 — covering both the apps and the infrastructure. The reports are public. ExpressVPN and NordVPN have also done audits but theirs are typically less rigorous and the underlying ownership structure is opaque (NordVPN's parent has had multiple branding changes).

Court-tested no-log policy

In 2023, Swedish authorities raided Mullvad's offices with a warrant for user data. The raid found no logs, no records of which user account had connected to which server, nothing to seize. That outcome is the kind of test no marketing claim can substitute for.

WireGuard-first

Mullvad runs WireGuard as its primary protocol. WireGuard is faster, simpler, and easier to audit than OpenVPN. On a Pixel 10 the protocol overhead is barely measurable. OpenVPN is supported as a fallback for environments where WireGuard is blocked.

How we configure it

Always-on at OS level

GrapheneOS exposes always-on VPN as a system-level setting (not just an app preference). We enable it. The phone cannot use the network without going through Mullvad.

Kill-switch enforced

If the VPN connection drops, no traffic leaks. The phone simply has no internet until reconnected. Far stricter than the consumer-default "warn me" behaviour.

DNS-over-HTTPS

All DNS resolution goes through Mullvad's encrypted DNS. Your ISP cannot see what domains you look up. Captive-portal behaviour configured to fail safe.

Per-app override (optional)

For specific apps that misbehave behind a VPN (a small number of banking apps), GrapheneOS supports per-app VPN bypass. We configure this only when the user explicitly asks for a specific app.

Server-list curated

Default config points at Mullvad Sydney servers for AU users (lowest latency). The user can switch to any of Mullvad's 600+ servers in 40+ countries with two taps.

12-month licence pre-paid

Your 12-month subscription is included in the device price. When it expires, top up directly through Mullvad with your account number — no Privacy Devices intervention required.

What Mullvad doesn't do (managing expectations)

Buy a Pixel with Mullvad pre-configured

Every Privacy Devices Pixel ships with Mullvad VPN, paid 12-month licence, WireGuard, kill-switch, and DNS-over-HTTPS — configured before dispatch. No app to install.

Browse Pixels → Talk to Us

Frequently asked

Why Mullvad and not another VPN?

No-account signup, multiple independent audits, court-tested no-log policy, WireGuard-first, no affiliate marketing.

How is it configured on Privacy Devices phones?

App installed, 12-month licence pre-paid, WireGuard, kill-switch enabled at OS level, always-on enforced, DNS-over-HTTPS pointing at Mullvad DNS.

Is Mullvad legal in Australia?

Yes. VPNs are legal in Australia.

Will Mullvad slow my phone?

10–30ms added latency on Pixel 8+. Imperceptible for normal use.

What if Mullvad goes offline?

Kill-switch keeps the device offline rather than leaking traffic. Auto-server-switching included.

Are you a Mullvad reseller?

We are an AU retailer bundling paid Mullvad licences. No formal commercial relationship — the licences are real and yours to own.

Can I use my existing Mullvad account?

Yes. Message us before purchase and we'll configure your phone with your existing account ID.

Related reading