Mullvad switching to Quad9

VPN and DNS
33 Replies 4,580 Views
n8chavez

n8chavez

Level 26
Well-known
Forum Veteran
Mullvad will no longer supply public DNS servers. They're shutting down that service, and switching to Quad9, according to their blog post. This is a major disappointment for me. I liked that I could tell others about a DNS service that blocked ads, trackers, social media, NSFW, gambling, etc., hosted by a trusted VPN provider without having to actually use their VPN. I'm bummed. And I don't know if I trust Mullvad as much as I used to, now that I know they're trusting another company without giving us any say in the matter. But it is what it is.
 
n8chavez said:
Mullvad will no longer supply public DNS servers. They're shutting down that service, and switching to Quad9, according to their blog post. This is a major disappointment for me. I liked that I could tell others about a DNS service that blocked ads, trackers, social media, NSFW, gambling, etc., hosted by a trusted VPN provider without having to actually use their VPN. I'm bummed. And I don't know if I trust Mullvad as much as I used to, now that I know they're trusting another company without giving us any say in the matter. But it is what it is.
Click to expand...
I understand the disappointment. Mullvad’s public encrypted DNS service was useful precisely because it offered a privacy-focused alternative without requiring a VPN subscription.

One important distinction is that this does not necessarily mean Mullvad is changing the DNS handling of its VPN service. It concerns the separately operated public DNS resolver service. However, if Mullvad’s public filtering endpoints are being retired, users will lose those particular ad, tracker, and category-blocking policies.

Quad9 is a reputable nonprofit DNS provider, but it has a different purpose. Its primary focus is blocking domains associated with malware, phishing, and other security threats; it is not generally a replacement for Mullvad’s broader content-filtering profiles. Its privacy policy and operating model should also be evaluated independently rather than assumed to be identical to Mullvad’s.

The practical alternatives are:

  • Use another privacy-oriented resolver that offers the filtering categories you need, after reviewing its privacy policy and retention practices.
  • Use a configurable service such as NextDNS or a locally managed resolver if custom blocklists and category controls are important.
  • Run your own resolver, such as AdGuard Home or Pi-hole, while remembering that upstream DNS providers can still see queries unless additional measures are used.
  • Use Quad9 for security-focused malware blocking and handle ad or content filtering locally.

Your concern about the lack of user choice is reasonable. A provider can make a legitimate operational decision to discontinue a service, but users are still entitled to regard that as a loss of independence or functionality. The safest approach is to treat Quad9 as a separate service with its own documented policies, not as an automatic substitute for Mullvad’s former DNS offering.
 
Templarware said:
Yes but Hagezi is a third party list and isn't as good.
Click to expand...
What makes you think that Hagezi blocklists aren't good? They are literally compiled of all other known blocklists and updated every 4 to 8 hours. You won't find more comprehended lists that Hagezi's.
Templarware said:
I would prefer to use the actual Control D filter.
Click to expand...
Control D doesn't have their own filter, they rely on a combination of other third party filters and for some weird reason, they refuse to name blocklists they use in their protection modes.
 
Last edited:
Marko :) said:
The only difference between Control D "blocklists" and Hagezi blocklists is Hagezi lists sources used, Control D keeps them a secret.
Click to expand...
It´s interesting, because AI says Control D Ads & Tracking is lighter and better for set and forget family use, while Hagezi Pro Plus is much more aggressive and better for a single power user. Yet the false positives are on Ads & Tracking :sneaky:
 
Templarware said:
It´s interesting, because AI says Control D Ads & Tracking is lighter and better for set and forget family use, while Hagezi Pro Plus is much more aggressive and better for a single power user. Yet the false positives are on Ads & Tracking :sneaky:
Click to expand...
Classic AI hallucination.

From my experience:
Hagezi Pro — no false positives whatsoever
Hagezi Pro Plus — better protection, barely any false positives (maybe 1 on 10.000 sites)
Hagezi Ultimate — maximum protection, a lot of false positives (maybe 1 on 1.000 sites)
 
KEEP EXPLORING

Similar threads

Another perspective. Your next conversation.

Community
Security tip
Encrypt portable backups. Protect portable backup drives with encryption and store the recovery information separately. This helps keep a lost drive from becoming a data leak.
Back
Top