What Mullvad is and why it matters for NZ users
Mullvad is a Swedish VPN provider built around one principle: collect as little about you as possible. For New Zealand users, that means a service operating outside Five Eyes jurisdiction, with account structures that don’t require an email address, and a flat monthly fee you can pay in cash or cryptocurrency if you want to go further. It is not the fastest VPN on the market, nor the one with the most servers, but it is consistently regarded as one of the most privacy-serious options available in 2026.
New Zealand sits in an awkward position for privacy. We are a founding member of the Five Eyes intelligence alliance, our Privacy Act 2020 modernised some protections but still leaves significant room for government data requests, and our Telecommunications (Interception Capability and Security) Act 2013 (TICSA) requires ISPs to maintain interception capability. Chorus, Spark, One NZ, and 2degrees all operate under that framework. A VPN with a credible no-logs policy and a foreign jurisdiction provides a meaningful layer of separation from that infrastructure — and Mullvad’s architecture is designed specifically with that separation in mind.
How Mullvad works
Mullvad assigns you a randomly generated 16-digit account number when you sign up. There is no username, no email address, and no profile linked to your identity. You fund the account — via card, PayPal, bank transfer, cash, or cryptocurrency — and you get time credits. One month of access costs €5 per month (approximately NZ$9–10 at current exchange rates, though this fluctuates). There are no annual plans, no tiered pricing, and no upsells.
The client supports WireGuard and OpenVPN. WireGuard is the default and the right choice for most NZ users: it has a leaner codebase, faster handshakes, and performs significantly better over the long-latency links that connect New Zealand to the rest of the world. OpenVPN remains available if you need it for specific router or firewall configurations.
Mullvad operates its own physical servers — it does not rent virtual machines from cloud providers in most locations. This matters because it reduces the number of parties who could theoretically access server hardware. The company has also published the results of independent audits of its no-logs claims and its client applications, conducted by firms including Cure53 and Assured.
Traffic flows from your device, encrypted, to a Mullvad server, and exits from that server’s IP address. Your ISP — whether that’s Spark on their HFC network, One NZ on fibre, or a regional provider like Enable or Ultrafast Fibre — sees only an encrypted connection to a Mullvad IP. The destination site sees only the Mullvad exit IP. Neither party sees both ends of the connection simultaneously.
Multihop and DAITA
Mullvad offers two features worth understanding if you have elevated privacy requirements. Multihop routes your traffic through two servers — an entry node and an exit node in a different country — so that even if one server were compromised, an attacker would need to correlate traffic across two separate points. The performance cost is real: expect noticeably higher latency, which on an already long NZ-to-Europe path can become uncomfortable for interactive use.
DAITA (Defence Against AI-guided Traffic Analysis) is Mullvad’s countermeasure against traffic-shape analysis attacks, where an observer attempts to identify what you’re doing based on packet timing and size patterns rather than content. It adds dummy traffic and reshapes real packets. It is currently available on WireGuard connections and adds some overhead, so most NZ users won’t need it for everyday use — but it represents the kind of forward-thinking feature that distinguishes Mullvad from providers who treat privacy as a marketing checkbox.
Recommended setup for NZ users
Getting Mullvad running on a New Zealand connection is straightforward. The following steps apply to the desktop client on Windows or macOS; the process is nearly identical on Linux.
- Go to mullvad.net and click “Generate account number.” Save this number somewhere secure — it is your only credential.
- Add time to your account. Credit card payments are processed without storing card details on Mullvad’s servers according to their published policy. If you want no payment trail at all, mailing cash to their Swedish office is a documented option.
- Download the Mullvad app for your platform. Verify the signature if you’re on Linux.
- Open the app, enter your account number, and connect. The app will select a server automatically.
- Change the protocol to WireGuard in Settings if it isn’t already set. For NZ users, this is the correct default.
- Set your preferred server. For streaming or general browsing, Australia (Sydney or Melbourne) gives the best latency from most NZ locations — typically 25–35ms from Auckland on a good day. For US content, Los Angeles or Seattle are your best options, though expect 150–170ms round-trip minimum given the physics of the transpacific link.
- Enable the kill switch (called “Always require VPN” in the app). This prevents your real IP leaking if the VPN connection drops — important on NZ mobile connections that hand off between towers.
Router-level setup
If you want to protect every device on your home network — smart TVs, consoles, IoT devices — without installing the app on each one, you can configure Mullvad at the router level using WireGuard. This works well on routers running OpenWrt or DD-WRT, and on some consumer routers like those from Asus running Merlin firmware. Mullvad’s website provides configuration file generators. On a Chorus-connected UFB line with a capable router, this is a practical option; on Hyperfibre connections running at 4Gbps, you will need a router with hardware WireGuard acceleration to avoid the router CPU becoming the bottleneck.
NZ-specific considerations
ISP and infrastructure
New Zealand’s fibre rollout means most urban users are on Chorus UFB or a local fibre company (Enable in Christchurch, Ultrafast Fibre in Hamilton and Tauranga, Northpower Fibre in Whangarei). Retail ISPs — Spark, One NZ, 2degrees, Voyager, Slingshot — sit on top of that wholesale layer. For VPN purposes, what matters is that NZ fibre connections are generally low-contention and capable of saturating a WireGuard tunnel without the ISP being the limiting factor. The bottleneck is almost always the transoceanic cable capacity and server load at the exit point.
On a 900Mbps/500Mbps Hyperfibre line from Auckland with a Sydney exit server, you would typically expect WireGuard throughput in the 400–700Mbps range depending on your hardware and time of day. The methodology to replicate this: run a speed test via a tool like fast.com or speedtest.net while connected to the VPN, compare against your baseline without VPN, and repeat at different times. The Southern Cross Cable and Tasman Global Access cable both experience peak-hour congestion, so evening results will differ from midday results.
For US-routed connections, the latency floor is approximately 138ms to the US West Coast due to the speed of light across the Pacific. No VPN can improve on this; some make it worse. Mullvad’s WireGuard implementation keeps overhead modest, so you should sit close to that floor rather than significantly above it.
Jurisdiction and Five Eyes
Mullvad is incorporated in Sweden, which is not a Five Eyes member. Sweden is part of the Fourteen Eyes signals intelligence arrangement, which is a looser framework than Five Eyes and does not create the same automatic data-sharing obligations. More practically, Mullvad’s no-logs architecture means there is limited useful data to share even if a legal request were made — a point demonstrated in 2023 when Swedish police raided a Mullvad server location and left with hardware but no usable data, because none was stored.
Under New Zealand’s Privacy Act 2020, your ISP holds metadata about your connections. A VPN does not eliminate that metadata — your ISP still sees that you connected to a Mullvad IP — but it prevents them from seeing what you did once connected. For most NZ users, the practical privacy benefit is protection from commercial data harvesting and profiling, not protection from a targeted law enforcement investigation.
Streaming from New Zealand
Mullvad is honest about streaming: it is not optimised for it. The service does not maintain dedicated streaming servers or actively work to unblock geo-restricted content. In practice, Australian exit servers sometimes work for Australian streaming services, and US servers sometimes work for US libraries, but this is inconsistent and Mullvad does not guarantee it.
For NZ-based streaming services — TVNZ+, ThreeNow, Neon, Sky Sport Now, Whakaata Māori — you generally do not need a VPN to access them within New Zealand. If you are travelling overseas and want to access these services, a VPN with a New Zealand exit server is what you need. Mullvad has NZ servers (listed as “New Zealand” in the server list), which should in principle allow this, though performance from overseas back to NZ adds latency in both directions.
If streaming is your primary use case, Mullvad is not the strongest choice. Services like ExpressVPN or NordVPN invest more in maintaining streaming access. For a broader look at options, see our best VPN guide for New Zealand.
How Mullvad compares to alternatives
The table below compares Mullvad against the most commonly considered alternatives for NZ users in 2026. Pricing is converted to approximate NZD at current rates for monthly billing; annual plans where available reduce costs significantly for competitors.
| Provider | Monthly cost (approx. NZD) | Jurisdiction | No-logs audit | WireGuard | Account anonymity | Streaming focus |
|---|---|---|---|---|---|---|
| Mullvad | ~NZ$9–10 | Sweden | Yes (Cure53, Assured) | Yes | High (no email required) | Low |
| ExpressVPN | ~NZ$22–25 | British Virgin Islands | Yes (KPMG, Cure53) | Lightway (proprietary) | Low (email required) | High |
| NordVPN | ~NZ$22 (monthly), ~NZ$8 (annual) | Panama | Yes (PwC, Deloitte) | Yes (NordLynx) | Low (email required) | High |
| ProtonVPN | ~NZ$15 (Plus) | Switzerland | Yes (SEC Consult) | Yes | Medium (email required, but anonymous email accepted) | Medium |
| IVPN | ~NZ$14 (Standard) | Gibraltar | Yes (Cure53) | Yes | High (no email required) | Low |
Mullvad and IVPN occupy a similar niche — privacy-first, no-frills, audited — and are often compared directly. Mullvad has more servers globally and a slightly lower price point. ProtonVPN offers a free tier with no data cap, which is worth noting if budget is a constraint, though the free tier has speed and server limitations. If you are considering a free option, read our free VPN guide before committing — the tradeoffs are significant.
Limitations to be aware of
Mullvad does not offer a free trial in the traditional sense. You purchase time and can stop at any time, but there is no refund policy — the account-number model makes refunds structurally difficult. The €5/month flat rate is low enough that this is a minor issue, but it is worth knowing before you pay.
The app lacks some features that power users expect: there is no split tunneling on all platforms (it is available on Windows and Android but has been inconsistent on macOS across versions), no dedicated IP option, and no obfuscation protocol as capable as Shadowsocks or obfs4 for users in countries with active VPN blocking. For most NZ users, none of these are dealbreakers, but if you need to route only some apps through the VPN, check the current platform support before committing.
Mullvad also does not have a large server presence in Asia-Pacific. Australian servers are the closest practical option for NZ users, and while there are servers listed in New Zealand, the count is small. If you need consistent low-latency connections to specific Asian markets — Japan, Singapore, Hong Kong — test before relying on it.
Mullvad’s core value proposition is trust architecture, not feature count. If you want a VPN you can believe is not logging your activity, the account-number model and published audit results make a stronger case than most competitors. If you want a VPN that reliably unblocks Netflix US or Sky Sport Now from overseas, look elsewhere.
FAQ
Is Mullvad legal to use in New Zealand?
Yes. Using a VPN is legal in New Zealand. There is no legislation prohibiting VPN use, and the Privacy Act 2020 does not restrict it. VPNs are widely used by businesses for remote access and by individuals for privacy. Using a VPN to circumvent geo-restrictions may breach a streaming service’s terms of service, but that is a contractual matter between you and the service, not a legal one.
Does Mullvad work on New Zealand mobile networks?
Yes, Mullvad works on Spark, One NZ, and 2degrees mobile networks. WireGuard handles network transitions — switching between Wi-Fi and mobile data, or between cell towers — better than OpenVPN, so keep WireGuard selected. Enable the kill switch so that brief connection drops during handoffs do not expose your real IP. On 5G connections, throughput is generally not the limiting factor; latency to the exit server is.
Can I use Mullvad to watch TVNZ+ or Neon from overseas?
In principle, yes — connect to a Mullvad New Zealand server and your traffic exits with a NZ IP address, which should satisfy geo-checks for TVNZ+, ThreeNow, Neon, and similar services. In practice, streaming services periodically block known VPN IP ranges, and Mullvad does not actively work to maintain access the way streaming-focused providers do. Results vary and are not guaranteed. If accessing NZ content from overseas is a regular need, test Mullvad’s NZ servers first before relying on them.
How does Mullvad handle a New Zealand government data request?
Mullvad is a Swedish company and is not subject to New Zealand law enforcement requests in the way a NZ-based provider would be. A NZ authority seeking data would need to go through mutual legal assistance treaty (MLAT) processes with Sweden, which is slow and uncertain. More relevantly, Mullvad’s no-logs policy means there is minimal data to provide even if a valid request were made. The 2023 Swedish police raid — where servers were seized but no usable data recovered — is the most concrete real-world test of this claim.
What payment methods work for NZ users?
Mullvad accepts credit and debit cards (Visa, Mastercard), PayPal, bank wire transfer, Bitcoin, Bitcoin Cash, Monero, and cash sent by post. For NZ users paying by card, the charge will appear in euros (€5/month) and your bank will apply its exchange rate — expect approximately NZ$9–11 depending on the rate and any foreign transaction fees your bank charges. Monero is the most privacy-preserving payment option if that matters to you.
Does Mullvad slow down my Chorus fibre connection significantly?
On a standard 300Mbps or 900Mbps Chorus UFB connection, Mullvad on WireGuard should not be a meaningful bottleneck for everyday use — browsing, streaming, video calls, and gaming will all function normally. The latency added by routing through an Australian server (roughly 25–35ms extra) is imperceptible for most tasks. For Hyperfibre connections at 2Gbps or 4Gbps, raw throughput will be capped by the VPN tunnel’s encryption overhead and your CPU’s processing speed rather than the fibre line itself. Router-level WireGuard with hardware acceleration is the solution at those speeds.
Is Mullvad better than a free VPN for NZ users?
For privacy purposes, yes — substantially. Free VPNs typically sustain themselves through data collection, advertising, or bandwidth reselling, which directly undermines the privacy benefit. Mullvad’s business model is straightforward: you pay €5/month and that funds the service. The no-logs architecture, independent audits, and account-number anonymity are features that free services structurally cannot offer. If cost is a genuine constraint, ProtonVPN’s free tier is the most credible free option, but it comes with speed limits and a restricted server list.
Bottom line
Mullvad is the right VPN for a specific type of NZ user: someone who prioritises verified privacy over streaming access, wants a simple flat-rate price without annual commitment pressure, and values the account-number model as a genuine reduction in their digital footprint. At roughly NZ$10 per month with no email required and a track record of audit transparency, it makes a credible case as the most privacy-serious mainstream VPN available in 2026. It will not reliably unblock geo-restricted content, it does not have the largest server network in the Asia-Pacific region, and it lacks some convenience features found in larger competitors. But if you are on a Chorus or Hyperfibre connection and you want a VPN you can actually trust rather than one that merely claims to be trustworthy, Mullvad deserves serious consideration.


