Tor vs Mullvad VPN: Privacy Comparison and Threat Model Guide

Mullvad (Swedish VPN provider) has built its service around maximum privacy: anonymous account numbers (no email required), accepts cash and Monero for payment, published no-log policy audited by independent security firms, and has fought government demands publicly. However, Mullvad is a single-hop proxy: Mullvad can see all your traffic (they choose not to log it, but they have the technical capability). A government that can compel Mullvad to cooperate or surveil their infrastructure could observe your traffic. In 2023, Swedish police raided Mullvad offices but found no user data (validating their no-log implementation). Despite this strong track record, Mullvad's privacy relies on trust in the provider.

Tor's multi-hop architecture eliminates the need to trust any single provider. No single relay knows both who you are and what you are doing: the guard relay knows your IP but not your destination, the exit relay knows the destination but not your IP, and the middle relay knows nothing about either. Compromise of any single relay does not deanonymize Tor users. This trustless architecture is Tor's fundamental advantage over VPNs: you do not need to trust Tor Project, your ISP, or any specific relay operator - the protocol's design provides privacy without requiring trust in any single party.

Mullvad performance: single-hop routing adds minimal latency (5-30ms to nearby servers), high bandwidth effectively at ISP speed, suitable for streaming, gaming, and all bandwidth-intensive applications. Price: approximately $5 per month. Tor performance: 3-hop routing adds 100-500ms latency, bandwidth 1-5 Mbps typical, not suitable for gaming or high-bandwidth streaming. Tor is free. For general internet use where anonymity from ISP surveillance and geo-restriction is the goal, Mullvad is more practical. For strong anonymity requirements (journalist sources, political dissidents, situations where a VPN provider could be compelled to produce records), Tor is necessary.

Mullvad Browser is a browser developed in partnership with the Tor Project. It provides Tor Browser's anti-fingerprinting and privacy features without the Tor network connection. The browser achieves fingerprint resistance by making all Mullvad Browser users appear identical (same fingerprint baseline), similar to how Tor Browser operates. Users typically pair Mullvad Browser with Mullvad VPN. This combination provides: strong fingerprint resistance (Mullvad Browser) and IP privacy (Mullvad VPN). For anonymity that does not require trusting Mullvad, use standard Tor Browser instead.

Two configurations: VPN then Tor - connect to Mullvad, then use Tor through the VPN. This hides Tor usage from your ISP, adds Mullvad's IP as the Tor entry point. Mullvad can see you are using Tor but not what you do on Tor. This is useful in countries where ISPs detect and block Tor. Tor then VPN - use Tor, exit to a VPN. Technically complex. Provides a different exit IP from the exit relay, but the VPN provider can see your traffic from the Tor exit. Most researchers recommend VPN-then-Tor for censorship circumvention scenarios.