- All Android users can now check whether their VPN Mullvad application is legitimate
- From the 2025.2 version, Mullvad has rendered reproducible Android application builds in order to improve user safety
- Reproducible goals are a guarantee that the application you install has not been falsified by malicious actors
Update:: On May 9, 2025, we updated this story to include the comments we received from Mullvad after publication.
All Android users can now check whether their VPN Mullvad application is legitimate before downloading it and installing it on their device.
Indeed, from the 2025.2 version, Mullvad made its Android Creation VPN Boilds Reproducible.
This decision comes in order to provide users with a trustworthy and secure VPN application. Reproducible goals are a guarantee that the application you install has not been falsified by malicious actors
Check your Android Mullvad application builds, Bit-For-Bit
By definition, “a version is reproducible if, given the same source code, the construction environment and the construction instructions, any part can recreate identical bits by bit of all the specified artifacts.”
In simple terms, the application code you see when downloading the application must correspond to the source code published by the application developers. This ensures that no modification took place during the construction process.
This occurs while 2024 has seen an increase in free malicious VPN applications. Cybercriminals have increasingly benefited from the high demand for virtual private network tools (VPN) to spread malware via false software that has imitated legitimate services.
VPN -based attacks also continued in 2025, with Google warning that attackers using legitimate VPN applications as a stolen door to inject malicious software and take control of infected devices from a distance.
“We believe that transparency is crucial for security software. Investing in reproducible builds testifies to our commitment to provide you with a trustworthy and secure application,” wrote Mullvad, one of the best VPN suppliers on the market right now, in its official announcement.
From version 2025.2, our Android application builds are reproducible. This means that you can verify that the application you download and install is built from the open source code that we publish.Read plus here: https://t.co/gv1zh8no5oMay 9, 2025
As mentioned above, only the latest Android VPN application from Mullvad is delivered with reproducible buildings at the time of the editorial staff. It is not yet clear if and when the company will extend this functionality through its other applications.
Speaking of Techradar, a Mullvad developer welcomed the idea, but said that the team did not yet have direct plans. “There is no reason why we would not want to do it, but that it was not prioritized / evaluated for other platforms,” added the developer Mullvad.
The company now urges all technically tilted users to check the versions of Mullvad.
This will not only provide transparency to users – which is the main objective – but “will also allow us to verify that our own construction environment is not compromised,” said developer Mullvad.
The verification process requires certain IT skills, but the VPN company has set up a set of instructions to help you do this exactly.
“To ensure that we are able to produce reproducible constructions over time, we have added such initial checks to our continuous integration environment (CI),” added Mullvad.