VPN & anonymous access · Mullvad VPN
A Mullvad account is a random number: no email, no name, no card on file. Buy the physical scratch card on Amazon and the design goes one step further — neither Amazon nor Mullvad can link the activation code to the buyer. Scratch, enter the code, done: WireGuard on up to 5 devices. Sold through Amazon — same price as going there yourself.
Why Mullvad — no games, provably
Mullvad VPN AB (Amagicom AB) — founder-owned, Gothenburg, Sweden, since 2009 · Co-develops Mullvad Browser with the Tor Project.
Straight talk: Mullvad runs no affiliate program on principle. We are an Amazon Associate earning on the physical card — we are not a Mullvad partner, and this page is not an endorsement by Mullvad.
The cards
12-Month Scratch Card
The set-and-forget year — one code, no renewal, no card on file, no subscription trail
A full year of WireGuard on up to 5 devices from one scratch-off code. Not discounted vs the 6-month — Mullvad flat pricing — just half the redemptions to manage.
6-Month Scratch Card
Trial the service properly, or top up an existing account number
Same flat rate as the 12-month — €5/month either way — so the only question is how long you want to fund. Codes stack: redeem two and the time adds up.
The price is boring on purpose. Mullvad has charged a flat €5/month since 2009 — the 12-month card costs exactly twice the 6-month, longer is never cheaper, and 100 cards cost exactly 100× one. Anyone promising you a Mullvad discount is selling something else.
Prices shown on Amazon. As an Amazon Associate we earn from qualifying purchases made through links on this page.
How many — one, a kit, or a crate
Each card is its own unlinked account covering 5 devices — so quantity buys coverage and simplicity, not a discount (there are none). The 10- and 100-card buttons preload the quantity in your Amazon cart; adjust freely before checkout.
1 card — personal
5 devices
Individual privacy baseline: phone, laptop, travel router, and two spares under one account number.
Buy on Amazon ↗10 cards — team / kit
10 accounts · up to 50 devices
Small-team rollout, client onboarding kits, or speaker/VIP gifts — one unlinked account per person, no seat management, nothing to cancel when someone leaves.
Add 10 × 12-month to Amazon cart ↗100 cards — event / fleet
100 accounts · up to 500 devices
Conference distribution, MSSP client packs, company-wide issue. A scratch card is security swag people actually use.
Add 100 × 12-month to Amazon cart ↗Amazon works to ~100 cards, but it can't do POs, invoicing, or split shipments. Tell us the quantity you'd actually order and we'll email you when direct bulk fulfillment is live — no commitment, and enough interest is exactly what switches it on.
Ordering sooner than that? Email sales and we'll quote a card batch by hand.
Coverage calculator
One card funds one account; one account covers 5 devices; codes stack, so longer coverage is just more cards on the same account number. Enter your numbers — the card mix, device capacity, and flat-rate total build live.
Your card order
Mullvad's €5/month × every funded month — identical per-month price at any quantity or term. Amazon's USD card price floats with the euro.
Add the card order to your Amazon cart ↗Where this fits your stack
On the gateway
Mullvad publishes WireGuard configs that drop into pfSense / OPNsense — run the tunnel on a NitroWall or a Protectli vault and every device behind the firewall exits through Mullvad with zero per-device setup.
On the laptop
The natural companion to hardware we distribute: NovaCustom coreboot laptops and Nitrokey Qubes machines harden the endpoint; a card with no billing identity hardens the network path. Mullvad's app runs on Qubes, too.
On the phone & the road
The classic pairing for a GrapheneOS Pixel — private OS, private tunnel, no email anywhere in the chain. Traveling, load the same account into a GL.iNet travel router and tunnel the hotel WiFi. Mapped across every framework we track further down this page.
Controls this line satisfies, mapped across 12 frameworks. A dash means the framework does not address that domain — we don't stretch a control to fill a cell.
Transmission confidentiality and integrity
Verified boot ensures the TLS stack is unmodified before communication. VPN gateway encrypts all remote access traffic. Hardware-backed keys prevent interception even if endpoints are observed.