Mullvad pushes update in a bid to make your iOS VPN app even more secure — but there's a catch

• Mullvad adds a "Force all apps" feature for iOS to ensure traffic cannot leak during updates
• The update leverages an iOS configuration option called includeAllNetworks to act as an airtight kill switch
• Users will now receive a notification to manually disconnect the VPN before installing future app updates

Privacy-focused provider Mullvad is rolling out a major update to its iOS application designed to plug any potential traffic leaks during updates.

In a bid to offer absolute security for the most demanding privacy purists, the best VPN contender is introducing a strict new tool called "Force all apps."

"Soon we will be releasing a new version of the iOS app that will contain a feature called Force all apps," Mullvad confirmed in a recent blog post. "Under the hood, enabling this feature sets the includeAllNetworks configuration option to true."

In the Apple ecosystem, the includeAllNetworks setting essentially operates like a kill switch. When toggled on, it tells iOS that every single byte of your internet traffic must be routed through the VPN tunnel. If the tunnel drops, the traffic stops, preventing your true IP address or browsing data from leaking to your internet service provider.

However, Mullvad previously avoided using this configuration due to complications with how iPhones handle automatic software updates from the App Store.

The infinite update loop

Historically, automatic iOS app updates briefly drop your VPN connection. For the average user, the fact that an app temporarily disconnects while transitioning to a new version is completely expected. However, because there is no active VPN tunnel during that exact moment, all device traffic is technically leaking.

Mullvad views this as a critical vulnerability for users who expect 24/7 protection. But enabling includeAllNetworks creates a unique technical snag.

According to Mullvad, if the setting is active when an automatic update begins, the old VPN connection shuts down, preventing the iOS downloader from fetching the new app version. As a result, the device loses connectivity entirely, and the update hangs in a broken loop.

"We have decided that we are not going to wait anymore and we would like to offer our users the best possible privacy and security, even if it comes with major UX limitations," the company stated.

To bypass this frustrating update loop, Mullvad's new version will actively notify you when a fresh update is available before the iOS App Store triggers an automatic download.

To safely proceed without breaking your connection, users are instructed to either "Disconnect the VPN while the app is updated" or "Disable Force all apps while the app is updated." Once the update securely finishes, you can manually re-enable your protection.

While Mullvad admits that "your traffic will leak during the update process," this proactive notification system ensures you can explicitly choose a safe moment to disconnect, rather than being caught off guard by a silent background update.

Mullvad acknowledges that a minority of users may still accidentally end up with a broken networking stack if they miss the manual disconnection step.

"If you've been affected by this, we can only encourage you to capture the anguish and express it as a feedback report to Apple," the provider added.

Ultimately, Mullvad is leaning into its reputation as one of the most private VPN apps on the market. By handing the reins back to the user, the provider is ensuring that those who want airtight protection on their iPhone finally have the tools to enforce it.