# Mullvad settings **URL:** https://discuss.privacyguides.net/t/mullvad-settings/24589 **Category:** Questions **Created:** 2025-02-01T23:37:14Z **Posts:** 17 ## Post 1 by @Lel — 2025-02-01T23:37:14Z Besides disabling ipv6, using wireguard, having start on system boot, killswitch/lockdown mode and having local network sharing off. What else can i do to improve the settings of mullvad itself? --- ## Post 2 by @anon36940904 — 2025-02-01T23:45:00Z Turn on DAITA and quantum secure connection. --- ## Post 3 by @Lel — 2025-02-01T23:49:34Z Helpful as always, will this impact speeds alot? --- ## Post 4 by @anon36940904 — 2025-02-02T00:00:42Z It depends on the internet speed you already have. It may impact it a bit as usual but they have recently improved their DAITA feature with increased bandwidth. Try it out yourself! --- ## Post 5 by @anon42475305 — 2025-02-02T07:39:30Z > **[Quantum-resistant tunnels are now the default on desktop | Mullvad VPN](https://mullvad.net/en/blog/quantum-resistant-tunnels-are-now-the-default-on-desktop)** > > The 2025.2 desktop release enables quantum-resistant WireGuard tunnels by default on Windows. This means that it’s now enabled by default on all desktop platforms. Not the default on mobile yet but hopefully soon. --- ## Post 6 by @ignoramous — 2025-02-02T14:25:23Z > [@Lel](#): > > will this impact speeds alot DAITA is heavy on the bandwidth side as it is transferring gibberish (by design!), and that may impact perceived speed & _may_ also turn up latency. Quantum-resistance is an _existing_ WireGuard (key exchange) functionality that doesn’t (shouldn’t?) concern bandwidth or latency. --- ## Post 7 by @jerm — 2025-02-02T23:02:48Z enable Multihop enable all DNS content blockers --- ## Post 8 by @anon36940904 — 2025-02-03T15:19:03Z Multihop will “auto enable” if non direct DAITA connections are made. --- ## Post 9 by @Shark2847 — 2025-02-05T05:06:05Z What does “Direct only” does then? If i enable it i can choose a different server for the first hop but does that mean that only the first hop will use DAITA? What if i keep it disabled - i still get connected through 2 servers (multyhop) regardless if i have multyhop enabled or not? In the end what is better for privacy? Should i enable or disable “direct only” ? Should i enable or disable multyhop if i am using DAITA? --- ## Post 10 by @newbie — 2025-02-05T06:43:14Z I wonder if they will add DAITA, multihop, and quantum resistance to the clients on routers. --- ## Post 11 by @anon36940904 — 2025-02-05T15:10:56Z Mullvad has “Direct only” servers where there is a single connection to select servers made for DAITA. If you choose another location with DAITA turned on, Mullvad will auto multi-hop first connecting you to a direct DAITA server/location and then to your selected location. In both cases you will have DAITA, so not to worry. > [@Shark2847](#): > > In the end what is better for privacy? Enabling DAITA is better. > [@Shark2847](#): > > Should i enable or disable “direct only” ? Direct DAITA connections give you faster bandwidth. But Mullvad has improved their DAITA connection speeds a lot so its really upto how fast your internet is and how you want to connect to different locations with DAITA. There is no right or wrong way here. > [@Shark2847](#): > > Should i enable or disable multyhop if i am using DAITA? You don’t have to do anything. If not Mullvad takes care of multi hop automatically if you are trying to make non-direct connections via DAITA\> Look, I can keep explaining but the best way it to try it out yourself and play around with the different settings and options Mullvad offers. You’ll understand what I’m saying. --- ## Post 12 by @Shark2847 — 2025-02-07T07:34:03Z What i cannot understand is if there will be noise (DAITA) between my pc and the first hop OR between the first AND the second hop? :slight_smile: Because if there is traffic noise only in the first hop maybe the second hop is more easy to track by adversaries? --- ## Post 13 by @anon42475305 — 2025-02-07T07:39:50Z It’s from your device to the server, so the first hop. At that point the traffic already has uniform packet sizes and random data introduced so there is nothing to gain by doing it again. > **[DAITA: Defense Against AI-guided Traffic Analysis](https://mullvad.net/en/vpn/daita)** > > Even if you have encrypted your traffic with a VPN, advanced traffic analysis is a growing threat against your privacy. Therefore, we have developed DAITA – a feature available in our VPN app. Through constant packet sizes, random background traffic... --- ## Post 14 by @ignoramous — 2025-02-07T08:55:48Z > [@Shark2847](#): > > Because if there is traffic noise only in the first hop maybe the second hop is more easy to track by adversaries? Adversaries capable enough to track across hops would rather pass a law making interception of traffic _legal_, which imo _seems_ to be the case for Sweden: [Clarification on the Swedish Covert Surveillance Act](https://discuss.privacyguides.net/t/clarification-on-the-swedish-covert-surveillance-act/23499) --- ## Post 15 by @Pedja — 2025-02-12T02:03:27Z I’ve noticed that Mullvad connects much slower when I have quantum-resistant tunnel set to “automatic” or “on.” When I turn it off, everything works fine. How necessary is this feature at the moment? As far as I understand, we’re still far from quantum computers that could break encryption. Is it worth the slowdown? --- ## Post 16 by @anon36940904 — 2025-02-12T02:13:33Z It is not really necessary but is only a future proofed feature. The slowdown really should not happen though. What is your internet speed with and without Mullvad? And what are your settings within the app? What OS are you talking about? --- ## Post 17 by @anon98749087 — 2025-12-27T21:02:35Z The mullvad app on android now has a setting in “vpn settings” for “in-tunnel ipv6”. This is new, and the toggle for disabling ipv6 is now gone. Does anyone know details around this change? What is the most secure setting for this? (i’m assuming it’s to enable it, since i’d want ipv6 inside the tunnel usually/always.) I’m surprised they don’t have any info on their site about it. Does anyone know if this new setting fixes issues with ipv6 leaks?