Whole Antidetect Catalog Donut Browser

Catalogue · Section 01 · Entry

Mullvad Browser

ACTIVE

Mullvad Browser is a C++ / JavaScript project catalogued in section 01 of this register. Tor-Browser-derived hardened Firefox pursuing one fingerprint for all users rather than a unique one per user. It reads ACTIVE at the last field check — its most recent push was 3 weeks before that check, inside the 90-day threshold the rubric in force prints.

https://github.com/mullvad/mullvad-browser


The fields this state was derived from

FieldValue at this printing
pushed_at 2026-07-23
archived false
latest_release —
license.spdx_id null (none declared)
stargazers_count 2500
http_status 200
fetched_at 2026-08-14T09:12:00Z
endpoint GET https://api.github.com/repos/mullvad/mullvad-browser
rubric_edition 2nd, in force since 2026-08-14
unauthenticated · 60 req/hr

A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON

Why it reads ACTIVE

pushed_at = 2026-07-23 — 22 days, within the 90-day ACTIVE threshold.

Shipping. Safe to build on today.

Under the superseded first edition

Unchanged: the first edition read ACTIVE from the same fields.

The rubric in force · The superseded first edition · Errata leaf

Curator's annotation

No SPDX identifier is declared on the repository; the upstream it derives from is MPL. That is inference, not a field, so the licence column stays empty. — ED.


What Mullvad Browser actually does

Tor Browser's hardening without the Tor network attached: the same goal of making every user of the build present identical readings, with the network path left entirely to you.

What Mullvad Browser's maintenance signals mean

The liveness field here is pushed_at, read as 2026-07-23 against a field check 22 days later. That is inside 90 days, and 90 days is where the second edition of the rubric put ACTIVE after moving it down from the first edition's 180.

The reason for the move is worth stating, because it is the kind of threshold that looks arbitrary until you know what it is measuring against: detection changes on a shorter cycle than half a year, so a six-month-old evasion is not a current one. What a recent push does not tell you is what was in it. A commit landing on a branch is not a release, not a fix, and not a test — it is evidence that somebody is still there.

No release was captured for this entry, which this register records as unknown rather than as none. The distinction matters more than it looks: a project with no tags and a project whose tags the sweep failed to read produce the same blank cell, and printing them as the same fact would be the register asserting something it has not measured.

Where Mullvad Browser sits in this catalogue

Mullvad Browser is filed in section 01, open-source anti-detect browsers & forks, whose scope is this: Browsers whose source you can read: anti-detect Firefox and Chromium forks, hardened builds, and the profile managers built on top of them. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.

Filed beside it in the same section: ungoogled-chromium (ACTIVE), Brave Browser (ACTIVE), Tor Browser (ACTIVE). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.

Its licence field is empty, and this register treats that as a finding rather than a gap — see every entry here that declares no licence. Source you can read is not source you have been granted the right to use, modify or redistribute, and an absent licence file means exactly that absence and nothing friendlier. It is also grouped with everything else the rubric marks ACTIVE.

Substitutes for the same job, with no claim that either is better: Brave Browser, Camoufox, LibreWolf, Tor Browser. The alternative relation is symmetric and carries no ranking, because this register publishes no ranking of any kind. The full Mullvad Browser comparison table sets all of them side by side on licence, push date, release cadence and state.

What to settle before you adopt Mullvad Browser

Uniformity only protects you inside a crowd, and this build's crowd is necessarily smaller than the one it inherited its defences from. The licence field is also worth resolving before you package it for anyone else.


See also

Relation Entry State Last push
alternative to Brave Browser ACTIVE 2026-08-14
alternative to Camoufox ACTIVE 2026-08-12
alternative to LibreWolf ACTIVE —
alternative to Tor Browser ACTIVE —

Full comparison of Mullvad Browser and its alternatives


Questions readers ask about Mullvad Browser

Answered from this entry's own fields, at the field check printed above and at no other instant.

Is Mullvad Browser still maintained?

At the 2026-08-14 field check this register read pushed_at as 2026-07-23 and the archive flag as false, and the rubric in force turned those into ACTIVE. Shipping. Safe to build on today. The clause that fired is printed on this page, so you can check the arithmetic rather than take the word.

What are the alternatives to Mullvad Browser?

Brave Browser, Camoufox, LibreWolf, Tor Browser are recorded as substitutes for the same job. The relation carries no ranking — this register publishes none — so read them side by side on the comparison table, which prints licence, last push, release cadence and state for each.

What licence is Mullvad Browser under?

None is declared. That is a finding, not a formatting problem: without a licence file there is no grant to use, modify or redistribute the code, however openly it is published. Every entry here in the same position is listed together for that reason.

Where does this status come from?

From one sweep, recorded with the instant it ran. The raw fields, the endpoint they were read from, the fetch timestamp and the rubric edition in force are all printed on this page, and the same row is in the CC0 data files in JSON and CSV. Recompute the state from those columns and this page must agree with you; where it does not, the register is wrong.


You are reading section 01, which is where the browsers live, so the comparison is direct: Donut Browser is filed here too, under the same rule, with the same fields printed against it. What it does differently is where the spoofing happens — the Wayfern Chromium fork applies fingerprint overrides at engine level over CDP rather than by patching page JavaScript after load, which is the same architectural argument several of its neighbours in this section make and a different implementation of it.

Download Donut Browser

curl -fsSL https://donutbrowser.com/install.sh | sh

macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.