Exit IP fingerprinting between VPN servers
Mullvad users have encountered a fingerprinting issue when switching between VPN servers. This issue allows websites to potentially link user activity across different servers without revealing their identity. Mullvad is working on a solution to prevent this linking by changing how exit IP addresses are assigned.
- ▪The fingerprinting issue affects users who switch from one VPN server to another.
- ▪When users connect to different servers with the same internal tunnel address, they may be assigned similar exit addresses.
- ▪Mullvad recommends logging out and back in to regenerate the WireGuard key when switching servers.
Opening excerpt (first ~120 words) tap to expand
Exit IP fingerprinting between VPN servers May 20, 2026 News Privacy On Friday the 15th of May, we became aware of a fingerprinting issue affecting Mullvad users. When a user switches from one VPN server to another, this sometimes makes it possible for services such as websites to confidently guess that the same user that connected from the new VPN server is the one that connected from the previous VPN server. This does not reveal the identity of the user. It can however reveal the fact that someone that previously connected from one VPN server has now connected from another VPN server. Fingerprinting is telling devices apart by looking at properties that make them unique or close to it. Fingerprinting is a problem in many domains.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Mullvad VPN.