Official Mullvad app x WireGuard app

ChemicalWonka1

Hi guys!

Today I use Mullvad VPN on my Pixel 8 with GrapheneOS but unfortunately Mullvad team didn't enable multihop feature to use on Android app.

Use WireGuard official app and importing wireguard key file is a good approach to have multihop feature enable on Android?

Hb1hf

ChemicalWonka1
I don't see much gain in using multihop, you probably lose bandwidth and gain nothing. Unless there's something I don't see.

But to answer your question, yes. That's not a feature of WireGuard protocol or app, but Mullvad allows you to chose that when you create the config file. Create your key, then click in "advanced settings" and you'll see the option to enable multihop.

BTW, you may want to consider using RethinkDNS instead of the official WireGuard app.

UndercoverBozo

ChemicalWonka1 I use wgtunnel works great on multiple profiles/devices. Also allows you to use unlimited devices per key.

xzutils

ChemicalWonka1 is this because it's not possible to do or they just haven't programmed it?

Dan-cer

Hb1hf BTW, you may want to consider using RethinkDNS instead of the official WireGuard app.

Is RethinkDNS an alternative to Quad9? Better? Have I to decide to use private dns OR vpn? Both together don't work?

tango

Hb1hf

It can be beneficial for some users as it will help protect against network attacks. If an attacker gets control of a vpn server then they can match vpn clients with their traffic, hence any privacy you had by using the vpn is gone. So if one is using multi hop / double vpn they would be following traffic to the 1st server hence protecting your original ip address more from being leaked. Nothing is 100% though!

UndercoverBozo

Dan-cer if you are using Mullvad or Proton then stick with their DNS while connected to avoid sticking out. LTE or non VPN I still use quad 9.

Hb1hf

Dan-cer Is RethinkDNS an alternative to Quad9? Better? Have I to decide to use private dns OR vpn? Both together don't work?

Rethink is a VPN client + firewall + filtering DNS.
It allows you to use your VPN with your VPN's DNS, but add some filtering locally.
It also allows you to use your VPN with DNS from Quad9 or NextDNS or whichever DNS provider you want.

Hb1hf

UndercoverBozo except that with Rethink you download the block lists and do the filtering locally before using your VPN's DNS so you don't "stick out". You win both ways.

Now, if you're willing to lose a little fingerprinting, quad9 is far superior than your VPN's DNS. You'll have phishing protection that's updated live instead of never. Even Rethink only updates the lists every 4 days. Of course it's a risk/benefit analysis that is personal and depends a lot on your browsing style.

Hb1hf

tango that's interesting. It makes sense if your threat model involves being personally targeted.
For most of us just trying to avoid big tech surveillance it shouldn't matter much.

ChemicalWonka1

Hb1hf I tried to use wireghuard file with RethinkDNS and didnt work. show me a udp error and refused to connect.

Dan-cer

Hb1hf For most of us just trying to avoid big tech surveillance it shouldn't matter much.

You mean most of us don't need Tethink or other VPN? Quad9 is enough?

tango

Hb1hf

Exactly that. For example a journalist working in a dangerous country would certainly be better using it.

tango

Dan-cer

What the post was referring to was whether or not one needs to use multi hop / double vpn connection.