Mullvad is a VPN service that helps keep your online activity, identity, and location private. Mullvad uses a variety of technologies and methods to ensure user's security on the web.

Features:

• DNS leak protection
• Teredo (IPv6 over IPv4) leak protection
• IPv6 tunneling as well as IPv6 blocking and leak protection
• OpenVPN on a range of custom ports, including but not limited to 53/udp (DNS), 80/tcp (HTTP), 443/tcp (HTTPS)
• Only supports the VPN protocols OpenVPN and Wireguard
• Does not block authenticated SMTP
• Does not block P2P
• Blocks SMTP port 25/tcp because of spam
• Our data encryption is AES-256
• We run our own public key infrastructure (PKI)
• We support SSH tunneling, Shadowsocks, and Stunnel through our bridge servers
• All our OpenVPN servers use 4096 bit RSA certificates (with SHA512) for server authentication
• All our OpenVPN servers use 4096 bit Diffie-Hellman parameters for key exchange
• All our OpenVPN servers use DHE for perfect forward secrecy
• OpenVPN re-keying is performed every 60 minutes
• All our OpenVPN servers offer all available data channel ciphers on all ports, including AES-256-GCM, AES-256-CBC, and BF-CBC. AES-256-GCM is the default.
• meets the privacytools.io criteria

Note: Although the application is free to download, but you can only use it for free for 3 hours. Latter use is subscription-based. The price is $5 per month