Our verdict

This NordVPN review explains why it is the VPN we rank first: it combines the things that matter most for privacy and security in one service. Its no-logs policy has been checked by outside auditors six times, it has a clear legal home, it offers post-quantum encryption on its own fast protocol, its kill switch is documented platform by platform, and it adds a security layer that goes beyond the tunnel itself. None of that makes it perfect. Its fullest malware protection exists only on desktop, its renewal prices are steep, and its history includes a server breach that it was slow to disclose. For most people who want one VPN that also does some security work, it is still the strongest all-round choice we know of.

This is an editorial assessment built from NordVPN's own documentation, a regulator's ruling and independent review outlets. NerdBible did not run its own speed or malware tests; any test result quoted belongs to the outlet named.

What is NordVPN and who is it for?

NordVPN is a consumer VPN run by Nord Security. According to NordVPN's support centre, the service is based in and operates under the jurisdiction of Panama, while Nord Security, the parent company, is based in the Netherlands. NordVPN says the Panama arrangement matters because Panama has no mandatory data retention law, so the company is not required to keep logs of what customers do.

It suits people who want to encrypt their traffic on public Wi-Fi, keep their browsing away from their internet provider, protect a household full of devices with one account, and add a layer of phishing and malware protection on their computer. It is less suited to someone who only needs a VPN occasionally on one phone, to anyone who wants an open-source client they can inspect line by line, or to a buyer who resents paying a much higher price at renewal.

Key features

NordLynx and post-quantum encryption

NordLynx is NordVPN's own protocol, built on WireGuard. In a Nord Security press release, the company says it has added post-quantum encryption to NordLynx across its Windows, macOS, iOS, Android and Linux apps, following standards from the US National Institute of Standards and Technology. It guards against traffic recorded today being decrypted later by a quantum computer.

Kill switch

NordVPN's kill switch documentation is unusually specific about how the feature behaves on each platform. On iOS and in the App Store version of the Mac app, it blocks system-wide internet access if the connection drops, is on by default and tries to reconnect you. On Android 8.0 and later it blocks all traffic when there is no VPN connection. In the version of the Mac app downloaded from NordVPN's own site, the kill switch closes the apps you choose rather than cutting the whole connection. The page also notes that the kill switch is not available on Amazon Fire TV Stick for technical reasons.

Specialty servers

The server categories article describes Double VPN, which routes traffic through two servers with two layers of encryption; Onion Over VPN, which sends traffic through a NordVPN server and then the Tor network without needing the Tor browser; and Obfuscated servers, which hide the fact that you are using a VPN at all, useful on networks that block VPN connections. A Dedicated IP is also offered, but it is a separate purchase.

Network size and device limit

NordVPN's server list page says it has more than 8,400 servers in more than 167 countries. One account covers up to 10 devices at the same time. Apps cover Windows, macOS, iOS, Android and Linux, with extensions for Chrome, Firefox and Edge, which is why it works well as a household VPN.

Scam, phishing and malware protection

This is the feature that most separates NordVPN from a plain VPN, and also the one most often misunderstood, partly because it keeps being renamed. NordVPN's support article says the feature once called Threat Protection Pro is now called Scam, phishing, and malware protection, and the one once called Threat Protection is now Scam and phishing protection. You may still see the old names in parts of the app and in other reviews.

  • Scam, phishing, and malware protection works without the VPN connected. It blocks ads, trackers and malicious URLs, shows scam alerts in the browser, scans files for malware as they download, quarantines suspicious files and, on Windows, checks installed apps for known vulnerabilities. It is available on Windows 10 (64-bit) and 11 and on macOS 12 or later, but only in the version of the Mac app downloaded from NordVPN's site, not the App Store one.
  • Scam and phishing protection is DNS-based. It blocks ads, trackers and unsafe domains, and it does not scan files. On computers it needs an active VPN connection; NordVPN says that on phones it can run without one. It is available on many more platforms, including Android, iOS, Linux and the browser extensions.

So on a phone you get domain blocking, not antivirus. The UK's Advertising Standards Authority made a similar point when it upheld a complaint about a NordVPN radio advert that invited listeners to "switch off" malware. NordVPN argued that its feature checks downloads and deletes dangerous files, but the ASA ruled the unqualified claim misleading. That ruling is a fair guide to the feature: helpful, not complete. As the reviewer section below shows, independent outlets disagree sharply about how good it is.

How much does NordVPN cost?

Our price box above shows current figures, so here is how the pricing works rather than what it costs. NordVPN's plans article says it sells two-year, one-year and one-month subscriptions, and that the two-year and one-year plans must be paid in full at purchase. Plans come in tiers: an entry tier that is essentially the VPN, then higher tiers that add the desktop malware protection, the NordPass password manager, data breach scanning, cloud storage and, at the top, identity protection services. A Dedicated IP is sold separately.

Introductory prices on long plans are much lower than what the subscription costs when it renews, and renewal is automatic unless you switch it off. Several outlets single this out. CNET described NordVPN's renewal increase as heavier than most rivals' and mentioned class action lawsuits alleging deceptive auto-renewals. TechRadar and Tom's Guide both advise turning off auto-renewal straight after you sign up, and both note that NordVPN adds local tax on top of the advertised price in some regions, so the checkout total can be higher than the headline figure.

The refund policy offers a 30-day money-back guarantee for new subscriptions. It covers the first purchase only: once a subscription has renewed, it is no longer eligible under the guarantee unless local law says otherwise. Refunds are requested through live chat. App Store purchases follow Apple's rules, Amazon Appstore purchases go through Amazon, and subscriptions bought from a retailer must be refunded by that retailer.

Is NordVPN safe?

Audited no-logs policy

NordVPN's no-logs claim has been independently assessed six times. The earliest assessments were done by PwC; the later ones by Deloitte. Tom's Guide reported that the sixth was carried out by Deloitte Lithuania over about five weeks, with access to standard servers and specialty configurations such as Double VPN, Onion Over VPN and obfuscated servers, plus a review of configuration settings, deployment processes and technical logs and interviews with staff. Nord Security's release on the fifth engagement describes the same method under the ISAE 3000 (Revised) assurance standard, and says the full report is available to customers inside their Nord Account rather than publicly. Separate application and infrastructure audits have been done by firms including VerSprite and Cure53, according to the Wikipedia summary of NordVPN's history.

An assurance engagement is a point-in-time check, not a promise about every day in between, and a report behind a login is less open than a public one. PCMag also notes that if you use the malware protection feature, Nord keeps some additional data, such as executable files scanned by its optional cloud detection. Still, repeated assessments by Big Four firms are about as strong as independent verification gets in the consumer VPN market.

The data-centre breach

A fair review has to mention this. As the same Wikipedia article records, a server in Finland run by a contracted data centre was compromised, and an attacker obtained a private key. The data centre told NordVPN long after the fact, and the incident only became public when a researcher posted about it. NordVPN said there was no evidence that user traffic was intercepted, ended its relationship with the provider and began moving to colocated servers it owns and operates. The slow disclosure drew criticism from security researchers, and it is the main reason the audits matter so much.

What could be better

  • The full malware scanner is desktop only, and on a Mac only in the version downloaded from NordVPN's site. Phone users get DNS-level blocking, which is useful but different.
  • Renewal pricing is considerably higher than the introductory price, and the money-back guarantee does not cover renewals.
  • The no-logs report is available only to logged-in customers, not to the public.
  • Ten devices is generous, but some rivals now allow unlimited connections.

Who should choose something else

If you only need a VPN now and then on one device, a free or cheaper single-device option may be enough. If you want antivirus, buy an antivirus suite; NordVPN's desktop malware protection is an extra layer, not a full replacement. If open-source clients and a publicly downloadable audit report are a priority, other providers lean further in that direction. And if you want the same price year after year, look at providers that do not raise prices on renewal.

Is NordVPN worth it?

NordVPN earns its place at the top of our VPN ranking on security fundamentals: a no-logs policy checked repeatedly by Big Four auditors, post-quantum encryption on a fast protocol, a well documented kill switch, apps for almost everything and a desktop security layer that does real work. Go in knowing that the malware protection has limits, that renewal costs much more, and that its breach history is part of the record. With those points understood, and with auto-renewal switched off until you decide, it remains the VPN we would point most people to first.

What other reviewers found

  • PCMag gave NordVPN its Editors' Choice and a Lab Award for the fastest speeds in its testing, but its own malware tests found the desktop protection weak, catching fewer samples than almost any antivirus it had tried. It also found the Windows app busy for newcomers.
  • CNET measured the smallest average speed loss of any VPN in its testing and praised the regular audits and transparency reports, but called the renewal price rise one of the harshest in the market.
  • TechRadar rated privacy and security at the top of its scale, describing the no-logs policy as audited six times, and rated customer support among the best available, while warning readers to opt out of auto-renewal.
  • Tom's Guide gave it an Editor's Choice and judged the desktop malware protection the strongest of any VPN it had tried, but disliked the renewal price rise, slightly cramped mobile apps and the more limited Mac app.

Where the outlets agree: the audited no-logs policy and wider security record are strong, speeds are excellent, support is good, and the renewal price is the biggest catch. Every one of them tells readers, in effect, to watch the renewal date. Where they disagree is the malware feature. Tom's Guide and TechRadar rate it highly and point to lab certifications, while PCMag's own hands-on test was unimpressed, partly because the feature only checks files as they download and so cannot catch something that arrives another way. For a buyer, that split is the useful finding: treat the malware protection as a bonus that may stop a bad download, not as the reason to pick a higher tier, and keep a real antivirus on your computer.

Frequently asked questions

Is NordVPN safe to use?

NordVPN is one of the more thoroughly checked consumer VPNs. Its no-logs policy has been independently assessed six times, most recently by Deloitte, and its apps and infrastructure have been audited by security firms. It did suffer a data-centre breach in the past, which it disclosed slowly. On balance, independent reviewers rate its privacy and security record highly, and so do we.

Does NordVPN keep logs?

NordVPN says it does not log what you do online, and it is based in Panama, which has no mandatory data retention law. Independent auditors have assessed that claim several times by inspecting servers, configurations and technical logs and by interviewing staff. The latest report is available to customers in their Nord Account. If you use the optional malware scanning, some extra data, such as scanned files, may be kept.

How many devices can I use with one NordVPN account?

One NordVPN subscription covers up to 10 devices at the same time. If several devices connect to the same server, each one has to use a different protocol, so in a busy household some devices may be placed on a neighbouring server instead. Installing NordVPN on a router is another way to cover devices at home, though router setup takes more effort than the apps.

Can I get a refund from NordVPN?

Yes, for a first purchase. NordVPN offers a 30-day money-back guarantee on new subscriptions bought directly from it, requested through live chat. Renewals are not covered unless local law requires it. Purchases made through Apple's App Store follow Apple's refund process, Amazon Appstore purchases go through Amazon, and subscriptions bought from a retailer need to be refunded by that retailer.

Does NordVPN replace antivirus software?

No. On Windows and Mac, NordVPN's scam, phishing and malware protection scans files as they download and blocks dangerous sites, which is a useful extra layer. It does not scan files that arrive another way or clean up malware already on a device, and on phones it is limited to blocking unsafe domains. Keep a dedicated antivirus, or the protection built into your operating system, running alongside it.

How do I avoid the NordVPN renewal price?

NordVPN's longer plans renew automatically at a higher regular rate. The simplest step, recommended by several review outlets, is to turn off auto-renewal in your Nord Account right after buying; your protection continues until the term ends. Near the end of the term you can decide whether to buy a new plan, often at an introductory price, or move to another provider.

Sources