NordVPNvs
1Password
1Password: The world's most-loved password manager
NordVPN
Consumer and business VPN from Nord Security, registered in Panama, with repeated third-party no-logs audits.
As of 30 August 2026, NordVPN starts at $3.99/month. The largest consumer VPN by marketing spend, and one of the few whose no-logs claim has been audited more than once by a Big Four firm. Softwr lists it under Cybersecurity. NordVPN is made by Nord Security, launched in 2012, available on Web, Windows, macOS, iOS.
Overview
What NordVPN does
NordVPN is a consumer VPN with clients for Windows, macOS, Linux, Android, iOS, browsers and Android TV, plus a business product sold as NordLayer. The service company is registered in Panama, while the wider Nord Security group is headquartered in Lithuania and also publishes NordPass and NordLocker. Connections use OpenVPN, IKEv2 or NordLynx, an in-house wrapper around WireGuard that adds a double network address translation layer so the server does not need to store a user's IP address against a static tunnel identity, which is the main privacy objection to plain WireGuard. The checkable distinguishing fact is the audit record. The no-logs claim has been examined by PwC Switzerland and, in later engagements, by Deloitte, and the reports have been repeated rather than commissioned once and cited for years. Alongside that, the entire server estate was converted to diskless, RAM-only operation in 2020, so a server that is seized or power-cycled retains nothing. For a product whose entire value is an unverifiable promise, repetition of independent assurance is the closest thing to evidence a buyer can get, and it is the reason NordVPN survives scrutiny that most of the market does not. It is bought by consumers, and increasingly by small businesses through NordLayer for simple remote access. The trade-offs are the ones the marketing does not mention: a Panamanian registration is chosen for the absence of a retention law but also leaves a subscriber with little practical legal recourse; the pricing model depends on a long first term; and the surrounding features are steadily becoming an upsell surface for other Nord Security products. There is also history. In October 2019 the company confirmed that a server in a Finnish datacentre had been accessed in March 2018 through an insecure remote management interface left in place by the hosting provider. No user data was shown to have been taken, but the disclosure came nineteen months after the event, which tells you something about disclosure practice that no audit covers.
What people use it for
- A buyer choosing on evidence rather than claims, who wants a no-logs policy that has been audited more than once by a named firm
- Households and individuals wanting one subscription across ten devices including a smart TV
- Travellers and remote workers on hotel and airport networks who need obfuscation where plain VPN protocols are blocked
- Small teams needing basic remote access to a shared resource, via the NordLayer business product rather than the consumer app
The honest half
Where it falls short
Concrete and checkable, so you can decide whether any of them matter to you. This is the half of a review a vendor will not write about NordVPN.
- A server in a Finnish datacentre was accessed in March 2018 through a remote management interface left exposed by the hosting provider, and NordVPN did not disclose it until October 2019, so a buyer relying on the company's transparency is relying on a track record that includes a nineteen-month delay.
- Pricing depends on a long initial term and reverts to the standard rate at renewal, so the monthly figure that justified the purchase is not what the subscriber pays in the third year, and the cheapest way to stay is usually to cancel and re-subscribe.
- Panamanian registration is selected for the absence of a data retention law, but it also means a subscriber with a dispute has little practical recourse, and the protection rests on a corporate structure the customer cannot inspect or enforce against.
- NordLynx is unavailable for manual and router configurations, so the one device that could cover an entire home network falls back to OpenVPN or IKEv2 with the associated throughput loss, and obfuscated servers likewise only run over OpenVPN.
- Features such as Threat Protection are implemented in the client rather than in the network, so any device using a manual configuration, a router or an unsupported platform receives a bare tunnel without the protections the subscription is sold on.
Cross-shopped
What people choose instead of NordVPN
Each pairing was judged by two reviewers asking whether a buyer would genuinely weigh the two against each other. The ones that failed were deleted rather than published.
- NordVPNvsBitdefender Total Security
Bitdefender Total Security: The world's #1 rated antivirus
- NordVPNvsLastPass
LastPass: Simplify online life with LastPass password manager
- NordVPNvsNorton 360
Norton 360: Powerful protection against evolving threats
Pricing
What NordVPN costs
Taken from the vendor's own pricing page. Prices move, so check before you buy.
Standard
$3.99 /mo
- 6 devices
- 5,500+ servers
- Threat Protection Lite
- 60 countries
- 24/7 support
Plus
$4.99 /mo
- All Standard features
- Threat Protection Pro
- NordPass password manager
- Data breach scanner
Complete
$5.99 /mo
- All Plus features
- NordLocker 1TB encrypted cloud
- Identity theft protection
Capabilities
Features
NordLynx
WireGuard-based protocol with a double NAT layer so user IP addresses are not stored against tunnel identities on the server
Audited no-logs policy
The no-logging claim has been examined by PwC Switzerland and by Deloitte in later engagements, with reports published
RAM-only servers
The whole estate runs diskless, so a seized or rebooted server holds no persisted data
Threat Protection
Client-side blocking of malicious domains, trackers and ads, and scanning of downloads on desktop
Obfuscated servers
OpenVPN servers that disguise VPN traffic for networks that block VPN protocols outright
Double VPN
Routes a connection through two servers in sequence for users who want the extra hop
Kill switch
System-level and per-application traffic blocking if the tunnel drops
Dedicated IP
Optional static address for services that block shared VPN address ranges
Ten simultaneous connections
One account covers ten devices connected at the same time
Independent app audits
Client applications have been reviewed by external security firms in addition to the no-logs work
Answered, with sources
Questions people ask
Each answer names the page it came from, so you can check it rather than take our word for it.
What jurisdiction is NordVPN under?
The VPN service company is registered in Panama, which has no mandatory data retention law for these services. The wider Nord Security group operates from Lithuania.
Has the no-logs claim actually been audited?
Yes, more than once. PwC Switzerland examined it in 2018 and 2020 and Deloitte in later engagements. Each is a point-in-time assurance report over stated policy and server configuration, not ongoing monitoring.
What happened in the 2018 breach?
An attacker reached one rented server in Finland via an insecure remote management tool left in place by the datacentre provider, and obtained a TLS key that had expired. NordVPN disclosed it in October 2019, nineteen months later, and afterwards moved the estate to RAM-only servers.
How many devices does one subscription cover?
Ten simultaneous connections. A router configured with the service counts as one connection regardless of how many devices sit behind it.
Does it work on restrictive networks?
There are obfuscated servers intended for networks that block VPN protocols, but they run over OpenVPN only and no provider can guarantee access in a country that actively filters. Treat it as best effort.
Behind it
Who makes NordVPN
- Company
- Nord Security
- Based in
- Panama
Keep looking
Where to go from NordVPN
- NordVPN alternativesEvery product people weigh against it
- NordVPN pricingPlans, floors and what the tiers exclude
- NordVPN badgesWhich rules it meets, and the figure behind each
- All Cybersecurity softwareThe full category
- Best Cybersecurity softwareThe shortlist, and how it was cut
Best Cybersecurity software for
Compare NordVPN with
- Surfshark
- 1Password
- Norton 360
- LastPass
- Bitdefender Total Security
- ExpressVPN
- IVPN
- Mullvad VPN
- Private Internet Access
- Avast One
- TunnelBear
- JumpCloud
- McAfee Total Protection
- NICE Actimize
- Semgrep
- Spot AI
- Syft
- CyberGhost VPN
Other Cybersecurity software
Consumer VPN registered in the British Virgin Islands, owned by Kape Technologies since 2021, with repeated third-party audits.
From $6.67/mo14 researched notes- I
IVPN
Privacy-focused VPN with anonymous account numbers instead of email signup
From $6/mo6 researched notes Privacy-first VPN with one flat price and no email required to sign up
From $5/mo6 researched notesLong-standing VPN service with a large server network and flexible multi-year plans
From $11.99/mo6 researched notesConsumer VPN with a limited free tier and a bear-themed, beginner-friendly app
Free, then $9.99/mo6 researched notesUnified identity and device management for hybrid workforce.
From $9/user/month12 researched notesFinancial crime, risk and compliance suite for regulated institutions
Pricing on request10 researched notesOpen-source static analysis tool for finding security bugs and enforcing code standards.
Free, then $30/mo10 researched notesCloud video intelligence that runs on your existing cameras through an on-site recorder
From $99/mo12 researched notesGenerates a software bill of materials from images, filesystems and archives
Open source12 researched notesConsumer VPN operated from Romania and owned by Kape Technologies, with a no-logs claim audited by Deloitte.
From $2.19/mo14 researched notes
Softwr does not host reviews and shows no star rating for NordVPN, because a rating we did not collect is not ours to publish. What is here is the pricing and platform detail from the vendor’s own pages, limitations we could state concretely, and alternatives a reviewer confirmed people weigh against it. Tell us if any of it is wrong.
More on NordVPN
NordVPN alternatives
What people switch to, and what they give up
NordVPN pricing
Every tier, and where the cost actually lands
Compare NordVPN
Put it head to head with anything we hold
NordVPN badge
Its rating, and an embed for your own site
Best Cybersecurity software alternatives
Large Chinese video platform that US federal buyers and federal contractors cannot lawfully use
quote
Managed video loss prevention with human auditors for restaurants, convenience stores and retail
quote
Workforce and customer authentication from a certificate authority
Per user per month
Privileged access management, endpoint privilege management and secure remote access
quote
Cloud video surveillance billed per camera per month, where retention length drives the bill more than anything else
Per camera per month
AI video search that runs on cameras you already own, starting near five dollars per camera per month
Per camera per month
Phishing-resistant passwordless authentication with device trust enforced at every login
quote