NordVPN Review (2024)

NordVPN stands out among its competitors with an extensive network of server locations, making it a top choice for U.S. sports fans seeking to bypass blackout restrictions on streaming services. The NordVPN app is user-friendly and offers advanced features such as split tunneling, a Tor interface, and a double VPN option. These features, combined with robust security measures, make NordVPN one of the most secure VPN service providers globally, suitable for activities like torrenting, gaming, streaming, and general online browsing.

Key Features

Rating: 4/5
Price: $3.99 – $13.99 per month
Refund Period: 30 days
Country of Origin: Panama
Devices per License: 6
Servers: 5,430
Server Locations: 81 locations across 59 countries, including the USA, UK, Germany, Canada, Australia, and Hong Kong
Streaming Sites Unblocked: Netflix, Hulu, Disney+, BBC iPlayer, Amazon Prime, ABC
Supports Torrenting: Yes, on specific servers
Logging Policy: No logs kept
24/7 Customer Support: Yes

Established 12 years ago in Lithuania, NordVPN is owned by Nord Security and has a strong focus on cybersecurity, distinguishing it from other VPN providers. Recently, NordVPN has expanded into business solutions, offering a Secure Access Service Edge (SASE) package that leverages VPN technology to safeguard cloud-based applications.

NordVPN integrates several unique security tools that position it as one of the leading VPN services available. These include the ability to establish a double-hop VPN and access the Tor network through a VPN connection. Additionally, all NordVPN subscription plans come with malware protection through the CyberSec package, which scans websites for malware, blocks pop-ups, trackers, and cookies, and monitors data transfers for viruses. The app also features automatic Wi-Fi protection and a kill switch to prevent unprotected connections.

Additional functionalities include a password manager, a tracker and ad blocker, servers optimized for torrenting, and obfuscation techniques to avoid detection. The service also offers an option for a dedicated IP address.

The desktop interface features an intuitive world map, allowing users to zoom, scroll, and select a country to connect. Alternatively, users can choose a server from a location list. The service also includes a Dark Web Monitor that notifies users if their personal information has been compromised in a data breach and appears on hacker marketplaces. The mobile app mirrors the desktop interface, providing a consistent user experience across devices.

Privacy and Security

NordVPN employs multiple layers of security and privacy measures, from its choice of legal domicile to the management of IP packets used for internet communication.

NordVPN’s Location

NordVPN’s official headquarters are in Panama, a strategic choice to minimize exposure to legal action for copyright infringement. However, its main operational offices are in Europe, including significant sites in Lithuania, the UK, the Netherlands, and Finland.

While NordVPN is legally based in Panama, it does not operate any VPN servers in the country, as Panama is not entirely free from anti-piracy laws. Nonetheless, any legal action would require copyright lawyers to travel to Panama to pursue their case, given the company’s limited legal presence in countries where its servers, all outsourced, are located.

Nord Security is transitioning to owning and operating its servers, though these are currently designated for the NordVPN Business package, with all such servers based in Finland.

VPN Protocols

VPNs operate based on a set of standards known as VPN protocols. NordVPN provides users with a selection of these protocols, allowing them either to manually choose a specific protocol or let the application automatically select the most appropriate option for their current network conditions. NordVPN supports three primary protocol options:

OpenVPN: This is the most widely adopted VPN protocol. It is an open-source system built on the OpenSSL library, which underpins Transport Layer Security (TLS) used to secure eCommerce websites. OpenVPN operates over TCP and is renowned for its balance between speed and security.
NordLynx: Developed by NordVPN and launched in 2019, NordLynx is based on the WireGuard protocol, which itself was introduced in the same year. NordLynx is an open-source system utilizing the ChaCha20 encryption cipher, and it runs over UDP, offering high-speed performance with strong security.
IKEv2/IPSec: This protocol combination is particularly optimized for mobile devices. IKEv2 offers efficient processing, which conserves battery life, while IPSec operates at a lower layer of the network stack, running over UDP. IKEv2 facilitates secure key exchanges on top of IPSec, making it ideal for mobile use.

NordVPN Encryption

NordVPN has adapted the WireGuard protocol with the addition of a double network address translation process, enhancing user privacy. This adaptation, known as NordLynx, presumably utilizes the same session encryption cipher as WireGuard—ChaCha20. However, NordVPN predominantly promotes its use of AES encryption.

The Advanced Encryption Standard (AES) is a globally recognized encryption cipher, commissioned by the U.S. government and regarded as the most secure encryption method available. AES protects sensitive communications, including those of the military and intelligence services. In essence, AES encryption works by transforming text so that each character is substituted with another, based on a complex formula and a secret key.

The strength of an encryption system like AES lies in its key, which is used to both encrypt and decrypt the data. The longer the key, the more secure the encryption; AES-256, which NordVPN employs, uses a 256-bit key, making it virtually unbreakable.

Session Establishment Encryption

While AES-256 provides robust security, it has a vulnerability during the key exchange process. For both parties in a secure connection to communicate, they must share the same key, which creates an opportunity for interception by unauthorized entities.

To mitigate this risk, NordVPN employs the Diffie-Hellman (DH) key exchange method for session establishment. Unlike AES, which is a symmetric key cipher requiring the same key for encryption and decryption, DH is a public key system. In this system, the encryption and decryption keys are different; the encryption key (public key) is shared openly, while the decryption key (private key) remains secret.

DH encryption is particularly secure because it involves both parties using their respective private keys to authenticate and encrypt the connection. This ensures that even if an interceptor captures the public key, they cannot decrypt the data without the private key.

Connection Authentication

The Diffie-Hellman encryption not only secures the transmission of the AES key when connecting to a NordVPN server but also plays a crucial role in authentication. This process prevents a type of cyberattack known as a “man-in-the-middle” attack, where a hacker intercepts and manipulates the communication between the client and server.

Through a challenge-response mechanism, each side in a connection proves its identity. If a party cannot decrypt and respond to a challenge using the correct private key, it is deemed unauthorized, and the connection is terminated. This ensures that NordVPN users are protected against impersonation attacks, provided they have their VPN active and encrypt all their internet traffic.

DNS Protection

In the realm of online security, DNS (Domain Name System) protection is crucial. It is important to note that traffic redirection is not solely a tactic employed by hackers; government agencies and internet service providers (ISPs) also engage in such practices. Increasingly, parts of the internet are being restricted or blocked. Websites that pose no threat or engage in illicit activities are being censored without legislative backing or public outcry.

For example, numerous ISPs, including Virgin Media—the third-largest ISP in the UK—block access to websites like NordVPN and bestvpn.org. This is due to governments’ desire to limit public awareness of VPN services, which allow users to circumvent governmental restrictions on web content. Despite being completely legal, these websites are inaccessible to Virgin Media’s 5.42 million broadband customers, as Virgin Media is part of Liberty Global.

ISPs can obstruct access to websites by manipulating DNS records. The DNS system is essential for translating web addresses into IP addresses, which are used by routers to direct internet traffic. While web addresses are user-friendly, routers only recognize IP addresses. Thus, before a web browser can retrieve a page, it must first obtain the site’s IP address through DNS.

Activity Tracking

Once connected to a VPN server, NordVPN creates a secure tunnel for all internet traffic, including DNS queries, ensuring privacy from the moment data leaves your device until it reaches the VPN server. This process involves encrypting the headers of IP packets, which contains information about the web servers and websites accessed. This encryption is vital as it prevents ISPs from logging the sites you visit.

ISPs are legally required to record IP addresses and the corresponding websites accessed by their customers, with retention periods varying by jurisdiction. This data allows government agencies and copyright enforcers to investigate online activities.

When using a VPN, the client encrypts each data packet, including the destination address. This means ISPs cannot determine the specific websites visited, only that a connection was made to the VPN server. Consequently, VPN usage can help avoid ISP throttling of bandwidth, particularly for streaming content. Some ISPs, especially in the US, have been known to throttle streaming traffic, but a VPN can obscure this traffic, making it difficult for ISPs to apply speed restrictions.

VPN Logs

A key feature of a VPN is its ability to conceal user activity. However, to identify VPN users, authorities can obtain court orders to compel VPN providers to disclose their records. Therefore, it is essential for VPN services to maintain a strict no-logs policy.

When evaluating VPN services, a no-logs policy is significant because it means the VPN provider does not retain records that authorities could potentially access. While VPNs must map client IP addresses to representative IP addresses for session duration, NordVPN ensures that these records are deleted within 15 minutes after a user disconnects. Additionally, NordVPN keeps a record of customer connections for up to 30 days but does not log individual activities.

In response to legal requirements in countries such as Russia and India, where VPNs are mandated to keep activity logs, NordVPN has opted to shut down its servers rather than comply. Similarly, NordVPN does not operate servers in China due to the country’s stringent regulations against VPN services.

Simultaneous Connections

NordVPN allows installation on an unlimited number of devices; however, only six devices can be connected to the service at the same time. This generous limit is competitive compared to other VPN providers. NordVPN offers applications for the following operating systems:

Windows
macOS
Linux
Android
iOS
Chromebook
Kindle Fire

In addition, browser extensions are available for:

Chrome
Firefox
Microsoft Edge

The VPN can also be manually configured on routers and utilized on set-top boxes, including Android TV and major gaming consoles. Desktop applications can be downloaded from the NordVPN website, while the Android app is available via Google Play, and the iOS app can be obtained from the Apple App Store.

NordVPN Servers

NordVPN boasts a network of 5,430 servers across 81 locations in 59 countries. The service provides extensive coverage in Australia, with servers in five cities, and in the USA, with servers in 16 cities, including:

Atlanta
Buffalo
Charlotte
Chicago
Dallas
Denver
Kansas City
Los Angeles
Manassas
Miami
New York
Phoenix
Saint Louis
Salt Lake City
San Francisco
Seattle

Canada is served by three server locations.

It is important to note that not all servers offer the same features. Most servers support P2P downloading, though some do not. A select number of servers include advanced obfuscation features in addition to standard encryption, and an even smaller subset supports double-hop VPN connections.

NordVPN also provides dedicated IP addresses for an additional fee, available only on servers located in the USA, the UK, France, Germany, and the Netherlands.

Website Blocking

While NordVPN effectively circumvents governmental and ISP-imposed website restrictions, some websites enforce their own access limitations. These restrictions are typically related to regional licensing laws and are commonly encountered with streaming services.

Streaming platforms like Netflix, Amazon Prime, and Disney+ often restrict content based on geographical location. As a result, when traveling, users may encounter different content libraries depending on the country they are in.

NordVPN can bypass these regional restrictions, allowing subscribers to access content available in different countries and restore access to media that may be unavailable in their current location.

Service Testing Summary

Netflix: Successful tests confirm access to content in the USA and France from the UK.
Disney+: Successful tests confirm access to content in the USA and France from the UK.
BBC iPlayer: Successful tests confirm access to content in the UK from the USA.
ITV Hub: Successful tests confirm access to content in the UK from the USA.
Channel 4: Successful tests confirm access to content in the UK from the USA.
ABC: Successful tests confirm access to content from the UK.
NBC: Successful tests confirm access to content from the UK.

NordVPN also provides cross-border access to other major streaming services such as ESPN+, Amazon Prime, HBO, and Hulu.

Pricing Overview

NordVPN offers three distinct plans:

Standard: Includes VPN services, malware protection, and an ad and tracker blocker.
Plus: Includes all features of the Standard plan, plus a password manager and identity theft protection.
Complete: Includes all features of the Plus plan, with an additional 1 TB of encrypted cloud storage.

Each plan is available under three payment periods:

One Month Plan
One Year Plan
Two-Year Plan

Longer payment periods offer lower monthly rates, but require upfront payment for the entire duration.

Standard Package Pricing:

One Month: $11.99
One Year: $99.99, discounted to $59.88 for the first year ($4.99 per month)
Two Years: $198.96, discounted to $95.76 for the first two years ($3.99 per month)

Plus Package Pricing:

One Month: $12.69
One Year: $126.96, discounted to $68.28 for the first year ($5.69 per month)
Two Years: $253.76, discounted to $112.56 for the first two years ($4.69 per month)

Complete Package Pricing:

One Month: $13.99
One Year: $198.96, discounted to $83.88 for the first year ($6.99 per month)
Two Years: $397.68, discounted to $143.76 for the first two years ($5.99 per month)

All new subscribers receive a 30-day money-back guarantee.

Payment options include credit card, PayPal, cryptocurrency (Bitcoin, Ethereum, or Ripple), Google Pay, and Amazon Pay. Sales tax (VAT) applicable to your location will be added to the listed prices.

How to install

Here’s a streamlined version of the NordVPN installation process:

Select a Plan: Choose your desired subscription plan and proceed to the payment page. Ensure you enter a valid email address for account validation.
Payment Confirmation: Once payment is completed, a confirmation screen will appear. Click on the Activate Account button.
Email Verification: Check your email inbox for a welcome email from NordVPN. Retrieve the verification code from this email.
Set Up Password: Follow the instructions to set up a password for your account.
Download the App: Go to the apps download page. The website will automatically detect your operating system and present the appropriate download package. Click the Download button.
Install the App:
- Run the downloaded installer file.
- Click Next and follow the prompts.
- Allow the installer to create a desktop shortcut and a Start menu entry.
- Click Install, then Finish to complete the installation.
Launch and Log In:
- Open the NordVPN app. You’ll see a Login button; click it to open a webpage for account selection.
- Approve the popup to allow the webpage to open the NordVPN app.
Connect to a Server:
- The app will display a map with server locations. Zoom in and click on a server to connect.
- Alternatively, use Quick Connect to automatically connect to the best server for your location.
Server Location Options:
- Use the left panel to search for server locations. Hover over a country name to reveal additional options.
- Click the three dots next to a country to view and select from a list of cities and servers within that country.
- Clicking on a country name without hovering over the three dots will connect you to a server in that country.