Is NordVPN Safe?

NordVPN's security features

Privacy and logging policy

NordVPN's no-logs policy has been audited three times by Deloitte (one of the Big Four accounting firms). The 2024 audit specifically confirmed:

• No activity logs (visited sites, downloaded files, used apps).
• No connection logs (IP addresses, session duration, bandwidth used).
• RAM-only servers — every reboot wipes all data.
• Panama jurisdiction — no legal obligation to retain user data.

Has NordVPN ever been hacked?

Yes — once, in 2018. A single Finland server was compromised via a misconfiguration at the data center. NordVPN's response at the time was criticized for being slow (18 months before disclosure), but importantly:

• No user data was exposed because the server was RAM-only and no logs were kept.
• The TLS key was compromised but it could only have been used to intercept traffic on that one server.
• NordVPN has since invested heavily in security: now running colocated (owned) servers, RAM-only infrastructure, and an ongoing bug bounty program.

Concerns and limitations

To be balanced, here are a few things to know:

• Owned by Nord Security (Lithuania): Lithuania is in the EU and has data-sharing agreements, but the VPN itself is incorporated in Panama.
• 2022 funding round: Nord Security became a $3B+ company, raising questions about long-term direction (though it remains independent).
• Some streaming services work better than others: BBC iPlayer and Netflix work, but occasionally a server gets blocked and you need to switch.

How NordVPN compares to alternatives

• vs. ExpressVPN: Both audited. NordVPN is faster and cheaper; ExpressVPN has slightly better streaming unblock rate.
• vs. Surfshark: Surfshark is cheaper and unlimited devices, but NordVPN has more servers and faster speeds.
• vs. Mullvad: Mullvad is more privacy-focused (anonymous accounts, no email required) and cheaper (€5/month flat). NordVPN has more features and better apps.

Best practices to stay safe while using NordVPN

1. Always enable the kill switch in Settings.
2. Use NordLynx (WireGuard) for speed or OpenVPN for compatibility.
3. Turn on Threat Protection — blocks ads, trackers, and malware domains.
4. Use Double VPN for sensitive tasks (chains two servers, slower but more private).