NordVPN#Tesonet court case
{{Short description|Virtual private network provider}}
{{Multiple issues|
{{Promotional|date=April 2025}}
{{Undisclosed paid|date=April 2025}}
}}
{{Infobox software
| name = NordVPN
| title = NordVPN
| logo = NordVPNhorizontal.svg
| logo_size = 200px
| developer = NordVPN s.a.{{Cite web|url=https://my.nordaccount.com/legal/terms-of-service/|title=General Terms of Service|website=nordaccount.com|access-date=April 23, 2021}}{{Cite web|url=https://apps.apple.com/us/developer/nordvpn-s-a/id1548694093|title=Nordvpn S.A.|website=App Store|access-date=April 23, 2021}}
| screenshot =
| caption =
| author =
| genre = Virtual Private Network
| released = {{Start date and age|February 13, 2012}}{{Cite web|url=https://www.tomsguide.com/us/nord-vpn,review-4494.html|title=NordVPN Review: Easy But Slow|last=Nadel|first=Brian|website=Tom's Guide|date=April 10, 2018|access-date=May 4, 2019}}
| discontinued =
| latest release version = {{LSR}}
| license = Proprietary server and client accept Linux client: GPLv3 only {{URL|https://github.com/NordSecurity/nordvpn-linux}}
| platform = {{flatlist|
}}
| operating system = {{flatlist|
}}
| website = {{URL|https://nordvpn.com/}}
}}
NordVPN is a Lithuanian{{cite web |last1=Prakash |first1=Prarthana |title=How Nord VPN has become Lithuania's tech darling |url=https://fortune.com/europe/2024/09/30/nord-vpn-security-millions-customers-lithuania/ |website=Fortune |access-date=29 April 2025 |language=en |date=September 30, 2024}}{{cite web |last1=Shead |first1=Sam |title=A VPN company just became Lithuania's second tech unicorn |url=https://www.cnbc.com/2022/04/06/nordvpn-nord-security-just-became-lithuanias-second-tech-unicorn.html |website=CNBC |access-date=29 April 2025 |language=en |date=6 April 2022}}{{cite web |title=Security startup becomes Lithuania's second unicorn |url=https://www.lrt.lt/en/news-in-english/19/1667427/security-startup-becomes-lithuania-s-second-unicorn |website=Lithuanian National Radio and Television |access-date=29 April 2025 |language=en |date=8 April 2022}} VPN service founded in 2012. NordVPN is developed by Nord Security (formerly Nordsec Ltd), a cybersecurity software company that was initially supported by Tesonet, a Lithuanian startup accelerator and business incubator. NordVPN states it operates in Panama, but Nord Security is incorporated in Amsterdam, the Netherlands.{{Cite web |title=Imprint (nordsecurity.com) |url=https://nordsecurity.com/impressum |access-date=2024-11-04 |website=Nord Security |language=en}} Its offices are located in Lithuania, the United Kingdom, Panama, and the Netherlands.{{Cite web|url=https://www.zdnet.com/article/meet-nordsec-the-company-behind-nordvpn-wants-to-be-your-one-stop-privacy-suite/|title=Meet NordSec: The company behind NordVPN wants to be your one-stop privacy suite|author=David Gewirtz|publisher=ZDNet|date=May 22, 2020|access-date=April 9, 2021}}
The service has applications for Microsoft Windows, macOS, Linux, Android, iOS, Android TV, and tvOS.{{Cite news|last=Schofield|first=Jack|author-link=Jack Schofield (journalist)|url=https://www.theguardian.com/technology/askjack/2016/nov/24/how-can-i-protect-myself-from-government-snoopers|title=How can I protect myself from government snoopers?|newspaper=The Guardian|date=November 24, 2016|access-date=February 22, 2018}}{{Cite news|last=Caruana|first=Anthony|url=https://www.lifehacker.com.au/2018/06/nordvpn-launches-android-tv-app/|title=NordVPN Launches Android TV App|website=Lifehacker Australia|date=June 19, 2018|access-date=June 19, 2018}}{{Cite news|last=Bonk|first=Lawrence|url=https://www.engadget.com/nordvpn-comes-to-the-apple-tv-162030095.html|title=NordVPN arrives on Apple's tvOS|website=Engadget|date=December 18, 2023|access-date=January 10, 2024}} Manual setup is available for wireless routers, NAS devices, and other platforms.{{Cite web|last=Tiwari|first=Aditya|url=https://fossbytes.com/nordvpn-review-secure-vpn/|title=NordVPN In-Depth Review: A Reliable VPN For Security And Performance|website=fossbytes.com|date=October 29, 2017|access-date=February 19, 2018}}{{Cite web|author=Gus|url=https://pimylifeup.com/raspberry-pi-nordvpn/|title=How to Setup NordVPN on the Raspberry Pi|website=pimylifeup.com|date=November 7, 2022|access-date=October 9, 2023}}
History
NordVPN was established in 2012 by a group of childhood friends, with Eimantas Sabaliauskas and Tomas Okmanas at the helm.{{Cite web |title=The founders and owners of NordVPN |url=https://support.nordvpn.com/hc/en-us/articles/20911146148113-The-founders-and-owners-of-NordVPN |access-date=2025-04-04 |website=Live Chat, VPN Setup, Troubleshooting {{!}} NordVPN Customer Support |language=en-US}} It presented an Android app in late May 2016, followed by an iOS app in June of same year.{{Cite web|url=https://www.techrepublic.com/article/nordvpn-offers-powerful-mobile-vpn-service-and-app-but-theres-wi-fi-gotcha/|title=NordVPN offers powerful mobile VPN service and app, but there's Wi-Fi gotcha|last=Vigliarolo|first=Brandon|website=TechRepublic|date=July 1, 2016|access-date=May 4, 2019}} In October 2017, it launched a browser extension for Google Chrome.{{Cite web|url=https://www.androidheadlines.com/2017/10/nordvpn-launches-extension-google-chrome-browser.html|title=NordVPN Launches Extension For Google Chrome Browser|last=Real|first=Mark|website=androidheadlines.com|date=October 3, 2017|access-date=May 4, 2019}} The service launched applications for Android TV in 2018{{Cite web|url=https://www.androidheadlines.com/2018/06/nordvpn-is-now-available-on-android-tv.html|title=NordVPN Is Now Available On Android TV|last=Maxham|first=Alexander|website=androidheadlines.com|date=June 19, 2018|access-date=May 4, 2019}} and tvOS in 2023.{{Cite news|last=Bonk|first=Lawrence|url=https://www.engadget.com/nordvpn-comes-to-the-apple-tv-162030095.html|title=NordVPN arrives on Apple's tvOS|website=Engadget|date=December 18, 2023|access-date=January 10, 2024}} As of February 2025, NordVPN operates 7,300 servers covering 118 countries.{{Cite web |date=2025-02-11 |title=NordVPN Review 2025: Fast, Private and Excellent for Streaming |url=https://www.cnet.com/tech/services-and-software/nordvpn-review/ |access-date=2025-04-04 |website=CNET |language=en}}
In March 2019, it was reported that NordVPN received a directive from Russian authorities to join a state-sponsored registry of banned websites, which would prevent Russian NordVPN users from circumventing state censorship. NordVPN was reportedly given one month to comply, or face blocking by Russian authorities.{{Cite web|url=https://www.themoscowtimes.com/2019/03/29/russia-threatens-to-block-popular-vpn-services-to-prevent-website-access-a65007|title=Russia Threatens to Block Popular VPN Services to Prevent Website Access|publisher=Reuters|date=March 29, 2019|via=The Moscow Times|access-date=May 4, 2019}} The provider declined to comply with the request and shut down its Russian servers on {{nowrap|April 1}}.
In September 2019, NordVPN announced NordVPN Teams, a VPN solution aimed at small and medium businesses, remote teams, and freelancers who need secure access to work resources.{{Cite web|url=https://www.techradar.com/news/nordvpn-teams-is-a-vpn-solution-for-businesses|title=NordVPN Teams is a VPN solution for businesses|last=Spadafora|first=Anthony|date=September 12, 2019|website=TechRadar|language=en|access-date=November 20, 2019}} Two years later, NordVPN Teams rebranded as NordLayer and moved toward SASE business solutions.{{Cite web|title=Goodbye NordVPN Teams – Hello NordLayer!|url=https://nordlayer.com/blog/bye-nordvpn-teams-hello-nordlayer/|access-date=2021-09-27|website=NordLayer|language=en}} The press sources quoted the market rise in SASE technology as one of the key factors in the rebrand.{{Cite news |last=Masiliauskas |first=Paulius |date=September 14, 2021 |title=NordVPN Teams rebrands as NordLayer, moves towards SASE business solutions |url=https://cybernews.com/news/nordvpn-teams-business-solution-rebrands-as-nordlayer/ |url-status=live |archive-url=https://web.archive.org/web/20210917051157/https://cybernews.com/news/nordvpn-teams-business-solution-rebrands-as-nordlayer/ |archive-date=September 17, 2021 |access-date=September 27, 2021 |work=CyberNews}}{{Cite web|date=2021-09-14|title=NordVPN Teams rebrands as NordLayer, moves towards SASE business solutions|url=https://cybernews.com/news/nordvpn-teams-business-solution-rebrands-as-nordlayer/|access-date=2021-09-27|website=CyberNews|language=en-US}}
On October 29, 2019, NordVPN announced additional audits and a public bug bounty program.{{cite web|first=Michael|last=Kan|date=October 29, 2019|access-date=November 14, 2019|title=NordVPN Beefs Up Security With Audit, Bug Bounty Program|url=https://www.pcmag.com/news/371621/nordvpn-beefs-up-security-with-audit-bug-bounty-program|website=PC Magazine}} The bug bounty was launched in December 2019, offering researchers monetary rewards for reporting critical flaws in the service.{{Cite web|url=https://www.techradar.com/news/nordvpn-boosts-security-with-new-bug-bounty-program|title=NordVPN boosts security with new bug bounty program|last=Spadafora|first=Anthony|date=December 10, 2019|website=TechRadar|language=en|access-date=January 21, 2019}}
In December 2019, NordVPN became one of the five founding members of the newly formed VPN Trust Initiative, promising to promote online security as well as more self-regulation and transparency in the industry.{{cite web|first1=Max|last1=Eddy|access-date=January 21, 2019|title=Can a New Alliance Help VPN Companies Prove Themselves Trustworthy|url=https://www.pcmag.com/opinions/can-a-new-alliance-help-vpn-companies-prove-themselves-trustworthy|website=PCMag|date=December 19, 2019}} In 2020, the initiative announced five key areas of focus: security, privacy, advertising practices, disclosure and transparency, and social responsibility.{{cite news|access-date=September 28, 2021|title=i2Coalition's VPN Trust Initiative (VTI) Unveils the VTI Principles|url=https://finance.yahoo.com/news/i2coalition-vpn-trust-initiative-vti-123500629.html|website=Yahoo! Finance|date=September 29, 2020}}
In August 2020, Troy Hunt, an Australian web security expert and founder of Have I Been Pwned?, announced a partnership with NordVPN as a strategic advisor. On his blog, Hunt described this role as "work with NordVPN on their tools and messaging with a view to helping them make a great product even better."{{cite web|first1=Hunt|last1=Troy|access-date=August 7, 2020|title=I'm Partnering with NordVPN as a Strategic Advisor|url=https://www.troyhunt.com/im-partnering-with-nord-as-a-strategic-adviser|date=August 7, 2020}}
In 2022, NordVPN closed its physical servers in India in response to the CERT-In's order for VPN companies to store consumers' personal data for a period of five years.{{cite web|url=https://www.gadgetsnow.com/tech-news/after-surfshark-and-expressvpn-now-nordvpn-to-to-shut-down-india-servers/articleshow/92211578.cms|title=After Surfshark and ExpressVPN, now NordVPN to shut down India servers|website=Gadgets Now|date=June 14, 2022|access-date=October 16, 2022}}
In April 2022, NordVPN's parent company Nord Security raised $100 million in a round of funding led by Novator. The company's valuation reached $1.6 billion.{{Cite web|url=https://techcrunch.com/2022/04/06/nord-security-the-startup-behind-nordvpn-raises-its-first-ever-funding-100m-at-a-1-6b-valuation/|title=NordVPN raises its first money, $100M at a $1.6B valuation|last=Lunden|first=Ingrid|date=April 7, 2022|website=TechCrunch|language=en|access-date=April 7, 2022}} In September 2023, the company grew and raised more funding, making it valued at $3 billion.{{Cite web |title=Nord Security raised another $100M investment round |url=https://nordsecurity.com/blog/nord-security-raised-another-100m-investment-round |access-date=2024-08-14 |website=Nord Security |language=en}}
In 2022, Surfshark and Nord Security merged under one holding company.{{Cite web |date=2022-02-02 |title=Nord Security joins forces with Surfshark {{!}} NordVPN |url=https://nordvpn.com/blog/nord-security-surfshark-merger-agreement/ |access-date=2024-05-31 |website=nordvpn.com |language=en}}
Technology
NordVPN has desktop applications for Windows, macOS, and Linux, as well as mobile apps for Android and iOS and Android TV app. Subscribers also get access to encrypted proxy extensions for Chrome, Edge and Firefox browsers.{{Cite web|url=https://www.pcworld.com/article/3200777/nordvpn-vpn-review.html|title=NordVPN review: A great choice for Netflix fans, but who's running the show?|last=Paul|first=Ian|website=PC World|date=July 6, 2017|access-date=May 4, 2019}}{{Cite web |title=NordVPN Browser Extensions |url=https://insider-gaming.com/vpn-gaming/nord/browser-extensions/ |access-date=2025-04-04 |website=Insider Gaming |language=en-US}} Subscribers can connect up to six devices simultaneously.{{cite web|title=NordVPN review: Still the best value for security and speed|url=https://www.cnet.com/reviews/nordvpn-review/|publisher=CNET|access-date=3 February 2020}} NordVPN has released their Linux client under the terms of the GPLv3 only.{{Citation |title=NordVPN for Linux |date=2023-03-21 |url=https://github.com/NordSecurity/nordvpn-linux |access-date=2023-03-22 |publisher=Nord Security}}
In November 2018, NordVPN claimed that its no-log policy was verified through an audit by PricewaterhouseCoopers AG.{{cite web|access-date=November 14, 2019|title=NordVPN|first=Max|last=Eddy|url=https://uk.pcmag.com/vpn/40845/nordvpn|date=October 23, 2019|website=PCMag UK}}{{cite news|first1=K. G.|last1=Orphanides|access-date=November 14, 2019|title=The best VPNs to keep your browsing safe and secure|url=https://www.wired.co.uk/article/best-vpn-for-mac-android-iphone-windows-free-and-paid|newspaper=Wired UK|date=May 10, 2019|issn=1357-0978}}
In 2021, NordVPN completed an application security audit, carried out by a security research group VerSprite. VerSprite performed penetration testing and, according to the company, found no critical vulnerabilities. One flaw and a few bugs that were found in the audit have since been patched.{{cite news|first1=Anthony|last1=Spadafora|access-date=September 28, 2021|title=NordVPN passes major security test|url=https://www.techradar.com/news/nordvpn-passes-major-security-test|website=TechRadar|date=June 23, 2021}}
In October 2020, NordVPN started rolling out its first colocated servers in Finland to secure the hardware perimeter. The RAM-based servers are fully owned and operated by NordVPN in an attempt to keep full control.{{Cite web|url=https://www.techradar.com/news/nordvpn-unleashes-colocated-servers-for-greater-security|title=NordVPN unleashes colocated servers for greater security|last=Athow|first=Desire|date=October 6, 2020|website=TechRadar|language=en|access-date=November 17, 2020}}{{Cite web|url=https://www.theregister.com/2020/10/12/roundup_week_oct9/|title=One year after server hackers left NordVPN red-faced, firm's first colocated setup is online|last=Nichols|first=Shaun|date=October 12, 2020|website=The Register|language=en|access-date=November 17, 2020}}
In December 2020, NordVPN initiated a network-wide rollout of 10 Gbit/s servers, upgrading from the earlier 1 Gbit/s standard. The company's servers in Amsterdam and Tokyo were the first to support 10 Gbit/s, and by December 21, 2020, over 20% of the company's network had been upgraded.{{cite web|access-date=December 30, 2020|title=NordVPN begins worldwide speed upgrade with 10 Gbit/s server rollout|first=Mo|last=Harber-Lamond|url=https://www.tomsguide.com/news/nordvpn-begins-worldwide-speed-upgrade-with-10gbps-server-rollout|date=December 25, 2020|website=Tom's Guide}}{{cite web|access-date=December 30, 2020|title=This VPN giant is getting a major speed upgrade|first=Anthony|last=Spadafora|url=https://www.techradar.com/news/this-vpn-giant-is-getting-a-major-speed-upgrade|date=December 22, 2020|website=TechRadar}}
In January 2022, NordVPN released an open-source VPN speed testing tool, available for download from GitHub.{{cite web|access-date=January 19, 2022|title=NordVPN wants to help you test the speed of your VPN connection|first=Anthony|last=Spadafora|url=https://www.techradar.com/news/nordvpn-wants-to-help-you-test-the-speed-of-your-vpn-connection|date=January 19, 2022|website=TechRadar}}
In late 2023, NordVPN unveiled a dedicated app for tvOS immediately after Apple started supporting third-party VPN applications with the release of tvOS 17.{{Cite web |author1=Chiara Castro |date=2023-12-20 |title=NordVPN releases new Apple TV VPN app |url=https://www.techradar.com/computing/cyber-security/nordvpn-releases-new-apple-tv-vpn-app |access-date=2025-04-04 |website=TechRadar |language=en}}
Soon after, at the beginning of March 2024, NordVPN announced virtual server support in 50 new locations where physical servers were limited.{{Cite web |last=Grigutyte |first=Monika |date=2024-03-07 |title=NordVPN releases virtual servers in new locations |url=https://nordvpn.com/blog/new-nordvpn-virtual-servers/ |website=NordVPN}}
In September 2024, NordVPN launched post-quantum encryption support for its Linux app.{{Cite web |author1=Chiara Castro |date=2024-10-01 |title=NordVPN joins the post-quantum revolution |url=https://www.techradar.com/pro/vpn/nordvpn-joins-the-post-quantum-revolution |access-date=2025-04-04 |website=TechRadar |language=en}}
= Anti-malware tools =
In February 2022, NordVPN introduced an antivirus functionality available as part of the regular VPN license. The opt-in Threat Protection feature blocks web trackers, warns users about malicious websites, and blocks downloaded files that contain malware.{{cite web |last=Kan |first=Michael |date=February 9, 2022 |title=NordVPN to Offer Antivirus Through Built-In 'Threat Protection' Feature |url=https://www.pcmag.com/news/nordvpn-to-offer-antivirus-through-built-in-threat-protection-feature |access-date=March 10, 2022 |website=PCMag}} As of March 2022, the feature is available on the Windows and macOS apps and works without connecting to a VPN server.{{cite web |last=Castro |first=Chiara |date=March 9, 2022 |title=NordVPN Threat Protection: what is it and how to use it |url=https://www.techradar.com/vpn/nordvpn-threat-protection |access-date=March 10, 2022 |website=TechRadar}}
= Protocols =
For encryption, NordVPN has been using the OpenVPN and Internet Key Exchange v2/IPsec technologies in its applications{{Cite web |last=Athow |first=Desire |date=July 26, 2018 |title=How to choose a security protocol in the NordVPN Windows and Android apps |url=https://www.techradar.com/how-to/how-to-choose-a-security-protocol-in-the-nordvpn-windows-and-android-apps |access-date=July 15, 2019 |publisher=TechRadar}} and also introduced its proprietary NordLynx technology in 2019.{{cite web |last=Eddy |first=Max |date=August 14, 2019 |title=The VPN Industry Is on the Cusp of a Major Breakthrough |url=https://www.pcmag.com/commentary/369921/the-vpn-industry-is-on-the-cusp-of-a-major-breakthrough |access-date=November 15, 2019 |website=PCMag}} NordLynx is a VPN tool based on the WireGuard protocol, which aims for better performance than the IPsec and OpenVPN tunneling protocols.{{Cite book |url=https://books.google.com/books?id=UKJfDwAAQBAJ&pg=PA3 |title=Applied Cryptography and Network Security |date=11 June 2018 |publisher=Springer |isbn=978-3-319-93387-0 |editor-last1=Preneel |editor-first1=Bart |editor1-link=Bart Preneel |access-date=November 15, 2019 |editor-last2=Vercauteren |editor-first2=Frederik |archive-url=https://web.archive.org/web/20190218102858/https://books.google.com/books?id=UKJfDwAAQBAJ&pg=PA3 |archive-date=February 18, 2019 |url-status=live |df=dmy-all}} According to tests performed by Wired UK, NordLynx produces "speed boosts of hundreds of MB/s under some conditions."{{cite magazine |last=Orphanides |first=K.G |date=October 19, 2019 |title=Cloudflare 1.1.1.1 with Warp review: faster browsing, but not a real VPN |url=https://www.wired.co.uk/article/cloudflare-1111-with-warp |access-date=November 15, 2019 |magazine=Wired UK}}
In April 2020, NordVPN announced the gradual roll-out of the WireGuard-based NordLynx protocol on all its platforms.{{cite web |last=Wagenseil |first=Paul |date=April 22, 2020 |title=NordVPN is about to get a lot faster — thanks to WireGuard |url=https://www.tomsguide.com/news/wireguard-nordvpn-nordlynx |access-date=November 17, 2020 |website=Tom's Guide}} The wider implementation was preceded by a total of 256,886 tests, which included 47 virtual machines on nine different providers, in 19 cities, and eight countries. The tests showed higher average download and upload speeds than both OpenVPN and IKEv2. NordVPN once used L2TP/IPSec and Point-to-Point Tunneling Protocol (PPTP) connections for routers, but these were later removed, as they were largely outdated and insecure.
In 2025, NordVPN launched a new VPN protocol called NordWhisper. It was introduced as a way to get around networks that limit traditional VPN traffic. NordWhisper is meant to mimic regular web traffic, blend in, and make it more difficult for network filters to identify and block it.{{Cite web |last=Weatherbed |first=Jess |date=2025-01-29 |title=NordVPN's new feature gets around networks that block VPNs |url=https://www.theverge.com/news/601225/nordvpn-nordwhisper-vpn-blocker-feature-protcol |access-date=2025-04-09 |website=The Verge |language=en-US}}
= Additional features =
Besides general-use VPN servers, the provider offers servers for specific purposes, including P2P sharing, double encryption, and connection to the Tor anonymity network.{{Cite web|url=https://uk.pcmag.com/vpn/40845/nordvpn|title=NordVPN|last=Eddy|first=Max|website=PC Magazine (British magazine)|date=February 28, 2019|access-date=May 4, 2019}} NordVPN offers three subscription plans: monthly, yearly and bi-yearly.
In November 2020, NordVPN launched a feature that scans the dark web to determine if a user's personal credentials have been exposed. When the Dark Web Monitor feature finds any leaked credentials, it sends a real-time alert, prompting the user to change the affected passwords.{{cite web|access-date=November 17, 2020|title=NordVPN adds Dark Web credential monitor to protect your identity|first=Barclay|last=Ballard|url=https://www.techradar.com/uk/news/nordvpn-adds-dark-web-credential-monitor-to-protect-your-identity|date=November 16, 2020|website=TechRadar}}
In June 2022, NordVPN launched the Meshnet feature that allows users to create their own private network by linking up to 60 devices. Some of the promoted use cases include file sharing between different devices, multiplayer gaming, and virtual routing.{{cite web|access-date=June 28, 2022|title=NordVPN users can now create their own private network with new Meshnet feature |first=Chiara|last=Castro| url=https://www.techradar.com/news/nordvpn-users-can-create-their-own-private-network-with-new-meshnet-feature|date=June 20, 2022|website=TechRadar}}
= No-logs claims =
To verify its no-logs claims, NordVPN has undergone multiple independent audits. The first audit was conducted in November 2018 when NordVPN's no-log policy was verified by PricewaterhouseCoopers AG.
In 2020, NordVPN underwent a second security audit by PwC|PricewaterhouseCoopers AG. The testing focused on NordVPN's Standard VPN, Double VPN, Obfuscated (XOR) VPN, P2P servers, and the product's central infrastructure. The audit confirmed that the company's privacy policy was upheld and the no-logging policy was followed.{{cite news |last1=Harber-Lamond |first1=Mo |date=July 1, 2021 |title=Independent audit confirms NordVPN's no-log policy for the second time |url=https://www.tomsguide.com/news/independent-audit-confirms-nordvpns-no-log-policy-for-the-second-time |access-date=September 28, 2021 |website=Tom's Guide}}
Subsequent no-logs audits were performed by Deloitte in 2022, 2023, and 2024.{{Cite web |title=NordVPN Backs Up No-Log Braggadocio With a 2023 Audit by Deloitte |url=https://www.cnet.com/tech/services-and-software/nordvpn-backs-up-no-log-braggadocio-with-a-2023-audit-by-deloitte/ |access-date=2025-04-09 |website=CNET |language=en}} In addition to the no-logs policy audit, NordVPN underwent independent security audits of its applications and server infrastructure.{{Cite press release |title=NordVPN Has Completed an App Security Audit |url=https://www.newswire.com/news/nordvpn-has-completed-an-app-security-audit-21013258 |access-date=2025-04-09 |website=www.newswire.com |language=en}}{{Cite journal |last=Heiderich |first=Dr.-Ing. Mario |date=2022 |title=Pentest-Report NordVPN Server & Infra 09.-10.2022 |url=https://cure53.de/pentest-report_nordvpn-infra.pdf |journal=Cure53}}
Reception
Several publications, including Tom's Guide,{{Cite web |last=Nadel |first=Brian |date=April 10, 2018 |title=NordVPN Review: Easy But Slow |url=https://www.tomsguide.com/us/nord-vpn,review-4494.html |archive-url=https://web.archive.org/web/20180414161812/https://www.tomsguide.com/us/nord-vpn,review-4494.html |archive-date=April 14, 2018 |publisher=Tom's Guide}} PC Magazine, CNET,{{Cite news |last=Hodge |first=Rae |date=September 8, 2021 |title=NordVPN review: An encryption powerhouse with the biggest VPN bang for your buck |url=https://www.cnet.com/tech/services-and-software/nordvpn-review/ |access-date=September 29, 2021 |work=CNET}} and TechRadar{{Cite web |last=Williams |first=Mike |title=NordVPN review |url=https://www.techradar.com/reviews/nordvpn |access-date=September 29, 2021 |publisher=TechRadar}} have reviewed NordVPN. Most noted that NordVPN's features such as choosing server location, and speed are good. They also noted the service's high price compared to others in the category.
= Criticism =
On October 21, 2019, a security researcher disclosed on Twitter a server breach of NordVPN involving a leaked private key.{{cite web|access-date=November 14, 2019|title=After Twitter Allegations, Nord VPN Discloses 2018 Breach|url=https://www.bloomberg.com/news/articles/2019-10-21/after-twitter-allegations-nord-vpn-discloses-2018-breach|website=Bloomberg|date=October 21, 2019|first=William|last=Turton}}{{Cite web|first=Zack|last=Whittaker|url=https://techcrunch.com/2019/10/21/nordvpn-confirms-it-was-hacked/|title=NordVPN confirms it was hacked|website=TechCrunch|language=en-US|access-date=October 24, 2019|date=October 21, 2019}}{{cite web|first1=Rae|last1=Hodge|access-date=November 14, 2019|title=After the breach, Nord is asking people to trust its VPN again|url=https://www.cnet.com/news/after-the-breach-nord-is-asking-users-to-trust-it-again/|date=November 1, 2019|website=CNET}} The cyberattack granted the attackers root access, which was used to generate an HTTPS certificate that enabled the attackers to perform man-in-the-middle attacks to intercept the communications of NordVPN users.{{cite web|first1=Dan|last1=Goodin|access-date=November 14, 2019|title=Hackers steal secret crypto keys for NordVPN. Here's what we know so far|url=https://arstechnica.com/information-technology/2019/10/hackers-steal-secret-crypto-keys-for-nordvpn-heres-what-we-know-so-far/|date=October 21, 2019|website=Ars Technica}} In response, NordVPN confirmed that one of its servers based in Finland was breached in March 2018, but there was no evidence of an actual man-in-the-middle attack ever taking place.{{Cite web|url=https://www.theverge.com/2019/10/21/20925065/nordvpn-server-breach-vpn-traffic-exposed-encryption|title=NordVPN reveals server breach that could have let attacker monitor traffic|last=Kastrenakes|first=Jacob|date=October 21, 2019|website=The Verge|language=en|access-date=October 24, 2019}}{{Cite web|url=https://nordvpn.com/blog/official-response-datacenter-breach/|title=Why the NordVPN network is safe after a third-party provider breach|date=October 21, 2019|website=NordVPN|language=en|access-date=October 24, 2019}} The exploit was the result of a vulnerability in a contracted data center's remote administration system that affected the Finland server between January 31 and March 20, 2018. Evidence suggests that when the data center became aware of the intrusion, all accounts that had caused the vulnerabilities were deleted and NordVPN was not notified about the mistake.{{Cite web |date=2019-10-21 |title=NordVPN safe after a third-party provider breach {{!}} NordVPN |url=https://nordvpn.com/blog/official-response-datacenter-breach/ |access-date=2024-06-17 |website=nordvpn.com |language=de}}{{Cite web |last=updated |first=Mike Williams last |date=2019-11-18 |title=What's the truth about the NordVPN breach? Here's what we now know |url=https://www.techradar.com/news/whats-the-truth-about-the-nordvpn-breach-heres-what-we-now-know |access-date=2024-06-17 |website=TechRadar |language=en}}
According to NordVPN, the data center disclosed the breach to NordVPN on April 13, 2019, and NordVPN ended its relationship with the data center. In addition, experts state that there are no indications of any user's private information such as user credentials, billing details, or any other profile-related information being compromised during that event.{{Cite web |date=2023-03-24 |title=Was NordVPN Hacked? Get The Latest Updates Here |url=https://www.vpn.com/faq/is-nordvpn-still-hacked-today/ |access-date=2024-06-17 |website=www.vpn.com |language=en-US}}{{Cite web |last=Markuson |first=Daniel |date=2019-10-21 |title=Why the NordVPN network is safe after a third-party provider breach |url=https://nordvpn.com/de/blog/official-response-datacenter-breach/}}{{Cite web |last=updated |first=Mike Williams last |date=2019-11-18 |title=What's the truth about the NordVPN breach? Here's what we now know |url=https://www.techradar.com/news/whats-the-truth-about-the-nordvpn-breach-heres-what-we-now-know |access-date=2024-06-17 |website=TechRadar |language=en}} Security researchers and media outlets criticized NordVPN for failing to promptly disclose the breach after the company became aware of it.{{cite web|first1=Max|last1=Eddy|date=October 23, 2019|access-date=November 14, 2019|title=NordVPN and TorGuard VPN Breaches: What You Need to Know|url=https://www.pcmag.com/commentary/371471/nordvpn-and-torguard-vpn-data-breaches-what-you-need-to-kno|website=PC Magazine}} NordVPN stated that the company initially planned to disclose the breach after it completed the audit of its 5,000 servers for any similar risks and later put regular updates on its blog.{{Cite web |date=2023-03-24 |title=Was NordVPN Hacked? Get The Latest Updates Here |url=https://www.vpn.com/faq/is-nordvpn-still-hacked-today/ |access-date=2024-06-17 |website=www.vpn.com |language=en-US}}
On November 1, 2019, in a separate incident, it was reported that approximately 2,000 usernames and passwords of NordVPN accounts were exposed through credential stuffing.{{cite web|first1=Dan|last1=Goodin|access-date=November 14, 2019|title=NordVPN users' passwords exposed in mass credential-stuffing attacks|url=https://arstechnica.com/information-technology/2019/11/nordvpn-users-passwords-exposed-in-mass-credential-stuffing-attacks/|date=November 1, 2019|website=Ars Technica}}{{cite web|first1=Abrar|last1=Al-Heeti|access-date=November 14, 2019|title=NordVPN user accounts compromised and passwords exposed, report says|url=https://www.cnet.com/news/nordvpn-user-accounts-were-compromised-and-passwords-exposed-report-says/|website=CNET|date=November 1, 2019}}
In 2019, the Advertising Standards Authority (United Kingdom) (ASA) advised NordVPN not to repeat claims that public WiFi is so insecure it is equivalent to handing out your personal information to the people around you.{{cite web|first1=Gareth|last1=Corfield|access-date=September 3, 2023|title=NordVPN rapped by ad watchdog over insecure public Wi-Fi claims|url=https://www.theregister.com/2019/05/01/nordvpn_tv_ad_rapped_advertising_standards_authority/|website=The Register|date=May 1, 2019}} The ASA ruled that HTTPS already provides "a significant layer of security" and that the impression the ad gave that users were at a significant risk from data theft was erroneous.{{cite web|url=https://www.asa.org.uk/rulings/tefincom-sa-a19-547668.html|title=ASA Ruling on Tefincom SA t/a NordVPN|date=May 1, 2019|access-date=September 3, 2023|website=Advertising Standards Authority (United Kingdom)}} In 2023, the ASA again ruled against NordVPN, this time over an advertisement which claimed NordVPN could "switch off... malware", holding that, in context, listeners were "likely to understand" it to mean the product would stop all malware, which NordVPN did not substantiate in response to the ASA.{{cite web|url=https://www.asa.org.uk/rulings/nordvpn-sa-a22-1168156-nordvpn-sa.html|title=ASA Ruling on NordVPN SA t/a NordVPN, Norton 360|date=January 11, 2023|access-date=September 3, 2023|website=Advertising Standards Authority (United Kingdom)}}
In January 2022, NordVPN updated its policy regarding law enforcement cooperation,{{Cite web |last=Markuson |first=Daniel |date=January 20, 2022 |title=How NordVPN protects the privacy of its customers |url=https://nordvpn.com/blog/how-nordvpn-protects-the-privacy-of-its-customers/ |url-status=live |archive-url=https://archive.today/20220304212650/https://nordvpn.com/blog/how-nordvpn-protects-the-privacy-of-its-customers/ |archive-date=March 4, 2022 |access-date=October 31, 2024 |website=NordVPN |language=en}} according to statements from PCMag{{Cite news |last=Kan |first=Michael |date=January 19, 2022 |title=NordVPN: Actually, We Do Comply With Law Enforcement Data Requests |url=https://www.pcmag.com/news/nordvpn-actually-we-do-comply-with-law-enforcement-data-requests |url-status=live |archive-url=https://archive.today/20220127032035/https://www.pcmag.com/news/nordvpn-actually-we-do-comply-with-law-enforcement-data-requests |archive-date=January 27, 2022 |access-date=October 31, 2024 |work=PCMag}} and TechRadar.{{Cite news |last=Spadafora |first=Anthony |date=January 20, 2022 |title=NordVPN will now comply with law enforcement data requests |url=https://www.techradar.com/news/nordvpn-will-now-comply-with-law-enforcement-data-requests |url-status=live |archive-url=https://web.archive.org/web/20220120233937/https://www.techradar.com/news/nordvpn-will-now-comply-with-law-enforcement-data-requests |archive-date=January 20, 2022 |access-date=October 31, 2024 |work=TechRadar}} Previously, NordVPN had maintained a strict no-logs policy, preventing any user-identifying data from being stored. The 2023 update clarified that, while the no-logs policy continued, NordVPN would comply with law enforcement requests when required by local legal authorities. This change reflected increased regulatory pressures on VPN providers to support investigations related to cybersecurity and criminal activities.
Privacy advocates, including VPN.com, expressed concern that this cooperation might compromise user privacy and set a precedent for other VPN services. Critics argued that any law enforcement compliance could challenge NordVPN's commitment to anonymity, while NordVPN, as cited by TechRadar, asserted its dedication to privacy by only responding to legal requests and maintaining minimal data retention. Transparency statements from the company outlined strict compliance conditions, aiming to reassure users about privacy safeguards under the revised policy.{{Cite web |last=Vienažindytė |first=Ilma |date=October 29, 2024 |title=NordVPN Introduces Transparency Reports |url=https://nordvpn.com/blog/nordvpn-introduces-transparency-reports/ |url-status=live |archive-url=https://perma-archives.org/warc/20241101001136/https://nordvpn.com/blog/nordvpn-introduces-transparency-reports/ |archive-date=November 1, 2024 |access-date=October 31, 2024 |website=NordVPN }}
See also
References
{{Reflist}}
External links
- {{Official website|https://www.nordvpn.com/}}
{{VPN}}
Category:Virtual private network services
Category:Internet privacy software
Category:Software companies established in 2012
Category:Telecommunications companies of Panama
Category:2012 establishments in Lithuania