NordVPN
A consumer-focused commercial virtual private network service developed by the Lithuanian cybersecurity company Nord Security.
Last updated October 17, 2026
AI crawler reads
No AI crawler has read this profile since Oct 28, 2026.
Overview
NordVPN is a commercial virtual private network service established in 2012 and developed by Nord Security, a cybersecurity software company with Lithuanian roots. The service is incorporated in Panama and operates through a wider corporate structure with offices in Lithuania, the United Kingdom, Panama, and the Netherlands. NordVPN is positioned primarily as a privacy and security product for consumers, although its feature set also addresses travel, remote work, streaming, file sharing, browsing on public networks, and protection against malicious websites. The core service creates an encrypted connection between a customer's device and a NordVPN server. Customers can select server locations and use specialized configurations, including peer-to-peer servers, double-encryption connections, obfuscated servers, and connections associated with the Tor network. Applications have been offered for Windows, macOS, Linux, Android, iOS, Android TV, and tvOS, while browser extensions are available for Chrome, Edge, and Firefox. Subscribers can connect multiple devices simultaneously, with the published service limit described as six devices for the standard offering. NordVPN's development expanded considerably after its initial launch. Mobile applications appeared in 2016, a Chrome browser extension followed in 2017, Android TV support arrived in 2018, and a tvOS application was introduced in 2023. In 2019 the company introduced NordLynx, a proprietary implementation based on the WireGuard protocol, as a faster alternative to older OpenVPN and IKEv2/IPsec configurations. The company subsequently upgraded parts of its infrastructure to 10 Gbit/s servers, introduced colocated RAM-based servers that it owns and operates, and added virtual server locations where physical infrastructure was limited. The brand has broadened beyond basic VPN tunneling. Threat Protection, introduced in 2022, blocks trackers, warns about malicious websites, and scans downloaded files for malware. Dark Web Monitor alerts customers when credentials associated with them appear in known leaks. Meshnet allows users to link devices into a private virtual network for activities such as file transfers, gaming, and virtual routing. NordProtect, an identity-theft protection product, was initially bundled with NordVPN before being offered as a separate subscription. In 2025, NordVPN introduced NordWhisper, a protocol intended to make VPN traffic resemble ordinary web traffic on networks that restrict or identify conventional VPN connections. Privacy is central to NordVPN's marketing and product strategy. The company says it operates a no-logs policy and has commissioned recurring external reviews, including examinations by PwC and Deloitte, as well as application and infrastructure security testing. It also launched a public bug bounty program and joined the VPN Trust Initiative. These commitments have been balanced by criticism over the delayed disclosure of a 2018 server breach, advertising rulings in the United Kingdom, and questions about the conditions under which the company cooperates with legally valid law-enforcement requests. NordVPN has also faced regulatory and market-access constraints. It declined a Russian request to join a registry associated with blocked websites and shut down its Russian servers in 2019. In 2022 it removed physical servers from India after an Indian cybersecurity directive required VPN providers to retain certain customer information. Apple later removed NordVPN from the Russian App Store at the request of Russian authorities, and NordVPN subsequently confirmed its complete withdrawal from the Russian market. The service remains one of Nord Security's principal consumer brands, operating internationally through subscription plans offered on monthly, annual, and two-year terms.
History
NordVPN was established in 2012 by a group of childhood friends associated with Eimantas Sabaliauskas and Tomas Okmanas. The service emerged from Lithuania's technology and startup ecosystem and was initially supported by Tesonet, a Lithuanian startup accelerator and business incubator. NordVPN is developed by Nord Security, formerly known as Nordsec Ltd, within a corporate structure linked to Cyberspace B.V. Although the service is incorporated in Panama, Nord Security has maintained offices in Lithuania, the United Kingdom, Panama, and the Netherlands. The first major expansion of the product's platform coverage occurred in 2016, when NordVPN released an Android application in May and an iOS application the following month. A Chrome browser extension was added in 2017, followed by Android TV support in 2018. These releases helped move the brand from a desktop privacy tool toward a cross-platform subscription service. The company later added Linux support, extensions for additional browsers, and a tvOS application after Apple's operating system began allowing third-party VPN applications. NordVPN's infrastructure and protocol strategy changed substantially in the late 2010s and early 2020s. The company introduced NordLynx, based on WireGuard, to improve performance while retaining the security properties expected of a modern VPN. In 2020 it began deploying colocated, RAM-based servers in Finland that it said were owned and operated directly by NordVPN, and it began upgrading network capacity from 1 Gbit/s to 10 Gbit/s. It also published an open-source VPN speed-testing tool in 2022. Where physical infrastructure was difficult to establish, the company expanded the use of virtual server locations. Privacy assurance became an important part of the brand's public identity. NordVPN's no-logs claims were reviewed by PwC in 2018 and again in 2020, while Deloitte conducted later reviews in 2022, 2023, and 2024. The company also commissioned application security testing and introduced a public bug bounty program. In parallel, it joined the VPN Trust Initiative, which promoted common expectations around security, privacy, advertising, disclosure, transparency, and social responsibility. The brand experienced a major reputational challenge in 2019 when a contracted data center's remote administration weakness allowed unauthorized access to a NordVPN server in Finland. NordVPN said the server had been compromised in March 2018 and that it had not been informed promptly by the data center. The company reported no evidence that user credentials, billing information, or other account data had been extracted, and no evidence that an actual man-in-the-middle attack occurred. However, security researchers and media organizations criticized the delayed public disclosure. A separate report that year described approximately 2,000 NordVPN usernames and passwords exposed through credential stuffing. NordVPN has also faced restrictions in several jurisdictions. In 2019 it rejected a Russian demand to participate in a registry of banned websites and closed its Russian servers. In India, it removed physical servers in 2022 after the national computer emergency response authority required VPN companies to retain certain personal information for five years. In 2024, Apple removed NordVPN from the Russian App Store following a request from Roskomnadzor, after which the company confirmed its full departure from the Russian market. The product portfolio broadened from VPN access into a wider cybersecurity suite. NordVPN introduced Threat Protection in 2022 to block trackers, warn against malicious websites, and inspect downloaded files for malware. Dark Web Monitor, launched in 2020, alerts users when associated credentials appear in breach collections. Meshnet, launched in 2022, lets users form private networks between devices. NordProtect began as an identity-theft protection bundle in 2024 and later became a separate subscription. Business services followed a parallel path: NordVPN Teams was announced in 2019, then rebranded as NordLayer and repositioned toward secure access service edge solutions. Nord Security raised corporate funding in 2022 and was reported to have reached a $1.6 billion valuation at that time; later reporting placed its valuation at $3 billion in 2023. In 2022, Nord Security and Surfshark combined under a shared holding company. NordVPN remains the group's principal consumer VPN brand, sold through monthly, annual, and two-year subscriptions and marketed internationally on the basis of privacy, security, speed, and broad device support.
- 2025
NordWhisper introduced
[1]NordVPN launched a protocol designed to reduce the likelihood that restrictive networks identify and block VPN traffic.
- 2024
Post-quantum encryption support added to Linux
[1]The Linux client gained post-quantum encryption support.
- 2023
tvOS application launched
[1]NordVPN introduced a dedicated application for Apple's tvOS platform.
- 2022
Threat Protection and Meshnet added
[1]NordVPN expanded into tracker blocking, malicious-site warnings, malware scanning, and private device networking.
- 2020
RAM-based colocated servers deployed
[1]NordVPN began deploying servers it said were directly owned and operated by the company, starting in Finland.
- 2020
10 Gbit/s network rollout began
[1]The company started upgrading network infrastructure from 1 Gbit/s to 10 Gbit/s capacity.
- 2020
Dark Web Monitor launched
[1]The feature began notifying users when associated credentials were detected in leaked data.
- 2019
NordLynx introduced
[1]NordVPN introduced its WireGuard-based NordLynx technology and later began rolling it out across supported platforms.
- 2019
NordVPN Teams announced
[1]The company launched a business VPN offering for smaller organizations, distributed teams, and freelancers.
- 2019
Russian servers shut down
[1]NordVPN rejected a Russian registry requirement associated with censorship and closed its Russian servers.
Products and positioning
A premium, feature-rich consumer privacy and cybersecurity service emphasizing speed, broad server coverage, independent audits, and protection across multiple device platforms.
Virtual private network · 2012
NordVPN
The core subscription service encrypts internet traffic and routes it through selected VPN servers. It supports Windows, macOS, Linux, Android, iOS, Android TV, and tvOS, alongside browser extensions. Its server options include general-purpose, peer-to-peer, double-encryption, obfuscated, and Tor-related configurations. The service is sold on monthly, annual, and two-year subscription terms.
VPN protocol · 2019
NordLynx
NordLynx is NordVPN's implementation of the WireGuard protocol. It was developed as a faster and more modern alternative to legacy OpenVPN and IKEv2/IPsec configurations and was rolled out across the company's supported platforms beginning in 2020.
Cybersecurity feature · 2022
Threat Protection
Threat Protection is an opt-in feature included with eligible NordVPN subscriptions. It blocks web trackers, warns users about malicious websites, and scans downloaded files for malware. On supported desktop applications it can operate without an active VPN connection.
Credential monitoring · 2020
Dark Web Monitor
Dark Web Monitor checks for credentials associated with a user that appear in known leaked-data collections and sends alerts intended to prompt password changes or other account-protection measures.
Private networking · 2022
Meshnet
Meshnet allows users to link devices into a private virtual network. NordVPN has promoted it for file sharing, multiplayer gaming, virtual routing, and secure connections between personal devices.
Identity protection · 2024
NordProtect
NordProtect is an identity-theft protection service that began as a product bundled with NordVPN and later became available as a separate subscription offering.
Business cybersecurity · 2019
NordLayer
NordLayer is the successor to NordVPN Teams. It serves organizations, remote teams, and freelancers and has been repositioned toward broader secure access service edge and business-network security solutions.
Controversies
2023
United Kingdom advertising ruling on malware claims
The UK Advertising Standards Authority ruled against an advertisement suggesting that NordVPN could switch off malware. The regulator found that listeners could understand the claim as a promise to stop all malware, which NordVPN had not substantiated.
2019
Credential-stuffing exposure
A separate report said approximately 2,000 NordVPN usernames and passwords had been exposed through credential stuffing. The incident was distinct from the Finland server breach.
2019
United Kingdom advertising ruling on public Wi-Fi claims
The UK Advertising Standards Authority advised NordVPN not to repeat advertising that portrayed public Wi-Fi as effectively equivalent to handing personal information to nearby people. The regulator said the advertising overstated the risk because HTTPS already provides significant protection.
2019
NordVPN discloses a breach of one server
NordVPN confirmed that one of its servers had been breached in March 2018 and said it had known about the attack for months without informing customers. A security researcher had reported that private data, including an expired private key, was publicly accessible. NordVPN acknowledged shortcomings in its handling of server security and described security audits and a bug bounty program as steps it was taking or preparing.
2018
Finland server breach and delayed disclosure
A vulnerability in a contracted data center's remote administration system enabled unauthorized access to a NordVPN server in Finland. NordVPN said the incident did not expose user credentials, billing information, or other profile data and found no evidence of an actual man-in-the-middle attack. Critics nevertheless objected that the breach was not disclosed promptly after the company learned of it.
Marketing campaigns
- 2019VPN Trust Initiative
International
NordVPN became a founding member of the VPN Trust Initiative, which promoted industry work on security, privacy, advertising practices, disclosure, transparency, and social responsibility.
Outcome. The initiative established a framework for voluntary industry standards and self-regulation.
Brand decisions
2024
Completed withdrawal from RussiaStrategyBackground
Apple removed NordVPN from the Russian App Store following a request from Roskomnadzor.
Action taken
NordVPN confirmed that it had fully exited the Russian market.
Aftermath
Russian users lost official access to the application through Apple's local storefront.
2022
Removed physical servers from IndiaStrategyBackground
India's CERT-In directive required VPN companies to retain certain customer data for five years.
Action taken
NordVPN closed its physical Indian servers rather than operate under the stated retention requirements.
Aftermath
The company continued serving Indian users through other infrastructure arrangements while limiting its physical presence in the country.
2022
Surfshark and Nord Security combinationM&ABackground
The transaction was intended to combine two cybersecurity businesses under a shared ownership structure.
Action taken
Surfshark and Nord Security merged under one holding company.
Aftermath
NordVPN remained a principal consumer brand within the enlarged cybersecurity group.
2020
NordLynx rollout expanded across platformsGeneration changeBackground
NordVPN sought higher performance than it associated with older OpenVPN and IKEv2/IPsec implementations.
Action taken
The company progressively deployed its WireGuard-based NordLynx protocol after conducting an extensive internal testing program.
Aftermath
NordLynx became a central performance-oriented connection option in the NordVPN product.
2019
Rejected Russian registry requirementStrategyBackground
Russian authorities reportedly sought to require VPN providers to join a registry associated with blocked websites.
Action taken
NordVPN declined to comply and shut down its Russian servers.
Aftermath
The service lost its Russian server presence and later fully exited the Russian market.
2019
NordVPN Teams launchedProduct launchBackground
Remote work and distributed organizations created demand for secure access to business resources.
Action taken
NordVPN introduced a business VPN service for small and medium-sized businesses, teams, and freelancers.
Aftermath
The product was later renamed NordLayer and expanded toward SASE-oriented business security.
Recent events
NordVPN releases Threat Protection feature[4]
Reported:
NordVPN released Threat Protection, an integrated feature in its app that blocks phishing attempts, trackers, intrusive ads, infected files, and malicious websites. It was available for macOS users and was being gradually rolled out for Windows.
NordVPN rolls out NordLynx protocol[5]
Reported:
NordVPN began rolling out its NordLynx VPN protocol, based on WireGuard, across its product line. The updates were being released gradually.
- Unconfirmed
NordVPN begins rolling out NordLynx[6]
Reported:
NordVPN began rolling out NordLynx, a technology built around the WireGuard protocol, to its Windows, Mac, iOS, Android and Linux clients.
NordVPN launches NordPass[7]
Reported:
NordVPN launched NordPass, a password-manager service, on November 26, 2019; users could sign up for the service.
NordLocker launches file-encryption tool[8]
Reported:
NordLocker launched a file-encryption tool that uses end-to-end encryption to protect files stored on users’ computers or in the cloud.
NordVPN launches NordLocker[9]
Reported:
NordVPN launched NordLocker, a file encryption tool for files stored on a user's computer or in the cloud.
NordVPN discloses a breach of one server[3]
Reported:
NordVPN confirmed that one of its servers had been breached in March 2018 and said it had known about the attack for months without informing customers. A security researcher had reported that private data, including an expired private key, was publicly accessible. NordVPN acknowledged shortcomings in its handling of server security and described security audits and a bug bounty program as steps it was taking or preparing.
Sources9 sources
- 1NordVPNen.wikipedia.org
- 2NordVPN official websitenordvpn.com
- 3NordVPN discloses a breach of one serverbit-tech.net
- 4NordVPN 发布 Threat Protection 功能itbusinessedge.com
- 5NordVPN 推出 NordLynx 协议zdnet.com
- 6NordVPN开始推出NordLynxtechradar.com
- 7NordVPN推出NordPasstech.co
- 8NordLocker推出档案加密工具n.yam.com
- 9NordVPN 推出 NordLockerprnewswire.com
Cite this profile: Cite the canonical profile. /brand-wiki/nordvpn · Editorial policy · How profiles are compiled