NordVPN

NordVPN is a commercial virtual private network service established in 2012 and developed by Nord Security, a cybersecurity software company with Lithuanian roots. The service is incorporated in Panama and operates through a wider corporate structure with offices in Lithuania, the United Kingdom, Panama, and the Netherlands. NordVPN is positioned primarily as a privacy and security product for consumers, although its feature set also addresses travel, remote work, streaming, file sharing, browsing on public networks, and protection against malicious websites. The core service creates an encrypted connection between a customer's device and a NordVPN server. Customers can select server locations and use specialized configurations, including peer-to-peer servers, double-encryption connections, obfuscated servers, and connections associated with the Tor network. Applications have been offered for Windows, macOS, Linux, Android, iOS, Android TV, and tvOS, while browser extensions are available for Chrome, Edge, and Firefox. Subscribers can connect multiple devices simultaneously, with the published service limit described as six devices for the standard offering. NordVPN's development expanded considerably after its initial launch. Mobile applications appeared in 2016, a Chrome browser extension followed in 2017, Android TV support arrived in 2018, and a tvOS application was introduced in 2023. In 2019 the company introduced NordLynx, a proprietary implementation based on the WireGuard protocol, as a faster alternative to older OpenVPN and IKEv2/IPsec configurations. The company subsequently upgraded parts of its infrastructure to 10 Gbit/s servers, introduced colocated RAM-based servers that it owns and operates, and added virtual server locations where physical infrastructure was limited. The brand has broadened beyond basic VPN tunneling. Threat Protection, introduced in 2022, blocks trackers, warns about malicious websites, and scans downloaded files for malware. Dark Web Monitor alerts customers when credentials associated with them appear in known leaks. Meshnet allows users to link devices into a private virtual network for activities such as file transfers, gaming, and virtual routing. NordProtect, an identity-theft protection product, was initially bundled with NordVPN before being offered as a separate subscription. In 2025, NordVPN introduced NordWhisper, a protocol intended to make VPN traffic resemble ordinary web traffic on networks that restrict or identify conventional VPN connections. Privacy is central to NordVPN's marketing and product strategy. The company says it operates a no-logs policy and has commissioned recurring external reviews, including examinations by PwC and Deloitte, as well as application and infrastructure security testing. It also launched a public bug bounty program and joined the VPN Trust Initiative. These commitments have been balanced by criticism over the delayed disclosure of a 2018 server breach, advertising rulings in the United Kingdom, and questions about the conditions under which the company cooperates with legally valid law-enforcement requests. NordVPN has also faced regulatory and market-access constraints. It declined a Russian request to join a registry associated with blocked websites and shut down its Russian servers in 2019. In 2022 it removed physical servers from India after an Indian cybersecurity directive required VPN providers to retain certain customer information. Apple later removed NordVPN from the Russian App Store at the request of Russian authorities, and NordVPN subsequently confirmed its complete withdrawal from the Russian market. The service remains one of Nord Security's principal consumer brands, operating internationally through subscription plans offered on monthly, annual, and two-year terms.

NordVPN was established in 2012 by a group of childhood friends associated with Eimantas Sabaliauskas and Tomas Okmanas. The service emerged from Lithuania's technology and startup ecosystem and was initially supported by Tesonet, a Lithuanian startup accelerator and business incubator. NordVPN is developed by Nord Security, formerly known as Nordsec Ltd, within a corporate structure linked to Cyberspace B.V. Although the service is incorporated in Panama, Nord Security has maintained offices in Lithuania, the United Kingdom, Panama, and the Netherlands. The first major expansion of the product's platform coverage occurred in 2016, when NordVPN released an Android application in May and an iOS application the following month. A Chrome browser extension was added in 2017, followed by Android TV support in 2018. These releases helped move the brand from a desktop privacy tool toward a cross-platform subscription service. The company later added Linux support, extensions for additional browsers, and a tvOS application after Apple's operating system began allowing third-party VPN applications. NordVPN's infrastructure and protocol strategy changed substantially in the late 2010s and early 2020s. The company introduced NordLynx, based on WireGuard, to improve performance while retaining the security properties expected of a modern VPN. In 2020 it began deploying colocated, RAM-based servers in Finland that it said were owned and operated directly by NordVPN, and it began upgrading network capacity from 1 Gbit/s to 10 Gbit/s. It also published an open-source VPN speed-testing tool in 2022. Where physical infrastructure was difficult to establish, the company expanded the use of virtual server locations. Privacy assurance became an important part of the brand's public identity. NordVPN's no-logs claims were reviewed by PwC in 2018 and again in 2020, while Deloitte conducted later reviews in 2022, 2023, and 2024. The company also commissioned application security testing and introduced a public bug bounty program. In parallel, it joined the VPN Trust Initiative, which promoted common expectations around security, privacy, advertising, disclosure, transparency, and social responsibility. The brand experienced a major reputational challenge in 2019 when a contracted data center's remote administration weakness allowed unauthorized access to a NordVPN server in Finland. NordVPN said the server had been compromised in March 2018 and that it had not been informed promptly by the data center. The company reported no evidence that user credentials, billing information, or other account data had been extracted, and no evidence that an actual man-in-the-middle attack occurred. However, security researchers and media organizations criticized the delayed public disclosure. A separate report that year described approximately 2,000 NordVPN usernames and passwords exposed through credential stuffing. NordVPN has also faced restrictions in several jurisdictions. In 2019 it rejected a Russian demand to participate in a registry of banned websites and closed its Russian servers. In India, it removed physical servers in 2022 after the national computer emergency response authority required VPN companies to retain certain personal information for five years. In 2024, Apple removed NordVPN from the Russian App Store following a request from Roskomnadzor, after which the company confirmed its full departure from the Russian market. The product portfolio broadened from VPN access into a wider cybersecurity suite. NordVPN introduced Threat Protection in 2022 to block trackers, warn against malicious websites, and inspect downloaded files for malware. Dark Web Monitor, launched in 2020, alerts users when associated credentials appear in breach collections. Meshnet, launched in 2022, lets users form private networks between devices. NordProtect began as an identity-theft protection bundle in 2024 and later became a separate subscription. Business services followed a parallel path: NordVPN Teams was announced in 2019, then rebranded as NordLayer and repositioned toward secure access service edge solutions. Nord Security raised corporate funding in 2022 and was reported to have reached a $1.6 billion valuation at that time; later reporting placed its valuation at $3 billion in 2023. In 2022, Nord Security and Surfshark combined under a shared holding company. NordVPN remains the group's principal consumer VPN brand, sold through monthly, annual, and two-year subscriptions and marketed internationally on the basis of privacy, security, speed, and broad device support.

1. 2025NordWhisper introduced

   NordVPN launched a protocol designed to reduce the likelihood that restrictive networks identify and block VPN traffic.

   Source
2. 2024Post-quantum encryption support added to Linux

   The Linux client gained post-quantum encryption support.

   Source
3. 2023tvOS application launched

   NordVPN introduced a dedicated application for Apple's tvOS platform.

   Source
4. 2022Threat Protection and Meshnet added

   NordVPN expanded into tracker blocking, malicious-site warnings, malware scanning, and private device networking.

   Source
5. 2020RAM-based colocated servers deployed

   NordVPN began deploying servers it said were directly owned and operated by the company, starting in Finland.

   Source
6. 202010 Gbit/s network rollout began

   The company started upgrading network infrastructure from 1 Gbit/s to 10 Gbit/s capacity.

   Source
7. 2020Dark Web Monitor launched

   The feature began notifying users when associated credentials were detected in leaked data.

   Source
8. 2019NordLynx introduced

   NordVPN introduced its WireGuard-based NordLynx technology and later began rolling it out across supported platforms.

   Source
9. 2019NordVPN Teams announced

   The company launched a business VPN offering for smaller organizations, distributed teams, and freelancers.

   Source
10. 2019Russian servers shut down

    NordVPN rejected a Russian registry requirement associated with censorship and closed its Russian servers.

    Source
11. 2018Android TV support added

    NordVPN expanded its supported platforms to Android TV.

    Source
12. 2018First independent no-logs review

    PwC conducted a review intended to verify NordVPN's no-logs policy.

    Source
13. 2017Chrome browser extension launched

    A Chrome extension added browser-level access to the service.

    Source
14. 2016Android and iOS applications introduced

    NordVPN released its Android application in May and its iOS application in June, extending the service beyond desktop use.

    Source
15. 2012NordVPN established

    NordVPN was founded by a group of childhood friends, with Eimantas Sabaliauskas and Tomas Okmanas identified as central founders.

    Source

A premium, feature-rich consumer privacy and cybersecurity service emphasizing speed, broad server coverage, independent audits, and protection across multiple device platforms.

• NordVPNVirtual private network2012

  The core subscription service encrypts internet traffic and routes it through selected VPN servers. It supports Windows, macOS, Linux, Android, iOS, Android TV, and tvOS, alongside browser extensions. Its server options include general-purpose, peer-to-peer, double-encryption, obfuscated, and Tor-related configurations. The service is sold on monthly, annual, and two-year subscription terms.

• NordLynxVPN protocol2019

  NordLynx is NordVPN's implementation of the WireGuard protocol. It was developed as a faster and more modern alternative to legacy OpenVPN and IKEv2/IPsec configurations and was rolled out across the company's supported platforms beginning in 2020.

• Threat ProtectionCybersecurity feature2022

  Threat Protection is an opt-in feature included with eligible NordVPN subscriptions. It blocks web trackers, warns users about malicious websites, and scans downloaded files for malware. On supported desktop applications it can operate without an active VPN connection.

• Dark Web MonitorCredential monitoring2020

  Dark Web Monitor checks for credentials associated with a user that appear in known leaked-data collections and sends alerts intended to prompt password changes or other account-protection measures.

• MeshnetPrivate networking2022

  Meshnet allows users to link devices into a private virtual network. NordVPN has promoted it for file sharing, multiplayer gaming, virtual routing, and secure connections between personal devices.

• NordProtectIdentity protection2024

  NordProtect is an identity-theft protection service that began as a product bundled with NordVPN and later became available as a separate subscription offering.

• NordLayerBusiness cybersecurity2019

  NordLayer is the successor to NordVPN Teams. It serves organizations, remote teams, and freelancers and has been repositioned toward broader secure access service edge and business-network security solutions.

• 2019VPN Trust Initiative

  International

  NordVPN became a founding member of the VPN Trust Initiative, which promoted industry work on security, privacy, advertising practices, disclosure, transparency, and social responsibility.

  Outcome. The initiative established a framework for voluntary industry standards and self-regulation.

  Source

• 2024Completed withdrawal from RussiaStrategy

  Apple removed NordVPN from the Russian App Store following a request from Roskomnadzor.

  What changed. NordVPN confirmed that it had fully exited the Russian market.

  Aftermath. Russian users lost official access to the application through Apple's local storefront.

  Source
• 2022Removed physical servers from IndiaStrategy

  India's CERT-In directive required VPN companies to retain certain customer data for five years.

  What changed. NordVPN closed its physical Indian servers rather than operate under the stated retention requirements.

  Aftermath. The company continued serving Indian users through other infrastructure arrangements while limiting its physical presence in the country.

  Source
• 2022Surfshark and Nord Security combinationM&A

  The transaction was intended to combine two cybersecurity businesses under a shared ownership structure.

  What changed. Surfshark and Nord Security merged under one holding company.

  Aftermath. NordVPN remained a principal consumer brand within the enlarged cybersecurity group.

  Source
• 2020NordLynx rollout expanded across platformsGeneration change

  NordVPN sought higher performance than it associated with older OpenVPN and IKEv2/IPsec implementations.

  What changed. The company progressively deployed its WireGuard-based NordLynx protocol after conducting an extensive internal testing program.

  Aftermath. NordLynx became a central performance-oriented connection option in the NordVPN product.

  Source
• 2019Rejected Russian registry requirementStrategy

  Russian authorities reportedly sought to require VPN providers to join a registry associated with blocked websites.

  What changed. NordVPN declined to comply and shut down its Russian servers.

  Aftermath. The service lost its Russian server presence and later fully exited the Russian market.

  Source
• 2019NordVPN Teams launchedProduct launch

  Remote work and distributed organizations created demand for secure access to business resources.

  What changed. NordVPN introduced a business VPN service for small and medium-sized businesses, teams, and freelancers.

  Aftermath. The product was later renamed NordLayer and expanded toward SASE-oriented business security.

  Source

• 2023United Kingdom advertising ruling on malware claimsControversy

  The UK Advertising Standards Authority ruled against an advertisement suggesting that NordVPN could switch off malware. The regulator found that listeners could understand the claim as a promise to stop all malware, which NordVPN had not substantiated.

  Source
• 2019Credential-stuffing exposureControversy

  A separate report said approximately 2,000 NordVPN usernames and passwords had been exposed through credential stuffing. The incident was distinct from the Finland server breach.

  Source
• 2019United Kingdom advertising ruling on public Wi-Fi claimsControversy

  The UK Advertising Standards Authority advised NordVPN not to repeat advertising that portrayed public Wi-Fi as effectively equivalent to handing personal information to nearby people. The regulator said the advertising overstated the risk because HTTPS already provides significant protection.

  Source
• 2018Finland server breach and delayed disclosureControversy

  A vulnerability in a contracted data center's remote administration system enabled unauthorized access to a NordVPN server in Finland. NordVPN said the incident did not expose user credentials, billing information, or other profile data and found no evidence of an actual man-in-the-middle attack. Critics nevertheless objected that the breach was not disclosed promptly after the company learned of it.

  Source

• 2025NordVPN introduced the NordWhisper protocol

  NordWhisper was designed to make VPN traffic less distinguishable from ordinary web traffic on restrictive networks.

  Product launch
  Source
• 2024Apple removed NordVPN from the Russian App Store

  Apple removed the application following a request from Russian communications regulator Roskomnadzor; NordVPN later confirmed that it had exited Russia.

  Regulation
  Source
• 2024NordVPN introduced post-quantum encryption support for Linux

  The Linux application gained support for post-quantum encryption capabilities.

  Product launch
  Source
• 2022Nord Security raised funding at a reported $1.6 billion valuation

  Nord Security raised $100 million in a round led by Novator. The reported valuation and funding figure are corporate-level rather than NordVPN-only figures.

  M&A
  Source
• 2022NordVPN removed physical servers from India

  The company withdrew physical infrastructure from India after a national cybersecurity directive required VPN providers to retain specified customer information.

  Regulation
  Source
• 2022Surfshark and Nord Security combined under one holding company

  The transaction brought the Surfshark and Nord Security businesses together under a common holding structure.

  M&A
  Source
• 2022NordVPN launched Meshnet

  Meshnet enabled customers to connect devices into a private virtual network for file sharing, gaming, and routing use cases.

  Product launch
  Source
• 2019NordVPN launched NordVPN Teams for business users

  The company introduced a business-oriented VPN product for small and medium-sized businesses, remote teams, and freelancers.

  Product launch
  Source
• 2019NordVPN shut down its Russian servers after rejecting a censorship-related request

  NordVPN declined to join a Russian registry associated with blocked websites and closed its Russian servers.

  RegulationOther
  Source
• 2019NordVPN introduced audits and a public bug bounty program

  NordVPN announced additional security audits and later opened a program rewarding researchers for reporting serious vulnerabilities.

  Other
  Source
• 2019NordVPN joined the VPN Trust Initiative

  NordVPN became one of the initiative's founding members, supporting industry self-regulation and transparency commitments.

  Other
  Source

1. NordVPN
2. NordVPN official website