NordVPN is easy to describe in the shape most VPN reviews expect.
- It runs on nearly every major platform.
- Recent independent testing recorded high NordLynx throughput in current high-speed test environments.
- It streams a long list of services.
- It now supports P2P on every standard server, not just a specialty subset.
- It carries a repeated, multi-year no-logs assurance history.
- And the price on the homepage looks low.
None of that is misleading. It is also incomplete.
The more useful question isn’t whether NordVPN is good. It’s whether the version of NordVPN you’d actually receive matches what you need.
NordVPN in 2026 is not one product delivered identically to everyone who subscribes. It’s a core VPN wrapped in a set of platform-specific behaviors, separately purchased add-ons, and features with different levels of independent verification. Two subscribers on the same plan can end up with meaningfully different versions of “NordVPN,” depending on their operating system, the tier they chose, and which add-ons they’re willing to buy.
This review works through that, layer by layer: what the core product does today, where it starts to differ by platform, where a capability stops being included and becomes something you buy separately, what’s actually been independently checked versus company-stated, and what the subscription really costs once the promotional term ends.
Quick verdict
NordVPN’s core VPN, the connection itself, standard P2P access, and mainstream streaming compatibility, is well evidenced and holds up on a supported platform where the capabilities you need are available. If your needs stop there, and you’re comfortable paying the renewal price rather than the promotional one, this is a strong, largely frictionless product.
The picture gets more conditional at the edges. If you need app-level split tunneling on macOS or iOS, it isn’t in the current record. If you need inbound port forwarding or a static IP, you can get there, but only by purchasing a separate add-on, Dedicated Server or Dedicated IP, each with its own limitations and its own thinner independent evidence base. If you need continuous, fleet-wide verification of infrastructure claims, that isn’t established in the current NordVPN public evidence record.
None of this makes NordVPN a bad choice. It means the right way to evaluate it is against your own requirements, not the feature list alone. The sections below explain why, and “Who NordVPN is actually right for” resolves it directly.
NordVPN at a glance
| Metric | Current state |
|---|---|
| Direct starting price | $3.49/month equivalent on Basic, billed as $94.23 upfront for a 27-month introductory term |
| Renewal | Basic $139.08/year; Complete $219.48/year; Prime $296.28/year |
| Refund / trial | 30-day money-back guarantee on direct purchases; a 3-day Android trial exists with regional exclusions; store purchases follow separate refund rules |
| Simultaneous connections | 10 |
| Countries / locations | 149 countries; 224+ locations (these are separate figures) |
| Server count | Not settled. First-party pages have shown different totals during the research window, so no single current figure is treated as authoritative here |
| Platforms | Windows, macOS, Linux, Android, iOS, browser extensions, Android TV/Fire TV, Apple TV/tvOS, and router-level setup |
| Protocols | NordLynx, OpenVPN, manual/platform IKEv2, and NordWhisper (availability varies by app and platform) |
| Independent performance | Recent 10 Gbps test environments (TechRadar, Tom’s Guide) measured nearby NordLynx throughput around 1.25 Gbps; a separate, lower Security.org result exists under different test conditions |
| Streaming | Documented successes with Netflix (multiple libraries), Disney+, BBC iPlayer, 9Now, and RTÉ Player; documented failures in a YouTube geo-test and Prime Video in Australia and New Zealand |
| P2P | Supported on all standard servers under current policy, replacing the older specialty-server model |
| Split tunneling | Present on Windows, Android, Android TV, and Linux (via allowlisting); no app-level split tunneling currently established on macOS or iOS |
| Port forwarding | Not available on the standard/shared VPN or on Dedicated IP; available through the separate Dedicated Server add-on |
| Dedicated IP | A separate paid add-on, linked to the account email, with protocol and device limits |
| Dedicated Server | A separate paid add-on launched in June 2026, starting at $11.99/month, with four launch locations |
| Support | Live chat and email/form channels |
This table orients. It doesn’t settle the verdict. The sections below explain why several of these rows aren’t as simple as they look.
What NordVPN actually is today
NordVPN’s core entitlement, included on every plan, is a 10-connection VPN tunnel running on NordLynx (its WireGuard-based protocol), OpenVPN, and platform-specific manual protocol options, with apps across desktop, mobile, browser, TV, and router platforms.
Around that core sit several capabilities that are structurally separate from it. Meshnet is a peer-networking feature, free even without a paid VPN subscription. It’s a different function from the VPN server service, not evidence of what the paid plan itself delivers. Dedicated IP and Dedicated Server are paid add-ons layered on top of a subscription. Bundled products like NordPass, NordLocker, Incogni, and Coveron are attached commercially through plan tier or add-on purchase, without an established technical integration into the VPN itself. Sharing an account and a bill is not the same claim as sharing backend architecture.
Describing NordVPN as “a VPN” understates what it now includes. Describing it as one seamless ecosystem overstates how technically connected those pieces actually are.
Performance and everyday use
Recent 10 Gbps test environments give the clearest current performance picture. TechRadar’s March 2026 testing measured nearby NordLynx throughput around 1,249 Mbps, with long-distance results closer to 688 to 689 Mbps and broadly similar OpenVPN figures on the same route. Tom’s Guide’s current round measured 1,256 Mbps on its closest server and 626 Mbps on a UK-to-US route. Security.org’s more recent test, run under a differently specified setup, recorded a materially lower baseline of around 194 Mbps download and 29 Mbps upload, dropping to roughly 186 Mbps down and 27 Mbps up under load. That’s a real result from a real test, not a contradiction of the other two: it’s a separate, methodology-bound observation, not an industry-wide figure, that hasn’t been reconciled with them.
Read together, these are three distinct, condition-specific measurements rather than one number for “NordVPN speed.” What they establish is that NordLynx performs well under the conditions each tester used, not that NordVPN has a single, universal figure.
Streaming tells a similar story. Tom’s Guide’s current testing recorded successful access to multiple Netflix libraries, Disney+, BBC iPlayer, Australia’s 9Now, and Ireland’s RTÉ Player, alongside a failed YouTube geo-test and failed Prime Video access from Australia and New Zealand. Those results support a specific conclusion: streaming access is realistic for many named services and regions, and it isn’t guaranteed for every service-region combination. Neither a blanket “it streams everything” nor a blanket “streaming is unreliable” fits what was actually observed.
P2P has genuinely improved. Current first-party policy states that all standard NordVPN servers now support P2P traffic, a change from the earlier model that required specialty servers for torrenting. That removes a real practical friction point. Older documentation referencing the specialty-server model may still surface here and there; it reflects a historical, transitional state rather than current policy.
Why the feature list doesn’t tell the whole story
The platform you use turns out to matter more than the feature list suggests.
Split tunneling, the ability to route only some traffic through the VPN, is available on Windows, Android, and Android TV, and through a different allowlisting mechanism on Linux. No app-level split tunneling is currently established on macOS or iOS. If that control matters to you, it needs to be checked against your own operating system, not against NordVPN’s feature page in general.
The browser extension follows the same pattern from a different angle. It protects browser traffic only, not the whole device. It’s a legitimate tool for a specific use case, not a substitute for the full VPN app.
NordVPN’s deeper malware and scam-protection layer shows the same asymmetry. It’s concentrated on Windows and eligible direct-download macOS builds, with a lighter phishing-protection layer elsewhere. A feature described once on a marketing page can mean a meaningfully different thing depending on which build you actually install.
None of this makes any individual platform’s implementation weak. It means the feature list describes what NordVPN has built, not automatically what a specific reader will receive.
When a feature becomes a purchase: Dedicated IP and Dedicated Server
Two of NordVPN’s boundaries aren’t about platform at all. They’re about whether you’re willing to buy a second product.
Dedicated IP is a separate paid add-on that requires an active NordVPN subscription. It runs on shared underlying infrastructure rather than dedicated hardware. NordVPN links the assigned IP to the account’s email address, which creates a direct account-email linkability that differs from the ordinary shared-IP model most subscribers use. It supports up to 10 simultaneous devices over OpenVPN, one connection over NordLynx, and isn’t supported over IKEv2. Current support documentation contains a live, unresolved contradiction: one guide provides setup instructions for using Dedicated IP through the browser extension, while other support and troubleshooting pages state that browser-extension use isn’t supported. That contradiction isn’t resolved here. It’s current, and it’s unresolved.
Dedicated Server, launched in June 2026, is a materially different product. Where Dedicated IP shares infrastructure, NordVPN describes Dedicated Server as providing dedicated resources: its own CPU and RAM, a static IP, and, the detail that matters most for many readers, VPN-tunnel port forwarding, which neither the standard shared VPN nor Dedicated IP provides. It starts at $11.99/month, runs over NordLynx, supports up to 10 connections, and includes a 4 TB monthly allowance where documented. It’s currently available in four launch locations, Boston, Manchester, Frankfurt, and Paris, and explicitly excludes the browser extension and tvOS. No independent security or operational assessment of Dedicated Server was located in the current record.
Put simply: port forwarding is now available through NordVPN’s separate Dedicated Server add-on. It remains unavailable on the ordinary shared VPN and on Dedicated IP. That’s a meaningful change from treating “no port forwarding” as a flat, permanent limitation of the product, but it’s a change that arrives as a separate purchase decision, with its own location, platform, and assurance boundaries, not as a free upgrade to the base plan.
Privacy: what NordVPN says, and what’s been checked
NordVPN states that it does not keep logs of traffic, browsing activity, or identity-linked connection records. That claim is backed by six disclosed no-logs assurance and review engagements, two from PwC and four from Deloitte, most recently a Deloitte engagement covering 10 November to 12 December 2025. These are logging and configuration assurance reviews, not general security or privacy audits, and the full report of the most recent engagement is gated behind a Nord Account login rather than being fully public.
Account and billing relationships are real. Creating and paying for an account involves email and payment information. Payment identity is a separate fact from VPN activity, but account linkability itself is real, most concretely through Dedicated IP’s email link described above. As NordVPN’s product surface has grown (VPN, Meshnet, Dedicated IP, Dedicated Server, bundled apps), the full mapping of how data flows across those products and their backend systems isn’t established in the current public record. Provider-described legal-request history, including a previously reported Panama warrant case, exists in company materials but isn’t independently court-verified in this record.
This review deliberately stops short of a full privacy investigation. Is NordVPN Private? covers the no-logs architecture and jurisdiction questions in more depth.
Security and what happens when something fails
NordVPN’s NordLynx protocol is built on WireGuard’s design, using ChaCha20-Poly1305 encryption, a distinct cryptographic basis from the generic “AES-256 VPN encryption” language sometimes used to describe VPNs broadly. OpenVPN and platform-specific manual IKEv2 configurations remain available where documented. NordVPN states that its standard server infrastructure runs RAM-only. Current public evidence doesn’t establish continuous full-fleet conformity or complete privileged-access controls. That’s an evidence boundary, not evidence that the RAM-only claim is false. Infrastructure runs on a mixed hosting and control model, and public evidence doesn’t fully establish physical-facility or privileged-credential controls across that model. NordVPN publishes Linux client source code, which provides visibility into that source. It doesn’t, on its own, establish that shipped binaries match that published source line for line.
Failure history is more informative when kept separate rather than folded into one generic summary.
The 2018 Finland incident involved a third-party rented server that was compromised. It’s a historical example of shared-responsibility hosting risk, and NordVPN made architecture changes afterward. It doesn’t describe or imply a current compromise.
The 2025 Cure53 assessment (NOR-28) identified two high-severity findings involving privilege and access-control issues. NordVPN remediated those findings and had them retested. On its own terms, this is evidence that the 2025 technical assessment found real issues, followed by remediation and retesting. It isn’t proof of systemic insecurity, and it isn’t proof of complete immunity going forward either.
A January 2026 allegation exists in public discussion but wasn’t established as forensic fact in the underlying research. It isn’t treated as evidence for any conclusion in this review.
How much of this has actually been independently verified
It’s worth separating what “NordVPN has been checked” actually means, because the evidence covers different things.
The six disclosed no-logs assurance engagements, two from PwC and four from Deloitte, specifically examine logging and configuration systems. They aren’t general security audits, and describing them that way overstates their scope.
Separately, technical security assessments exist. Cure53 conducted assessments in 2022 (NV-03) and 2025 (NOR-28), with the 2025 engagement the most detailed currently on record. A 2024 engagement (NOR-17) is referenced but its detailed public scope and findings aren’t available. An older VerSprite assessment from 2019 exists with limited public scope. NordVPN also runs an ongoing HackerOne bug bounty program, which is a discovery-and-remediation channel rather than a completed audit.
The current public evidence record is deeper for some parts of the product than others. NordWhisper, NordVPN’s proprietary protocol for restrictive networks, has no public independent protocol-security assessment located in this research. Dedicated Server, as a newer product, similarly has no independent security or operational assessment on record yet. Neither gap implies those features are insecure. It means their trust rests more heavily on NordVPN’s own documentation than the core VPN’s does.
Who’s behind NordVPN
NordVPN operates under nordvpn S.A., based in Panama, within the wider Nord Security product group. A Dutch entity, Cyberspace B.V., is reported in current records as a higher-level holding structure. Exact beneficial ownership percentages, voting and control rights, and the full statutory ownership chain above the known entities aren’t established in the current public record. NordVPN and Surfshark’s technical independence, and Tesonet’s exact current role in NordVPN’s operations, remain company-stated rather than independently confirmed.
None of this changes the capability, security, or fit findings already established above. It’s a separate, legitimate confidence question about the company itself, disclosed here without extending it into a governance conclusion the evidence doesn’t support: Who Owns NordVPN?
What NordVPN actually costs
The number most readers see first, $3.49/month on Basic, describes introductory-term economics: a $94.23 upfront charge covering a 27-month promotional period. It’s a real, currently available offer, not a misleading figure. It’s also not the number that determines what a subscriber pays over time.
Renewal economics take over once that term ends: $139.08/year on Basic, $219.48/year on Complete, and $296.28/year on Prime. Complete and Prime add bundled adjacent apps and expanded protection features on top of the same core VPN entitlement; the current record doesn’t establish that they change the underlying VPN connection itself. A separate Plus tier is documented in NordVPN’s own recent pricing materials but wasn’t shown on the tested current purchase route, so its present availability is unresolved rather than confirmed retired.
Layered on top of any plan are the two add-ons discussed above, Dedicated IP and Dedicated Server, each its own separate charge. Dedicated Server’s documented starting price is $11.99/month; pricing beyond that starting figure isn’t established here.
The practical question isn’t how cheap NordVPN looks. It’s what you’d actually have to pay, across the promotional term and into renewal, for the specific configuration, plan, platform, and any add-ons, that your requirements call for.
Who NordVPN is actually right for
Fits inside the core entitlement, with no add-on or platform issue: Ordinary high-throughput VPN use, occasional international streaming (with the named exceptions above), and torrenting or P2P are all supported by the core plan on any of NordVPN’s supported platforms.
Blocked by a platform boundary, not solvable by purchase: If you specifically need app-level split tunneling on macOS or iOS, it isn’t in the current NordVPN record. This isn’t an add-on gap. It’s a platform gap.
Solvable through an add-on, at a defined cost and trade-off: If you need a static IP without new hardware, Dedicated IP gets you there, at the cost of account-email linkability, protocol and device limits, and currently unresolved browser-extension support. If you need inbound port forwarding, Dedicated Server gets you there, at the cost of a separate monthly charge, a limited set of launch locations, exclusion from browser and tvOS use, and the absence of independent security assessment.
Depends on accepting a less independently verified component: If you’re on a restrictive network and need NordWhisper’s traffic-blending approach, you can use it today. Its design rationale is documented, but no independent protocol-security assessment currently exists for it.
Not currently answerable from public evidence: If you require continuous, whole-fleet, privileged-access verification of NordVPN’s infrastructure claims, you won’t find that evidence in the current record.
Applies across every group above: Whichever combination applies to you, judge the cost across both the introductory term and the later renewal, especially if you expect to stay beyond the promotion.
Conclusion
NordVPN’s core product holds up well under current, independent scrutiny: solid NordLynx performance under tested conditions, meaningful current streaming access, P2P support across all standard servers, and a repeated, if narrowly scoped, no-logs assurance history. None of that is in question.
What determines whether NordVPN is the right choice isn’t that core product alone. It’s whether your specific requirements sit inside it, or at one of its edges: a platform that doesn’t support a feature you want, a capability that requires a second purchase, or a component that hasn’t yet accumulated the same independent verification as the core VPN. NordVPN has actively been redrawing some of those edges recently. P2P access widened in 2026, and port forwarding moved from a flat no to a purchasable yes through Dedicated Server. That pattern, a hard boundary becoming a paid option rather than disappearing outright, is arguably as informative about NordVPN’s current direction as any single feature.
The honest verdict is conditional rather than absolute: strong where your needs match the well-evidenced core, and dependent on an active, informed purchase or platform decision everywhere else.
The STACK View
Until Dedicated Server launched in June 2026, “does NordVPN support port forwarding?” had a flat practical answer: no.
Dedicated Server changes that answer by changing the product boundary. Port forwarding still isn’t available on the standard shared VPN or Dedicated IP. It now exists elsewhere inside NordVPN’s offering, as its own purchase, with its own four cities, its own excluded platforms, and its own product and assurance boundaries, with no independent security or operational assessment located in the current record. The capability didn’t disappear from the “no” column and reappear in the “yes” column. It moved into a third column: available, if you’re willing to buy a separate, newer, less independently checked product to get it.
That’s worth noticing beyond this one feature, because it’s a pattern, not an isolated decision. A company can respond to a hard product boundary in more than one way. It can rebuild the core product to remove the boundary, the way P2P access was opened up across all standard servers. Or it can leave the boundary in place for the base product and sell a way around it. NordVPN has now done both, in the same year, for two different limitations. The port-forwarding fix looks generous on the surface. It’s also a commercial decision: the capability that used to be a flat “no” for every subscriber is now a “yes” that specifically requires a new charge and a new product with a thinner evidence trail.
None of this means Dedicated Server is a bad option for someone who needs what it does. It means the honest way to read NordVPN’s expanding feature list is to ask, each time, whether a capability sits inside what you already pay for, or whether it’s been moved into something you’d need to buy separately to reach. The list keeps growing either way. Only one kind of growth actually changes what you get without asking anything more of you.
FAQs
Is NordVPN good in 2026? Its core VPN is well evidenced: solid independently tested performance, P2P support across all standard servers, and meaningful streaming access. Whether it’s a good fit depends on whether your specific requirements, platform, add-on needs, budget past the promotional term, sit inside that core product or at one of its boundaries.
Is NordVPN safe? NordVPN’s core protocol architecture (NordLynx/WireGuard) is well established, and its assurance history includes a repeated no-logs review pattern and periodic technical security assessments, including a 2025 Cure53 assessment that found and remediated two high-severity issues. Continuous, fleet-wide verification of infrastructure claims isn’t established in the public record. That’s an evidence boundary, not a known flaw.
Is NordVPN private? NordVPN states it keeps no activity or identity-linked logs, backed by six disclosed no-logs assurance engagements. Account and billing data exist, and some cross-product data architecture remains unresolved. For the fuller privacy picture, see [INTERNAL LINK CANDIDATE: Is NordVPN Private?].
Is NordVPN fast? Recent independent 10 Gbps test environments measured nearby NordLynx throughput around 1.25 Gbps, with a separate, lower Security.org result under different test conditions. Results vary by tester, protocol, and distance from the server.
Does NordVPN work with Netflix? Current independent testing found successful access to multiple Netflix libraries, alongside failures on specific other services in specific regions. Access isn’t guaranteed for every service-region combination.
Is NordVPN good for torrenting? Yes, under current policy. All standard NordVPN servers now support P2P traffic, removing the older requirement to use specialty servers.
Does NordVPN support port forwarding? Not on the standard shared VPN or on Dedicated IP. Port forwarding is available through NordVPN’s separate Dedicated Server add-on, which launched in June 2026 and starts at $11.99/month.
What’s the difference between Dedicated IP and Dedicated Server? Dedicated IP gives you a static, account-linked IP address on shared underlying infrastructure. NordVPN describes Dedicated Server as giving you dedicated CPU, RAM, and bandwidth, a static IP, and port forwarding, currently available in four launch locations.
How many devices can use NordVPN? The standard plan supports 10 simultaneous VPN connections. Meshnet, a separate free feature, supports up to 10 of your own devices plus 50 external peer connections.
Does NordVPN have split tunneling? On Windows, Android, and Android TV, yes. Linux uses a different allowlisting mechanism. No app-level split tunneling is currently established on macOS or iOS.
Is NordVPN worth the renewal price? That depends on whether the core product, or an add-on you need, matches your requirements at $139.08/year (Basic), $219.48/year (Complete), or $296.28/year (Prime), the renewal figures, not the promotional introductory rate.