Your IP: Unknown · Your Status: Protected

Your security is our priority

We are always working hard to make sure you are protected online. Our efforts are led by a team of 170+ tech experts, including programmers, security specialists, and IT architects. Here’s what we’re doing to give you the most secure VPN experience.

Our 2020 security roadmap

partner with cybersec thought leaders

Partnering with cybersec thought leaders

We’ve partnered with VerSprite, a leading US cybersecurity consulting firm, to help improve our service. To follow up on the promise, we are building an Advisory Security Council of international cybersec experts.


bug bounty program

Bug bounty program

Helped by our community, we run a continuous bug bounty program to catch potential vulnerabilities.


infrastructure security audit

Infrastructure security audit

We successfully completed a second no-log policy assurance engagement, performed by PricewaterhouseCoopers AG (PwC) Switzerland. We will invite VerSprite to scour NordVPN’s apps for any vulnerabilities to follow up on our 2019 efforts.


higher security standards for vendors

Higher security standards for vendors

Together with VerSprite, we set security standards for the datacenters we work with and make sure they comply with them. We have also begun to build a network of collocated servers, owned exclusively by NordVPN.


diskless servers

Diskless servers

We are planning to upgrade to RAM servers, creating a centralized network where no data is stored locally.


Protecting our infrastructure

Key security measures

internal penetration testing

Internal penetration testing

Our professional penetration testing team constantly probes the NordVPN infrastructure for weaknesses. These experts simulate real-world attacks to expose and patch up vulnerabilities.

bug bounty

Bug bounty

We are continuously running a bug bounty program on HackerOne for ethical hackers to report security flaws for monetary reward. We encourage our community to analyze NordVPN’s website, apps, and services.

nord servers check

Third-party audits

NordVPN completed a second test of its no-logs policy in 2020, and an app security audit in 2019. Next year, we’re planning to audit our infrastructure — hardware, software, back-end architecture, source code, and internal procedures.

ddos protection shield

External security partner VerSprite

NordVPN has partnered with VerSprite, a global leader in cybersecurity consulting and advisory services. VerSprite will be performing a comprehensive penetration test, examining our intrusion handling, and providing us with vendor risk assessments.

man speedometer fast red

NordLynx protocol

We have recently deployed NordLynx, a technology built around WireGuard®, which is the fastest VPN protocol on the market. Despite being the fastest, WireGuard® has some security drawbacks. Since we couldn’t compromise our customers’ privacy, we developed a custom double NAT (Network Address Translation) system to ensure top-notch security around unparalleled speed capabilities.

Comprehensive security through our products



NordVPN is the world’s most trusted online security solution, used by over 14 million internet users worldwide. It offers next-generation encryption with advanced privacy solutions to ensure secure access to all your favorite online resources.



NordPass is a next-gen password manager built with your security in mind. Through advanced cryptography and zero-knowledge architecture, NordPass protects your online accounts while fully respecting your privacy.



NordLocker is an easy-to-use file encryption tool. Anything encrypted with the app can be safely stored or shared with others, making sure that your confidential data is safe in the event of theft or breach.



NordLayer combines flexible online access with powerful encryption. Designed for business needs, it offers dedicated company servers, static IP addresses, third-party authentication, and more.

Lessons we’ve learned

Earning your trust

vpn trust initiative

VPN Trust Initiative

In December 2019, NordVPN became a founding member of the VPN Trust Initiative. Led by the i2Coalition, the organization aims to give VPNs a unified voice in U.S. internet policy, focusing on stronger consumer digital security.

signing the promise letter

Our promise

  • We do not collect traffic logs and cannot be compelled to by anyone else.
  • We never willingly provide user data, private keys, personal information, or access to a third party.
  • We cannot be (and have never been) compelled to modify our systems to allow third party access.
  • We confirm that we have full control over our infrastructure.

Warrant Canary

We, NordVPN, confirm that we take full control of our infrastructure. We have never willingly disclosed any user data or provided any access to user traffic to any third party. We do not collect user traffic logs and have never been compelled to do so by any third party. We have not disclosed any private keys or any information of our users, and we have not been forced to modify our system to allow access or data leakage to a third party of any kind.

As of 2021-10-19 we state the following:

  • success
    We have NOT received any National Security letters;
  • success
    We have NOT received any gag orders;
  • success
    We have NOT received any warrants from any government organization.

We are 100% committed to our zero-logs policy – we never log the activities of our users to ensure their ultimate privacy and security.

Noticed anything suspicious?

If you detected anything unusual with our service, please email immediately.