Plenty of people install a VPN expecting a free tier and a connect button. NordVPN gives you the second one only: the Windows, Mac, Android, and iOS apps open freely, then stop at a login screen that wants a paid account behind it. That payment covers speed few rivals match, a no-logging claim outside auditors have examined repeatedly, and a stack of extras most people will never switch on. Deciding whether to download NordVPN comes down to which of those you are actually paying for.
NordVPN’s case rests on speed and a checked privacy record
Two things separate NordVPN from the crowded middle of the VPN market. The first is NordLynx, the connection protocol Nordvpn S.A. built on top of WireGuard, which holds on to more of your line speed than the protocols most competitors ship. On a fast home line the difference between protected and unprotected browsing is hard to feel. The second is the paperwork: the no-logs claim has been through repeated outside assurance engagements rather than asserted once, and the servers hold nothing on disk. Neither point makes NordVPN cheap. What they do is answer the question most people ask before a NordVPN download, which is whether paying gets you anything a free VPN does not. Here it does, and the gap shows up in throughput and verification rather than in the interface.
The free version stops at Meshnet
The download is free; the VPN is not. Install the app without paying and you get Meshnet, which is genuinely useful for reaching your own machines remotely but does nothing to route your traffic through a server network. Every server, every specialty mode, and every protection feature sits behind a subscription. New Android users can start a short trial in the app, though it is blocked in several countries, and everyone else tests the product through the refund window instead. Plans stack from a basic VPN tier up through bundles adding file scanning, a password manager, and cloud storage, so the tier you need depends mostly on whether you want Threat Protection Pro on a desktop. Worth knowing before you commit: the low headline rate covers a multi-year first term, and the renewal lands considerably higher.
What does the NordVPN app include beyond a server list?
Behind that paywall sits something closer to a small security bundle than a single-purpose tunnel, which is the reason the tiers exist at all.
Protocols and the connection settings that matter
NordLynx runs by default and suits almost everyone. OpenVPN stays available for networks that block newer traffic patterns, IKEv2 exists on some systems through manual setup, and NordWhisper targets connections where ordinary VPN traffic gets filtered. Split tunneling lets chosen apps skip the tunnel, which matters for banking apps that dislike foreign IP addresses. The kill switch cuts your traffic if the tunnel drops, and it is worth switching on before you rely on the connection rather than after.
Threat Protection and what it blocks
Two features share one name, and the distinction decides whether the feature is useful to you. Threat Protection filters at the DNS level, blocks known bad domains and ads, and needs an active connection to a server. Threat Protection Pro adds file scanning on downloads and machine-learning checks on links, and it runs whether or not the tunnel is up, but it exists only in the Windows and Mac desktop apps and only on the higher plans. On phones you get the lighter version regardless of what you pay.
Coverage beyond phones and laptops
Alongside the desktop and mobile apps there are builds for Android TV and Apple TV, browser extensions for Chrome, Firefox, and Edge, and manual router setup for everything that cannot run an app, consoles included. Meshnet is the odd one out: it links your own devices into a private encrypted network for file transfers or for routing traffic through a machine at home. Dark Web Monitor watches for your details appearing in breach dumps, and dedicated IP is a paid add-on for people whose bank or workplace dislikes shared addresses.
Post-quantum encryption, specialty servers, and the logging question
Traffic runs under AES-256 or ChaCha20 depending on protocol, which is unremarkable and entirely fine. The interesting part sits in a setting most people never open.
The quantum-resistant handshake nobody turns on
Post-quantum encryption is the differentiator NordVPN leans on hardest in its own messaging, and it ships switched off. You enable it in Settings under Connection, it applies only to NordLynx sessions, and it silently does not cover obfuscated servers, dedicated IP, or Meshnet. That last exclusion is the awkward one, because the people who most need obfuscation to get a connection through a filtered network are exactly the ones the quantum-resistant handshake leaves out. On a normal connection the sensible setup is quick: sign in, leave the protocol on automatic unless the network blocks it, switch the post-quantum toggle on, and turn the kill switch on before you rely on the tunnel for anything sensitive.
Specialty servers and what has been audited
Double VPN routes through two servers, Onion Over VPN hands traffic to the Tor network on exit, and obfuscated servers disguise VPN traffic as ordinary encrypted browsing for networks that block VPNs outright. The no-logs statement has been examined by an outside audit firm across the standard, Double VPN, Onion Over VPN, and obfuscated server types, repeatedly rather than once. The record is not spotless: a single server at a rented data center was accessed years ago through a management tool the facility left running, which pushed the company toward memory-only servers and tighter control over its hardware.
NordVPN versus ExpressVPN, Surfshark, and Proton VPN
ExpressVPN is the closest straight rival and the easier app to hand to someone non-technical, with a strong reputation for getting through restrictive networks, but its Lightway protocol gives up more throughput than NordLynx and it costs more for fewer extras. Surfshark undercuts everyone and allows unlimited simultaneous devices, which makes it the sensible pick for a large family, though it trails on speed retention and has dropped features NordVPN still ships. Proton VPN is the one to take seriously on privacy grounds: open-source apps, a large server fleet, and a real free tier, at the cost of slower long-distance connections. Pick NordVPN if speed and feature breadth matter most, Surfshark if the bill matters more than the benchmark, and Proton VPN if you want to try a VPN properly before spending anything.
Throughput, protocol switching, and how the app feels day to day
Speed loss on NordLynx is small enough that streaming, calls, and general browsing feel identical to an unprotected connection on most home lines. Large downloads and long-distance servers are where any VPN shows its cost, and NordVPN loses less there than the alternatives. Switching to OpenVPN to get past a stubborn network drops throughput sharply, which is expected rather than a fault. The desktop app runs heavier than a bare tunnel client because the protection features sit in a background service, though it stays out of the way once connected.
The setups NordVPN suits, and the ones it does not
For a household that wants one fast VPN covering laptops, phones, a TV, and possibly a router, with an audited privacy record behind it, NordVPN is the safe pick and worth the download. Skip it if you want to try a VPN without entering payment details first, since Meshnet is all you get for free and a refund window is not a trial.
