NORDVPN review: Speedy, loaded with features, and greater transparency
Nordvpn’s leadership is starting to go public, and the services it offers are getting better.
It’s been more than two years since we reviewed NORDVPN, and the last time around we awarded it top honors as our favorite VPN for its speed, features, and overall value.
NORDVPN offers a fantastic service, and Nordsec, the umbrella brand for NORDVPN parent company Tefincom S.A., has gone beyond VPNS with new products including a password manager and a file encryption app for the desktop.
But NORDVPN is one of those services with an exotic location and, until recently, an anonymous leadership. To use a VPN with any degree of confidence, you have to implicitly trust the company, which is why we prefer to know who’s running things, and it’s fantastic that co-founder Tom Okman ( go.macworld.com/tmok) is
now someone we can point to as leading Nordsec.
Despite any promises about privacy, there is really nothing stopping a VPN service from logging your traffic (and keeping it), spying on you, or carrying out other malicious activities. You’re putting your web surfing traffic into the company’s hands, and more often than not you’re installing its desktop software to do it. When it comes to VPNS, trust is everything.
To help with this, NORDVPN is doing a lot to offer greater transparency. Beyond going public with some of its leadership, the company announced the completion of its second privacy policy audit in July 2020 ( go.macworld.com/padt).
The audit by Pricewaterhousecoopers Switzerland found that NORDVPN was compliant with its no-logging policy as of May 28, 2020. Since servers can be reconfigured anytime, a security audit can only guarantee that the VPN complied with its own privacy policies at the time that the audit was conducted.
Prior to that, in late 2019, NORDVPN asked Versprite to carry out a security audit of its apps ( go.macworld.com/sdad); it also hired a full-time penetration testing team to analyze its products.
SECURITY, SOFTWARE, SERVERS, AND SPEED
NORDVPN uses the IKEV2 VPN protocol by default, with AES-256-GCM for data encryption, TLS 1.2 with a 4096-bit DiffieHellman key for data authentication, and SHA-512 for the handshake. The service is also working toward using diskless servers, which run everything in RAM, including the OS. This is becoming a trend in VPN services, and NORDVPN takes a further security step to prevent any logs from being kept by removing the option of nonvolatile storage in the physical
machine. A NORDVPN representative told us the company plans to complete the transition to diskless servers by the end of August 2020.
When you open NORDVPN on Mac, you’ll see the interface is very similar to what it looked like two years ago in terms of design. The colors have changed a bit, but it’s the same interactive map with a left-side rail listing all the various country and server options. The beauty of Nordvpn’s design is that it serves both power users and novices. If all you want is a connection in the U.S., just click the map and you’re good to go.
Anyone who wants to drill down to find a specific server can hover over the country name in the left rail and click the three horizontal dots. A pop-out window then appears, showing every server in that country, with green or red dots showing how close to capacity a particular server is.
For larger countries (by land mass) such as Australia, Canada, and the U.S., there’s an additional option to connect by region, which is really just a list of major cities. In the U.S., for example, the list includes Atlanta, Buffalo, Charlotte, Chicago, Dallas, Denver, Los Angeles, Manassas, Miami, New York, Phoenix, Saint Louis, Salt Lake City, San Francisco, and Seattle. Selecting any of these regions automatically connects you to a server in those areas.
NORDVPN also offers a number of specialty services. There are Onion over VPN servers, which allow you to connect to the TOR network by going through Nordvpn’s servers first, and there are P2Pfriendly servers as well. NORDVPN also has a Double VPN option where you use multiple VPN servers before exiting out to the web. We didn’t see this option on the Mac version, but changing from the recommended protocol to OPENVPN gave us the Double VPN option, as well as an obfuscated-servers option for bypassing national firewalls in more repressive countries.
Dipping into Preferences → General, there is an option to turn on Cybersec, which blocks ads and malware at the server level. Here you can also change from the default Ikev2 protocol to OPENVPN or Nordlynx—the company’s adaptation of the Wireguard protocol.
NORDVPN also works with Netflix and other streaming services, though this is always a cat-and-mouse game, so expect technical issues from time to time.
NORDVPN offers more than 5,000 servers with 58 country locations.
In our speed tests using the app’s default settings, NORDVPN was at the top of its game, retaining nearly 57 percent of the base speed. That’s based on three days of testing using five different VPN locations.
PRICING
NORDVPN offers five different pricing plans. For a single year NORDVPN is $83.88, which works out to $6.99 per month. Two years is $119.76 ($4.99 per month), and three years is $125.64 ($3.49 per month). All of those annual plans require upfront payments. If you need to go month to month, it’s $11.95 per. NORDVPN accepts payments via credit card, Amazon Pay, Google Pay, and cryptocurrencies.
NORDVPN is one of the more expensive services if you pay for a single year instead of, say, three years. Nevertheless, it does offer a lot of value for the price, with multiple extra services, ad and tracker blocking, a ton of country options, and excellent speeds.
BOTTOM LINE
It’s hard not to love NORDVPN, and it remains our top pick for Mac users. If your main concern is maintaining privacy and as much anonymity as you can realistically achieve online, NORDVPN has gone a long way recently toward improving user trust.
NORDVPN is an excellent choice for anyone who wants to watch U.S. Netflix overseas, keep their IP concealed while gaming, or just secure their VPN while on open Wi-fi. ■