NordVPN Review 2026: Still the Best VPN for Privacy?
NordVPN remains a sound privacy pick for anyone who wants an audited no-logs service, with Deloitte completing its sixth independent no-logs engagement in early 2026. Its 12-month plan costs £4.09 a month, which comes to £49.08 for the year.
The VPN Advisor's own comparison data, last checked between September 2026 and October 2026, rates NordVPN 4.4 stars and supplies the price, speed and feature figures here.
NordVPN keeps no logs under Panama law
NordVPN keeps no activity logs, so the sites you visit, files you download and apps you use leave no record with it. Connection details such as your incoming and outgoing IP, session date and length, data moved and servers used are not kept either. Audits back this up, confirming no stored connection timestamps or connecting IP addresses.
Panama is NordVPN's base, and its law governs the company. With no mandatory data retention law there, the company has no legal duty to store logs, it says. Panama also sits outside the 5, 9 and 14 Eyes data-sharing alliances. NordVPN belongs to Nord Security, a Lithuanian company that also makes NordPass and NordLocker.
Six no-logs audits since 2018
NordVPN put its no-logs policy in front of an independent auditor in 2018, the first major VPN provider to do so. PwC found no logs of connection data or browsing activity that year. PwC AG in Switzerland returned in 2020 for a follow-up to the 2018 assessment and judged NordVPN compliant as of May 28 of that year. That second engagement took in Standard VPN, Double VPN, Obfuscated (XOR) VPN and P2P servers along with the central infrastructure. Users can read that report in their accounts.
Deloitte took over the audits after 2020. Its late-2023 review went through the Tor, P2P, Double VPN and obfuscated servers without finding evidence that any of them logged. Deloitte's sixth review came in February 2026, with its auditors inspecting the servers and the app's source code. Besides PwC and Deloitte, Cure53 has audited NordVPN too. Gizmodo's own testing caught no leaks from it at all.
A 2018 intrusion reached one NordVPN server
Intruders reached a NordVPN server that went online on January 31, 2018. Evidence found on May 3 that year pointed to a break-in around March 5. No user credentials were affected, according to the company. The intruder showed no sign of trying to watch traffic either. The attacker took TLS keys, though NordVPN says they could not decrypt any of its traffic. Because the same intruder published attacks on two other VPN providers, the company does not believe it was the target.
RAM servers and NordLynx protect each session
NordVPN servers have no disks and run from RAM, so a seized machine holds nothing that lasts. NordLynx, the company's technology built around WireGuard, has carried connections since 2020. The company recommends NordLynx and makes it the default in most apps. It describes NordLynx as much faster than OpenVPN, with speed results among the highest of any commercial VPN, and points gamers to it. On Linux, the command nordvpn set technology nordlynx turns it on. NordVPN's connection protocols are OpenVPN, WireGuard and IKEv2.
In NordVPN's view WireGuard alone is still experimental and may carry unresolved bugs. A double NAT system gives everyone on a server one shared local IP while each tunnel gets its own exit IP. Sign-in runs on a separate secure server, away from the VPN server. Tunnel IPs are destroyed when your session ends.
On a restrictive network, NordLynx's UDP traffic is easy to spot and can be blocked, leaving OpenVPN over TCP as the way through. Picking another protocol in the settings takes NordLynx out of the connection.
NordVPN's speed, features and gaps
The VPN Advisor's figures put NordVPN at 96 Mbps, with latency of 20.79 ms. Servers reach 150 countries, and one account covers 10 devices at once. Netflix, BBC iPlayer, Hulu, Disney+ and Amazon Prime Video all work with it. Its apps are open source. Crypto and cash are both accepted as payment. A dashboard view reached iOS and Android in February 2026, finishing its rollout across the main platforms. To reach a city-level server you now pick a country, open the options and choose the city.
NordVPN's Double VPN servers send your traffic through two servers in a row. Its Onion Over VPN servers carry you into the Tor network from inside the VPN. NordVPN has no ad and tracker blocker. Nor does it offer a dedicated IP as a standard option.
NordVPN stays a privacy pick in 2026
Choose NordVPN if your priority is a provider whose no-logs promise keeps being tested, since six engagements back it and its Panama base asks for no data retention. You give up a built-in ad blocker. A reader on a restrictive network is better served by switching NordVPN to OpenVPN over TCP in the settings, because NordLynx's easily spotted UDP traffic can be blocked there. Anyone after extra anonymity can route through two servers or into Tor on server types the audits already covered.
