NordVPN

From Wikipedia, the free encyclopedia
NordVPN
NordVPNhorizontal.svg
Developer(s)NordVPN s.a.[1][2]
Initial releaseFebruary 13, 2012; 9 years ago (February 13, 2012)[3]
Stable releaseAndroid 5.10.1 (December 15, 2021; 9 days ago (2021-12-15)[4])

iOS 7.6.1 (December 6, 2021; 18 days ago (2021-12-06)[5])
macOS 7.1.0 (December 20, 2021; 4 days ago (2021-12-20)[6])
Windows 6.41.11 (December 17, 2021; 7 days ago (2021-12-17))

Linux 3.12.2 (December 16, 2021; 8 days ago (2021-12-16))
Operating system
Platform
TypeVirtual private network
LicenseCommercial proprietary software
Websitenordvpn.com

NordVPN is a VPN service with applications for Windows, macOS, Linux, Android, iOS, and Android TV.[7][8] Manual setup is available for wireless routers, NAS devices and other platforms.[9]

NordVPN is developed by Nord Security, a company that develops cybersecurity software. NordVPN operates under the jurisdiction of Panama, as the country has no mandatory data retention laws and does not participate in the Five Eyes or Fourteen Eyes intelligence sharing alliances. Its offices are located in Lithuania, United Kingdom, and Netherlands.[10]

History[]

NordVPN was established in 2012 by a group of childhood friends which included Tom Okman.[11] Late in May 2016, it presented an Android app, followed by an iOS app in June the same year.[12] In October 2017, it launched a browser extension for Google Chrome.[13] In June 2018, the service launched an application for Android TV.[14] As of June 2021, NordVPN was operating 5,600 servers in 59 countries.[15]

In March 2019, it was reported that NordVPN received a directive from Russian authorities to join a state-sponsored registry of banned websites, which would prevent Russian NordVPN users from circumventing state censorship. NordVPN was reportedly given one month to comply, or face blocking by Russian authorities.[16] The provider declined to comply with the request and shut down its Russian servers on April 1. As a result, NordVPN still operates in Russia, but its Russian users have no access to local servers.[17]

In September 2019, NordVPN announced NordVPN Teams, a VPN solution aimed at small and medium businesses, remote teams and freelancers, who need secure access to work resources.[18] Two years later, NordVPN Teams rebranded as NordLayer and moved towards SASE business solutions.[19] The press sources quoted the market rise in SASE technology as one of the key factors in the rebrand.[20]

On October 29, 2019, NordVPN announced additional audits and a public bug bounty program.[21] The bug bounty was launched in December 2019, offering researchers monetary rewards for reporting critical flaws in the service.[22]

In December 2019, NordVPN became one of the five founding members of the newly formed 'VPN Trust Initiative', promising to promote online security as well as more self-regulation and transparency in the industry.[23][24] In 2020, the initiative announced 5 key areas of focus: security, privacy, advertising practices, disclosure and transparency, and social responsibility.[25]

In August 2020, Troy Hunt, an Australian web security expert and founder of Have I Been Pwned?, announced a partnership with NordVPN as a strategic advisor. On his blog, Hunt described this role as "work with NordVPN on their tools and messaging with a view to helping them make a great product even better."[26]

In October 2020, NordVPN started rolling out its first colocated servers in Finland to secure the hardware perimeter. The RAM-based servers are fully owned and operated by NordVPN in an attempt to keep full control.[27][28]

Technology[]

NordVPN routes all users' internet traffic through a remote server run by the service, thereby hiding their IP address and encrypting all incoming and outgoing data.[29] For encryption, NordVPN has been using the OpenVPN and Internet Key Exchange v2/IPsec technologies in its applications[30] and also introduced its proprietary NordLynx technology in 2019.[31] NordLynx is a VPN tool based on the WireGuard protocol, which aims for better performance than the IPsec and OpenVPN tunneling protocols.[32] According to tests performed by Wired UK, NordLynx produces "speed boosts of hundreds of MB/s under some conditions."[33]

In April 2020, NordVPN announced a gradual roll-out of the WireGuard-based NordLynx protocol on all its platforms.[34] The wider implementation was preceded by a total of 256,886 tests, which included 47 virtual machines on nine different providers, in 19 cities, and eight countries. The tests showed higher average download and upload speeds than both OpenVPN and IKEv2. [35]

At one time NordVPN also used L2TP/IPSec and Point-to-Point Tunneling Protocol (PPTP) connections for routers, but these were later removed, as they were largely outdated and insecure.

NordVPN has desktop applications for Windows, macOS, and Linux, as well as mobile apps for Android and iOS and Android TV app. Subscribers also get access to encrypted proxy extensions for Chrome and Firefox browsers.[36] Subscribers can connect up to six devices simultaneously.[37]

In November 2018, NordVPN claimed that its no-log policy was verified through an audit by PricewaterhouseCoopers AG.[38][39]

In 2020, NordVPN underwent a second security audit by PricewaterhouseCoopers AG. The testing focused on NordVPN’s Standard VPN, Double VPN, Obfuscated (XOR) VPN, P2P servers, and the product’s central infrastructure. The audit confirmed that the company’s privacy policy was upheld and the no-logging policy was true again.[40]

In 2021, NordVPN completed an application security audit, carried out by a security research group VerSprite. VerSprite performed penetration testing and, according to the company, found no critical vulnerabilities. One flaw and a few bugs that were found in the audit have since been patched.[41][42]

In December 2020, NordVPN started a network-wide rollout of 10 Gbit/s servers, upgrading from the earlier 1 Gbit/s standard. The company's servers in Amsterdam and Tokyo were the first to support 10 Gbit/s, and by December 21, 2020, over 20% of the company's network had been upgraded.[43][44]

Additional features[]

Besides general-use VPN servers, the provider offers servers for specific purposes, including P2P sharing, double encryption, and connection to the Tor anonymity network.[45] NordVPN offers three subscription plans: monthly, yearly and bi-yearly.

NordVPN also develops CyberSec for Windows, macOS, and Linux platforms, a security feature that works as an ad-blocker and also automatically blocks websites known for hosting malware.[46]

In November 2020, NordVPN launched a feature that scans the dark web to determine if a user's personal credentials have been exposed. When the Dark Web Monitor feature finds any leaked credentials, it sends a real-time alert, prompting the user to change the affected passwords.[47]

Research[]

In 2021, NordVPN conducted a study on digital literacy, surveying 48,063 respondents from 192 countries on their digital habits and rating their knowledge on the scale from 1 to 100. Germany topped the list, followed by the Netherlands and Switzerland. The overall global score was 65.2/100.[48]

In July 2021, NordVPN released a report outlining the proliferation of smart devices and consumer sentiment regarding their security.[49] The poll of 7000 people revealed that while 95% of people in the UK had some kind of an IoT device in their household, almost a fifth took no measures to protect them. Similar responses were found in respondents from other countries as well.[50] The same year, NordVPN released a report about device sharing in workplace. The study found that managers are five times more likely to share their work devices than their employees.[51]

NordVPN also conducted a study on the time people spend online. In a survey of 2,000 adults in the UK, NordVPN found that, on average, British people spend 59 hours online per week, which amounts to 22 years per lifetime.[52]

Social responsibility[]

NordVPN has supported various social causes, including cybercrime prevention, education, internet freedom, and digital rights.[53][54][55][56] NordVPN offers emergency VPN services for activists and journalists in regimes that censor internet freedom.[57] In 2020, NordVPN reported having donated over 470 emergency VPN accounts to citizens and NGOs from Hong Kong and given out additional 1,150 VPN licenses to various organizations.[58]

In 2020, NordVPN supported the Internet Freedom Festival, a project promoting digital human rights and internet freedom.[59] NordVPN also sponsors the Cybercrime Support Network, a non-profit organization that assists people and companies affected by cybercrime.[60] In response to the COVID-19 pandemic, NordVPN’s parent company Nord Security offered free online security tools (NordVPN, NordPass, and NordLocker) to affected nonprofit organizations, content creators, and educators.[61]

In 2021, NordVPN proposed the International VPN Day, a day to bring attention to people's right to digital privacy, security, and freedom. It is proposed to be annually observed on August 19.[62] Its primary goal is to raise awareness about cybersecurity best practices and educate internet users about the importance of online privacy tools and cybersecurity in general. [63]

Reception[]

In a positive review published by Tom's Guide in October 2019, the reviewer concluded that "NordVPN is affordable and offers all the features that even the hardcore VPN elitists will find suitable".[64] The reviewer also noted that its terms of service mention no country of jurisdiction, writing that the company could be more transparent about its ownership.[65]

In a February 2019 review by PC Magazine, NordVPN was praised for its strong security features and an "enormous network of servers", although its price tag was noted as expensive.[45] In a later review by the same magazine, NordVPN was again praised extra features, rarely found in other VPNs, its WireGuard protocol, large selection of servers, and strong security practices. Despite winning the outlet’s Editor’s Choice award, NordVPN was still noted as expensive.[66]

CNET's September 2021 review favorably noted NordVPN's SmartPlay feature, obfuscated servers, and security efforts. While CNET praised NordVPN’s user-friendly interface, it noted that the map’s design could be improved.[67]

TechRadar recommended NordVPN for its security and recent enhancements. It also noted that NordVPN worked well in countries with Internet censorship, including the Great Firewall in China.[68]

In 2021, a favorable review by Wired noted that NordVPN’s price has become more affordable and concluded that “NordVPN is the fastest jack-of-all-trades VPN provider right now.” However, the article also noted that there are still cheaper VPN options available.[69]

Awards[]

In 2019, NordVPN won the ‘Best Overall’ category in ProPrivacy.com VPN Awards.[70] In 2020, NordVPN won in German CHIP magazine’s ‘Best security of the VPN services’ category.[71] In September 2021, NordVPN won CNET’s ‘Best VPN for reliability and security’ award in its annual ‘Best VPN service’ awards.[72]

Criticism[]

On October 21, 2019, a security researcher disclosed on Twitter a server breach of NordVPN involving a leaked private key.[73][74][75] The cyberattack granted the attackers root access, which was used to generate an HTTPS certificate that enabled the attackers to perform man-in-the-middle attacks to intercept the communications of NordVPN users.[76] In response, NordVPN confirmed that one of its servers based in Finland was breached in March 2018, but there was no evidence of an actual man-in-the-middle attack ever taking place.[77][78] The exploit was the result of a vulnerability in a contracted data center's remote administration system that affected the Finland server between January 31 and March 20, 2018.[77] According to NordVPN, the data center disclosed the breach to NordVPN on April 13, 2019, and NordVPN ended its relationship with the data center.[78] Security researchers and media outlets criticized NordVPN for failing to promptly disclose the breach after the company became aware of it.[75][74][79] NordVPN stated that the company initially planned to disclose the breach after it completed the audit of its 5,000 servers for any similar risks.[75]

On November 1, 2019, in a separate incident, it was reported that approximately 2,000 usernames and passwords of NordVPN accounts were exposed through credential stuffing.[80][81]

See also[]

References[]

  1. ^ "General Terms of Service". nordaccount.com. Retrieved April 23, 2021.
  2. ^ "Nordvpn S.A." App Store. Retrieved April 23, 2021.
  3. ^ Nadel, Brian (April 10, 2018). "NordVPN Review: Easy But Slow". Tom's Guide. Retrieved May 4, 2019.
  4. ^ NordVPN (December 15, 2021). "NordVPN - Fast & Secure VPN". Google Play. Google. Retrieved December 20, 2021.
  5. ^ NordVPN (December 6, 2021). "VPN: Fast & Unlimited NordVPN". App Store. Apple. Retrieved December 7, 2021.
  6. ^ NordVPN (December 20, 2021). "VPN by NordVPN - Web Security". Mac App Store. Apple. Retrieved December 20, 2021.
  7. ^ Schofield, Jack (November 24, 2016). "How can I protect myself from government snoopers?". The Guardian. Retrieved February 22, 2018.
  8. ^ Caruana, Anthony (June 19, 2018). "NordVPN Launches Android TV App". Lifehacker Australia. Retrieved June 19, 2018.
  9. ^ Tiwari, Aditya (October 29, 2017). "NordVPN In-Depth Review: A Reliable VPN For Security And Performance". fossbytes.com. Retrieved February 19, 2018.
  10. ^ David Gewirtz (May 22, 2020). "Meet NordSec: The company behind NordVPN wants to be your one-stop privacy suite". ZDNet. Retrieved April 9, 2021.
  11. ^ Bozovic, Novak (August 18, 2021). "Who Owns NordVPN? Can You Really Trust This VPN?". technadu.com. Retrieved September 28, 2021.
  12. ^ Vigliarolo, Brandon (July 1, 2016). "NordVPN offers powerful mobile VPN service and app, but there's Wi-Fi gotcha". techrepublic.com. Retrieved May 4, 2019.
  13. ^ Real, Mark (October 3, 2017). "NordVPN Launches Extension For Google Chrome Browser". androidheadlines.com. Retrieved May 4, 2019.
  14. ^ Maxham, Alexander (June 19, 2018). "NordVPN Is Now Available On Android TV". androidheadlines.com. Retrieved May 4, 2019.
  15. ^ Eddy, Max; Key, Kim (June 25, 2021). "NordVPN Review". PC Magazine. Retrieved September 28, 2021.
  16. ^ "Russia Threatens to Block Popular VPN Services to Prevent Website Access". Reuters. March 29, 2019. Retrieved May 4, 2019 – via The Moscow Times.
  17. ^ Bozovic, Novak (March 30, 2019). "Russian VPN Ban – What Happens Next? Can VPNs Be Fully & Completely Blocked in Russia?". technadu.com. Retrieved May 4, 2019.
  18. ^ Spadafora, Anthony (September 12, 2019). "NordVPN Teams is a VPN solution for businesses". TechRadar. Retrieved November 20, 2019.
  19. ^ "Goodbye NordVPN Teams – Hello NordLayer!". nordlayer.com. Retrieved 2021-09-27.
  20. ^ "NordVPN Teams rebrands as NordLayer, moves towards SASE business solutions". CyberNews. 2021-09-14. Retrieved 2021-09-27.
  21. ^ Kan, Michael (October 29, 2019). "NordVPN Beefs Up Security With Audit, Bug Bounty Program". PC Magazine. Retrieved November 14, 2019.
  22. ^ Spadafora, Anthony (December 10, 2019). "NordVPN boosts security with new bug bounty program". TechRadar. Retrieved January 21, 2019.
  23. ^ Bozovic, Novak (December 12, 2019). "Industry-Leading i2Coalition Launches 'VPN Trust Initiative' for Promoting Internet Safety". technadu.com. Retrieved January 21, 2019.
  24. ^ Eddy, Max (December 19, 2019). "Can a New Alliance Help VPN Companies Prove Themselves Trustworthy". PCMag. Retrieved January 21, 2019.
  25. ^ "i2Coalition's VPN Trust Initiative (VTI) Unveils the VTI Principles". Yahoo! Finance. September 29, 2020. Retrieved September 28, 2021.
  26. ^ Troy, Hunt (August 7, 2020). "I'm Partnering with NordVPN as a Strategic Advisor". Retrieved August 7, 2020.
  27. ^ Athow, Desire (October 6, 2020). "NordVPN unleashes colocated servers for greater security". TechRadar. Retrieved November 17, 2020.
  28. ^ Nichols, Shaun (October 12, 2020). "One year after server hackers left NordVPN red-faced, firm's first colocated setup is online". The Register. Retrieved November 17, 2020.
  29. ^ TJ, McCue (June 20, 2019). "How Does A VPN Work?". Forbes. Retrieved November 21, 2019.
  30. ^ Athow, Desire (July 26, 2018). "How to choose a security protocol in the NordVPN Windows and Android apps". TechRadar. Retrieved July 15, 2019.
  31. ^ Eddy, Max (August 14, 2019). "The VPN Industry Is on the Cusp of a Major Breakthrough". PCMag. Retrieved November 15, 2019.
  32. ^ Preneel, Bart; Vercauteren, Frederik, eds. (11 June 2018). Applied Cryptography and Network Security. Springer. ISBN 978-3-319-93387-0. Archived from the original on 18 February 2019. Retrieved 15 November 2019.
  33. ^ Orphanides, K.G (October 19, 2019). "Cloudflare 1.1.1.1 with Warp review: faster browsing, but not a real VPN". Wired UK. Retrieved November 15, 2019.
  34. ^ Wagenseil, Paul (April 22, 2020). "NordVPN is about to get a lot faster — thanks to WireGuard". Tom's Guide. Retrieved November 17, 2020.
  35. ^ Toulas, Bill (April 24, 2020). "NordVPN Implements NordLynx "WireGuard" on All Its Platforms". technadu.com. Retrieved April 27, 2020.
  36. ^ Paul, Ian (July 6, 2017). "NordVPN review: A great choice for Netflix fans, but who's running the show?". PC World. Retrieved May 4, 2019.
  37. ^ "NordVPN review: Still the best value for security and speed". cnet.com. Retrieved 3 February 2020.
  38. ^ Eddy, Max (October 23, 2019). "NordVPN". PCMag UK. Retrieved November 14, 2019.
  39. ^ Orphanides, K. G. (May 10, 2019). "The best VPNs to keep your browsing safe and secure". Wired UK. ISSN 1357-0978. Retrieved November 14, 2019.
  40. ^ Harber-Lamond, Mo (July 1, 2021). "Independent audit confirms NordVPN's no-log policy for the second time". Tom's Guide. Retrieved September 28, 2021.
  41. ^ Toulas, Bill (June 23, 2021). "NordVPN Completed Aggressive Security Audit by VerSprite With No Worrying Findings". technadu.com. Retrieved September 28, 2021.
  42. ^ Spadafora, Anthony (June 23, 2021). "NordVPN passes major security test". TechRadar. Retrieved September 28, 2021.
  43. ^ Harber-Lamond, Mo (December 25, 2020). "NordVPN begins worldwide speed upgrade with 10 Gbit/s server rollout". Tom's Guide. Retrieved December 30, 2020.
  44. ^ Spadafora, Anthony (December 22, 2020). "This VPN giant is getting a major speed upgrade". TechRadar. Retrieved December 30, 2020.
  45. ^ a b Eddy, Max (February 28, 2019). "NordVPN". PC Magazine (British magazine). Retrieved May 4, 2019.
  46. ^ Allen, Jennifer (September 24, 2021). "NordVPN vs. ExpressVPN: Which VPN is best for you?". Digital Trends. Retrieved September 28, 2021.
  47. ^ Ballard, Barclay (November 16, 2020). "NordVPN adds Dark Web credential monitor to protect your identity". TechRadar. Retrieved November 17, 2020.
  48. ^ Hariharan, Sindhu (June 28, 2021). "India fails in cybersecurity literacy test: Study". India Times. Retrieved September 29, 2021.
  49. ^ Adams, R. Dallon (July 21, 2021). "Cybersecurity lags behind as IoT devices proliferate, according to a new report". techrepublic.com. Retrieved September 29, 2021.
  50. ^ Fadilpašić, Sead (July 21, 2021). "Many users are still doing nothing to protect our IoT devices". TechRadar. Retrieved September 29, 2021.
  51. ^ Fadilpašić, Sead (June 21, 2021). "Sharing devices at work could be your company's biggest security risk". TechRadar. Retrieved September 29, 2021.
  52. ^ Hughes, Alice (April 22, 2021). "How much time do Britons spend online?". The Independent. Retrieved September 29, 2021.
  53. ^ "Funding". Access Now. Retrieved September 29, 2021.
  54. ^ "Corporate supporters". Open Rights Group. Retrieved September 29, 2021.
  55. ^ "Cybercrime Support Network and NordVPN Announce New Leadership Sponsorship". prnewswire.com. March 26, 2019. Retrieved September 29, 2021.
  56. ^ "Funding". European Digital Rights. Retrieved September 29, 2021.
  57. ^ Bischoff, Paul (May 10, 2021). "NordVPN Review 2021". comparitech.com. Retrieved September 29, 2021.
  58. ^ Year in Review 2020 (PDF) (Report). NordVPN. p. 9. Retrieved September 29, 2021.
  59. ^ "Announcing the VPN Village!". internetfreedomfestival.org. July 31, 2020. Retrieved September 29, 2021.
  60. ^ "CSN Strengthens Partnership with the Cybersecurity and Infrastructure Security Agency (CISA)". cybercrimesupport.org. Retrieved September 29, 2021.
  61. ^ Toulas, Bill (December 23, 2020). "NordVPN Gives Six Months of Free Services to Educators". technadu.com. Retrieved September 29, 2021.
  62. ^ August 2021, Mike Williams 19 (2021-08-19). "Why the time is right for International VPN Day". TechRadar. Retrieved 2021-08-26.
  63. ^ August 2021, Mo Harber-Lamond 19 (2021-08-19). "It's International VPN Day, but why should you care?". Tom's Guide. Retrieved 2021-08-26.
  64. ^ Fadilpašić, Saed (October 15, 2019). NordVPN Review: Excellent Price/Quality Ratio. Tom's Guide. Retrieved: February 5, 2020.
  65. ^ Nadel, Brian (April 10, 2018). "NordVPN Review: Easy But Slow". Tom's Guide. Archived from the original on April 14, 2018.
  66. ^ Eddy, Max; Key, Kim (June 25, 2021). "NordVPN Review". PC Magazine. Retrieved September 29, 2021.
  67. ^ Hodge, Rae (September 8, 2021). "NordVPN review: An encryption powerhouse with the biggest VPN bang for your buck". CNET. Retrieved September 29, 2021.
  68. ^ Williams, Mike. "NordVPN review". TechRadar. Retrieved September 29, 2021.
  69. ^ Orphanides, K.G. "The best VPN services tested for speed, reliability and privacy". Wired. Retrieved September 29, 2021.
  70. ^ "VPN Awards 2019". proprivacy.com. Retrieved September 29, 2021.
  71. ^ Geiger, Joerg. "VPN-Anbieter-Test: Sicher surfen und Ländersperren umgehen". CHIP. Retrieved September 29, 2021.
  72. ^ Hodge, Rae; Holly, Russell; Gewirtz, David. "Best VPN service of 2021". CNET. Retrieved September 29, 2021.
  73. ^ Turton, William (October 21, 2019). "After Twitter Allegations, Nord VPN Discloses 2018 Breach". Bloomberg. Retrieved November 14, 2019.
  74. ^ a b Whittaker, Zack (October 21, 2019). "NordVPN confirms it was hacked". TechCrunch. Retrieved October 24, 2019.
  75. ^ a b c Hodge, Rae (November 1, 2019). "After the breach, Nord is asking people to trust its VPN again". CNET. Retrieved November 14, 2019.
  76. ^ Goodin, Dan (October 21, 2019). "Hackers steal secret crypto keys for NordVPN. Here's what we know so far". Ars Technica. Retrieved November 14, 2019.
  77. ^ a b Kastrenakes, Jacob (October 21, 2019). "NordVPN reveals server breach that could have let attacker monitor traffic". The Verge. Retrieved October 24, 2019.
  78. ^ a b "Why the NordVPN network is safe after a third-party provider breach". NordVPN. October 21, 2019. Retrieved October 24, 2019.
  79. ^ Eddy, Max (October 23, 2019). "NordVPN and TorGuard VPN Breaches: What You Need to Know". PC Magazine. Retrieved November 14, 2019.
  80. ^ Goodin, Dan (November 1, 2019). "NordVPN users' passwords exposed in mass credential-stuffing attacks". Ars Technica. Retrieved November 14, 2019.
  81. ^ Al-Heeti, Abrar (November 1, 2019). "NordVPN user accounts compromised and passwords exposed, report says". CNET. Retrieved November 14, 2019.

External links[]

Retrieved from ""