a security bundle with a tunnel underneath

NordVPN logo, VPN service

NordVPN

last verified ·tracked since ·reviewed byOleh KemOleh Kem

NordVPN is a consumer VPN run by Nord Security, a company founded in Lithuania in 2012, and its two upper plans sell identity monitoring, antivirus, a password manager and cloud storage alongside the tunnel itself. As of , NordVPN costs $14.99 a month on Basic and $21.99 on Complete Max.

Price chart of the vpn category from 2 dollars 19 to 21 dollars 99 a month, plotted on a logarithmic price axis. Markers: CyberGhost at 2.19, ProtonVPN at 9.99, ExpressVPN at 14.99, Surfshark at 15.45. A dashed line crosses at the 12 dollars 49 category median. NordVPN holds the range from 14 dollars 99 to 21 dollars 99 with three tier posts at 14.99, 19.99, 21.99 dollars.

the $12.49 median
NordVPN range
$14.99 to $21.99
CyberGhost$2.19/moCyberGhostCyberGhost$2.19/mo-$12.80 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial CyberGhost siteProtonVPN$9.99/moProtonVPNProtonVPN VPN Plus$9.99/mo-$5 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial ProtonVPN siteExpressVPN$14.99/moExpressVPNExpressVPN Basic$14.99/mo+$0 vs the $14.99 entrychecked Aug 9, 2026See live pricingOfficial ExpressVPN siteSurfshark$15.45/moSurfsharkSurfshark Starter$15.45/mo+$0.46 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial Surfshark site
$10
$2.19$21.99Scale: entry prices on a log axis, 10× from end to end, monthly rates in USD · hover a rival mark for its reading, or tap it to jump to its comparison
$2.19$21.99
the $12.49 median
CyberGhost$2.19/moCyberGhostCyberGhost$2.19/mo-$12.80 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial CyberGhost siteProtonVPN$9.99/moProtonVPNProtonVPN VPN Plus$9.99/mo-$5 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial ProtonVPN siteExpressVPN$14.99/moExpressVPNExpressVPN Basic$14.99/mo+$0 vs the $14.99 entrychecked Aug 9, 2026See live pricingOfficial ExpressVPN siteSurfshark$15.45/moSurfsharkSurfshark Starter$15.45/mo+$0.46 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial Surfshark site
Scale: log axis, USD/mo
§ 01 · the essentials01

What is NordVPN: the tunnel, Dark Web Monitor and Threat Protection

Nord Security, NordLynx, Dark Web Monitor and a 30 day refund window

NordVPN is a consumer virtual private network sold by Nord Security, a company founded in Lithuania in 2012. The app routes your traffic through the company's own servers over NordLynx, a protocol Nord built on WireGuard. That much has not changed in years. What has changed is everything sold around it. The paid plan no longer stops at a tunnel: the middle tier adds antivirus, an ad and tracker blocker, a password manager and a terabyte of cloud storage, and the top tier adds a dedicated IP address and NordProtect, an identity theft product with insurance attached. Every plan covers 10 devices at once and carries a 30 day money back guarantee.

Read the plan names and the shape of the company becomes obvious. Basic is a VPN. Complete and Complete Max are security suites that happen to include one. Buyers who want a tunnel and nothing else are now shopping at the cheapest end of a lineup built for someone else.

What the record showsVendor pricing page, checked August 2026
Maker
Nord Securityfounded in Lithuania, 2012
Protocol
NordLynxbuilt on WireGuard, Nord's own
Plans
3 tiersBasic, Complete, Complete Max
Devices
10 at oncesame on every tier
Entry
$14.99/momonth to month, no discount badge
Top tier
$21.99/moadds dedicated IP and NordProtect
Refunds
30 daysmoney back guarantee, every tier
Business
Sold elsewhereNordLayer, minimum 5 licences

Rates on this page are the month to month prices. The prepaid terms, the intro rates and what each one renews at sit on the pricing page.

§ 02 · two products, one name02

NordVPN vs NordLayer: the consumer app and the business network

NordVPN is the app you install; NordLayer is the company network

Nord Security sells two network products and people buy the wrong one regularly. NordVPN is the consumer app on your phone and laptop. NordLayer is the company network, licensed per seat with a floor of five licences, and it is a different product with a different price list. Neither page mentions the other's rates. Confusing them is how a home user ends up reading a business quote.

Nord
NordLayer
NordVPN
Companies and teams
Who buys it
One person or one household
Per seat, minimum 5 licences
Licensing
One subscription, 10 devices
Company resources and remote access
What it protects
Your own traffic and identity
Central control panel
Admin
None, the app is the whole thing
Not part of the offer
Identity monitoring
Included from the middle tier up
Not part of the offer
Cloud storage
1 TB from the middle tier up
Sales led, quoted per contract
Refund
30 day money back guarantee
nordlayer.com
Where it is sold
nordvpn.com
What people get wrong

NordVPN has a business plan.

It does not. The pricing page routes business buyers to NordLayer, a separate brand.

The two share a subscription.

They do not. A NordVPN subscription grants nothing on NordLayer.

NordLayer is the cheaper way in.

It starts at five licences. For one person that is a larger bill, not a smaller one.

Same company means same features.

Identity monitoring, the password manager and cloud storage live on the consumer side.

You want privacy on your own devices

NordVPN. Ten devices, one subscription, nothing to administer.

You need to gate company resources

NordLayer. That is what the per seat licence and the control panel are for.

You want both

You buy both. They are separate products and separate bills.

§ 03 · features13 capabilities × 3 plans

NordVPN features by plan: NordLynx, Threat Protection, password manager

NordLynx, Threat Protection, the password manager and 1 TB of storage

The VPN part is the same on every tier, and Nord is unusually direct about that. What separates the three plans is everything sold around the tunnel, and two lines decide which one you need.

The antivirus is worth reading in parts rather than as one label. It scans downloads and deletes dangerous files, scans installed software for known flaws, warns when a site is known for scamming, flags dangerous links inside emails and checks crypto wallet addresses. The monitoring works the same way: it watches for an email address, a phone number, a national ID or Social Security number and credit card details appearing in leaks, and alerts as soon as any of them turns up.

The vendor claims 224 or more locations, speeds above 800 Mbps measured by independent tests, and an annual independent audit of its no logging claim. Call Protection, which flags suspected scam calls before you answer, is the newest addition.

Declared capacityVendor feature table, checked August 2026
Devices
10simultaneous connections, every tier
Monitored inboxes
5 or 85 on Basic, 8 with Monitor Pro
Cloud storage
1 TBfrom the middle tier up
Refund window
30 daysmoney back guarantee
What each tier actually carries13 capabilities · 3 plans · 39 cells · 11 numbered quotas
Capability ↓ · plan →Basic
$14.99/mo
Complete
$19.99/mo
Complete Max
$21.99/mo
Row 01VPN tunnelNordLynx, the vendor's own protocolThe tunnel never changes between plansIncludedIncludedIncluded
Row 02Simultaneous devicesTen connectionsPaying more does not raise this101010
Row 03Scam and phishing protectionBlocks known bad destinationsPart of the base productIncludedIncludedIncluded
Row 04Dark Web MonitorWatches email addresses for leaksFive addresses at the entry tier5 emailsIncludedIncluded
Row 05Dark Web Monitor ProAdds phone, card and national IDThe line most identity buyers are paying forAbsent8 identifiers8 identifiers
Row 06Next generation antivirusMalware scanning on the deviceWhere the suite startsAbsentIncludedIncluded
Row 07Ad and tracker blockerFilters requests before they loadBundled, not sold separatelyAbsentIncludedIncluded
Row 08Password managerCredential storage across devicesA second bill if you already have oneAbsentIncludedIncluded
Row 09Data breach scannerChecks accounts against known breachesSits alongside the monitoringAbsentIncludedIncluded
Row 10Cloud storageEncrypted file storageFixed allowance, no published extensionAbsent1 TB1 TB
Row 11Dedicated IPAn address only you useThe main technical reason to climbAbsentAbsentIncluded
Row 12NordProtectIdentity theft cover with insuranceConfirm regional availability before buyingAbsentAbsentIncluded
Row 13Money back guaranteeRefund window after purchaseApplies to prepaid terms too30 days30 days30 days
readingHover or tap any cell for its quota, its tier rate and what it means for the bill
every column includes exactly 1 user · full disclosure: 3 of 3 tiers priced

Read across a row to see where a capability starts

Every tier

NordLynx, kill switch, split tunneling, Double VPN

The tunnel and the behaviour people actually rely on: traffic cut if the connection drops, per app routing, a second server hop, SmartPlay for streaming and Private DNS. Ten devices, scam and phishing protection and Dark Web Monitor on five email addresses come with the cheapest plan.

From Complete

Antivirus, tracker blocker, password manager, 1 TB storage

The security suite arrives whole: next generation antivirus, an ad and tracker blocker, a data breach scanner and a terabyte of encrypted storage. Dark Web Monitor Pro widens the watch list to eight identifiers and starts covering phone numbers, cards and national ID numbers.

Complete Max only

Dedicated IP and NordProtect

An address only you use, which is what IP restricted systems ask for, plus identity theft protection with a cyber insurance component. Nothing else changes: the device count, the storage and the tunnel are the same as the tier below.

Two things are worth doing on the day you subscribe. Put every household device on the same account before you count seats: ten connections sounds generous until a television, a router and two consoles have taken four of them.

Then enter the addresses you want watched into Dark Web Monitor. The feature only reports leaks for identifiers you have registered, so an unentered address is an unwatched one, and the monitoring you paid for sits idle until you do it.

There is also a free way to test the premise before paying. Nord runs a one-time dark web check on a single email address without an account, and states that the address is not stored, shared or otherwise used. Run it first. If nothing you own has leaked, the monitoring tier is a purchase you can defer.

The tiers differ by what surrounds the tunnel, never by the tunnel itself. Kill switch, split tunneling and Double VPN are base behaviour, not upsells.

§ 04 · plan limits04

NordVPN limits: 10 devices, monitored inboxes and 1 TB of storage

Ten devices, five or eight monitored inboxes, one terabyte of files

Four numbers decide whether the plan you picked will hold. None of them is the price.

Devices: 10 at once

10

Ten simultaneous connections, identical on all three tiers. A phone, a laptop, a tablet and a work machine is four. A television, a games console and a partner's phone is seven. Households cross ten faster than they expect, and the eleventh device does not queue: it fails to connect until something else disconnects.

Monitored inboxes: 5, or 8 with Pro

5 / 8

Dark Web Monitor on Basic watches up to five email addresses. Dark Web Monitor Pro, which arrives with the middle tier, raises that to eight and adds phone numbers, credit card numbers and national ID or Social Security numbers to what it will look for.

What monitoring actually watches

5 kinds

The identifier set is the real limit, not the count. Dark Web Monitor watches email addresses. Dark Web Monitor Pro adds phone numbers, national ID or Social Security numbers and credit card details. Anything you never entered is never watched, and the difference between the two is the difference between hearing about a leaked mailbox and hearing about a leaked card.

Cloud storage: 1 TB

1 TB

A terabyte of encrypted storage lands with the middle tier and does not grow on the top one. It is a fixed allowance, not a starting point, and there is no published price for extending it.

Dedicated IP: top tier only

1 address

A dedicated IP address is an address only you use. It matters for anyone who has to reach a system with an allow list, and it is the main technical reason to climb past the middle tier. It is bundled into Complete Max rather than sold on its own.

Refunds: 30 days

30 days

Every tier and every term carries the same 30 day money back guarantee. That window matters most on the long prepaid terms, because those are charged as a single sum up front rather than month by month.

Coverage: 224+ locations

224+

The vendor publishes 224 or more locations and a speed figure above 800 Mbps attributed to independent testing. Neither number changes with the tier you buy. What changes is whether you also get a dedicated address, which is the part that decides whether IP restricted systems will let you in.

Ten devices is the limit most households meet first, and the one the router trick solves.

Rates shown are month to month. Prepaid terms are billed as one sum in advance.

§ 05 · data access06

NordVPN apps and Meshnet: where the tunnel runs and what it reaches

Apps, browser extensions, Meshnet and a dedicated server with port forwarding

The subscription is not one app. It is a set of places the tunnel can run and a set of things it can reach, and the two upper tiers widen both. Nord publishes apps for Windows, macOS, Linux, Android and iOS, plus tablets and smart televisions, with the Mac build requiring macOS 12 or later. Browsers get lightweight proxy extensions rather than full clients, which is a real distinction: an extension protects what the browser does and nothing else on the machine. Meshnet is the odd one out. It builds a private encrypted network between your own devices for file transfer and remote access, and the vendor states on its download page that availability varies by plan, a dependency the pricing page never mentions.

Windows, macOS 12+, Linux, Android, iOSDesktop and mobile apps10 connectionsEvery tier

The full client, covering everything the device sends, not just a browser.

Chrome, Edge, FirefoxBrowser extensionsBrowser traffic onlyEvery tier

Proxy extensions. Anything outside the browser stays outside the tunnel.

MeshnetYour own devices, encryptedAvailability varies by planStated on the download page

File transfer, remote work and LAN style access between machines you own.

Dedicated serverStatic IP with port forwardingDedicated resourcesAdvanced, sold above the standard tiers

The route for anyone hosting something reachable rather than merely browsing.

App builds for those devicesSmart TVs and tabletsCounts against the tenEvery tier

Convenient, and the fastest way a household spends its device count.

The practical read: extensions are cheap to install and cover less than people assume, and Meshnet is the feature most worth checking against your own plan before you rely on it.

§ 06 · changes05

NordVPN in 2026: the Plus tier is gone and the year term moved

The Plus tier, the year term and the renewal that outruns the month

Two things moved on the price list this year, and one of them is a plan that no longer exists.

first trackedlatest check
The Plus tier is gone NordVPN used to sell four consumer tiers, with Plus sitting between the plain VPN and the full suite. The live page now shows three: Basic, Complete and Complete Max. Anyone who bought Plus bought a plan the vendor has stopped selling, and anyone reading an older review is reading about a lineup that no longer exists.
The year term dropped a step Our July reading and our August reading of the one year prices disagree, and the vendor moved, not the record. Every one year rate came down by roughly a dollar a month across all three tiers. The two year and month to month rates did not move at all.
The top tier renews above its own monthly rate Complete Max renews at an annual figure that works out higher per month than paying month to month on the same tier. Basic and Complete do not do this. On the top tier the long commitment stops being the cheaper option once the intro term ends.

For a buyer the practical reading is simple: check which set of tiers a review was written for before you trust its numbers.

§ 07 · who it fits06

Who should use NordVPN: households, travellers and identity worriers

Households, frequent travellers, identity worriers and single laptops

Four buyers, and what each one runs into first.

The household with too many screens

Two adults, a couple of laptops, phones, a television and a console. The tunnel is a background utility here and nobody wants to administer it. Ten connections is the constraint that bites, and the router is the answer.

inputs7 to 12 devices, one bill payerinvoice floorfirst limitTen simultaneous connections

The frequent traveller

Hotel networks, airport networks and the occasional country where a service refuses to load. This buyer wants the tunnel and the scam protection, and gets no value from a terabyte of storage they will never open.

inputs2 to 3 devices, heavy roaminginvoice floorfirst limitShared addresses triggering login checks

The identity worrier

Someone who has already had a card reissued after a breach. The monitoring is the reason they are here, and Dark Web Monitor Pro with card and national ID coverage is the line that decides the tier, not the VPN.

inputsUp to 8 identifiers watchedinvoice floorfirst limitFive watched addresses on the entry tier

The remote worker with an allow list

A contractor who has to reach a client system that only admits known addresses. The dedicated IP is the whole purchase, and it lives on the top tier, bundled rather than sold separately.

inputs1 fixed addressinvoice floorfirst limitDedicated IP is bundled, not standalone

The household that shares one streaming habit

Someone who mostly wants shows to load while travelling and does not want to configure anything. SmartPlay handles that without extra steps, and the entry tier already carries it. This buyer overpays the moment they climb past it.

inputs2 to 4 devices, streaming ledinvoice floorfirst limitShared addresses and repeated login checks
Four reasons to walk pastfour reasons

You want a free tierThere is not one. Nord sells a refund window, not a free plan, and the comparison against Proton VPN turns on exactly that.

You are buying for a companyThis is the consumer product. The business network is NordLayer, licensed per seat with a floor of five.

You already pay for a password manager and cloud storageThen the middle tier is charging you a second time for things you have. Buy the bottom tier and keep what you use.

You need one device covered and nothing elseTen connections and an identity suite is a lot of product to buy for one laptop. The cheaper end of the category exists for this buyer.

The tier that fits is decided by the monitoring and the dedicated IP. The tunnel is the same whichever one you take.

§ 08 · alternativesfour rivals · gap to the $14.99 entry

NordVPN alternatives: ExpressVPN, Surfshark, Proton VPN and CyberGhost

ExpressVPN, Surfshark, Proton VPN and CyberGhost on entry rates

Entry rates, read from each vendor's own page. The spread runs $2.19 to $15.45, which puts the median at $12.49. One of the four opens at $2.19, then the strip goes quiet until $9.99. Rates compared are the published month to month entry prices, not intro offers.

$2.19NordVPN entry: $14.99

The honest summary: Nord competes on what surrounds the tunnel. On the tunnel alone, everyone in this list is credible. The full ranking sits on the vpn category page.

§ 09 · our verdictCE 4.7/5 · signed

Is NordVPN worth it in 2026: our verdict on the security bundle

What the bundle buys, where it stops and who should skip the upper tiers
Verdict · NordVPN · ★★★★★★★★★★CE 4.7/5

NordVPN enters at $14.99 a month. That is above the $12.49 median this category sets, and level with ExpressVPN to the cent. One thing here beats the category norm. NordVPN states the basis of its own discount claims, savings measured against renewal prices, and the struck totals check out exactly. A vendor comparing its offer with the price you will actually pay is doing something most of its rivals avoid.

Then there is Complete Max. It renews at $301.08 a year while twelve separate payments of $21.99 total $263.88, so the customer who commits pays $37.20 more than the one who never did. Basic and Complete renew below a year of monthly billing, which is what a commitment is supposed to do. Our reading stops at Complete for that reason, and the case for the tier above it is a dedicated IP and NordProtect bought with both eyes open.

what drives this invoice
  • the tier, which is the only real axis: all three cover ten devices, so the money buys software beside the tunnel rather than more connections.
  • The renewal, charged yearly and fixed per tier at $139.08, $219.48 or $301.08 whichever prepaid term was bought.
  • the term, which decides how long the intro runs and what leaves the account today: $65.88 for 12 months of Basic, $94.23 for 27.
when not to buy NordVPN
  • You are buying Complete Max to keep: it renews at $301.08 a year against $263.88 for twelve monthly payments of the same tier.
  • You need more than ten devices covered: the ceiling is ten on Basic, Complete and Complete Max alike, and no tier lifts it.
  • You are buying for a company: this card has no team tier, and the business product is sold separately from five licences up.
  • You want the antivirus, the vault or the 1 TB of storage on their own: they are sold only inside Complete and above, with the VPN attached.
what it does well
  • Ten simultaneous connections on every tier, including the cheapest, where several rivals reserve device counts for upper plans.
  • The discount claims state their own basis. Nord measures savings against the renewal price and prints that sentence beside the offer, which is a harder comparison than measuring against a month to month rate.
  • NordLynx is the vendor's own protocol built on WireGuard, so the tunnel is not a rebadged third party client.
  • Dark Web Monitor Pro watches phone numbers, card numbers and national ID numbers, not just email addresses, which is unusual inside a VPN subscription.
  • A 30 day money back guarantee applies to every tier and every term, including the two year prepay.
  • Kill switch, split tunneling, Double VPN and Private DNS are on every tier, so the security behaviour people actually rely on is not held back for upper plans.
  • The dark web check is free and needs no account, so the claim behind the upper tiers can be tested before any money changes hands.
where it gets in the way
  • There is no free tier. The only way to try the product is to buy it and use the refund window.
  • Ten connections is the same number on the top tier as on the bottom one, so paying more never buys more devices.
  • The middle tier charges for a password manager, antivirus and a terabyte of storage whether or not you already pay for those elsewhere.
  • Complete Max renews at an annual figure that works out higher per month than its own month to month price, so the long commitment stops paying for itself once the intro term ends.
  • The cloud storage allowance is fixed at one terabyte with no published price for more.
  • NordProtect, the identity theft cover on the top tier, is not restated on the pricing page for every region, so buyers outside the United States should confirm it applies before paying for it.
  • Meshnet availability is stated as varying by plan on the download page and is not mentioned on the pricing page at all, so the tier that carries it has to be confirmed before you buy for it.
  • Monitoring only covers identifiers you enter yourself, so a subscription bought and left unconfigured watches nothing.
The short of it
  • Entry $14.99/mo · verified
  • Number 4 of 5 by entry rate, $0 over ExpressVPN and $0.46 under Surfshark
  • Month to month rates run $14.99 to $21.99. The prepaid terms, the intro rates and what each renews at are laid out on the pricing page. See every tier and what it renews at
signed Oleh Kem Oleh Kemmethod: live price list, all three terms readverified tracked since
§ 10 · questions19 questions

NordVPN answers: device count, renewal price, monitoring and refunds

Q1What is NordVPN used for?

Routing your internet traffic through Nord Security's own servers so the network you are on cannot read it. On the upper tiers it also watches for your details appearing in data leaks, blocks trackers and malware, stores passwords and holds a terabyte of encrypted files.

Q2Is NordVPN worth it in 2026?

It depends on whether you want the bundle. If you already pay for a password manager and cloud storage, the middle tier bills you twice for them and the entry tier is the honest buy. If you want identity monitoring you were going to buy anyway, the bundle is the cheaper route.

Q3Is NordVPN better than ExpressVPN?

They start at the same rate and sell different things. ExpressVPN sells a tunnel with a long reputation and few extras. NordVPN sells a security suite with a tunnel at the bottom. The question is whether you want the extras, not which tunnel is faster.

Q4Does NordVPN have a free plan?

No. It sells a 30 day money back guarantee instead, which means you pay first and ask for the money back if you do not keep it. Proton VPN is the name in this category with a real free tier.

Q5How many devices can NordVPN cover at once?

Ten simultaneous connections, and that number is the same on all three tiers. Households usually pass it sooner than they expect. Putting the router on the account makes the whole house count as one connection.

Q6What happened to the NordVPN Plus plan?

It is no longer sold. NordVPN used to sell four consumer tiers with Plus in the middle. The live page now shows three: Basic, Complete and Complete Max. Reviews written for that older set describe plans nobody can buy now.

Q7What is the difference between Complete and Complete Max?

Complete Max adds a dedicated IP address and NordProtect, the identity theft cover with insurance attached. Everything else, including the terabyte of storage and the monitoring, is already on Complete.

Q8Does NordVPN monitor credit cards and ID numbers?

From the middle tier up. Dark Web Monitor on the entry tier watches up to five email addresses. Dark Web Monitor Pro raises that to eight and adds phone numbers, credit card numbers and national ID or Social Security numbers.

Q9Is NordVPN the same as NordLayer?

No. Same company, different products. NordVPN is the consumer app with one subscription and ten devices. NordLayer is the business network, licensed per seat with a minimum of five licences and its own price list.

Q10Can I get my money back from NordVPN?

Within 30 days, on any tier and any term. The window matters most on the prepaid terms, because those are charged as a single sum in advance rather than month by month.

Q11Does NordVPN include a password manager?

On the middle tier and above. Basic covers the tunnel, scam and phishing protection and email leak alerts, and nothing beyond that: no password manager, no antivirus, no storage.

Q12What is NordLynx?

Nord's own connection protocol, built on WireGuard. It is what the app uses by default, and it is one of the few parts of the product the company built rather than bundled.

Q13Who should not buy NordVPN?

Anyone who needs a free tier, anyone buying for a company, and anyone who already pays for a password manager and cloud storage and would be paying for them twice. A single laptop with no identity worries is also a poor fit for a ten device suite.

Q14Does NordVPN work on smart TVs and routers?

There are app builds for smart televisions and tablets alongside Windows, macOS, Linux, Android and iOS. Every device you connect counts against the ten. Putting the router on the account instead makes the whole household count as a single connection.

Q15What is Meshnet?

A private encrypted network between devices you own, used for file transfer, remote access and LAN style setups. The vendor notes on its download page that availability varies by plan, which the pricing page does not repeat, so check it against the tier you are buying.

Q16Is the browser extension the same as the app?

No. The extensions for Chrome, Edge and Firefox are proxies that cover what the browser does. Everything else on the machine stays outside the tunnel. The desktop app covers the whole device.

Q17Can I check for leaks without paying?

Yes. Nord runs a free one-time dark web check on a single email address with no account required, and states the address is not stored, shared or used for anything else. Continuous monitoring is the paid part.

Q18What does the antivirus actually do?

It scans downloads and removes dangerous files, scans installed software for known flaws, warns on sites known for scams, flags dangerous links inside emails and checks crypto wallet addresses. It also blocks ads and trackers.

Q19Does NordVPN protect against scam phone calls?

Call Protection flags suspected scam calls before you answer. It is listed among the parts sold beyond the tunnel rather than as a base VPN feature.