SecuFocus
VPNGetting started & analysis

NordVPN: understand what you are switching on

NordVPN: app, extension, kill switch and threat protection. Separate what each function does before you choose a plan.

Before you get started

What to expect

NordVPN offers a VPN app, a browser extension and extra protections that vary by plan and operating system. Check what each component covers on your devices before choosing a subscription.

The VPN tunnel and additional services

Under the NordVPN name, you will find a VPN tunnel, a browser extension and additional protection features. To choose a plan, start with what you want covered: your browser, traffic from several apps or certain downloaded files.

Features differ across operating systems and plans. List your devices before comparing: an option available on a PC may be missing on your phone. Check compatibility in each app’s documentation.

The extension covers the browser

The NordVPN extension proxies traffic from the browser where it is installed. It does not automatically route your mail app, backup software or another browser through that connection. The system application has broader coverage, subject to its settings and exclusions.

This distinction should guide installation. Start with the system app when you want to cover several applications. Consider the extension for a single-browser requirement, understanding its scope. NordVPN advises against running both simultaneously without appropriate configuration: stacking them is not extra assurance.

Additional protections have their own requirements

Current documentation renames Threat Protection Pro as “Scam, phishing, and malware protection”. On compatible Windows and macOS versions, this works without an active VPN connection. On Mac it requires the application downloaded outside the App Store. Features include download scanning and blocking malicious content.

Older names may still appear in interfaces. Check the actual feature and app version. A protection button on a phone does not mean it performs the same file scanning as a desktop application. None of these features guarantees that a downloaded document is harmless.

Two different kinds of kill switch

On Windows, the documentation distinguishes Internet Kill Switch, which cuts internet connectivity, from App Kill Switch, which closes selected programs when the VPN connection drops. Closing listed applications does not protect unlisted ones. Other systems have their own behaviour.

Closing a program may also interrupt unsaved work. Understand the chosen mode before adding software to it. On a shared device, explain why internet access might become unavailable; otherwise someone may disable the protection to “fix” the connection.

SituationWhat to check
Tunnel failureNetwork blocking or closure of selected applications?
Waking from sleepExpected reconnection and the status actually shown.
Network changeBehaviour when switching from Wi-Fi to mobile data.
Deliberate disconnectionWhether internet access continues or is blocked in the selected mode.

An exclusion changes the route

In the extension, Exclude from VPN lets you bypass the proxy for selected domains, optionally including subdomains. Excluded websites then use the ordinary connection and its exit IP address. HTTPS can still encrypt their content: bypassing a VPN does not automatically make traffic plaintext.

If a website fails, first try to understand the problem. A specific exclusion may be appropriate, but a long list of forgotten exceptions makes coverage difficult to describe. Record why you created each exception and revisit it after an update.

Check how it works on your devices

Choose a few repeatable tasks. A video loading quickly says little about call stability or reconnection after sleep. Use ordinary data for your checks; do not deliberately disrupt an important transaction.

Throughput, latency and website verification challenges can vary with server, time and network. We do not publish a speed ranking here: no independent benchmark was performed for this article.

  1. Install one active VPN solution and record its version.
  2. Make a simple connection and use your usual sites and apps.
  3. Check calls, printing and local services you depend on.
  4. Observe waking from sleep and changing networks without sensitive documents open.
  5. Enable additional options one at a time and record unwanted effects.
  6. Before subscribing, check the initial charge, renewal amount and commitment period.

Choose a plan after checking the features

A VPN does not change information you voluntarily give a service. Posting under your name or staying signed in leaves that identity in place. It also cannot update a vulnerable operating system or replace a backup.

After trying it, list the features you used on your devices. Compare their cost with a VPN-only plan if that covers your needs. Check the renewal price and terms before subscribing.

From the provider

NordVPN

Downloads, compatibility and current terms.

Official website

Check and explore

Sources for this article

Numbers connect each reference to the passages that use it. Dates show when the documentation was consulted.

  1. NordVPN: How Kill Switch works ↗support.nordvpn.com ·
  2. NordVPN: Browser extension exclusions ↗support.nordvpn.com ·

This article draws on the sources above. The exercises are for you to try on your devices; SecuFocus does not present them as tests carried out by its editorial team. Interfaces and features can change. Method and corrections.

Cite this article

Keep this reference with the article when you save or share it.