Proton VPN vs NordVPN: which one should you actually pay for?

What you are actually choosing between

Proton VPN is one product inside a Swiss privacy suite that also includes Proton Mail, Drive, Pass and Calendar. Its apps are open source on every platform and the business is built around being checkable. The pitch is not that it is the fastest thing you can buy, it is that you do not have to take its word for anything.

NordVPN is a Panama-registered product from Nord Security in Lithuania, and it has become a bundle: higher tiers add a next-generation antivirus, a password manager, 1 TB of cloud storage and a data removal tool. The pitch is speed, streaming that works, and doing more than tunnelling traffic. One company optimises for being auditable, the other for being convenient, and that explains almost everything below.

Jurisdiction: Switzerland versus Panama

Switzerland sits outside the EU and outside the Five, Nine and Fourteen Eyes arrangements, but the useful detail is what Proton says about Swiss law specifically. It is not obliged to keep VPN connection logs, it is not bound to honour foreign requests, and Article 271 of the Swiss Criminal Code forbids handing data straight to a foreign authority. Proton VPN's own transparency report, which is published separately from Proton Mail's, records 458 legally binding Swiss orders since 2017, including 47 in the first half of 2026, none of which produced identifying information because it holds none. Proton runs no warrant canary and explains why: Swiss law requires the target of a surveillance order to be told eventually.

The caveat pro-Proton pages skip is that in 2021 Proton Mail was compelled by a Swiss court order to log a French climate activist's IP address. Proton's position, supported by a Swiss ruling later that year, is that email and VPN services fall into different legal categories and that forced-logging obligation does not currently reach Proton VPN. A real legal difference, and also a reminder that Swiss residency is not immunity.

Panama has no data retention law and sits outside the same blocs, which is the honest case for Nord's base. The counterweight is thinner privacy infrastructure generally, and Nord has faced process too: it says a binding Panamanian warrant in October 2024 led it to confirm an account existed and hand over payment-related data, while having no traffic or connection logs to give. Neither jurisdiction is a trump card. What protects you in both cases is the absence of logs.

The no-logs audits, and why scope matters more than the badge

Every VPN claims to be independently audited, and the phrase covers wildly different things. This is where the two genuinely diverge.

Proton VPN has commissioned an annual no-logs audit from the European security firm Securitum every year from 2022 to 2026. The scope is the one you want: whether the production servers carrying user traffic log browsing activity, DNS queries, destination services, traffic contents or identifying connection metadata, checked across regions and across subscription tiers including the free one. The latest assessment ran from Proton AG's headquarters in Zurich from 20 to 27 May 2026, where Securitum's consultants inspected selected production servers from both the free and the paid tiers and directed Proton's engineers to demonstrate the systems and configurations in front of them. Zurich is where the auditors sat, not the boundary of what they examined. Worth naming that method plainly, because it is an operator-assisted technical assessment rather than a formal assurance attestation. What Proton gives you is the documents: it publishes the full reports openly, with no account, gate or NDA.

NordVPN's no-logs work is done by Deloitte, most recently Deloitte Lithuania, and the December 2025 engagement was its sixth. Give Nord the point it earns here before the criticism: Deloitte performed a reasonable assurance engagement under ISAE 3000 (Revised), and reasonable assurance is the higher of the two levels that standard provides, the one that carries a positive opinion rather than the weaker limited assurance conclusion. On the formal grade of the engagement, Nord is ahead of Proton. Fieldwork ran from 10 November to 12 December 2025, and Deloitte reviewed privacy-relevant configuration settings and deployment processes across standard, Double VPN, Onion Over VPN and obfuscated servers, and interviewed staff. That is a serious Big Four engagement, broader in server-type coverage than most people assume, and Nord is upfront that it is a point-in-time assessment describing the systems as they ran during that window.

Where Nord loses is access, not rigour. It does not publish the report openly, you have to log into a Nord Account to read it, whereas Proton's Securitum reports are downloadable by anyone with no account, gate or NDA. Better than a press release, worse than publishing the document, and the clearest single reason a privacy-first reader lands on Proton. That is the honest shape of it: Nord's audit is the formally stronger instrument, Proton's is the one you can actually check.

One more axis, and it is the one most comparison pages get wrong in Proton's favour. Proton's clients are open source on Windows, macOS, Linux, Android, iOS and as a browser extension, audited by Ruben Santamarta, a well-known independent security researcher, whose latest reports were linked from Proton's open-source page in December 2025. Note the shape of that engagement, though: one contracted researcher is a materially smaller exercise than a team penetration test, which matters when you set it against Nord's.

Nord is not simply closed, and the usual shorthand that only Meshnet is open understates it badly. NordVPN publishes its entire Linux client, both the command-line tool and the GUI, under GPLv3, along with LibDrop and LibTelio, the networking library Nord describes as the backbone of all its applications rather than only the Linux one. What is not published is the Windows, macOS, Android and iOS clients, which is the part most people actually install. Those are audited instead of inspectable: Cure53 ran a penetration test and source code review of Nord's apps, extensions and features over a 55-working-day engagement in mid-2024, and found no critical vulnerabilities, but it also surfaced 31 issues including four rated high severity, all subsequently fixed and re-verified. Cure53 assessed Nord's apps and systems again in 2025, so the 2024 report is not the current one.

Open source is not automatically secure, and audited-but-closed is not automatically unsafe. The difference is who is allowed to look. Proton's client code can be read by anyone on any platform. Nord's desktop and mobile client code can be read by whoever Nord hires, and by you only on Linux.

Network size, and what it actually buys you

Most comparison pages are out of date here. On 15 August 2026 Proton VPN's own server page listed 20,533 servers across 148 countries and 195 locations, while NordVPN's own public server-count endpoint returned 8,831 servers across 149 countries. Nord's marketing counts 224 or more locations because it slices locations more finely. On raw server count Proton is now well ahead, and on country coverage the two are tied.

Counts matter less than they sound like they should. They buy headroom at peak times and more exit IPs to fall back on when one gets blocked. What they hide is distribution: 3,173 of Nord's servers are in the United States, roughly 36% of its network, with 1,015 in the UK. That is a network shaped around where its customers are, which means excellent capacity on the routes most people use. Both providers also run virtual locations, where a server registered to one country physically sits in another, which is how anyone offers 148 countries at all.

Speed and streaming, the two things most exaggerated

Both default to WireGuard, Proton directly and Nord through NordLynx, its own implementation built on top of WireGuard. NordVPN markets itself as the world's fastest VPN, and its own footnote shows the claim rests on testing by West Coast Labs in October 2025, which Nord cites and links from that footnote. Here are the numbers rather than a wave at them. Nord's comparison page reports the 2025 West Coast Labs testing, a five-provider evaluation run under AMTSO guidelines, as: NordVPN 817 Mbps average connection speed, ExpressVPN 788, Proton VPN 758, Mullvad 739, Norton VPN 725. Proton placed third. Read it with the caveat that Nord is the party publishing and promoting a result that flatters Nord, and then apply the same caveat in the other direction, because the reviewers pointing at Proton earn affiliate commission on VPN sign-ups as well: Cybernews' 2026 head-to-head found Nord faster locally and on UK and US connections while Proton was faster on long hauls to Australia and Japan, and Tom's Guide named Proton VPN its fastest VPN overall for 2026. Results flip with location, server, time of day and load, so use the 30 days both offer and measure on your own line.

Streaming is where NordVPN has a real and consistent edge, and the main reason plenty of people should buy it instead. SmartPlay picks servers for you, and Nord is widely reported to hold access to more Netflix regional libraries than Proton, alongside BBC iPlayer, HBO Max, Hulu and Peacock, all reported as working in August 2026 rather than guaranteed. Proton supports streaming on VPN Plus and Proton Unlimited and, again on August 2026 reporting, reaches a smaller set of Netflix regions plus Disney Plus, Prime Video and BBC iPlayer. Its free tier does not support streaming at all.

Treat every specific streaming claim as perishable, including those. Platforms block ranges of datacentre addresses, VPNs rotate onto new ones, the platforms catch up. Accurate as of August 2026, and drifting, so if one service is the whole reason you are buying, test it inside the refund window.

The features that actually separate them

Proton's extras are privacy plumbing. Secure Core routes traffic through a hardened server in Iceland, Sweden or Switzerland before it exits in your chosen country, so anyone watching the exit sees Proton's network rather than you, at a cost in speed. Tor over VPN reaches .onion sites in an ordinary browser, slow and TCP-only. NetShield is a DNS-level blocker for ad, tracker and malware domains.

Nord's extras are broader consumer security tools. Meshnet builds a private encrypted network across up to 10 of your devices and 50 external ones, for file transfers, LAN gaming or reaching a home machine remotely, and it is free and open source. Nord's next-generation antivirus, previously Threat Protection Pro, scans downloads for malware, scans software for known vulnerabilities, flags scam sites and checks URLs in email. That is materially bigger than NetShield, which only refuses to resolve bad domains and cannot look inside a file. The catch: it starts at the Complete tier, not Basic. Both services give 10 simultaneous connections, cover Windows, macOS, Linux, Android and iOS with router support, and include a kill switch and split tunnelling on paid plans.

Two things people buying a privacy product ask about and comparison pages skip. Payment anonymity: both take cryptocurrency, Proton directly and Nord through CoinGate, and both have a cash route, Proton by post to its Geneva office with your username in the envelope, Nord through retail boxes sold in shops. Neither cash route is refundable the way a card payment is, and crypto payments do not auto-renew. Restricted networks: if you are somewhere VPNs are actively blocked, Nord's answer is its obfuscated server pool and Proton's is the Stealth protocol, which disguises the connection as ordinary TLS traffic over TCP. Both work by making your traffic look unremarkable, neither is guaranteed against a determined national filter, and this is precisely the case to test inside the refund window.

• Both, under different names: multi-hop routing, Proton's Secure Core through Iceland, Sweden or Switzerland against NordVPN's Double VPN. Proton's version pins the first hop to its own hardened servers in those three countries, Nord's chains two servers of your choosing
• Both, under different names: Tor routing, Proton's Tor over VPN with .onion access without the Tor Browser against NordVPN's Onion Over VPN
• Proton only: open-source client apps on every platform, Windows, macOS and mobile included. Nord publishes its Linux client and its core networking libraries under GPLv3 but not its Windows, macOS, Android or iOS clients
• Proton only: a permanent free tier with unlimited data
• NordVPN only: Meshnet device-to-device networking, free and open source
• NordVPN only: file-scanning antivirus and vulnerability scanner, from the Complete tier up
• NordVPN only: obfuscated servers as a separate server pool, and a dedicated IP add-on. Proton has no obfuscated pool but ships the same capability by another route, the Stealth protocol, which tunnels obfuscated TLS over TCP
• NordVPN only: bundled password manager and 1 TB encrypted cloud storage on higher tiers

Proton's free plan is the genuine outlier

Most free VPNs are a bad idea, and not vaguely. Server capacity costs money, so a free service usually pays for itself by injecting ads, selling browsing data, throttling you into upgrading or, at worst, using subscribers' devices as exit nodes for other people's traffic. Proton VPN Free is the exception people mean when they say there is one. It is funded by paying Proton subscribers rather than by monetising free users, carries no ads, and sits under the same no-logs policy and the same annual Securitum audit as the paid tiers, whose scope explicitly covers free-tier infrastructure. Most unusually, it has no data cap, where almost every other reputable free tier gives you a few gigabytes a month.

The limits are real. One device at a time. Servers in 10 countries you do not choose between, assigned from the Netherlands, Japan, Romania, Poland, Norway, Switzerland, Singapore, Mexico, Canada and the United States. No streaming, no P2P, no NetShield, no Secure Core, no Tor over VPN, no split tunnelling and no browser extension. On speed, Proton's own pages sit awkwardly together: the free plan page says no speed limits, the plan comparison table lists free as medium against highest for paid. Read that as usable but deprioritised when servers are busy.

It is genuinely good for encrypting hotel and cafe wifi and for testing the apps at no cost. NordVPN has no free tier at all, so if your budget is zero the comparison has already ended.

Price, and the renewal trap nobody puts in the headline

The advertised monthly figure on a multi-year VPN plan is an introductory rate for the first term only. What you pay afterwards is a different and usually much larger number. Both companies disclose it in small print at checkout, and almost no comparison article repeats it, which is how people get surprised by a bank charge two years later.

As both companies' own checkout copy stated on 15 August 2026: Proton VPN Plus on two years is €83.76 for the first 24 months, then renews at €83.88 every 12 months, about €6.99 a month. NordVPN Basic on two years is €94.23 for the first 27 months, also advertised as €3.49 a month because it adds three bonus months, then renews at €139.08 a year, about €11.59 a month. Identical on the headline, roughly 40% apart on the number that matters. The gap widens on bundles, where Proton Unlimited renews at €119.88 a year against NordVPN Complete at €219.48, though those are not the same product. Prices vary by country and promotion, and auto-renewal is on by default at both.

Which one to pick, by what you are doing

There is no single winner, so pick by whatever made you search in the first place. Both offer 30 days money back, which is the right way to settle any of these on your own connection.

• Privacy first: Proton VPN. Open-source apps, a no-logs report you can read without an account, an audit scope covering connection metadata and DNS across all tiers, plus Secure Core and Tor over VPN. Nord's privacy is not bad, Proton is just more checkable.
• Streaming first: NordVPN. More regional catalogues, more consistently, SmartPlay removes the guesswork, and its heavy US and UK server concentration suits the libraries most people chase.
• Budget first: Proton VPN, on the renewal price rather than the sticker. Both advertise €3.49 a month up front, but the terms are not like-for-like, because Nord's first term runs 27 months against Proton's 24. Proton is about €4.60 a month cheaper once the intro ends. If you genuinely re-shop at the end of every term, it is close to a wash and Nord's three bonus months tip it slightly.
• Free: Proton VPN, the only one of the two with a free plan and one of the very few free VPNs that is not itself a privacy risk. Accept one device, 10 assigned countries, no streaming and no P2P.
• Public wifi safety: either, and Proton's free tier is enough, though the gain is smaller than the marketing suggests. Effectively all mainstream sites use HTTPS now, so your traffic contents are already encrypted from the cafe network without a VPN. What the VPN adds is hiding which sites you visit from whoever runs that network. The paid difference that matters here is Nord's antivirus and scam-site blocking, which starts at the Complete tier rather than Basic.
• Torrenting: both support P2P on paid plans, Proton's free tier does not, and neither is a licence to ignore copyright law where you live.

Proton's referral offer, factually

If you land on Proton, here is what its referral program actually says rather than what referral pages imply. Proton gives $20 in Proton credits to the referrer and $20 to the person signing up, and the new subscriber also gets a two-week free trial. Those figures are denominated in US dollars, so against a euro-priced plan the credit converts rather than landing as a flat €20. Credits are issued once the referee has been subscribed for a full month, or two months if they are on a monthly plan, not at sign-up, and not at all if they cancel inside that window. Not every paid plan counts either: Proton names the qualifying plans as VPN Plus, Mail Plus, Pass Plus, Drive Plus and Proton Unlimited, and no other paid plan appears on that list. The referrer must be an existing Proton user with an active subscription.

The conditions that matter: it only works for someone who has never held a Proton account, so it will not apply if you are upgrading a free account you already made. Credits are account credit, non-refundable and not exchangeable for cash, and a single referrer is capped at $1,000 across all referrals. Treat it as a discount on a decision you had already made, not a reason to choose Proton if the sections above pointed you at NordVPN. Terms change, so check them on Proton's own site.

Frequently asked questions