To use NordVPN effectively, install the app, enable NordLynx protocol, turn on Kill Switch, and set Auto-Connect — then hit Quick Connect. These three settings alone fix the biggest gaps in the default configuration.
A surprisingly common mistake: running NordVPN with default settings without checking what's actually on. On Reddit's r/nordvpn, posts like "I just realized Kill Switch was off this whole time" show up regularly. With Kill Switch off, OpenVPN instead of NordLynx, and Auto-Connect disabled, every Wi-Fi reconnect at a coffee shop means browsing unprotected. This guide covers the settings you should change on day one.
Account Setup and Installation
Creating Your Account
- Choose a plan on the NordVPN website
- Enter your email and select a payment method
- Set your password from the confirmation email
For plan differences, see "NordVPN Review: Pricing, Security, and Performance Tested." The VPN functionality is identical across all plans — Basic is enough for most users.
Installing the App
| Platform | Source |
|---|---|
| Windows | NordVPN official or Microsoft Store |
| macOS | NordVPN official or App Store |
| iOS | App Store |
| Android | Google Play Store |
| Browser extensions | Chrome Web Store / Firefox Add-ons / Edge Add-ons |
After installation, log in with your account email and password.
Basic Usage
Quick Connect
Open the app and press Quick Connect. NordVPN automatically selects the fastest server based on your location and current server load.
Once connected, the app displays the server country and number.
Manual Server Selection
When you need an IP address from a specific country, select it from the map or server list.
How to choose:
- Speed — pick a geographically close country (your own country for best results)
- Geolocation testing — pick the target country
- Streaming — pick the country where content is available
Specialty Servers
NordVPN offers purpose-built servers across its 9,100+ server network:
- Double VPN — routes traffic through two servers with double encryption. For maximum security
- Onion over VPN — combines VPN with Tor. No need to install Tor Browser separately
- P2P — optimized for peer-to-peer traffic with no bandwidth throttling
Access these from the sidebar or the Specialty Servers section in the app. If you are new to VPN concepts, "What is a VPN? A Beginner's Guide" covers the fundamentals.
Recommended Settings
The defaults work, but changing these settings is recommended.
NordLynx (Protocol)
Settings → VPN Protocol → NordLynx
NordLynx is built on WireGuard with a double NAT system for privacy. In independent benchmarks, NordLynx consistently hits 900+ Mbps on nearby servers — significantly faster than OpenVPN. It is the default on most platforms, but if OpenVPN is selected, switch manually.
If NordLynx fails to connect on restrictive networks (hotels, corporate Wi-Fi), try OpenVPN TCP first, or the newer NordWhisper protocol (added January 2025) which disguises VPN traffic as regular HTTPS — useful in countries with deep packet inspection.
Kill Switch
Settings → Kill Switch → Enable
Blocks all traffic the moment VPN disconnects, preventing IP leaks. Essential for public Wi-Fi.
- Windows / macOS — two types: App Kill Switch and Internet Kill Switch. Internet Kill Switch blocks all traffic and is stronger
- iOS — Kill Switch is enabled by default and always active when connected. There is no separate toggle in settings — Apple's Network Extension framework handles it automatically
- Android — enable from the settings screen. You can also use Android's built-in "Always-on VPN" setting for system-level protection
Threat Protection
Settings → Threat Protection → Enable
- Threat Protection (all plans, formerly "Threat Protection Lite") — DNS-level blocking of ads, trackers, and malicious domains. Requires active VPN connection
- Threat Protection Pro (Plus plan and above, macOS/Windows only) — scans downloaded files for malware, blocks phishing URLs at the JavaScript level. Works without active VPN connection. Scored 92% in AV-Comparatives phishing tests
Auto-Connect
Settings → Auto-Connect → Enable
Automatically connects to VPN when your device starts or joins a Wi-Fi network. Eliminates manual steps and prevents gaps in protection.
Using Split Tunneling
Split Tunneling lets you exclude specific apps or websites from the VPN tunnel. This is worth setting up right after Kill Switch — banking apps frequently lock users out when they detect a VPN IP as suspicious, and Split Tunneling solves the problem cleanly.
When to Use It
- Banking apps — some banks block VPN connections. Excluding them restores normal access
- Local network devices — access printers, NAS, and other LAN devices while connected to VPN
- Bandwidth-heavy apps — gaming or large downloads where you want to avoid encryption overhead
How to Set It Up
Settings → Split Tunneling → Enable, then select the apps to exclude.
| Platform | Supported | Method |
|---|---|---|
| Windows | Yes | Per-app |
| Android | Yes | Per-app |
| macOS | No | — |
| iOS | No | — |
| Linux | Partial | Port/subnet only (Allowlist) |
For Linux port and subnet Allowlist configuration, see "NordVPN on Linux: CLI Commands, Post-Quantum Encryption, and Docker."
Troubleshooting Connection Issues
If NordVPN fails to connect, follow these steps in order.
1. Change the Protocol
If NordLynx fails, switch to OpenVPN UDP or OpenVPN TCP. TCP is more likely to work on restrictive networks. If you are in a country that actively blocks VPN traffic (China, UAE, Russia), try NordWhisper — it wraps VPN traffic in HTTPS, making it harder for deep packet inspection to detect.
Settings → VPN Protocol → OpenVPN (TCP) or NordWhisper
2. Change the Server
The current server may be experiencing issues. Try a different country, or a different server in the same country.
3. Check Security Software
Antivirus or firewall software may be blocking the VPN. Temporarily disable it and try connecting. If it works, add NordVPN as an exception.
4. Reinstall the App
An update may have corrupted settings. Uninstall → reinstall → log in. This resolves most persistent issues.
5. Reset DNS Settings
Custom DNS settings can conflict with NordVPN.
# Windows (Administrator Command Prompt)
ipconfig /flushdns
# macOS
sudo dscacheutil -flushcache && sudo killall -HUP mDNSResponder
6. Contact NordVPN Support
If none of the above works, contact NordVPN Support. 24/7 live chat is available.
The world's leading VPN — fast, secure, and easy to use
- 6,400+ servers across 111 countries
- NordLynx protocol (WireGuard-based)
- Threat Protection Pro (ads & malware blocking)
FAQ
Does NordVPN slow down my internet?
With NordLynx, the speed loss is minimal. Independent tests show NordVPN maintaining over 900 Mbps on a 1 Gbps connection — a roughly 8-10% drop. OpenVPN is slower, so make sure NordLynx is your active protocol. Connecting to a geographically close server also helps.
Can I use NordVPN on multiple devices at the same time?
Yes. One NordVPN account supports up to 10 simultaneous connections. If you need more, install NordVPN on a compatible router — all devices behind it count as a single connection.
Is NordVPN's Kill Switch always on?
On iOS, yes — Kill Switch is built into the app and activates automatically when you connect. On Windows, macOS, and Android, you need to enable it manually in Settings. I recommend turning it on immediately after installation.
Why does NordVPN keep disconnecting?
Common causes: unstable Wi-Fi, security software interference, or an overloaded server. Try switching servers first, then change your protocol to OpenVPN TCP. If the issue persists, temporarily disable your antivirus/firewall to rule out interference.
Does Split Tunneling work on macOS?
No. Apple removed the system APIs that VPN apps relied on for split tunneling since macOS 11.0. NordVPN's Split Tunneling is available on Windows and Android only. On macOS, you can use NordVPN's browser extension as a partial workaround for web traffic.
What is NordWhisper and when should I use it?
NordWhisper is a protocol added in January 2025 that disguises VPN traffic as regular HTTPS browsing. Use it when standard protocols (NordLynx, OpenVPN) are blocked — typically on corporate networks, school Wi-Fi, or in countries with active VPN censorship.
Should I use NordVPN's DNS or my own?
NordVPN routes all DNS queries through its own encrypted DNS servers by default, preventing DNS leaks. Using a third-party DNS (like Cloudflare 1.1.1.1) can create conflicts and may leak queries to your ISP. Stick with NordVPN's DNS unless you have a specific reason not to.
Wrapping Up
A summary of how to use NordVPN effectively:
- Install — download from the official site or app store and log in
- Connect — Quick Connect for the best server, or manual selection for a specific country
- Configure — enable NordLynx + Kill Switch + Auto-Connect
- Split Tunneling — exclude banking apps and LAN devices from the tunnel
- Troubleshoot — change protocol → change server → check security software
Installing and connecting is step one. Optimizing your settings is what makes a VPN actually useful.
Related articles:
- NordVPN Review: Pricing, Security, and Performance Tested
- NordVPN on Linux: CLI Commands, Post-Quantum Encryption, and Docker
- Is NordVPN Safe? A Technical Security Analysis
- NordVPN and Netflix: Setup Guide and Troubleshooting
- VPN Protocols Compared: WireGuard vs OpenVPN vs IKEv2 Under the Hood
- NordVPN vs ExpressVPN vs Surfshark: An Honest Comparison
- Are Free VPNs Safe? Real Incidents and How to Choose
Official resources:
- NordVPN Support Center — setup guides for all platforms
- NordVPN Download — apps for every OS
- NordVPN Server List — browse 9,100+ servers by country
- Kill Switch Documentation — platform-specific setup instructions
- WireGuard Protocol — the protocol behind NordLynx