NordLocker Review 2026: Strong Encryption for Simple Private Storage

NordLocker is deliberately narrow. It keeps personal files encrypted, accessible and shareable without trying to become a productivity suite or full backup platform. In our NordLocker review, that narrow focus produced a service that handles Windows storage cleanly, but its biggest limitation appeared the moment we tried to recover a deleted file.

We tested the 500 GB Personal plan. Transfers arrived intact, sharing and permissions worked, and encryption applies to everything by default. Then we deleted a file and tried to get it back. There was no recycle bin, no version history and no rollback.

What Is NordLocker?

NordLocker is an end-to-end encrypted personal cloud-storage service from Nord Security, with client-side encryption, Windows and mobile apps, web access, file syncing and secure sharing.

The current product is not what you may remember. NordLocker rebuilt it in 2026 under the name Project Renaissance, replacing the old locker-based system with a conventional cloud drive. Files now live in a free-form My Files hierarchy that behaves like any other cloud storage, rather than inside separate encrypted containers you had to open first.

That matters practically, because a lot of NordLocker information online still describes the old design. If a guide mentions creating lockers, it’s out of date.

The scope is narrow by intent. Client-side encryption and controlled access are the product. Office editing, real-time collaboration, version history and deep backup are not. Native support covers Windows, Android, iOS and web, and that list is shorter than it looks, which we’ll come back to.

Sign-in runs through Nord Account, which also handles billing. A separate Cloud Password protects the encrypted storage itself.

NordLocker Key Facts

How We Tested NordLocker

We tested NordLocker on the 500 GB Personal plan during [Month Year].

Our primary machine was an HP laptop running Windows 11 Pro with a Core i7-12700H, 32 GB of RAM and a 1 TB NVMe SSD. A second Windows 11 Pro laptop, an Acer with a Ryzen 5, 32 GB of RAM and 1 TB of storage, acted as the second device and the sharing recipient. Both connected over Wi-Fi at roughly 650 Mbps down and 150 Mbps up. Web Access testing used Chrome.

We used our standard cloud-storage transfer workload. One 8.42 GB MKV file, and one folder containing 1,284 files across six levels of nesting, totalling 3.76 GB across ten file types. Largest item 412 MB, smallest 2.1 KB.

Two tests were designed to break things. We disabled the Windows network adapter at roughly 40% of the large upload, left it off for 60 seconds, then re-enabled it without restarting the client. Separately, we synced a document to both laptops, took both offline, edited each copy differently, then reconnected the HP first and the Acer second.

Sharing was tested between two entirely separate individual accounts, with Viewer and Editor permissions assigned, changed and revoked.

We also ran our standard recovery test. A document three folders deep, three saved versions, deleted and then restored, followed by a rollback to the earliest version. What happened is in the security section.

One distinction shaped how we wrote this. Recovering from an interrupted transfer and recovering encrypted content after losing your credentials are different problems, and NordLocker handles them differently. We’ve kept them separate throughout.

Hands-on testing focused on Windows storage, sync, sharing, conflict handling and recovery. Encryption architecture, provider-access claims, audit evidence, mobile workflows and broader platform support were assessed through NordLocker’s documentation and independent research. We contacted support with a real question.

NordLocker Sync Overview

Routine synchronisation isn’t where NordLocker struggles. Files arrived intact, folder structure survived, and changes reached the second laptop. The weaknesses showed up under pressure, where one type of change propagated noticeably slower and an interrupted transfer started over from the beginning.

Sync Reliability and Change Propagation

The file set stayed consistent across upload, download and change cycles. All 1,284 files arrived with six levels of nesting intact and filenames unchanged. Nothing went missing, nothing duplicated.

Changes reached the Acer, but not all at the same pace. The moved file took noticeably longer than the edits, renames, additions and deletions. If you reorganise folders on one machine and switch to another straight away, you may see an older structure for a while.

No permanent sync failure occurred. This matters more for people who restructure their storage often than for someone who mostly adds and edits documents in place.

One architectural note worth knowing: only content placed in My Files is synchronised. Ordinary folders elsewhere on your computer are not automatically included. NordLocker is folder-scoped storage, not a backup agent that watches your whole machine.

Transfer Speed and Large-File Performance

The 8.42 GB MKV uploaded and downloaded without errors and arrived intact. The mixed folder completed with its original structure preserved rather than flattened.

A single transfer over a fluctuating home connection isn’t a meaningful speed benchmark, so we used this test to judge whether large transfers completed correctly.

File size limits matter here, and our test file sat right between them. The Windows app allows individual files up to 10 GB. Web Access, Android and iOS cap at 8 GB.

Our test demonstrates that Windows accepts an 8.42 GB file. NordLocker’s documentation puts the limit at 8 GB on Web Access, Android and iOS, which creates a cross-platform limitation for files in this size range. If you work with large video, you can upload it from your PC and then find you can’t retrieve or manage it the same way through a browser or phone.

Background Sync and Selective Sync

The current Windows design behaves like a cloud drive with files on demand rather than a mirrored folder. Files-on-demand means the file appears in Explorer but the data stays online until you open it.

NordLocker Drive shows distinct states on Windows, covering online-only, local, always-local, syncing and error, so you can tell at a glance where a file actually lives. Two controls handle the rest. Free up space removes the local copy and leaves the cloud version. Always keep on this device maintains a synchronised local copy.

That’s genuinely useful on a laptop with a small SSD. It isn’t classic selective sync with folder-exclusion rules, because the emphasis is on individual files staying downloaded or not. Cloud-only files need a connection to open.

One security consequence worth flagging now rather than later: hydrated local files can stay accessible even when the app is logged out. Your Windows account password and device encryption are doing real work there. If your laptop isn’t encrypted, NordLocker’s encryption doesn’t save you.

Conflict Handling and Re-Sync

The conflict test preserved both versions. Offline edits on both laptops produced Conflict-Test – Copy.docx on the Acer.

That filename is a problem. It’s indistinguishable from an ordinary Windows duplicate, because nothing in it says a conflict occurred. A conflict copy stamped with a date, or one naming the device responsible, would tell you immediately what happened. NordLocker gives you a file called Copy. You could delete it assuming it’s a stray.

The interruption test went worse. The transfer completed after reconnection, but it restarted from the beginning.

Nothing in the client indicated why it started over. For a small file it’s a shrug. For our 8.42 GB test file on an unstable connection, it means a dropped Wi-Fi signal costs you the whole upload and you start again.

NordLocker Sync Test Results

We ran five sync tests on the NordLocker 500 GB Personal plan using the Windows desktop app and Web Access, on two laptops sharing one Wi-Fi connection. The HP sent an 8.42 GB MKV file and a 3.76 GB folder of 1,284 files nested six levels deep, and the Acer received them.

Two results came back less than clean, and both point the same way. Nothing was lost, since the file set stayed intact throughout. NordLocker just asks more of you when conditions stop being ideal.

A dropped connection means paying for the whole upload a second time, which is a real cost on a large file over a slow line. And a conflict copy that announces nothing is a conflict you may not notice until you open the wrong version.

Everything above comes from Windows and Web Access on this one plan. We did not repeat the workloads on Android, iOS or any other plan, and macOS and Linux aren’t supported at all.

NordLocker Collaboration Overview

NordLocker supports secure file sharing, but not real-time collaboration. You can assign Viewer or Editor access and revoke it later, but there are no comments, simultaneous editing, approvals or shared project tools.

File and Folder Sharing

Sharing individual files and folders works, and shared content stayed available to our recipient until we withdrew access.

Named sharing requires the recipient to have a NordLocker account. That suits recurring exchanges such as a family member or a colleague you send things to regularly, because you’re not creating a new link each time. Removing access worked cleanly.

Platform coverage is uneven in a way that will affect your workflow. Named email-based sharing is documented for Web Access, Android and iOS. It is not available in the Windows app. So the primary desktop client, which is also the only desktop client, can’t do the sharing method NordLocker documents most thoroughly. You manage those shares from a browser or your phone.

Link sharing did land on mobile in August 2026, so iOS and Android can now generate share links too.

There’s no file request feature, the workflow where someone uploads to you without seeing your folder contents. NordLocker’s own migration guide describes it as coming soon, which means it isn’t here.

Link Controls and Permissions

Two roles, and they behaved correctly in testing. Viewer limits the recipient to viewing. Editor allows adding, editing and organising files. Switching between them changed what our recipient could actually do.

Share links from Web Access work for any file or folder, reach recipients without NordLocker accounts, and support an optional access code, an expiry date and later revocation. That’s a sensible set for personal use.

What isn’t there: download blocking, watermarking, geographic restrictions, permission inheritance across nested folders, or detailed recipient policies. For sending a document to one person, none of that matters. For controlled distribution, it does.

Comments, Co-Editing and Shared Workflows

There is no real-time collaboration in NordLocker. No comments, no mentions, no approvals, no presence indicators, no office integration, no simultaneous browser editing.

An Editor can add, modify and organise shared content, which works if you take turns or use NordLocker as a private exchange space. Two people editing the same file produce a conflict copy, not a merge. Independent testing in 2026 found limited static preview and no online editing at all, which matches what we saw.

Coordination happens outside NordLocker. That’s not a gap the company is hiding. It’s simply where the product’s scope ends.

Team Administration and Integrations

Personal is not a team platform, so this review focuses on individual sharing rather than business administration. You can invite a user, assign a role and remove access. There’s no group policy, no ownership transfer workflow, no administrative reporting.

NordLocker’s public business page currently points at ordinary Premium storage rather than exposing a distinct team or admin product, so there isn’t a business tier sitting above this that fixes those gaps.

There’s no meaningful integration layer either, with nothing for Microsoft 365, Google Workspace, Slack, Teams or project management. You can download a file and edit it elsewhere, which is not the same as those tools being connected to your storage.

NordLocker Collaboration Test Results

We ran four collaboration tests between two separate individual NordLocker accounts on the 500 GB Personal plan, using non-sensitive test files.

Access control works. Working together doesn’t. Sharing, roles and revocation all behaved correctly, and there’s nothing sitting behind them. No comments, no simultaneous editing, no file requests, no integrations.

The platform note in the first row isn’t a footnote. Named sharing is unavailable in the Windows app, so the only desktop client NordLocker offers can’t perform the sharing method NordLocker documents most thoroughly. You manage those shares from a browser or a phone.

Testing used two independent accounts rather than profiles under one family subscription, because access controls only prove themselves when the recipient is genuinely someone else, and named sharing requires that recipient to hold a NordLocker account. Mobile sharing and organisation-level workflows were not covered.

NordLocker Security Overview

Encryption is NordLocker’s strongest feature, while recovery is its weakest. Both facts define the product. Strong encryption keeps other people out of your files, but it can’t help when the person deleting them is you.

Encryption and Data Protection

NordLocker encryption runs on your device before files upload, and it covers filenames as well as contents. Client-side encryption means the data is scrambled before it leaves your computer, so the provider stores something it cannot read.

The documented architecture pairs end-to-end encryption with a zero-knowledge design, meaning NordLocker says it doesn’t hold what’s needed to decrypt your content. The documented cryptographic primitives include Argon2, AES-256, ECC, XChaCha20-Poly1305, EdDSA and Poly1305.

The cipher names matter less than where encryption happens, and here it happens on the client before upload.

Two boundaries need stating. A complete public protocol specification isn’t available and the clients are closed source, so the design can’t be independently verified in detail. And the zero-knowledge claim doesn’t automatically extend to every piece of metadata, sync event, preview or sharing record.

Also: files you export leave the protection model entirely. Download something into a normal Windows folder and it’s protected by your device, not by NordLocker. The current product no longer offers local-only encryption for files sitting on your machine, which the old version did.

Account, Device and Sharing Security

NordLocker separates account access from storage access, and it’s a sound design. Nord Account handles sign-in, billing and subscription. A separate Cloud Password protects the encrypted storage layer. One compromised credential doesn’t automatically expose everything.

Nord Account supports authenticator-app MFA and physical security keys, with backup codes, plus biometric access on Android and iOS. Hardware security keys add a useful stronger-authentication option on top of that.

Lock behaviour differs by platform, so the way you get back into the app isn’t identical everywhere.

Share links can carry an access code and an expiry date and can be revoked. That protection still depends on how you send the link and the code, because putting both in the same email defeats the purpose.

File Recovery and Ransomware Resilience

NordLocker currently has no user-accessible version history or conventional recycle bin, which makes recovery the biggest weakness we found.

After deleting our test document, there was no conventional recycle bin in the tested Personal account that let us select it and restore it. We then created three successive versions of a file and looked for a version-history interface offering them as recovery points. There wasn’t one. The older-version portion of our standard test could not be completed at all.

NordLocker’s own documentation matches what we found. No versions, no trash, no undo, no undelete workflow. On mobile, deletion is explicitly permanent. Cloud trash has been announced as in development, which means it isn’t available now.

The encrypted event journal in NordLocker’s rebuilt architecture is an internal mechanism, not user-visible version history. Don’t mistake one for the other.

Here’s what that means in practice. Encryption stops other people reading your files. It does nothing when you delete the wrong folder, save over a document, or sync a damaged file. Two-way sync is not a versioned backup, because it faithfully copies your mistake to every device.

The ransomware implication follows directly. If malware encrypts files inside My Files, those changes sync in their altered state, and there are no clean historical versions to roll back to. Marketing language about ransomware protection doesn’t prove versions, delayed deletion, rollback or immutability, and NordLocker currently documents none of them.

Keep a separate versioned backup. Not as general advice, but as a specific requirement for using this service with anything you can’t afford to lose.

Privacy, Audits and Provider Trust

NordLocker starts from a genuine architectural advantage. Encrypted contents are designed to stay unreadable to the provider, which is a stronger position than services holding decryption keys on your behalf.

Beyond file contents, the picture is less complete. Running an account still involves email, payment data, device information, diagnostic data, usage data, sync events and sharing metadata. Content privacy doesn’t cover any of that. Exact retention periods, subprocessors and storage locations weren’t clear enough in public documentation to support broad total-privacy claims.

We’d flag two things specifically. The Apple and Google developer privacy declarations for NordLocker’s mobile apps conflict with each other, and neither should be treated as product-wide proof. And the current privacy notice is JavaScript-rendered, which makes it awkward to inspect and archive, so check it directly rather than trusting a summary.

On independent verification: we found no current public security audit covering this generation of NordLocker’s consumer encryption architecture. There’s a documented bug bounty programme through HackerOne, which is a real signal, but it isn’t the same as a published assessment.

One thing to resist. Nord Security’s other products, covering NordVPN, NordPass, NordLayer and the rest, have their own audits and compliance histories. None of that transfers to NordLocker. A sibling product’s audit is not this product’s audit.

Standout Security Overview Features

The Cloud Password and Recovery Key deserve separating from general encryption, because they determine whether you can get back in.

Separate Cloud Password and Recovery Key

Your Cloud Password protects access to encrypted storage. A separate 25-character Recovery Key restores access if you forget it. That key is the only documented password-recovery mechanism.

NordLocker says it doesn’t store either secret in a form that lets support recover your existing encrypted files. Lose both and you can reset the account and keep the subscription under the same email, but the files already in it are gone. Permanently. Nobody can help.

Store the Recovery Key somewhere separate from both the account and the device. A password manager on a different service, or paper in a drawer. Not in the account it protects.

Read that alongside the previous section and the picture is clear: NordLocker has two independent ways to lose data permanently. Deleting something, and losing your credentials.

NordLocker Usability Overview

On Windows, NordLocker behaves far more like an ordinary cloud drive than its old reputation suggests. Files stay online, come down for offline use, or get managed through the browser, without turning storage into an encryption exercise. Platform coverage is the bigger limitation, and it’s a significant one.

Setup and First-Time Use

Setup needs almost no technical configuration. Nord Account handles sign-in, and the encrypted layer introduces the Cloud Password and Recovery Key during onboarding.

That’s an extra responsibility rather than a difficulty, and it’s the one part of setup worth slowing down for. The Recovery Key is generated once. Where you put it determines whether a forgotten password is an inconvenience or a total loss.

There’s no complicated sync structure to design before your first upload. The one concept that repays attention is the difference between cloud-only and locally available files.

If you’re coming from the old locker-based NordLocker, migration deserves care. It can leave content view-only, there’s an extra structural step on Windows, and it resets your existing shares and links. Android requires the separate new app with biometric setup, and iOS offline files need downloading again.

Web Interface and File Navigation

Web Access covers most file management without the Windows app, covering upload, download, rename, move, organise and delete, with shared content kept in its own area.

The current generation abandoned locker-based organisation for a conventional hierarchy, and My Files accepts files and folders at the root. The layout follows standard cloud-drive conventions.

It isn’t a productivity workspace. Previews are more limited than on document-focused services, since independent testing found Word, PDF, JPG and PNG previews but not text, audio or video, so you leave the service to open things more often than you would elsewhere.

One practical quirk: Web Access uses encrypted browser file storage for speed, and it doesn’t work in Safari or Firefox private mode.

Daily File Management and Desktop Workflow

Windows is where NordLocker feels most natural. File Explorer integration presents cloud files through the interface you already use, and the file-status indicators tell you what’s local and what isn’t.

The most useful controls handle disk space, and the Always keep on this device versus Free up space distinction is clear enough to manage without thinking about it. A small laptop drive can front a much larger cloud library.

Some tasks still require Web Access, and feature availability isn’t identical across surfaces, with named sharing the obvious example. You end up needing to know whether a given control lives in Explorer, the app, or the browser.

Mobile Apps and Cross-Platform Experience

Native support is narrower than the platform list suggests: Windows 11 or newer 64-bit, Android 10 or newer, and iOS or iPadOS 17 or newer.

macOS and Linux are unsupported. Not merely limited or in beta. Those users work through a browser and lose the operating-system integration that makes the Windows experience good. Anyone on those platforms loses the file-manager integration that makes the Windows client good.

Mobile handles file access, offline downloads, folder management and biometric protection. Android can capture a photo directly into storage. Automatic photo sync was still in development as of mid-2026, and there’s no photo organiser or editor, so this is private photo storage rather than a photo platform.

Feature parity moves around. Link sharing arrived on mobile in August 2026 while Windows named sharing is still listed as coming soon, so some capabilities land on phones before they reach the desktop.

Customer Support and Ease of Use

The help centre serves a purpose beyond troubleshooting here. NordLocker changed substantially from the old locker design, so current documentation is what separates today’s workflow from instructions written for the previous product.

Live chat and an email form are both available, with the email form stating a response within 24 hours. There’s no public phone support, no status page we could find, and no numerical resolution commitment.

We asked support how to keep selected Windows files available offline without downloading the entire library. The agent identified the right file-availability controls and explained the workflow without unnecessary back-and-forth. More importantly, the instructions matched the current interface rather than the older design, which matters, because outdated NordLocker information is easy to stumble into elsewhere.

One warning from the documentation worth repeating: account deletion or reset can lose all stored content. Export first, and keep evidence of your cancellation.

NordLocker Pricing, Plans and Refunds

The lineup is simple: one permanent free tier and two paid storage levels. Monthly billing gives flexibility, annual lowers the first-year cost considerably.

Upgrading buys space, nothing else. There’s no better encryption, no recovery features unlocked at a higher tier, no collaboration that appears when you pay more. That’s honest, and it makes the decision straightforward, so work out how much storage you need and buy it.

NordLocker 3 GB Free

Free gives you 3 GB permanently, with no credit card, and it includes the same end-to-end encryption and secure sharing as the paid plans. Not a trial with the privacy features stripped out.

Three gigabytes covers important documents and a small set of sensitive files. Far too small for photos or video.

Since the free tier carries the full feature set, it’s also the honest way to evaluate NordLocker. That includes the parts you’d rather find out about now. Delete a file here and see for yourself that there’s no way to get it back. Set up the Cloud Password and Recovery Key and decide whether you can store that key somewhere safe for years. Try sharing something and discover that named sharing isn’t in the Windows app.

Those three findings decide whether NordLocker suits you, and none of them costs anything to learn.

NordLocker 500 GB

The plan we tested, and the sensible paid tier for most personal users. Enough room for a substantial collection of documents, photos and ordinary files without changing anything about how the service works.

Paying doesn’t fix the missing recovery or the absent collaboration. You’re buying capacity on the same product, and that’s worth saying plainly, because the price jump from free might imply otherwise.

NordLocker 2 TB

Four times the storage, same everything else. It suits large photo collections and media archives.

Two things it doesn’t do. It doesn’t raise the individual file-size limits, which stay at 10 GB on Windows and 8 GB through Web Access and mobile. And it doesn’t improve encryption, recovery or collaboration depth in any way.

That first point matters more at this tier than any other. Buying 2 TB usually means large media, and large media is exactly what runs into the per-file ceiling. Check your largest files against those numbers before you buy the capacity.

NordLocker Billing and Renewal Terms

Monthly plans charge one period at a time. Annual plans are paid upfront and renew automatically unless cancelled.

Introductory offers apply only to the first subscription period, and renewals use the price in effect at that time. The gap between the heavily discounted first year and later billing is the single most important thing to check before buying, and it’s larger here than the checkout page makes obvious.

Auto-renewal can be disabled through Nord Account without immediately ending access, so your subscription stays usable until the paid period runs out.

Export before you cancel or downgrade, and treat that as a hard rule rather than good practice. NordLocker’s own documentation warns that account deletion or reset can lose stored content, and there’s no recycle bin or version history sitting behind that as a second chance. On a service with recovery, a mistimed cancellation is recoverable. Here it isn’t.

Keep evidence of your cancellation as well, since the documentation is clearer about what you lose than about what you can dispute afterwards.

NordLocker Money-Back Guarantee and Free Trial

There’s a 30-day money-back guarantee on the initial purchase of an eligible paid subscription. Renewals are generally excluded. Apple App Store purchases follow Apple’s refund process rather than NordLocker’s, and prepaid cards, gift cards and some partner promotions fall outside it too.

Thirty days is enough time to find the things that matter. Upload a real library, work across two machines, test what happens when a transfer drops, and try to recover something you deleted. That last test is the one that decides it, and it takes minutes.

Don’t confuse the guarantee with the free tier. The 3 GB account is permanent free storage requiring no payment details, while the guarantee only applies after you’ve paid. There’s no separate free trial of the paid plans advertised, so those are your two routes.

NordLocker Comparison With Alternatives

NordLocker does one job. The alternatives worth weighing are the ones that do it differently, or do more.

pCloud is more capable in almost every direction. Faster transfers, resumed uploads, thirty days of file recovery, macOS and Linux clients, larger plans. Encryption is the exception, because zero-knowledge protection there costs extra. NordLocker includes it and charges less to start.

Proton Drive removes the reason to compromise. Encrypted documents, real-time editing, version history reaching back years. We deleted the same test file on both. Proton put it back and kept every newer version. NordLocker had nowhere to restore from.

NordLocker if simple encrypted storage is genuinely all you need and you keep your own backups. pCloud if you want the service to catch your mistakes. Proton Drive if you work in the files.

Final Verdict: NordLocker Is Storage, Not a Safety Net

Is NordLocker worth it? Yes, for a narrow brief that’s honestly stated. Keep personal files encrypted, reach them when you need them, share them with specific people, and don’t ask the service to do anything else.

Within that brief it performs. The Windows workflow is straightforward, client-side encryption covers file contents and names as standard, the account and storage layers are properly separated, hardware security keys are supported, and our sharing tests all behaved correctly.

The limits matter as much as the strengths. macOS and Linux users get a browser instead of an app. The Windows client can’t do named sharing. Interrupted transfers restart from zero. Collaboration barely exists.

And then the one that decides it. We deleted a file and could not get it back, with no recycle bin, no version history and no rollback. Losing both your Cloud Password and Recovery Key makes existing files permanently unrecoverable. Those are two separate ways to lose data for good.

So this NordLocker review lands here: it’s a good encrypted storage service and a bad only-copy. Use it for what it does well, keep an independent backup of anything irreplaceable, and store that Recovery Key somewhere else entirely.

NordLocker FAQs