How to Completely Uninstall NordVPN From Your Mac

NordVPN is one of the heaviest VPN apps on macOS in terms of installed footprint. It drops a privileged helper, a system extension, multiple LaunchDaemons, login items for auto-launch, a network filter extension, and a separate threat-protection module that scans DNS queries even when the VPN isn’t connected. Drag-to-trash leaves all of it running.

A user I helped recently had “uninstalled” NordVPN three months ago. Activity Monitor showed nordvpnd (the daemon) still running. Login items still listed Nord. The system extension was still registered. The threat protection was still actively filtering DNS queries. Here’s how to actually remove it.

What NordVPN installs

Bundle ID variants:

• Standalone direct download: com.nordvpn.macos.NordVPN
• Mac App Store version: com.nordvpn.osx

Files installed:

• App at /Applications/NordVPN.app/
• Privileged helper at /Library/PrivilegedHelperTools/com.nordvpn.macos.helper
• LaunchDaemons:
  • /Library/LaunchDaemons/com.nordvpn.macos.helper.plist
  • /Library/LaunchDaemons/com.nordvpn.macos.daemon.plist
• Login agent: /Library/LaunchAgents/com.nordvpn.osx.LoginAgent.plist
• System Extension (network filter): registered via macOS system extension framework
• Application support at ~/Library/Application Support/NordVPN/
• Application support (system-wide) at /Library/Application Support/NordVPN/
• Logs at ~/Library/Logs/NordVPN/ and /Library/Logs/NordVPN/
• Caches at ~/Library/Caches/com.nordvpn.macos.NordVPN/

The Mac App Store version is sandboxed and somewhat lighter — most of its data lives in ~/Library/Containers/. The direct version is what most people have, and that’s what spreads files everywhere.

Step 1: Disconnect and sign out

Before anything else:

1. Open NordVPN
2. Disconnect from the VPN
3. Disable Threat Protection if enabled
4. Settings → Account → Log Out

Skipping the log out can leave session credentials cached. Not the end of the world, but cleaner to sign out first.

Step 2: Quit NordVPN and Nord background processes

Open Activity Monitor and search “Nord” and “nordvpn”:

1. NordVPN (main app)
2. nordvpnd (the daemon)
3. nordfileutil (file sharing helper)
4. NordVPN Helper
5. NordVPN Login Agent

Quit each. Some will respawn — that’s the daemon trying to keep itself alive. We’ll fully unload it next.

Let Sweep uninstall properlyDrag-to-trash leaves traces. Sweep wipes the app + support files + prefs + caches + helpers at once. Get Sweep free →

Step 3: Use the official uninstaller (if available)

NordVPN’s recent versions include an in-app uninstaller:

1. NordVPN → Help → Uninstall NordVPN (or in Settings → Help)
2. Authenticate with your admin password
3. Approve the system extension removal when prompted

This handles:

• LaunchDaemons unload
• Privileged helper removal
• System extension uninstall (with macOS approval)
• App bundle removal
• Most system-level config

If you don’t see the in-app uninstaller (older NordVPN versions, App Store install), skip to step 4 and do it manually.

Step 4: Manual uninstall procedure

If the official uninstaller isn’t available or didn’t run cleanly:

Unload daemons

sudo launchctl unload /Library/LaunchDaemons/com.nordvpn.macos.helper.plist
sudo launchctl unload /Library/LaunchDaemons/com.nordvpn.macos.daemon.plist
sudo launchctl unload /Library/LaunchAgents/com.nordvpn.osx.LoginAgent.plist

Remove the system extension

systemextensionsctl list

Find the NordVPN entry, note the team identifier, then:

systemextensionsctl uninstall <team-id> com.nordvpn.macos.NetworkExtension

macOS will prompt for approval. Without this step, the network filter persists.

Drag NordVPN.app to the Trash

/Applications/NordVPN.app/

Delete the daemon plist files

After unloading them:

• /Library/LaunchDaemons/com.nordvpn.macos.helper.plist
• /Library/LaunchDaemons/com.nordvpn.macos.daemon.plist
• /Library/LaunchAgents/com.nordvpn.osx.LoginAgent.plist
• /Library/PrivilegedHelperTools/com.nordvpn.macos.helper

Admin password required for each.

Step 5: Remove login items

Open System Settings → General → Login Items & Extensions. Look for:

• Nord
• NordVPN
• Network Extensions section — Nord’s filter (should be gone after step 4)

Remove anything Nord-related from each section.

If a Nord entry won’t remove (greyed out), the daemon might still be running. Verify in Activity Monitor that nothing Nord-related is alive, then try again.

Step 6: Remove user-level files

In Finder, hit Cmd+Shift+G:

• ~/Library/Application Support/NordVPN/ — settings, logs, account state
• ~/Library/Caches/com.nordvpn.macos.NordVPN/
• ~/Library/Caches/com.nordvpn.osx/
• ~/Library/Preferences/com.nordvpn.macos.NordVPN.plist
• ~/Library/Preferences/com.nordvpn.osx.plist
• ~/Library/Saved Application State/com.nordvpn.macos.NordVPN.savedState/
• ~/Library/Logs/NordVPN/ — connection history, threat protection events

If you used the Mac App Store version, also check:

• ~/Library/Containers/com.nordvpn.osx/
• ~/Library/Group Containers/<team-id>.com.nordvpn.osx/

The Logs folder records every connection — server, time, duration. Privacy-relevant if you’re cleaning up before selling the Mac.

Step 7: System-level cleanup

Admin password required:

• /Library/Application Support/NordVPN/
• /Library/Logs/NordVPN/
• /etc/sudoers.d/nordvpn (if it exists — Nord adds a sudoers entry on some installs)

Step 8: Revert DNS and network changes

NordVPN modifies DNS and may have set custom routes:

1. Open System Settings → Network
2. Click each active connection (Wi-Fi, Ethernet)
3. Details → DNS — verify no Nord IPs
4. Details → Proxies — verify no proxy is set unless you intentionally configured one

Reset the DNS by removing all entries and clicking Apply — macOS falls back to DHCP-provided DNS.

Step 9: Empty Trash and reboot

A reboot is mandatory because:

1. System extensions are loaded by macOS at boot — a reboot fully releases them
2. Daemons may have file handles open until restart
3. Network changes commit cleanly after reboot

After login, verify in Activity Monitor that no nordvpnd, NordVPN, or nordfileutil processes are running.

Don’t dig through ~/Library yourselfSweep hunts every leftover an uninstaller misses. Free download for Mac →

What about NordPass and NordLocker?

NordPass (password manager) and NordLocker (file encryption) are separate apps with separate bundle IDs:

• NordPass: com.nordpass.macos
• NordLocker: com.nordlocker.app

Uninstalling NordVPN doesn’t affect them. If you’re nuking all Nord products, treat each as its own uninstall.

Common questions

Will I lose my NordVPN subscription? No. Your subscription is tied to your Nord account. Uninstalling locally doesn’t cancel anything. Sign in on a new install to continue.

Why is nordvpnd still running after I uninstalled? Because the LaunchDaemon plist file is still present and macOS keeps respawning the daemon. Step 4’s unload + delete sequence is required.

The system extension won’t uninstall, what now? Run:

systemextensionsctl list

If the Nord extension shows as “activated waiting for user”, you need to approve its removal in System Settings → Privacy & Security → Allow (scroll down to the system extension prompt). macOS sometimes requires a fresh approval to allow uninstall.

Does this remove my Nord account? No. The account lives on Nord’s servers. Sign in to nordvpn.com to manage it.

Manual versus automated

NordVPN is one of the worst manual uninstalls on macOS — system extension, multiple daemons, login agents, sudoers entries, DNS modifications. Each piece needs proper handling or things linger.

The official in-app uninstaller is decent if it’s available in your version. For older installs or App Store installs, manual is the only path. Sweep handles the full uninstall — it scans for every Nord-prefixed bundle, finds the LaunchDaemons and PrivilegedHelperTools, and prompts for system extension removal. For one Nord uninstall, manual takes 20-30 minutes if you’re thorough. For routine VPN cleanup or troubleshooting Nord issues, automation is dramatically faster.

Resetting NordVPN without uninstalling

If NordVPN is broken (won’t connect, account login fails, app freezes):

1. Disconnect VPN
2. Sign out of account
3. Delete ~/Library/Application Support/NordVPN/
4. Relaunch — sign in fresh

This resets app state without touching the daemon or system extension. Fixes most NordVPN issues.

For deeper resets that don’t require full uninstall:

1. Quit NordVPN
2. Run sudo killall nordvpnd
3. Delete ~/Library/Application Support/NordVPN/
4. Relaunch — daemon respawns clean

The daemon’s persistent state lives in the user-level Application Support folder, so wiping it forces a clean re-init.

Why “I uninstalled NordVPN” usually means the app, not the system

When users say they’ve uninstalled NordVPN, they usually mean they trashed the app. Confirming the full removal:

1. Activity Monitor shows no nordvpnd or related processes
2. System Settings → Login Items & Extensions has no Nord entries
3. systemextensionsctl list doesn’t show com.nordvpn anything
4. /Library/LaunchDaemons/ has no com.nordvpn plist files

If any of those still show Nord, the uninstall isn’t complete. The full procedure above handles each.