Digital footprint

What your NordVPN privacy risk score means

Your Digital footprint report opens with a number from 0 to 100 and a label. Nord's help article does not explain how it gets there. This guide sets out what is known, what is not, and what to do next.

Last updated: 5 min readIndependent guidance, Australia-first

The short answer

The privacy risk score is a rough measure of how much of you NordVPN could find from one email address, in public sources and leak data. A higher number appears to mean it found more. Nord's help article does not say how the score is calculated or where each band starts, and the report says AI writes it and can make mistakes. So read it as a starting point, not a grade: the list of profiles and leaks under it is what you act on.

Key takeaways

  • The score runs from 0 to 100 and comes with a band label, such as moderate risk.
  • Nord's help article does not define the score or its bands.
  • It is built from one email address checked against public sources and leak data.
  • It cannot see accounts that left no public trace, your other addresses, or reused passwords.
  • Do not chase the number. Work through the accounts and leaks it lists.

How we tested, and our interest

We tested NordVPN's Digital footprint ourselves on 14 November 2026, with one email address on a single account with a monthly NordVPN plan. Your report will differ: it depends on your address, your plan and what Nord can see when you run it. In The Event Of is not affiliated with NordVPN or Nord Security. We make a different tool for the same problem, so read this as a fair but interested view.

Known

What feeds the score

Nord's help article says the feature checks your email address against online platforms, public records and databases, and dark web sources. It then analyses what it finds to produce a score, a summary, key risks and an action plan.

In our test on 14 November 2026, the report also said that AI writes the summary, the score and the recommendations, and that it can make mistakes. Below the score, the report listed the things it found: profiles on services, profiles with limited details, account activity, data leaks and location activity. Those are the likely inputs, but Nord does not say how each one is weighted.

What we do not know

Nord's help article, read on 15 November 2026, does not give the formula, the weights or the numbers where each band starts. We have not guessed them here.

Blind spots

What the score cannot know

  • Accounts with no public trace. An old shop or app account that has no public profile and was never in a known leak can be invisible to a public lookup. The company may still hold your name, address and payment details.
  • Your other email addresses. Each report covers one address. An older address may hold more forgotten accounts.
  • Reused passwords. A leak of one password matters much more if you used it elsewhere. The score cannot know that.
  • What you have already fixed. If you closed an account last week, public data and leak records may still show it.

The first blind spot is the biggest. Your inbox is usually a better record of where you signed up than the public web. Our guide to finding accounts linked to your email shows how to search it.

Act

What to do at each level

Nord's help article does not list its bands, so this table uses the position on the dial instead. The steps are the same idea at every level; only the urgency changes.

Suggested next steps by position on the 0 to 100 privacy risk score dial
Where your score sitsWhat it likely meansWhat to do
Low endNord found little about this address in public sources and leaks.Check your other email addresses too. Search your inbox for old sign-ups the report could not see. Keep monitoring on.
MiddleSeveral profiles or some leak or activity data were found.Work through the action plan this month. Secure any account linked to a leak first, then close the ones you do not use.
High endMany profiles, leaks or location data were found.Start today with any account in a leak: change the password and turn on multi-factor authentication. Then reduce public profiles and close unused accounts.

For the real steps behind each item, read how to act on NordVPN's action plan. To close accounts safely, read how to delete old accounts.

Using In The Event Of

See the accounts the score leaves out

In The Event Of looks from the other side. You connect Gmail or Outlook, and it reads the sender, subject, date and delivery details of your emails (it may also process a short Gmail preview without storing it, and it never stores the rest of the email) to list the services that appear linked to you, with known breach exposure. It will not find every account, and it does not close accounts for you. It gives you the list to work through.

Find the accounts behind the number

Connect Gmail or Outlook and see the services that appear in your inbox, with known breach exposure. Free plan, no credit card.

Scan my inbox free

Back to the overview: NordVPN Digital footprint review.

FAQ

Frequently asked questions

Is a moderate privacy risk score bad?
It appears to mean the report found a fair amount of you online, not that you have been hacked. What matters more than the number is the list of profiles and leaks under it, and whether you act on them.
How does NordVPN calculate the privacy risk score?
Nord's help article, read on 15 November 2026, does not give a formula. It says it checks your email address against online platforms, public records, databases and dark web sources, then analyses the findings to produce a score, a summary, key risks and an action plan. In our test the report said AI writes the score and can make mistakes.
What are the score bands?
Nord's help article does not define them. The report shows a band label beside the number, such as moderate risk, but we found no published list of bands or the numbers where each one starts.
Is a low score proof that I am safe?
No. The score only reflects what Nord could see from one email address in public sources and leak data. Accounts that left no public trace, your other email addresses and reused passwords are outside what it can measure.
How do I lower my privacy risk score?
Work through the action plan: secure or close the accounts it lists, make public profiles private or remove details, review app permissions and block trackers. Then run a new check when your plan allows, which Nord says is every 30 days on eligible plans.
Why did my score change when I did nothing?
New leaks or new public data can move it. Nord's help article does not say what changes the score, so compare the profiles and leaks listed, not only the number.

Disclaimer: NordVPN and Digital footprint are names of NordVPN and Nord Security, used here only to identify their product. We tested the feature on 14 November 2026; how the score works may have changed since. This guide is general information only and is not legal, financial, or security advice. It is based on publicly available sources at the time of writing and may not reflect the most recent developments. In The Event Of Pty Ltd (ABN 38 687 352 647) is an independent Australian company and is not affiliated with the third-party services named in this guide.