How multi-hop routing works
A normal VPN connection has one hop. Your device builds an encrypted tunnel to a VPN server, and that server sends your traffic on to the website or app. That one server knows your real IP address and the destinations you reach, even if it can't read encrypted content like HTTPS pages.
Multi-hop adds a second server in the middle. The path looks like this:
- Your device encrypts your traffic and sends it to the first VPN server, often called the entry server.
- The entry server passes it to a second VPN server. NordVPN describes its version as encrypting your traffic twice along the way.
- The exit server sends your traffic out to the internet. Websites see the exit server's IP address.
The point is separation. In a typical setup, the entry server sees your real IP address but not where you end up, and the exit server sees where you end up but only the entry server's address. An attacker would need to see both servers at once to link the two ends.
Multi-hop spreads what one server knows across two servers. It is a hedge against one of them being compromised or watched. It is not a second layer of protection against everything.
Double VPN, MultiHop and Secure Core compared
We read each provider's own feature page on October 31, 2026. The names differ, and so do the details.
| Feature | How the route is chosen | Notes from the provider |
|---|---|---|
| NordVPN Double VPN | Pick Double VPN in the app or choose a specific Double VPN server. | Listed for Android, macOS, iOS, Linux and Windows. Not every protocol supports it; NordVPN suggests switching to OpenVPN (TCP or UDP) if the option doesn't appear. Says it slows your connection. |
| Surfshark MultiHop | Routes through two servers. You can pick entry and exit points manually to build custom server pairs. | Surfshark's servers page includes a MultiHop column in its server list and links to a separate feature page for app details. |
| Proton VPN Secure Core | Traffic first passes through a Secure Core server in Iceland, Sweden or Switzerland, then exits in the country you choose. | Proton says it wholly owns these servers, runs them on its own network, and offers Secure Core on all paid plans. |
Read on October 31, 2026 from each provider's official page, linked in Sources. Features and supported platforms change; check before you buy.
Proton's approach is the most opinionated. Its first hop always sits in one of three countries it picked for their privacy laws, in facilities it describes as high-security: an underground site in Sweden and a former military base in Iceland. NordVPN and Surfshark treat multi-hop more like a routing option you choose per connection.
If one of these fits, you can go straight to the provider: NordVPN — see current pricing or Surfshark — see current pricing.
Some links on this page are affiliate links; we may earn a commission at no extra cost to you.
The threat multi-hop actually addresses
Multi-hop answers one question: what if the server you connect to isn't trustworthy at that moment?
A VPN server can be compromised by an attacker, monitored by a hosting company or network operator, or sit in a country where authorities can compel cooperation. Proton's Secure Core page names exactly these risks. It also notes that someone watching the network around a server could try to match incoming client traffic with outgoing VPN traffic. And it admits Proton cannot be certain authorities aren't monitoring its servers in high-risk countries.
Proton has also argued, in a separate post about server storage, that anyone with administrative access to a running server can reach its data. That is the scenario multi-hop is built for. If one hop is exposed, the attacker still only holds half the picture.
- Exit servers in risky placesYou need an IP address in a country where you'd rather the VPN server didn't know who you are.
- Single-server compromiseYou want a buffer in case one server is breached or quietly watched.
- High-stakes communicationNordVPN positions Double VPN for people reporting on events, working around censorship or protecting sources such as whistleblowers.
What multi-hop does not do
The marketing around “double” protection invites people to assume more than it delivers. Keep these limits in mind.
- Same company, both hops. Both servers belong to the same provider. If your concern is the VPN company itself, two of its servers don't help. The company's logging policy and audits still matter most.
- Not anonymity. Websites still recognize you through logins, cookies and browser fingerprints. Our guide to VPN privacy vs online anonymity explains the gap.
- Not disguise. Multi-hop doesn't hide that you are using a VPN. That is a different feature, covered in our obfuscation explainer.
- Not rotating IPs. Changing your exit IP over time is another separate idea. See our breakdown of Surfshark's rotating IP and Nexus.
- Not Tor. NordVPN itself points people who want the Tor network to its separate Onion Over VPN servers, not to Double VPN.
Encrypting twice does not make your data twice as safe. Modern VPN encryption isn't the weak point. The weak points are who runs the servers, what they log and what you reveal by logging in to things.
The costs: speed, choice and compatibility
Every extra hop adds distance and processing. NordVPN says plainly that Double VPN makes the overall journey longer and slows your connection, and that it can affect latency-sensitive activities such as fast-paced online games. We don't publish speed numbers because we don't run speed tests, but the direction of the trade-off is not in dispute.
You also give up some flexibility:
- Fewer route optionsMulti-hop servers or pairs are a subset of a provider's network, and Proton's first hop is always in one of three countries.
- Protocol limitsNordVPN says not all protocols support Double VPN, so you may need to switch protocols to see the option.
- More to troubleshootTwo servers mean two places a connection can fail. If streaming or a banking site misbehaves, multi-hop is a likely first suspect.
Use it if, skip it if
Your risk is a specific server
- You work as a journalist, activist or researcher and handle sensitive sources.
- You need to exit in a country with aggressive surveillance and want the first hop somewhere else.
- You are on a network you have reason to think is closely monitored.
- You can live with a slower connection for that session.
You want everyday privacy
- You mostly browse, shop, stream or use public Wi-Fi. NordVPN itself says a standard VPN is enough for everyday browsing.
- You game or make video calls and care about lag.
- Your main worry is the VPN company. Pick a provider with a strong audit record instead.
- You want to look like you're not using a VPN at all. That calls for obfuscation.
A sensible middle path: leave multi-hop off by default and turn it on for the specific tasks that warrant it. Most apps make switching quick.
How to turn it on
- NordVPN: select Double VPN in the app's server options or pick a Double VPN server directly. If you don't see the option, switch to OpenVPN (TCP or UDP), as NordVPN's page suggests.
- Surfshark: open MultiHop and pick an entry and exit location to build your own pair.
- Proton VPN: on a paid plan, turn on Secure Core and choose your exit country.
- Afterward: check that the sites you need still work, and turn multi-hop off when you're done if speed matters for what comes next.
Frequently asked questions
What is a double VPN?
A double VPN sends your traffic through two VPN servers instead of one. The entry server sees your real IP address, and the exit server connects to websites, so no single server sees both ends of your connection.
Is multi-hop the same as Tor?
No. With multi-hop, both servers are run by the same VPN company. NordVPN points people who want the Tor network to its separate Onion Over VPN servers rather than Double VPN.
Does double VPN slow down my connection?
Yes. NordVPN says Double VPN makes the route longer and slows your connection, and that it can affect latency-sensitive uses such as fast-paced online games. How much depends on the servers and your network.
Which VPNs offer multi-hop?
Among the providers whose pages we read on October 31, 2026, NordVPN offers Double VPN, Surfshark offers MultiHop, and Proton VPN offers Secure Core on all paid plans. Each works a little differently, so check the provider's own page.
Do I need a double VPN for everyday use?
Usually not. For browsing, shopping, streaming and public Wi-Fi, a standard single-server VPN is enough, and NordVPN says the same. Multi-hop makes most sense for journalists, activists and others worried about a specific server being compromised or watched.
Does multi-hop make me anonymous?
No. Websites can still identify you through logins, cookies and browser fingerprints, and the VPN company runs both servers. Multi-hop narrows what any one server knows; it does not make you invisible.
Sources
Pages below were opened and read on October 31, 2026, when this article was written. Policies and features change; confirm on the provider's site.
- NordVPN: Double VPN Two-server routing with double encryption, supported apps, protocol note, speed and latency trade-off, intended users, Onion Over VPN.
- Surfshark: VPN servers MultiHop routes through two servers; manual entry and exit selection for custom pairs.
- Proton VPN: Secure Core Secure Core countries, owned servers and network, facilities, paid-plan availability, threat model and stated limits.
- Proton VPN blog: Why Proton VPN doesn't use RAM-only VPN servers Proton's point that administrative access to a running server exposes its data.
VPN Review is independent desk research. We read provider documentation, published audits and third-party data; we do not run our own lab or speed tests. Nothing here is legal advice. Features, prices and policies change, so confirm on the provider's site before you buy.