What Is Multi-Hop VPN and When Does It Actually Matter

A normal VPN sends your traffic through one server. A multi-hop VPN, sometimes called Double VPN, sends it through two or more servers in a chain. It adds protection against some specific risks, at the cost of speed.

How it works

1. Your device connects to the first VPN server, which sees your real IP address.
2. That server passes your traffic, still encrypted, to a second server, often in another country.
3. The second server sends it to the website. The site sees the second server's address.

The first server knows who you are but not where you're going; the second knows where you're going but not who you are.

What it protects against

• One compromised server. If someone watches or seizes a single server, they see only half the picture.
• Traffic matching at the exit. It's harder to link traffic leaving the VPN to the person who sent it.
• Risky locations. Some services route through a first server in a privacy-friendly country before exiting elsewhere, such as Proton VPN's Secure Core.

What it doesn't protect against

• The VPN company itself. Usually one company runs both servers, so you still have to trust it. See checking no-log claims.
• Accounts and cookies. Sign in to your accounts and sites know who you are, however many hops you use.
• Browser leaks. WebRTC can reveal your real IP to websites regardless of the VPN. WebRTC Privacy Shield stops that in Chrome.
• Malware and phishing.

The cost

Each extra server adds distance and processing, so pages load slower and video calls lag more. For streaming, gaming and large downloads, a single nearby server is much better.

Who actually needs it

• Journalists, activists and others facing well-resourced adversaries.
• People in countries with heavy internet surveillance.
• Anyone doing sensitive work who wants protection if one server is compromised.

For most people, a trustworthy single-hop VPN with a kill switch is enough. See kill switches explained.

Multi-hop vs Tor

Tor routes traffic through three volunteer relays run by different people, so no single company is trusted with both ends. It's slower, but stronger for anonymity. See when to use Tor Browser.

Check it works

Whatever you use, test for IP, DNS and WebRTC leaks. See how to verify your VPN.