What Is Double VPN / Multi-Hop? Do You Need It?
Double VPN (also called multi-hop) routes your traffic through two VPN servers in different locations instead of one. The first server knows your IP but not your destination. The second server knows your destination but not your IP. This prevents any single VPN server from knowing both who you are and what you're accessing.
How double VPN works
Standard VPN: Your device → VPN server (sees your IP + destination) → Website. Double VPN: Your device → VPN server 1 (sees your IP, but not final destination) → VPN server 2 (sees only traffic from Server 1, not your real IP) → Website.
For double VPN to compromise your privacy, an attacker would need to control or compromise both VPN servers simultaneously — significantly harder than compromising one.
What double VPN protects against
- Compromised VPN server: If one server is seized or logging, the attacker still can't correlate your IP with your traffic
- Traffic correlation attacks: Makes it harder to correlate entry and exit traffic using timing analysis
- VPN provider trust: Even if you don't fully trust the VPN provider, double VPN splits the knowledge between two servers in different jurisdictions
- Advanced surveillance: For journalists, activists, and high-risk users where a single point of failure is unacceptable
What double VPN doesn't protect against
- A malicious VPN provider: If the provider controls both servers, they can still correlate traffic
- Malware on your device: If your device is compromised, the attacker sees everything before it reaches the VPN
- Account-based tracking: If you're logged into Google or Facebook, you're tracked regardless of VPN hops
- Jurisdiction jurisdiction: If both servers are in countries with mutual legal assistance treaties, a single court order can reach both
Which VPNs offer double VPN / multi-hop?
- NordVPN: 'Double VPN' toggle. Routes through two servers in different countries. No extra cost.
- ProtonVPN: 'Secure Core' — routes through Switzerland or Iceland first, then to destination. Servers are in hardened data centers under ProtonVPN's control.
- Mullvad: Multi-hop via SOCKS5 or WireGuard over WireGuard. More control over server selection.
- Surfshark: 'MultiHop' servers — pre-configured multi-hop routes.
- ExpressVPN: No native double VPN. Can chain two separate VPN subscriptions manually.
Do you actually need double VPN?
For most people: No. Double VPN significantly reduces speeds (2 encryption layers, 2 server hops) and provides protection against threat models that don't apply to everyday users. You need it if: you're a journalist in an authoritarian country, activist with government-level threat model, or someone with specific reason not to trust any single VPN server. If you're using a VPN primarily for streaming, privacy from your ISP, or public Wi-Fi security: a single server is more than sufficient.
Frequently asked questions
Does double VPN slow down speed?
Yes — typically 40–60% slower than a single VPN connection. Traffic is encrypted twice and travels through two servers. For general browsing this is manageable; for 4K streaming or gaming it's usually impractical.
Is double VPN better than Tor?
For different threat models. Tor uses three relays with independent operators in different jurisdictions — no single entity controls the path. Double VPN uses two servers from the same provider. Tor provides stronger anonymity; double VPN provides better speed and streaming compatibility.
What's the difference between double VPN and a VPN over Tor?
VPN over Tor routes your VPN connection through the Tor network first. Double VPN routes your connection through two VPN servers. VPN over Tor provides stronger anonymity (Tor's multi-operator design) but is much slower. Double VPN is faster and easier to set up.