What Is Double VPN?

Diagram: Traffic passing through two chained encrypted relays so neither knows both origin and destination — illustrating double vpn explained
Traffic passing through two chained encrypted relays so neither knows both origin and destination.

Double VPN (also called multi-hop) routes your traffic through two separate VPN servers in sequence. Your data is encrypted twice - Once for each server - And each server knows only one half of the full routing chain. The entry server knows your real IP but not your destination; the exit server knows your destination but not your real IP.

How Double VPN Works

HopServerKnows Your Real IP?Knows Your Destination?
1Entry VPN server (e.g., Netherlands)Yes - Your real IP connects hereNo - Only knows to forward to exit server
2Exit VPN server (e.g., Canada)No - Only sees the entry server's IPYes - Makes the final connection to your destination
DestinationWebsite or serviceNoOnly sees the exit server's IP

Double VPN vs Multi-Hop

  • Double VPN typically means two servers run by the same VPN provider. The provider controls both nodes and encryption happens within their own infrastructure.
  • Multi-hop can mean two servers from different providers, or a VPN combined with Tor. This offers stronger separation since no single entity controls both hops.
  • From an external surveillance perspective, both approaches prevent any single network observer from linking your origin IP to your destination.
  • Using Tor as one of the hops (VPN over Tor, or Tor over VPN) provides even stronger anonymity but at a much larger speed cost. See our Tor vs VPN guide.

Speed Trade-offs of Double VPN

SetupTypical Speed ImpactLatency AddedAnonymity Gain
Single VPN server5–20% reduction~20–50 msGood
Double VPN (same provider)30–60% reduction~50–150 msVery good
VPN + Tor70–90% reduction~200–500 msExcellent

When Is Double VPN Worth Using?

  • You need to protect your identity from a threat actor who could potentially compromise one of the two VPN servers.
  • You want to prevent the VPN provider itself from correlating your entry IP with exit traffic through traffic analysis.
  • You are a journalist, activist, or dissident communicating from a country with state-level surveillance capabilities.
  • You are connecting from a country where your entry IP itself is monitored - A double hop puts your connection behind a second layer before your traffic even reaches the internet.

Providers Offering Double VPN / Multi-Hop

ProviderFeature NameServer PairsProtocol
NordVPNDouble VPN serversPre-defined pairs (e.g., US→Canada, NL→Switzerland)OpenVPN
MullvadMulti-hopAny two servers - Fully configurableWireGuard, OpenVPN
ProtonVPNSecure CoreEntry in privacy-friendly country, exit anywhereWireGuard, OpenVPN
SurfsharkMultiHopPre-defined and custom pairsOpenVPN, WireGuard

Frequently Asked Questions

Is double VPN twice as secure?

No — it solves one specific problem, not security in general. Encrypting twice means neither server knows both who you are and where you are going, but if you trust your provider's no-logs policy, a single hop already achieves that.

How much speed does double VPN cost?

Typically 30–60%, because your traffic is encrypted twice and routed through two servers that may be continents apart. It is noticeable for streaming and unusable for gaming.

Who actually needs double VPN?

People whose threat model includes the VPN provider itself being compromised or compelled — journalists and activists in hostile environments. For ordinary privacy it adds cost without meaningful benefit.

Is double VPN the same as Tor over VPN?

No. Double VPN uses two servers run by the same provider. Tor routes through three relays run by unrelated volunteers, which is a stronger anonymity model and considerably slower.

How we evaluate VPNs: every provider on this site is judged on audited no-logs claims, leak-test results, protocol support, jurisdiction, and price transparency — never on commission. See the criteria in full →

Affiliate disclosure: Some links to VPN providers in these guides are affiliate links - We may earn a commission at no extra cost to you. This never affects rankings or evaluations.

Last updated: 2026-08-02

Sources & Further Reading

The technical claims on this page are drawn from the primary specifications and vendor documentation below.

  1. RFC 8445 — Interactive Connectivity Establishment (ICE) RFC Editor
  2. WebRTC API Reference MDN Web Docs