Multi-Hop
Routes traffic through two VPN servers for an extra layer of encryption and anonymity.
How It Works
Traffic is encrypted in layers: the client connects to the entry server and establishes a tunnel. Inside that tunnel, a second VPN connection is initiated to the exit server. The entry server decrypts the outer encryption layer and forwards the still-encrypted inner packet to the exit server, which decrypts the inner layer before sending the request to the destination. Neither server sees both the user's real IP and the final destination IP simultaneously.
Advantages
- No single VPN server knows both the user's real IP address and their destination — the entry server sees the real IP but not the destination, the exit server sees the destination but not the real IP
- If either server is compromised or logs under legal duress, the other server's data alone is insufficient to identify the user or their activity
- Defends against the threat model where the VPN provider itself becomes untrustworthy or is coerced
- Makes correlation attacks significantly harder since traffic crosses two independent jurisdictions and server infrastructures
Disadvantages
- Latency approximately doubles since traffic takes two sequential VPN hops instead of one
- Throughput is reduced by the serial encryption/decryption at each hop (typically 30-50% of single-hop speeds)
- Limited server location combinations — not all entry and exit locations can be paired
- Troubleshooting connectivity issues is more complex since the fault may be in either hop
- The entry server still knows when the user is active, which may be sufficient metadata for some threat models
Security Impact
Significant — eliminates the single point of trust in the VPN provider. A multi-hop connection requires two independent providers (or geographically isolated servers) to collude or both be compromised to deanonymize the user.
Performance Impact
Negative — latency is approximately double that of a single-hop connection, and throughput is typically reduced by 50-70% due to double encryption/decryption overhead and additional network hops.
Ideal For
Providers with Multi-Hop(4)
Mullvad
Privacy-first VPN with RAM-only servers, anonymous signup, post-quantum encryption by default, and WireGuard-only infrastructure.
NordVPN
9,400+ servers in 224 locations worldwide. NordLynx protocol, post-quantum encryption, and independently verified no-logs policy.
Proton VPN
Swiss-based VPN with a generous free tier, Secure Core architecture, open-source apps, and independently audited no-logs policy.
Surfshark
Feature-packed VPN with unlimited simultaneous connections, RAM-only servers, CleanWeb ad blocking, and patented Everlink technology.