What Is a Double VPN? How Multi-Hop Works in 2026

Last Updated on October 2, 2026 by Ethan Parker

A double VPN, also called multi-hop, sends your traffic through two VPN servers in a row instead of one, so your data is encrypted twice and your real IP address is buried under two hops. It is not the default mode you should stream on, but it solves one specific worry that a single connection cannot. Surfshark VPN calls it MultiHop, and it is the one provider that lets you build your own server pairs.

Table of Contents

What Is a Double VPN?

A double VPN routes your internet traffic through two VPN servers in sequence, adding a second layer of encryption and a second change of IP address before your request reaches the open internet. With a normal VPN, your device encrypts your traffic, sends it to one server, and that server connects to the website on your behalf. With a double VPN, the first server forwards the traffic to a second server, which then makes the final connection. The site you visit sees the address of the second server, and anyone watching the second server can only trace the traffic back to the first one, never to your home.

The trade-off is real and worth stating up front: two hops almost always mean a slower connection. Your traffic travels farther and gets processed twice, so a double VPN is a privacy and security tool first. It is not the setting that unlocks a geo-blocked catalogue faster, and for plain streaming a single fast server usually beats it.

Set Up a Double VPN in Four Steps [Short Steps]

Route your traffic through two servers in four steps:

Sign up for Surfshark VPN and install it on the device you use most; one plan covers unlimited devices.
Open Settings and find the MultiHop entry, then pick a ready-made pair or build your own from the server list.
Choose your entry server near you for speed and your exit server in the country you need, then connect.
Confirm the new address and run a quick leak test before you rely on it for anything sensitive.

Build the pair deliberately. A nearby entry server keeps the second hop from doubling your ping, and the exit server is the one that decides what a website actually sees.

Get Surfshark VPN

How a Double VPN Works, Hop by Hop

The difference between a single connection and a double one comes down to what happens after the first server receives your data. On a regular connection, the server decrypts your traffic and passes it to the destination. On a double VPN, the first server re-encrypts or wraps it and hands it to a second server, which performs the final decryption and connects you to the site.

That extra hop changes who can see what. Your internet provider still only sees encrypted traffic leaving your device, exactly as with one server. The first server can see your real address but not your destination, while the second server can see your destination but not your real address. Splitting that knowledge is the entire point. Some providers also mix protocols between the two hops, pairing the TCP and UDP versions of OpenVPN, which makes traffic correlation attacks harder still.

Double VPN, Multi-Hop, Onion Over VPN: What the Names Mean

Providers label the same idea in different ways, and the naming is the first thing that confuses people. Here is what each term actually covers.

Term	What it means	When it helps
Double VPN	Traffic passes through two VPN servers	Extra privacy when one server is not enough
Multi-hop	Another name for the same two-server chain	Whenever an app offers it as a toggle
Chained VPN	You join two separate VPNs yourself	Advanced setups across different providers
Onion over VPN	VPN first, then the Tor network	When you want Tor's anonymity plus a VPN's cover
Entry server	The first hop your device connects to	Keep it near you to protect your speed
Exit server	The second hop that faces the internet	This is the address a website sees

Labels differ between apps, so look for the same idea rather than the exact wording.

When a Double VPN Actually Helps

A double VPN earns its place when hiding your location matters more than speed, not when you simply want a new catalogue. The second hop means no single server ever holds both your real address and your destination, so even if one server were compromised it could not connect the two. That matters on public Wi-Fi, on networks you do not control, and for anyone handling sensitive work while travelling.

It is worth knowing when it does not help. For unlocking a streaming library, the exit server does the work, so a normal single connection is faster and just as effective. Double VPN also slows 4K streams and large downloads, and it can drain a phone battery faster. Resume double VPN when you step onto an untrusted network, then drop back to a single server for casual streaming.

How to Turn On MultiHop in Surfshark VPN and NordVPN

Both providers build double VPN into their apps, so there is nothing to configure by hand. Here is the route in each.

Surfshark VPN

Open the Surfshark VPN app and go to Settings.
Select VPN settings, then choose MultiHop.
Pick a ready-made pair, or set a custom entry and exit server of your own.
Tap connect and confirm the status shows the double-hop route is active.

NordVPN

Open the NordVPN app and locate the Double VPN server category.
Choose one of the preset server pairs; NordVPN does not offer custom pairs.
Connect and let the app route your traffic through both servers.
Run a leak test to confirm both hops are working before you continue.

Do You Need a Double VPN to Watch Blocked Shows?

No, a double VPN is not the tool that beats a geo-block, and using it for that usually just makes the stream slower. The exit server alone decides which country a website thinks you are in, so one well-chosen server is enough to open a catalogue. Adding a second hop only makes sense if you also want to keep your real location hidden from the VPN's own entry point, which is a privacy goal, not an unblocking one. If your goal is a stable stream, pick the fastest server in the right country and leave multi-hop off.

FAQs

Is a double VPN faster or slower than a normal VPN?

Slower, in almost every case. Your traffic covers more distance and is processed by two servers, so speeds drop compared with a single nearby connection. How much depends on how far apart the two servers sit and how heavy your traffic is.

Does a double VPN give me two IP addresses at once?

No. The site you visit only ever sees the exit server's address. The first server's address exists between the two hops, which is what breaks the chain of knowledge rather than giving you two visible addresses.

Which VPNs offer a double VPN or multi-hop?

Only some providers build it in. Surfshark VPN stands out because its MultiHop lets you choose any two servers in its network, while NordVPN keeps a smaller list of fixed Double VPN pairs. Not every plan from every brand includes the feature, so check before you buy.

Can I use a double VPN with Tor?

You can, but the combination is slow. Onion over VPN connects you to the VPN first and then into the Tor network, which hides your identity from your provider but drags the speed down further. For everyday browsing it is usually overkill.

In Short: What Is a Double VPN?

A double VPN, or multi-hop, routes your traffic through two servers so your data is encrypted twice and no single server knows both your real address and your destination. It trades speed for privacy, so it is best on untrusted networks and sensitive work rather than for streaming. Surfshark VPN's MultiHop is the most flexible way to build your own pair, and turning it on is a two-tap change in settings. Use it where privacy matters, then switch back to a single fast server for the shows.