Multi-hop and Tor over VPN
Multi-hop sends your traffic through two VPN servers instead of one. It's for people who need more than ordinary privacy, and it's slow, especially from Australia.
Last updated 8 Oct 2026
The short version
- With two servers, the first knows who you are but not where you're going, and the second the reverse.
- Both servers belong to the same company, so it protects you from a compromised server or someone watching one, not from the provider.
- Most people don't need it. If you do, Surfshark and Mullvad let you pick any two servers.
What multi-hop does
With an ordinary VPN, one server sees both your real IP address and every site you visit. With multi-hop, your traffic goes to a first server, then on to a second, and leaves from there. Someone who gets into or watches one server only sees half the picture.
That's useful if you're a journalist, an activist, or anyone whose threat is a well-resourced adversary watching networks. It does nothing for streaming, banking or public Wi-Fi that a single server doesn't already do.
Pick your own route, or take theirs
- Any route: you choose both servers. Surfshark's Dynamic MultiHop (Surfshark) and Mullvad's Multihop (Mullvad) both let you pick any entry and exit. PIA's Multi-Hop is different: the first hop is a Shadowsocks proxy (or your own SOCKS5 server) rather than a VPN server, and it's only in the desktop apps (PIA).
- Set routes: the provider chooses the pairs. NordVPN's Double VPN servers only work with OpenVPN. Proton VPN's Secure Core sends you through its own servers in Switzerland, Iceland or Sweden first, on paid plans (Proton VPN).
The cost in speed from Australia
Each hop adds distance. From Australia that adds up fast: a Secure Core connection to a Sydney exit goes to Europe and back first, so pages will feel noticeably slower. If you use multi-hop, pick two servers close to each other, and close to you.
Tor over VPN
Tor bounces your traffic through three volunteer-run relays, so no single relay knows both who you are and where you're going. A few VPNs run servers that pass your traffic into Tor, so any browser on your device reaches .onion sites and your ISP only sees a VPN connection: NordVPN's Onion Over VPN servers (NordVPN) and Proton VPN's Tor servers, on paid plans (Proton VPN).
You don't need either for Tor. The Tor Project's own Tor Browser works with any VPN connected, and it protects you better than a Tor server with an ordinary browser, which can still be fingerprinted. Surfshark and ExpressVPN both suggest that instead.
Which VPNs offer them
| VPN | Multi-hop (two VPN servers) | Tor over VPN servers |
|---|---|---|
| CyberGhost | NoNot among CyberGhost's listed features. | NoNot among CyberGhost's listed features. |
| ExpressVPN | NoNot among ExpressVPN's listed features. | NoNo Tor servers. ExpressVPN suggests connecting the VPN, then opening Tor Browser. |
| Mullvad | Yes, through any two servers you pickMultihop: choose any entry and exit location. | NoNo Tor servers. Mullvad Browser, made with the Tor Project, is a separate free download. |
| NordVPN | Yes, on routes it setsDouble VPN servers route you through two NordVPN servers on pairs NordVPN sets. Needs OpenVPN. | YesOnion Over VPN specialty servers in the desktop, mobile and Android TV apps. |
| Private Internet Access | Yes, through any two servers you pickMulti-Hop sends you through a Shadowsocks proxy (or your own SOCKS5 server) first, then any PIA server. Desktop apps only. | NoNot among PIA's listed features. |
| Proton VPN | Yes, on routes it setsCalled Secure Core: traffic goes through a Proton-run server in Switzerland, Iceland or Sweden, then to an exit server. Not every exit country works with every entry, though you can pick the entry manually on Windows, macOS and Android. Paid plans. | YesServers with TOR in their names (e.g. US-CO#21-TOR) send all traffic through Tor. Plus, Unlimited and Visionary plans only. |
| Surfshark | Yes, through any two servers you pickDynamic MultiHop: pick one of Surfshark's pairs, or any entry and exit server you like. | NoNo Tor servers. Surfshark's help centre explains using Tor Browser while connected instead. |