Double VPN, double privacy

Encrypt twice. Shield yourself from online tracking and cyber threats.

What is Double VPN and how does it work?

Double VPN is an advanced VPN security feature that routes your traffic through two VPN servers instead of one, encrypting your data twice.

Now with Double VPN, your online activity hides behind two servers instead of one, which is known as VPN server chaining. The working principle is rather simple:

Your traffic is first encrypted on your device and redirected to a remote VPN server.
It reaches the server and gets re-encrypted.
The encrypted traffic then passes through a second VPN server, where it gets decrypted.
You reach your internet destination securely and privately.

The benefits of sending your traffic through two VPN servers

Double encryption

All your data is protected with an extra layer of encryption. This makes it twice as hard for criminals to decipher.

IP protection

As your actual IP address was changed by the first VPN server, the second server doesn’t have any information about you.

Complete privacy

Nobody, not even your ISP can see your final destination on the web. They can only know that you are using a VPN service.

Why do I need double encryption?

The multiple encryption feature is indispensable when you need a high level of online security and privacy. Therefore, you may want to use Double VPN if:

Privacy protection when working with a VPN chain

You are a journalist or political activist
People who dare to stand up and advocate the freedom of speech have to take extra steps to protect themselves. With Double VPN you can access information securely, and report the news without the fear of being watched or harmed.
You want to avoid government surveillance
Double VPN may be a great help if you travel or live in a highly restricted country, known for heavy censorship, tracking, and surveillance. Double encryption for your internet traffic makes it twice as hard for snoopers to track you.
You need to protect your sources
You can never be too careful when working with whistleblowers, informants, and other vulnerable sources. Use double traffic encryption to make doubly sure you can discuss sensitive topics in private.

You are a journalist or political activist

People who dare to stand up and advocate the freedom of speech have to take extra steps to protect themselves. With Double VPN you can access information securely, and report the news without the fear of being watched or harmed.

You want to avoid government surveillance

Double VPN may be a great help if you travel or live in a highly restricted country, known for heavy censorship, tracking, and surveillance. Double encryption for your internet traffic makes it twice as hard for snoopers to track you.

You need to protect your sources

You can never be too careful when working with whistleblowers, informants, and other vulnerable sources. Use double traffic encryption to make doubly sure you can discuss sensitive topics in private.

When don’t I need Double VPN?

People working with one layer of VPN for fastest connection

For private everyday browsing
If you want to prevent third parties from tracking your IP or need secure access to websites, a standard VPN connection is more than enough.
When you need maximum speed
Double VPN may slow down your connection a little. This is because your traffic goes through two VPN servers, which improves security but also makes the journey longer.
For browsing the Tor network
For this specific purpose, we have the Onion Over VPN solution, which routes your internet traffic through one VPN server, and then sends it to the Onion network.

For private everyday browsing

If you want to prevent third parties from tracking your IP or need secure access to websites, a standard VPN connection is more than enough.

When you need maximum speed

Double VPN may slow down your connection a little. This is because your traffic goes through two VPN servers, which improves security but also makes the journey longer.

For browsing the Tor network

For this specific purpose, we have the Onion Over VPN solution, which routes your internet traffic through one VPN server, and then sends it to the Onion network.

What is the difference between Double VPN and VPN chaining?

In theory, there is very little difference. Double VPN operates on the same principle as VPN chaining (also known as multihopping, VPN over VPN, or using a layered VPN) — you route your data through multiple VPN servers instead of just one. In practice, the differences can be huge.

First, VPN chaining can involve more than just two VPN servers, although each additional node drastically cuts down your connection speed. While the extra encryption can make you feel safer, the actual security benefits fall sharply past two VPN servers — so anything beyond double encryption may simply not be worth the loss in surfing speed.

Second and most importantly, VPN chaining can involve VPN servers from different providers. This keeps your data encrypted in case one VPN service’s servers are compromised, but comes with its own issues, from compatibility between the providers’ VPN clients to having to pay for extra subscriptions.

In reality, double encryption with a trusted VPN provider can be just as safe as manual VPN chaining — and it’s much faster, too. For example, NordVPN already uses diskless servers and doesn’t monitor your internet activities, making it near impossible to steal or seize your encrypted data.

Let’s double up your security

If double encryption is what you need, go ahead and enable Double VPN. The feature is included in the NordVPN subscription package and is currently available in our Android, macOS (NordVPN IKEv2 version), iOS, Linux, and Windows apps.

Available on:

Here’s how you can use Double VPN:

Open the NordVPN app.

Find “Specialty servers”.

Tap Double VPN and get connected. Or manually choose the servers that suit your needs best.

You’re all set – from now on till you turn Double VPN off, all your online communications will travel through two different encryption points, leaving no way for snoopers to access your data.

Start protecting your security

Get NordVPN See All Features

Frequently asked questions

Why is Double VPN not showing up?

Double VPN is currently available on Android, macOS (NordVPN IKEv2 version), iOS, Linux, and Windows apps. However, not all protocols support this feature. If you can’t see Double VPN on your device, try switching to the OpenVPN TCP or UDP connection protocol in the NordVPN app.

Can I use 2 VPNs at the same time?

Yes, and here’s the easiest and fastest ways to do it. First, by using the Flashrouters app.

Setup a VPN on your router.
Install NordVPN on your device (phone or tablet, for example).
Connect to VPN routers network, launch the NordVPN app and connect to a VPN server.

The other way is to connect by finding the Double VPN feature under the ‘Specialty servers’ options in the NordVPN app. Tap Double VPN to connect instantly or manually pick the servers you want.

Can you be tracked if you use Double VPN?

Double VPN redirects your traffic through two servers and adds an extra layer of encryption. Neither your ISP nor other third parties can see what you do online and intercept your data. All they can know is that you’re using a VPN.

Is Double VPN better than Onion Over VPN?

Double VPN and Onion Over VPN serve different purposes, and one is no better than the other. Onion Over VPN is designed to securely access the Onion network, while Double VPN adds an extra layer of encryption to your connection.

Cookie name	Description	Expiration
__cfduid	Used by the content delivery network, Cloudflare, to identify trusted web traffic.	29 days
rc::c	This cookie is used to identify the difference between humans and bots.	Session
PHPSESSID	Preserves user session state across page requests.	Session
csrf	Ensures visitor browsing-security by preventing cross-site request forgery.	30 days
Oauth2_authentication_csrf	Ensures visitor browsing-security by preventing cross-site request forgery during the OAuth 2.0 authentication and consent flow.	30 days
oauth2_consent_csrf	Ensures visitor browsing-security by preventing cross-site request forgery during the OAuth 2.0 authentication and consent flow.	30 days

Cookie name	Description	Expiration
locale	The cookie determines the preferred language and country-setting of the visitor.	1 year
cookieconsent_status	Determines whether the visitor has accepted the cookie consent box.	1 year
fontsCssCache	Determines whether the visitor has cached fonts so the font would not be cached again upon re-entry.	7 days
CurrentSession	Retrieving the traffic sources data (source, medium, campaign, term, content, date) of the different sessions.	182 days
FirstSession	Retrieving the traffic sources data (source, medium, campaign, term, content, date) of the different sessions.	182 days
ReturningSession	Retrieving the traffic sources data (source, medium, campaign, term, content, date) of the different sessions.	182 days
_domainTest{timestamp}	Determines websites domain value for cross-domain support.	Session
popups_referrer	Used for popup management.	7 days
popups_session_duration	Used for popup management.	7 days
popups_session_pageviews	Used for popup management.	7 days
popups_chains	Used for popup management.	7 days
popups_chains_finished	Used for popup management.	7 days
bc.visitorToken	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
bc.visitor_token	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
3E6DB64A	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
u	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
session	Contains a session identifier that is used to remember the user’s agent and allows the system to re-authenticate users without credentials.	30 days

Cookie name	Description	Expiration
_ga	Registers an ID that is used to generate statistical data on how the visitor uses the website.	2 years
_gid	Registers an ID that is used to generate statistical data on how the visitor uses the website.	1 year
_gat	Used by Google Analytics to throttle request rate.	1 year
collect	Used to send data to Google Analytics about the visitor's device and on-site behavior.	Session
personalization_id	The cookie allows the visitor to share content from the website onto their Twitter profile.	2 years
_gat_gtag_UA_42858496_11	Used to throttle request rate.	1 minute
client_dimension	Prevent fire client_dimension event more than 1 time per session.	Session

Cookie name	Description	Expiration
__cfduid	Used by the content delivery network, Cloudflare, to identify trusted web traffic.	29 days
rc::c	This cookie is used to identify the difference between humans and bots.	Session
PHPSESSID	Preserves user session state across page requests.	Session
csrf	Ensures visitor browsing-security by preventing cross-site request forgery.	30 days
Oauth2_authentication_csrf	Ensures visitor browsing-security by preventing cross-site request forgery during the OAuth 2.0 authentication and consent flow.	30 days
oauth2_consent_csrf	Ensures visitor browsing-security by preventing cross-site request forgery during the OAuth 2.0 authentication and consent flow.	30 days

Cookie name	Description	Expiration
locale	The cookie determines the preferred language and country-setting of the visitor.	1 year
cookieconsent_status	Determines whether the visitor has accepted the cookie consent box.	1 year
fontsCssCache	Determines whether the visitor has cached fonts so the font would not be cached again upon re-entry.	7 days
CurrentSession	Retrieving the traffic sources data (source, medium, campaign, term, content, date) of the different sessions.	182 days
FirstSession	Retrieving the traffic sources data (source, medium, campaign, term, content, date) of the different sessions.	182 days
ReturningSession	Retrieving the traffic sources data (source, medium, campaign, term, content, date) of the different sessions.	182 days
_domainTest{timestamp}	Determines websites domain value for cross-domain support.	Session
popups_referrer	Used for popup management.	7 days
popups_session_duration	Used for popup management.	7 days
popups_session_pageviews	Used for popup management.	7 days
popups_chains	Used for popup management.	7 days
popups_chains_finished	Used for popup management.	7 days
bc.visitorToken	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
bc.visitor_token	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
3E6DB64A	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
u	Used by chat widget from Nanorep.Determines unique visitor ID used on the new reporting page to group queries performed by the same visitor.	1 year
session	Contains a session identifier that is used to remember the user’s agent and allows the system to re-authenticate users without credentials.	30 days