VPN features explained: kill switch, split tunneling, multi-hop
What a kill switch, split tunneling, multi-hop, and a dedicated (static) IP do, which features you need as a beginner, and which providers name them.

Key points
- For most beginners, two features matter most: a kill switch and split tunneling.
- Extras such as multi-hop, port forwarding, or an ad blocker help in special cases.
- Features appear on this site only as the providers name them on their own pages. None of them is tested here.
The features at a glance
| Feature | What it does | Who needs it |
|---|---|---|
| Kill switch | blocks the internet when the VPN connection drops | almost everyone |
| Split tunneling | lets single apps bypass the VPN | people whose bank or streaming app blocks VPNs |
| Ad and tracker blocker | blocks requests to known ad and tracking domains | people who want fewer ads |
| Multi-hop (double VPN) | sends traffic through two VPN servers | people who want an extra step, at lower speed |
| Port forwarding | lets incoming connections reach your device | some file-sharing, gaming, or home-server apps |
| Tor over VPN | connects to the Tor network through the VPN | people who use Tor |
| Dedicated IP | an address only you use | people whose services block shared VPN addresses |
The glossary explains each term, with the number of providers that name it.
How a kill switch protects you
- Your deviceVPN drops
- Kill switchblocks all traffic
- Websitesees nothing instead of your address
Dedicated IP: a static VPN address
Normally, you share the server’s address with other users of the same server, and you may get a different address when you reconnect. A dedicated IP, also called a static VPN IP, is an address that only you use, and it stays the same. It helps when a bank, a work system, or a website blocks shared VPN addresses or only lets in addresses it knows. The downside: sites can recognize you by it, much like by your home connection.
Which providers name which feature
The comparison page has a table with every feature each provider names. In the VPN finder, you can tick features and see who names them. A feature that is not listed may still exist: the archive only records what a provider’s own page says in so many words, and checks at every update that the words are still there.
Named is not tested. Whether a kill switch really works, how well a blocker blocks, or how fast multi-hop is, cannot be checked without an account with every provider. This site does not claim it.
What beginners can skip
- Protocol choices. The app’s default is usually fine. VPN protocols explains the options.
- Multi-hop. It slows you down and helps only in special situations.
- Dedicated IP. Only if a service you use asks for a fixed address, because it makes you easier to recognize.
Next step
Level 3 explains how things work under the hood, starting with VPN protocols: WireGuard and OpenVPN.
The figures in this guide come from the archive and change with every data update. As of October 17, 2026.
Check it with the archive's data
Read next: VPN protocols: WireGuard, OpenVPN, and what they changeAll guides