Level 2 · Know your provider3 min readUpdated October 17, 2026

VPN features explained: kill switch, split tunneling, multi-hop

What a kill switch, split tunneling, multi-hop, and a dedicated (static) IP do, which features you need as a beginner, and which providers name them.

Illustration: a two-column icon in a rounded tile, with the title VPN features, explained

Key points

  • For most beginners, two features matter most: a kill switch and split tunneling.
  • Extras such as multi-hop, port forwarding, or an ad blocker help in special cases.
  • Features appear on this site only as the providers name them on their own pages. None of them is tested here.

The features at a glance

FeatureWhat it doesWho needs it
Kill switchblocks the internet when the VPN connection dropsalmost everyone
Split tunnelinglets single apps bypass the VPNpeople whose bank or streaming app blocks VPNs
Ad and tracker blockerblocks requests to known ad and tracking domainspeople who want fewer ads
Multi-hop (double VPN)sends traffic through two VPN serverspeople who want an extra step, at lower speed
Port forwardinglets incoming connections reach your devicesome file-sharing, gaming, or home-server apps
Tor over VPNconnects to the Tor network through the VPNpeople who use Tor
Dedicated IPan address only you usepeople whose services block shared VPN addresses

The glossary explains each term, with the number of providers that name it.

How a kill switch protects you

  1. Your deviceVPN drops
  2. Kill switchblocks all traffic
  3. Websitesees nothing instead of your address
Without a kill switch, apps keep sending data directly, with your real address, until the VPN reconnects.

Dedicated IP: a static VPN address

Normally, you share the server’s address with other users of the same server, and you may get a different address when you reconnect. A dedicated IP, also called a static VPN IP, is an address that only you use, and it stays the same. It helps when a bank, a work system, or a website blocks shared VPN addresses or only lets in addresses it knows. The downside: sites can recognize you by it, much like by your home connection.

Which providers name which feature

The comparison page has a table with every feature each provider names. In the VPN finder, you can tick features and see who names them. A feature that is not listed may still exist: the archive only records what a provider’s own page says in so many words, and checks at every update that the words are still there.

Named is not tested. Whether a kill switch really works, how well a blocker blocks, or how fast multi-hop is, cannot be checked without an account with every provider. This site does not claim it.

What beginners can skip

  • Protocol choices. The app’s default is usually fine. VPN protocols explains the options.
  • Multi-hop. It slows you down and helps only in special situations.
  • Dedicated IP. Only if a service you use asks for a fixed address, because it makes you easier to recognize.

Next step

Level 3 explains how things work under the hood, starting with VPN protocols: WireGuard and OpenVPN.

The figures in this guide come from the archive and change with every data update. As of October 17, 2026.

Check it with the archive's data