Kill Switch, Split Tunneling, Meshnet, and Multi-Hop Explained
VPN apps bury useful features behind technical names. We explain kill switch, split tunnelling, multi-hop, and Meshnet in plain English, the problem each one solves, and exactly when it is worth turning on.
Table of contents
Open a modern VPN app and you are met with a list of features: kill switch, split tunnelling, multi-hop, and — depending on the provider — something called Meshnet. The names sound technical and the descriptions are often vague, so most people leave them at their defaults and never find out which ones would actually help. This explainer puts four of the most useful VPN features into plain English: what each does, the problem it solves, and when it is worth turning on.
Kill switch: your safety net
A kill switch blocks all internet traffic if the VPN connection drops, so nothing leaks out unprotected during the gap before it reconnects. This matters because VPN connections occasionally fail — a server hiccup, a network change, your laptop waking from sleep — and without a kill switch your device silently falls back to your normal, unprotected connection, exposing your real IP and traffic exactly when you assume you are covered.
When to use it: essentially always, and especially on public Wi-Fi or any time the VPN being on is the whole point. It is the one feature most worth enabling by default. Test it occasionally by cutting the VPN mid-session and confirming your internet stops until it reconnects.
Split tunnelling: choose what goes through the VPN
Split tunnelling lets you route some apps or sites through the VPN while others use your normal connection directly. Instead of all-or-nothing, you decide per app.
This solves real friction. You might want your browser protected by the VPN but your banking app to connect directly so it does not trip the bank's foreign-login alarms. Or you want a streaming app on the VPN while a latency-sensitive game connects directly for the lowest ping. It can also let you reach local network devices (a printer, a NAS) while still tunnelling your web traffic.
When to use it: when one or two apps work better — or are required to work — outside the tunnel, while you still want everything else protected.
Multi-hop: routing through two servers
Multi-hop (sometimes called double VPN) sends your traffic through two VPN servers instead of one, encrypting it across both hops. The benefit is that no single server sees both who you are and where you are going, raising the bar for anyone trying to correlate the two ends of your connection.
The cost is speed: two hops and a longer route mean more latency and slower throughput. This is a feature for elevated-threat situations — sensitive research, high-privacy needs — rather than everyday browsing.
When to use it: when your privacy stakes are unusually high and you can accept the speed penalty. For normal use, a single hop with an audited no-logs provider is plenty.
Meshnet: linking your own devices
Meshnet is a different kind of feature. Rather than protecting your route to the public internet, it creates a private encrypted network between your own devices (and people you invite), so they can reach each other directly and securely as if on the same local network — across the world.
The practical uses are things like accessing files on your home computer while travelling, secure file transfer between devices, or LAN-style gaming with friends in other locations. It is a connectivity tool layered on the VPN's encryption, not a privacy-from-the-internet feature.
When to use it: when you want your devices (or a trusted group) to talk to each other privately and remotely.
Quick reference
| Feature | What it does | Turn on when |
|---|---|---|
| Kill switch | Cuts internet if VPN drops | Almost always |
| Split tunnelling | Routes chosen apps outside the VPN | An app needs a direct connection |
| Multi-hop | Two servers, double encryption | Privacy stakes are high (accepts slower speed) |
| Meshnet | Private network between your devices | Linking your own devices remotely |
Bottom line
These four features cover very different jobs. The kill switch is the universal must-have that keeps a dropped connection from leaking your data. Split tunnelling removes friction by letting specific apps skip the tunnel. Multi-hop trades speed for extra privacy when the situation warrants it. And Meshnet is about connecting your own devices, not hiding from the internet. Knowing which problem each solves means you can switch them on deliberately — rather than ignoring useful tools or enabling ones that just slow you down.
