In short: There are four main types of VPN. A personal (consumer) VPN encrypts one device's traffic and hides its IP — this is what most people use. A remote access VPN connects an employee to a company network. A site-to-site VPN links whole networks together — for example, offices in different cities. A mobile VPN keeps the connection alive as you switch between Wi-Fi and cellular. Separately, there are double VPN, cloud VPN, P2P, and self-hosted VPN. A VPN type answers "who is connected to whom and why," while a protocol (WireGuard, OpenVPN, IKEv2) answers "by what rules the traffic is encrypted."
What kinds of VPN are there: classification in brief
There are several types of VPN, and they differ by what exactly they connect: one device to the internet, an employee to an office, or two networks to each other. The name VPN (Virtual Private Network) describes the shared principle — an encrypted tunnel over the open internet. But that tunnel serves different jobs, and that's where the types come from. If you're new to the technology, start with the basics — what a VPN is in simple terms.
VPNs can be classified along two independent axes, and it's important not to mix them up. The first axis is architecture: who the tunnel connects (personal VPN, remote access, site-to-site, mobile). The second axis is protocol: the technical rules by which traffic is encrypted and carried (WireGuard, OpenVPN, IKEv2). The same personal VPN can run on any of these protocols — they are different levels of classification. This article focuses on types by architecture, with protocols covered in a separate block below.
Overview table: the four main types of VPN
The four basic types of VPN differ in which nodes they link and who they are meant for. Here's a summary to orient you, followed by a closer look at each type.
| VPN type | What it connects | Who it's for |
|---|---|---|
| Personal (consumer) | Device ↔ internet via a VPN server | Everyday users: privacy, Wi-Fi protection |
| Remote access | Employee ↔ company network | Remote and hybrid teams |
| Site-to-site | Network ↔ network (office ↔ office) | Companies with multiple locations |
| Mobile | Device ↔ network with a persistent session | People who often switch networks on the move |
As you'll see below, the lines between types aren't rigid: a mobile VPN is essentially a property of a personal or corporate tunnel, and double and cloud VPNs are variations of the personal type. But as a map of the market, these four are a solid anchor.
Personal (consumer) VPN
A personal VPN is a service that encrypts your device's traffic and routes it through a remote server, hiding your real IP address. This is the type people mean when they casually say "install a VPN on my phone." Your request first travels through an encrypted tunnel to the VPN server, and the server then reaches sites on your behalf — so your ISP and the owner of a public network see only the fact of a VPN connection, not the content or the addresses you visit.
This VPN solves everyday privacy needs: it protects your data on open Wi-Fi in a café or airport, stops your ISP from collecting your browsing history, and reduces the data available for ad profiling. For more on what exactly gets encrypted and how traffic passes through the server, see how a VPN works. A personal VPN installs in a tap or two and is usually offered as an app for iOS, Android, Windows, and macOS.
This is exactly the type LiMP VPN belongs to — a privacy service for smartphones, billed by a Russian legal entity (LLC LiMP), that encrypts traffic and keeps no connection logs. A personal VPN is a tool for data protection and privacy: it shields your traffic from outside observers on the network.
Remote access VPN
A remote access VPN connects an individual employee to the company's internal network through an encrypted tunnel. On the surface it resembles a personal VPN — also a client app on the device — but the goal is different: not reaching the internet through someone else's server, but securely accessing the employer's internal resources (file servers, databases, corporate apps) as if the employee were sitting in the office.
This type became mainstream with the spread of remote and hybrid work. An employee at home or on a trip raises a tunnel to the company gateway, enters corporate credentials, and their traffic to internal services travels encrypted, safe from interception on public networks. That's why a corporate VPN has what a consumer one lacks: individual accounts, fast access revocation when someone leaves, and integration with two-factor authentication. How a team VPN differs from a consumer one is covered in detail in VPN for business.
Site-to-site VPN: connecting whole networks
A site-to-site VPN links entire networks together rather than individual users — for example, the local networks of two company offices in different cities. Instead of a client on every device, the tunnel is raised once between the sites' network equipment (routers or gateways), after which computers in one office "see" the other's resources as if they were all on a single network.
There are two sub-types. An intranet site-to-site connects the locations of one organization (headquarters and branches). An extranet site-to-site links the networks of different organizations — say, a company and a trusted partner or contractor, granting limited shared access. Unlike remote access, where the employee raises and drops the tunnel, site-to-site usually runs continuously and is configured by network administrators. For the average user this type is invisible — it belongs to corporate infrastructure, not personal privacy.
Mobile VPN
A mobile VPN is a tunnel that doesn't drop when the network changes or the signal is briefly lost. An ordinary VPN is tied to a specific network connection: switch from Wi-Fi to mobile data, or dip into a dead zone, and you have to re-establish the session. A mobile VPN is built so the session persists even when the IP address or network type changes, and the user doesn't notice the reconnection.
This type is valued by people who work on the move: couriers, field engineers, drivers, as well as emergency and medical services where dropping a secure channel is unacceptable. In practice, "mobility" is often provided by choosing the right protocol — IKEv2, for instance, handles switching between networks well and restores the tunnel after a break. So a mobile VPN is better seen not as a separate product but as a property of a personal or corporate VPN tuned for seamless session persistence.
Additional types: double, cloud, P2P, and self-hosted VPN
Beyond the main four, there are specialized VPN variants — usually a personal VPN with an extra property. Briefly, each:
- Double VPN (multi-hop). Traffic passes sequentially through two VPN servers and is encrypted twice, making de-anonymization harder at the cost of speed. When it's justified and when it's overkill — see double VPN.
- Cloud VPN (VPNaaS). A corporate VPN deployed not on your own hardware but in a provider's cloud — handy for companies with cloud infrastructure and distributed teams.
- P2P VPN. A VPN whose servers are optimized for peer-to-peer file exchange; essentially a characteristic of a personal service, not a separate architecture.
- Self-hosted VPN server. A VPN a user raises on their own VPS or home device. It gives full control but requires setup and maintenance skills. How such a server differs from a ready-made service — see VPS vs VPN: the difference.
Types of VPN by protocol — in brief
A VPN protocol is the set of rules by which the tunnel is established and traffic is encrypted; this is the second axis of classification, independent of architecture. The same personal VPN can run on different protocols, and the choice affects speed, stability, and connection strength. The three current protocols of 2026:
- WireGuard — modern, fast, with a compact codebase; great for smartphones and easy on the battery.
- OpenVPN — time-tested, flexible, and reliable, but heavier and slower than WireGuard.
- IKEv2/IPSec — stable on mobile devices, quickly restoring the connection after a drop or network switch.
The outdated PPTP and L2TP are best avoided today due to weak protection. A full comparison by speed, security, and use case is in WireGuard, OpenVPN, or IKEv2.
How do VPN types differ from protocols?
A VPN type describes the connection architecture, while a protocol describes the encryption technology — these are different things. A simple analogy: the VPN type is the purpose of the route (who is going where and why: a person to the office, an office to an office), and the protocol is the mode of transport on that route (which "vehicle" carries the data). Don't confuse them: saying "I have a WireGuard VPN" tells you the protocol but nothing about whether it's a personal or corporate VPN.
In practice you choose both, but at different levels. First the type for the task: personal for privacy, remote access for reaching work. Then, within the service, the protocol for your priority: WireGuard for speed, IKEv2 for stability on mobile. Ready-made services often pick the protocol automatically, so you don't have to dig into it.
Which type of VPN should you choose
The choice of VPN type is determined by what you want to connect and protect. For most people the answer is a personal VPN; corporate types are chosen not by users but by a company's IT department. Use the table as a guide.
| Your task | Suitable VPN type |
|---|---|
| Privacy, protection on public Wi-Fi | Personal (consumer) VPN |
| Access to work resources from home | Remote access VPN |
| Link company offices into one network | Site-to-site VPN |
| A stable tunnel while traveling | Mobile VPN (personal on IKEv2) |
| Maximum anonymity | Personal VPN with double VPN mode |
| Full control over the server | Self-hosted VPN on a VPS |
If your goal is everyday privacy and data protection on your phone and laptop, you need a reliable personal VPN with an honest no-logs policy and a clear legal entity. That's how LiMP VPN is built — see plans and terms on the pricing page. How to verify that a service really keeps no logs is described in no-logs VPN: how to check.
Frequently asked questions
What kinds of VPN are there?
There are four main types of VPN by architecture: a personal (consumer) VPN encrypts one device's traffic; a remote access VPN connects an employee to a company network; a site-to-site VPN links whole networks (for example, offices); and a mobile VPN keeps the session alive when the network changes. Additionally, there are double, cloud, P2P, and self-hosted VPNs on your own server.
How does a personal VPN differ from a corporate one?
A personal VPN protects one user's privacy: it encrypts the device's traffic and hides the IP when reaching the internet. A corporate VPN (remote access or site-to-site) provides secure entry to a company's internal resources and has individual employee accounts, access revocation, and two-factor authentication integration. A personal VPN is installed by the user; a corporate one is set up by the IT department.
What is a site-to-site VPN?
A site-to-site VPN connects whole networks rather than individual users: the tunnel is raised once between the network equipment of two locations, and computers in one office gain access to the other's resources as if on a shared network. The intranet variant links the locations of one company; the extranet variant links the networks of different partner organizations.
What's the difference between a VPN type and a protocol?
A VPN type is the connection architecture (who the tunnel links: personal, remote access, site-to-site). A protocol is the technology for encrypting and transferring data (WireGuard, OpenVPN, IKEv2). The same VPN type can run on different protocols: first you choose the type for the task, then the protocol for your priority of speed or stability.
Which type of VPN does an ordinary user need?
An ordinary user needs a personal (consumer) VPN — it protects privacy, encrypts traffic on open Wi-Fi, and hides the IP address. Corporate types (remote access, site-to-site) are meant for companies and are configured by IT specialists, not installed by the user themselves.