What Is VPN Split Tunneling and How to Set It Up

VPN split tunneling is the most underused VPN feature in 2026. It lets you choose which apps and websites route through the encrypted VPN tunnel and which connect directly to the internet — giving you VPN protection where you need it without sacrificing speed where you do not. Correctly configured split tunneling improves overall internet performance by 45-60% compared to routing all traffic through the VPN, while keeping sensitive apps fully protected.

How VPN Split Tunneling Works

Normally, a VPN routes 100% of your internet traffic through the encrypted tunnel to the VPN server. Every app, every website, every background system process goes through the VPN. This provides maximum protection but also means every request travels via the VPN server — adding overhead and potentially slowing traffic that does not need VPN protection.

Split tunneling divides this into two simultaneous paths. One path goes through the encrypted VPN tunnel — your browser, email, banking app, and anything that needs privacy protection travel this way. The other path connects directly to the internet using your real IP — games, local streaming services, printers, and apps that work better with your real location travel this way. You decide which apps and sites use which path.

Three Types of Split Tunneling

• App-based split tunneling — You specify which applications use the VPN. Everything else connects directly. The most common type. Example: route your browser and email through VPN, but let your game client connect directly for lower ping.
• URL/website-based split tunneling — Specific websites route through the VPN while others connect directly. Available in NordVPN's browser extensions. Useful for accessing geo-restricted sites through VPN while keeping local sites fast.
• Inverse split tunneling — All traffic goes through VPN by default, but you specify which apps should bypass it. Less common but useful when most of your traffic needs VPN protection with only a few exceptions.

When to Use Split Tunneling

Split tunneling solves specific problems. Use it when you need low-latency gaming on Indonesian servers (exclude your game client from VPN) while keeping other traffic protected. Use it to access local Indonesian streaming services that block VPN IPs (exclude that streaming app from VPN) while maintaining VPN protection for everything else. Use it to access your home network printer or NAS while VPN is active — home network devices are only reachable via your direct connection, not through VPN. Use it for video calls where the VPN adds noticeable latency — exclude Zoom or Google Meet from the VPN tunnel during calls.

How to Set Up Split Tunneling in NordVPN

Split Tunneling on Android

1. Open NordVPN and tap the Profile icon at the bottom
2. Tap the Settings gear icon in the top right
3. Tap Split tunneling
4. Toggle Split tunneling On
5. Tap Manage apps
6. Tap the + next to apps you want excluded from VPN (they will connect directly)
7. Apps not in the excluded list will route through VPN

Split Tunneling on Windows

1. Open NordVPN and click the Settings gear icon
2. Click Split tunneling in the left menu
3. Toggle Split tunneling On
4. Click Add apps to the list
5. Select apps to exclude from VPN protection
6. Excluded apps connect directly; all others use VPN

Note: Split tunneling is available on NordVPN for Android, Android TV, and Windows. It is not currently available on iOS or macOS NordVPN apps due to platform restrictions.

Split Tunneling Risks to Be Aware Of

Split tunneling is powerful but carries risks if misconfigured. Apps excluded from the VPN are completely unprotected — your ISP can see their traffic and your real IP is exposed to the services they connect to. DNS leaks become more likely with split tunneling — run the DNS Leak Test after configuring split tunneling to confirm DNS is still protected. Apps that share data with excluded apps can inadvertently expose information. Never exclude your browser from VPN if you browse sensitive content — exclude only apps you are certain are safe to use with your real IP exposed.

After setting up split tunneling, verify the VPN is still protecting the apps it should using the IP Checker from within a VPN-routed browser. Also run the WebRTC Leak Test to confirm browsers in the VPN tunnel are not leaking your real IP. NordVPN's split tunneling is available on Android and Windows starting at $3.49/month.

Frequently Asked Questions