What is split tunnelling?
Normally a VPN sends everything from your device through the encrypted tunnel. Split tunnelling lets you choose some traffic to go the normal way instead, so a bank, a local service or a game can use your own connection while the rest stays protected.
Choose by app, by website or in the browser
Per-app split tunnelling
Pick apps that skip the VPN, such as your bank’s app or a local streaming app. On Android: VPN settings › Traffic routing › Split tunnelling.
Bypass
In VPN settings › Traffic routing, list websites, IP addresses or ranges that skip the VPN, up to 50. Useful when a site blocks VPN addresses.
Website rules
In the browser extension, set a site to always or never use the VPN, whatever location you are connected to.
Which apps have split tunnelling
This list follows the app releases.
| App | Status |
|---|---|
| iPhone and iPad | Bypass: coming in 4.4.0 |
| Mac | Bypass: coming in 4.4.0 |
| Android | Per-app split tunnelling: available Bypass: coming in 4.5.1 |
| Android TV | Per-app split tunnelling: available Bypass: coming in 4.5.1 |
| Fire TV | Per-app split tunnelling: available Bypass: coming in 4.5.1 |
| Windows | Bypass: available |
| Browser extension | Website rules: available |
Good reasons, and one thing to remember
- Sites that block VPNs: banks and payment services that refuse shared VPN addresses. More on that.
- Local services: apps or sites that need your real location, such as a local TV service.
- Speed-sensitive apps: a game or video call you would rather keep on your direct connection.
Remember that anything you leave out of the VPN is not protected by it: your internet provider can see where that traffic goes. The site’s own encryption still applies.
Frequently asked
Is split tunnelling safe?
Yes, for the traffic you choose to leave out on purpose. Everything else still goes through the VPN.
Why can’t I choose apps on iPhone or Windows?
iPhone and iPad don’t let VPN apps pick other apps, and Windows needs a special driver for it. Bypass, which works by website and address, does the same job for most uses.
Do changes apply straight away?
They apply from your next connection, so disconnect and reconnect after changing them.