What Is Split Tunneling? How It Works & When to Use It (2026) 

VPNs do a great job at keeping you anonymous online and encrypting your data from prying eyes.

But there are times when your regular internet connection fits your needs better, such as when printing a document locally or using apps that rely on your specific location to function.

Split tunneling lets you bypass the VPN connection for certain activities while anonymizing your IP address and encrypting data from all other sessions on your device.

What Is VPN Split Tunneling?

VPN split tunnelling is a virtual private network feature that allows you to route your internet traffic via two different tunnels. One is the encrypted VPN tunnel that turns your data into unreadable code and shields your identity from your internet service provider (ISP) and hackers. The other is your local connection that doesn’t encrypt your traffic and uses your regular IP address to access the internet.

How Does Split Tunneling Work?

Split tunneling works through several steps depending on the rules you’ve configured in VPN settings. Here’s a step by step breakdown:

1. You use your VPN app’s settings to tell it which apps or websites need the encrypted tunnel and which can use your local connection.
2. The VPN acts as a “traffic director” when you open a browser or app, inspecting every outgoing data packet to see where it’s headed.
3. Traffic deemed sensitive (like banking access) is encrypted and sent through the secure VPN tunnel, masking your real location and IP address.
4. Low-risk traffic (like local printing or gaming) is sent directly through your local ISP at full speed without encryption.

Types of Split Tunneling

Split tunneling can take a few different forms based on how traffic is routed and the configuration method used to set it up. The most common types of split tunneling are: 

• App-based split tunneling: This allows you to specify the applications that you want to be protected by the VPN. For example, having your banking app go through the secure tunnel makes sense, so you can tell the VPN to transmit its data via that pathway while using the local, direct connection for all other apps. 
• URL-based split tunneling: With this type, you get the option to selectively route your internet traffic based on specific domain names or URLs. Enter your bankname.com/login and other sensitive URLs to secure them through the VPN, and omit everything else to enjoy fast, seamless browsing.
• Route-based split tunneling: In this method, the VPN inspects where the traffic is headed and then decides whether to send it through the encrypted tunnel. Traffic meant to go to a specified network – like your company’s server – is routed via the VPN, whereas all other traffic flows through your local, faster internet connection.
• Policy-based split tunneling: This type of split tunneling is typically used in corporations where an IT admin sets pre-defined policies for which traffic should go through the VPN. Your own employer might use it to divide the business and non-business traffic flowing through your company network. 
• Inverse split tunneling: With this setup, every bit of the traffic goes through the VPN by default, besides what has been exclusively excluded by the user. It helps maximize security while still allowing exceptions for low-bandwidth activities. 
  

Benefits of Using Split Tunneling

Split tunneling comes in handy when you want to secure a certain part of your connection. Because it doesn’t force all your traffic to go through the VPN, you’re able to enjoy the benefits offered by your local internet service.

It also lets you:

• Optimize bandwidth: Split tunneling reduces the traffic load on your VPN by letting specific apps or services connect directly to the internet. If you’re using a basic VPN subscription, this can help you avoid hitting – and potentially going over – your monthly bandwidth limits. 
• Bypass geo-restrictions: Local content often becomes unavailable when you connect a streaming service to a VPN in another location (I do this to access Netflix libraries that are not available in my location). With split tunneling, you can set rules that allow you to access both materials simultaneously.
• Stop ISP throttling: ISPs often throttle connections to slow bandwidth-heavy activities like gaming and streaming. Split tunneling can help maintain a smooth and lag-free experience by routing that traffic through the VPN (here are the best gaming VPNs for 2026). 

Security Risks of Split Tunneling

Split tunneling brings a few risks that you must be mindful of when using this VPN feature.

The biggest risk is the exposure of sensitive data to ISPs and potential hackers. Traffic that bypasses the VPN is not encrypted, and that leaves it vulnerable to interception and spoofing. Your device also loses the built-in protections of the VPN, making it easier to fall victim to phishing and malicious campaigns.

There are also compliance-related risks if you work in industry with strict privacy regulations (e.g, healthcare). Regulations like HIPPA and GDPR require that data only flows through encrypted, compliant tunnels. Using split tunneling can violate these rules and increase exposure to penalties, especially since GDPR enforcement has already resulted in fines totaling approximately $6.46 billion.

When Should You Use Split Tunneling?

You should ideally use split tunneling when connected to a secure network like your home’s WiFi and requiring VPN protection for certain activities.

For example, you might use it for:

• Gaming: Use your local ISP to lower your ping for gaming while securing your other activities with the VPN.
• Streaming: Connect to Netflix directly without the VPN to prevent buffering and slow speeds. 
• Remote working: Use the encrypted VPN tunnel to securely access company files while normally browsing your favorite websites. 
• Local device usage: Send data to your home printer while still protectng your internet traffic through the VPN.
• Downloading large files: Have large files come in through your local connection so they download quickly while peforming critical tasks under the VPN’s protection. 

How to Enable Split Tunneling on Your VPN

The steps to enable split tunneling can vary between different VPN providers. But it’s commonly done by activating the feature in your VPN app’s settings and customizing your preferences. 

Here’s how I set it up on NordVPN’s Android app.

1. Open the NordVPN app and tap the profile icon at the bottom right

2. Now tap on settings (the gear icon) to open its menu

3. Scroll to the VPN connection section and choose Split tunneling.

4. Toggle the switch at the top of the screen to ON position

5. Tap “+Add apps” or “Managed apps” and choose the apps you wish to exclude from the VPN tunnel
   

If you’re using NordVPN’s Chrome extension, follow these steps to enable split tunneling:

1. Open the NordVPN extension by tapping on it in your browser’s bar 

2. Look for “Exclude from VPN” on the extension’s left and click it.

3. Enter the IP or domain URL you want to exclude from the VPN

4. Now click “Exclude” and refresh the page. Once done, the website excluded will no longer use your VPN’s connection. 

Related: NordVPN vs. ExpressVPN: In-Depth Comparison (With Testing)

Note that split tunneling isn’t generally available on iOS because of Apple’s strict limitations on VPN configurations. Although some providers offer it in their packages, it’s a limited form of split tunneling where you can only whitelist domains rather than filter by apps or services. 

Frequently Asked Questions