Windows users can now tell the VPN which apps to ignore

ProtonVPN and NordVPN have enabled split tunneling controls on their Windows clients. This feature lets users decide exactly which applications receive VPN encryption and which ones connect to the internet directly. The updates give users more granular control over their data flow without requiring constant manual switching.

The core function of split tunneling is to balance security with speed. A standard VPN creates an encrypted bridge for all data, which protects against trackers and ISPs but can reduce connection speeds. By routing specific traffic around this bridge, users can maintain high-speed connections for performance-sensitive tasks while keeping sensitive data protected. This approach removes the need to toggle the entire VPN on and off for different activities.

The most common implementation is app-based filtering. Users can designate certain programs, such as a banking app, to travel through the VPN for added security. Simultaneously, they can exclude other applications, like a weather or local news app, so they reflect the user's actual geographic location rather than the spoofed location provided by the VPN. This is particularly useful for online gaming, where the fastest possible connection is often the priority, and for accessing local home network devices like printers or smart home gadgets.

Other methods for splitting traffic include URL-based and route-based tunneling. URL-based rules apply to specific domain names, allowing a user to keep the VPN active for a search engine but off for a local site. Route-based and policy-based tunneling rely on IP addresses and broader rule sets, respectively. These options are less common in consumer software and are primarily relevant for administrators managing multiple users.

The process for enabling the feature varies slightly between the two services. In the ProtonVPN Windows client, users find a split tunneling link on the right side of the main console. Once activated, they can choose to include specific apps in the VPN tunnel or exclude them, with the opposite setting applying to all other software. In NordVPN on Windows, users click the cog icon in the bottom left corner, select split tunneling, and flip the toggle to choose which apps receive protection.

Mobile platforms offer similar but more limited controls. Android and desktop systems allow for app-level selection, while iPhones typically restrict users to excluding specific websites and IP addresses. For most users, configuring these settings is a one-time task. They can revisit the configuration to change coverage, but the feature generally requires little ongoing attention once established.

These updates are part of a wider trend in VPN software to offer more precise controls. While the basic function of encrypting traffic remains the same, the ability to carve out exceptions allows for a more efficient user experience. The feature is available on paid tiers of most major VPN providers.