What Is Split Tunneling? VPN Feature Explained

Split tunneling is a VPN feature that lets you choose which apps or websites go through the encrypted VPN tunnel and which use your normal, direct internet connection at the same time. Instead of all-or-nothing protection, you split your traffic — securing what matters while keeping full speed and local access for everything else. It’s genuinely useful, but it comes with a security trade-off worth understanding before you turn it on.

Reviewed and kept current by the Coppers.io editorial team — see how we research .

How split tunneling works

Normally, a VPN sends all your device’s traffic through one encrypted tunnel to its server. Split tunneling creates two paths:

• Through the VPN — encrypted and routed via the VPN server (hidden IP, protected).
• Outside the VPN — straight to the internet over your normal connection (full speed, your real IP).

You decide which apps or destinations take which path. The rest of the time it behaves like a normal VPN.

Types of split tunneling

• App-based — choose specific apps to route through (or around) the VPN. The most common and user-friendly type.
• URL/domain-based — route particular websites through or outside the tunnel (often via a browser extension).
• Inverse split tunneling — flip the default: everything goes outside the VPN except the specific apps you nominate to protect.

When split tunneling is useful

It solves several everyday annoyances:

• Access local and foreign services at once — stream a foreign library through the VPN while your banking app, which may block VPNs, uses your real connection.
• Keep local devices reachable — printers, smart-home gear, and network drives often need your real local network, which a full VPN can cut off.
• Save bandwidth and speed — route only sensitive traffic through the VPN, letting large downloads or video calls run at full speed directly.
• Use a work VPN without tunnelling everything — send work apps through the corporate VPN while personal browsing stays direct.

For more everyday scenarios, see what to use a VPN for .

The security trade-off

Here’s the catch: anything you route outside the tunnel isn’t protected by the VPN. That traffic uses your real IP and isn’t encrypted by the VPN, so it’s visible to your ISP and exposed on untrusted networks. Security guidance — including from network providers like Cloudflare — notes that split tunneling widens your attack surface if used carelessly.

Practical rules to stay safe:

• Only exclude traffic that genuinely doesn’t need protection (e.g. a local printer), and keep sensitive activity inside the tunnel.
• Don’t split-tunnel on untrusted public Wi-Fi — there, you usually want everything encrypted.
• Mind the kill switch — understand how it interacts with excluded apps, so a VPN drop doesn’t quietly expose protected traffic.
• At work, follow IT policy — split tunneling can bypass corporate security controls.

How to set up split tunneling

1. Check support — not every provider or platform offers it; it’s common on Windows and Android, more limited on iOS and sometimes macOS.
2. Open your VPN app’s settings and find “Split Tunneling” (sometimes under Connection or Advanced).
3. Choose the mode — protect only selected apps, or protect everything except selected apps.
4. Add your apps or URLs to the relevant list.
5. Test it — confirm the protected app shows the VPN’s IP and the excluded one shows your real IP.

The exact options can depend on your VPN protocol , so check your provider’s documentation.

The bottom line

Split tunneling gives you fine-grained control: encrypt and reroute the traffic that matters while keeping speed and local access for the rest. It’s ideal for mixing local and foreign services, reaching home devices, and separating work from personal browsing. Just remember that excluded traffic loses the VPN’s protection — keep anything sensitive inside the tunnel, and turn split tunneling off on untrusted networks.

FAQs