Skip the slowdown: Tell your Windows VPN which apps to ignore

ProtonVPN and NordVPN have updated their Windows desktop applications to include granular split tunneling controls. The feature allows users to designate specific programs to bypass the encrypted VPN tunnel while keeping other applications protected. This update gives Windows users a direct method to manage data routing without toggling the entire service on and off.

A standard VPN creates an encrypted bridge for all web traffic. This process obscures a user's location and hides browsing activity from internet service providers and other entities on the same network. However, the encryption process can reduce connection speeds. Split tunneling addresses this trade-off by allowing selected traffic to travel directly to the internet.

In the ProtonVPN interface for Windows, a new split tunneling option is located on the right side of the main console. It sits alongside existing controls for the kill switch and port forwarding. When enabled, users can create a list of applications that are excluded from the VPN. All other software remains routed through the encrypted connection. Alternatively, users can select specific apps to include in the tunnel while excluding everything else.

NordVPN implements the feature through a different interface path. Users must click the settings icon in the bottom left corner of the application window. From the menu, they select split tunneling and activate the toggle. The software then presents a list of installed programs. Users mark the specific applications that should receive VPN protection, leaving the rest to connect directly.

The most common implementation of this feature is app-based routing. A user might keep a banking application inside the tunnel for security while allowing a weather app to run outside it. This ensures the weather app reports the user's actual local location rather than the virtual location assigned by the VPN. Some services also offer URL-based or IP-based routing, but these are less common in consumer desktop software.

Mobile operating systems handle the feature differently. Android devices and desktop platforms generally allow app-level exclusion. iPhones typically restrict users to excluding specific websites and IP addresses rather than individual applications. The setup process for all platforms is a one-time configuration task. Once the preferred apps are designated, the routing rules persist automatically.

The update targets users who experience latency issues with online games or local network devices. By routing these specific applications around the encrypted bridge, connection times can improve. The feature is available on paid tiers of both services. Users can modify their exclusion lists at any time through the application settings.