VPN Split Tunneling on Windows, Mac, Android and iPhone

Updated 5 November 2026 · Standard formula, shown below

VPN split tunneling sends only selected apps or network traffic through a VPN while the rest uses your regular internet connection. You can use it to keep chosen traffic on a private connection without routing everything through the VPN, but the available controls depend on your VPN app and operating system. Before changing settings, decide which apps or destinations should use the VPN and which should bypass it.

What You’ll Need

A VPN service and its installed, up-to-date app. Split tunneling is not supported by every provider or platform.
Your VPN sign-in details and an active internet connection.
A clear list of apps or destinations to include in, or exclude from, the VPN.
Administrator access on a computer, or permission to change VPN settings on your phone.

Step-by-Step

Check what the VPN app supports. Open its settings and look for a feature named Split tunneling, App rules, Bypass VPN, or similar. Providers use different names. Check the provider’s current help page if you cannot find it; operating-system VPN settings alone may not offer app-level selection.
Choose the routing rule. Most implementations let you either route only selected apps through the VPN or exclude selected apps so they use your regular connection. These are opposite approaches. If you choose “only selected apps,” remember that unlisted apps may bypass the VPN. If you choose “exclude selected apps,” unlisted apps generally use the VPN while connected.
On Windows, open the VPN app’s settings. Connect to the VPN if the app requires it to edit rules. Find its split-tunneling or app-routing section, turn the feature on, and choose whether to include or exclude apps. Use the app picker to select programs. If the program is not listed, browse for its executable file (usually an .exe) in its installation folder. Save or apply the rules, then reconnect if prompted.
On macOS, use the VPN app rather than assuming a system-wide switch exists. Open the provider’s Mac app and look in settings or preferences for split tunneling, app exclusions, or per-app routing. Enable the feature, select the apps, and apply the changes. Some VPN apps do not support app-level split tunneling on macOS; if the option is absent, consult the provider’s documentation rather than changing unrelated network settings.
On Android, configure app-based routing in the VPN app. Open the app’s settings and find split tunneling or app exclusions. Select the apps that should use or bypass the VPN, check the chosen mode, and save. Android’s built-in VPN controls generally do not provide a universal per-app split-tunneling list, so the feature must usually come from the VPN app. If Android asks to approve a VPN connection, review the prompt and allow it only for the VPN app you intend to use.
On iPhone, check the provider’s iOS app and plan for limited support. Look in the app’s settings for split tunneling, app exclusions, or per-app VPN. iOS restricts how ordinary consumer VPN apps can route traffic by app, and many do not offer this feature on iPhone. If the setting is not present, do not expect a toggle in iOS Settings > VPN to create app-based split tunneling. Use a supported provider feature if available, or leave the VPN full-tunnel; managed work or school devices may have different administrator-configured options.
Confirm the rules and test one app at a time. Connect to the VPN. Open an app intended to use it and check its public IP address with a reputable IP-check service; it should show the VPN exit location. Then test an excluded app, which should show your normal connection’s public IP. Avoid signing in to sensitive services while you are unsure which route is active.
Check behavior after reconnecting. Disconnect and reconnect the VPN, then repeat the tests. Restart the selected apps if their existing connections persist. Confirm that the rules remain enabled after a device restart or app update.

Common Mistakes

Mixing up include and exclude modes: Read the mode description before selecting apps. The same list can have the opposite effect depending on the mode.
Assuming every device supports the same controls: Split tunneling may be available on Windows and Android but absent or limited on macOS or iPhone in the same service.
Selecting the wrong program: Some desktop apps use a separate updater, helper, or browser process. A rule for one executable may not cover every part of the app.
Testing only whether the VPN says “connected”: That status does not confirm which route a particular app uses. Check the public IP from each type of app.
Expecting a bypassed app to be protected by the VPN: Excluded traffic uses the normal network connection and can reveal the connection’s public IP to the destination.

Tips

Start with a small number of apps and add rules gradually. It is easier to identify a problem when only one setting has changed.
Use the VPN route for traffic that needs the VPN’s network location or protection on an untrusted network. Bypass only apps whose direct connection you understand and need.
Keep the VPN app updated, and recheck routing after major operating-system or VPN-app updates.
If the app offers a kill switch, read how it interacts with split tunneling. A kill switch may block bypassed apps, or behave differently by platform.

Troubleshooting

An app cannot connect: Temporarily switch off split tunneling or change that app’s rule, then reconnect the VPN. If it works with the feature off, the routing rule or an app dependency may be responsible. Check whether the app needs a separate helper process or local-network access.

Both apps show the VPN IP: Verify that the excluded-app mode is selected, the right app is on the exclusion list, and the VPN has reconnected since the change. Force-close and reopen the app before testing again.

An included app shows your normal IP: Confirm that the app is listed under the “only these apps use VPN” mode. On Windows, check that you selected the correct executable. On phones, make sure the app is not using a separate browser or service for the connection.

The setting is missing or grayed out: The feature may not be offered on that operating system, account, or VPN protocol. Check the provider’s platform-specific documentation, update the app, and contact its support if the published feature should be available. Do not install unofficial VPN profiles or routing tools to force it.

Rules stop working after a restart: Reopen the VPN app, verify that its connection permission and background operation are allowed, and reapply the rules if needed. On a managed work or school device, an administrator may control VPN settings.

Frequently Asked Questions

Does split tunneling turn off the VPN?
No. The VPN remains connected, but only traffic matching its routing rules uses the tunnel. Other traffic goes over the device’s regular connection.

Is split tunneling available on every VPN?
No. Support varies by provider, operating system, app version, and sometimes connection protocol. Confirm support for each device before relying on it.

Can I split tunnel by website?
Some services offer destination-based rules, but many consumer apps only select applications. Website routing can be complicated by shared hosting, changing addresses, and apps that use multiple network services.

Will split tunneling make my internet faster?
It may reduce VPN traffic for bypassed apps, but it does not guarantee better speed. Results depend on the app, network, VPN server, and connection quality.

Does split tunneling protect excluded apps?
Not through the VPN. Excluded apps use your normal internet connection, so the VPN’s tunnel does not hide their traffic from the local network or change the public IP they present.

Can I set it up in iPhone Settings?
Usually not for app-by-app routing with a standard consumer VPN. Check the VPN provider’s iOS app; if it has no supported feature, iOS Settings cannot generally add one.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.