ProtonVPN and NordVPN empower Windows users to carve apps out of the encrypted tunnel

ProtonVPN and NordVPN have enabled app-level split tunneling for Windows users. This feature allows individuals to exclude specific programs from the encrypted tunnel. The update gives users direct control over which data travels securely and which connects directly to the internet.

A standard VPN creates an encrypted bridge for all data moving to and from the web. This setup hides browsing activity from internet providers and other users on the same network. However, the protection comes with a speed penalty. Split tunneling addresses this trade-off by routing selected traffic around the bridge. Users no longer need to toggle the VPN on and off for different tasks.

App-based routing is the most common implementation. A user might keep a banking app inside the VPN for security while letting a weather app run outside. This ensures the weather app reads the user's actual location rather than the spoofed one provided by the VPN. Gaming is another frequent use case. Players often exclude games to minimize latency. Local services like movie ticketing apps also benefit from direct connections to display accurate local showtimes.

The setup process varies by provider. In the ProtonVPN Windows client, a split tunneling link appears on the right side of the main console. Users can choose to include specific apps or exclude them, with all other traffic following the opposite path. In the NordVPN Windows interface, users click the cog icon in the bottom left corner. They then select Split tunneling and flip the toggle to choose which apps receive protection.

Other methods exist but are less common in consumer software. URL-based rules apply to specific domains. Route-based tunneling relies on IP addresses, while policy-based tunneling uses broader rule sets. These latter two methods are typically used by people managing network settings for others. Mobile devices offer similar controls, though iPhones limit users to excluding websites and IP addresses rather than specific apps.

Most VPN programs now include some form of this feature, particularly on paid tiers. The configuration is generally a one-time task. Users can revisit the settings later to adjust which apps are covered. The system keeps protection active where it matters and out of the way where it does not.