What split tunneling is and how VPN users configure it
Split tunneling is a feature in many VPN services that allows users to decide which apps or websites use the VPN’s encrypted connection and which bypass it. This can balance security, speed, and access to local networks without requiring users to turn the VPN on and off repeatedly.
Editor, Lazyfounder
TABLE OF CONTENTS
KEY HIGHLIGHTS
- Split tunneling lets users route specific apps or websites through a VPN or bypass it entirely.
- App-based and URL-based split tunneling are the most common types in consumer VPNs.
- NordVPN and ProtonVPN offer split tunneling with customizable app selection on Windows and Android.
- iPhones have limited split tunneling capabilities compared to Android and desktop platforms.
How split tunneling works
Split tunneling allows users to selectively route traffic through a VPN while letting other traffic bypass the VPN’s encrypted tunnel. This feature is useful for maintaining security and privacy for sensitive activities—such as banking or browsing—while avoiding speed reductions or compatibility issues with local networks, like printers or smart home devices.
According to WIRED, VPNs provide security benefits like blocking trackers, masking location, and preventing internet service providers from monitoring browsing activity. However, routing all traffic through a VPN can slow down connections and disrupt access to devices on the same local network. Split tunneling addresses these trade-offs by letting users exclude specific apps or websites from the VPN.
Types of split tunneling
Consumer VPNs typically offer two types of split tunneling: app-based and URL-based.
App-based split tunneling is the most common and allows users to select which apps use the VPN. For example, NordVPN on Windows lets users enable split tunneling and choose which apps to include or exclude from VPN protection.
URL-based split tunneling, on the other hand, lets users set rules based on domain names. This is useful for excluding or including specific websites without affecting the entire app. For instance, users might route banking websites through the VPN while letting other sites bypass it.
Device limitations
Split tunneling capabilities vary across devices and operating systems. Android and desktop platforms generally offer the most flexibility, supporting both app-based and URL-based split tunneling.
iPhones, however, have limited support for split tunneling. According to WIRED, iOS users can typically exclude only websites and IP addresses, rather than individual apps. This restriction reduces the feature’s utility for users who rely on mobile VPNs for granular control.
Why founders and operators should care
For founders and operators, split tunneling is a practical tool for balancing security and performance, especially in remote work environments. Employees can use a VPN for sensitive tasks like accessing company servers while bypassing it for high-bandwidth activities like video calls or software updates, which may perform better on a direct connection.
Startups in regions with restrictive internet policies or surveillance concerns may also use split tunneling to secure communications without sacrificing access to local services. However, teams should be aware of device-specific limitations, particularly on iOS, which may require alternative configurations or workarounds.
What this means
Lazyfounder analysis — our interpretation, not reported fact.
Split tunneling is a pragmatic solution for users who need VPN protection without the drawbacks of routing all traffic through an encrypted tunnel. For founders and operators, it offers a way to optimize both security and performance, particularly in distributed teams or markets with strict internet regulations. However, the feature’s inconsistent support across devices—especially iPhones—means organizations may need to tailor their VPN policies or provide alternative guidance for mobile users.
Key takeaways
- Split tunneling balances security and performance by letting users exclude specific apps or sites from the VPN.
- App-based split tunneling is widely supported on Windows and Android, while iOS offers only limited functionality.
- Founders can leverage split tunneling to secure sensitive work tasks without slowing down non-critical activities.
Related on Lazyfounder
Sources
This story is an original summary drafted with AI by Lazyfounder from the reporting listed above and checked by automated validation. Facts are attributed to their original publishers; sections marked as analysis are Lazyfounder's. Where a source is in another language, facts were machine-translated and quotations are reported, not reproduced. Read the original coverage via the links, and see our AI policy and corrections policy.
About the author
Editor, Lazyfounder
Tarun Mottlia edits LazyFounders, covering Indian startups, funding rounds, AI and product launches. Every story on the site is AI-assisted and checked against its cited sources before publication.
More stories by Tarun MottliaGet the LazyFounder Brief
Startup, funding and AI news in a five-minute read. Join the early-access list.
