What Is Split Tunneling and When Should You Use It

Split tunneling is a VPN feature that lets you choose which traffic goes through the VPN and which goes directly to the internet. Instead of all or nothing, you might send your browser through the VPN while a game or a work app connects directly.

Types of split tunneling

• By app: choose which apps use the VPN, or which ones skip it. The most common type.
• By website or IP address: some VPNs let you list sites or addresses that bypass the VPN.
• Inverse: everything goes direct except the apps you pick to protect.

When it's useful

• Local devices: printers, network drives and smart home devices often can't be reached while the VPN is on.
• Sites that block VPNs: some banks and streaming services block VPN addresses. Let them connect directly.
• Speed: games, video calls and large downloads can bypass the VPN to avoid slowdowns. See VPN speed loss explained.
• Work VPNs: companies often route only work traffic through the office VPN, so your personal browsing doesn't go through it.

The privacy trade-off

Anything outside the tunnel uses your real IP address and is visible to your internet provider, just like browsing without a VPN. Split tunneling is safe as long as you're deliberate about what's excluded.

• Keep your browser inside the VPN if privacy is the reason you use one.
• Watch for DNS leaks, where site lookups go outside the tunnel even for protected apps. See how to test for DNS leaks.
• Remember that the kill switch usually only protects traffic inside the tunnel. See VPN kill switches explained.

VPN browser extensions are already split

A VPN extension in Chrome only protects Chrome's traffic. Every other app on your computer connects directly. That's a form of split tunneling by default. See VPN extensions vs VPN apps.

Even inside the VPN, Chrome can reveal your real IP address through WebRTC, which powers video calls in the browser. WebRTC Privacy Shield stops that leak.

How to set it up

1. Open your VPN app's settings and look for Split tunneling.
2. Choose whether you're listing apps to exclude or apps to include.
3. Add the apps or sites, and save.
4. Check your IP address in the browser and in an excluded app to confirm it works as expected.

Not every VPN offers it on every platform; support is most common on Windows and Android.