Windows Users Control App-Level VPN Routing

Proton and Nord updated their Windows software to give users granular control over which applications connect through their virtual private networks. The new feature, known as split tunneling, allows specific apps to bypass the encrypted tunnel while others remain protected. This addresses a common complaint that VPNs can slow down online gaming or interfere with local network devices like smart home gadgets and printers.

The updates follow a long-standing technical capability that many VPN services have built into their platforms. Most consumer VPN programs now include some form of split tunneling, particularly on paid tiers. The feature has traditionally been more accessible on Android and desktop platforms. iPhones have historically offered less flexibility, typically limiting users to excluding specific websites or IP addresses rather than entire applications.

The mechanism works by creating an encrypted bridge for data moving to and from the web. This bridge prevents internet providers and others on the same network from seeing user activity. Split tunneling sends selected traffic around this bridge. Users do not need to manually switch the VPN on and off for every task. Instead, they define which apps are included or excluded from the protection.

In ProtonVPN for Windows, the split tunneling option appears on the right side of the main console. It sits alongside other settings like the kill switch and port forwarding. Once enabled, users can choose to include specific apps in the tunnel, leaving everything else direct, or exclude specific apps, leaving the rest protected. In NordVPN on Windows, users click the cog icon in the bottom left corner of the interface. They select split tunneling and flip the toggle to choose which apps receive VPN protection.

The setup process is generally a one-time task. Users can revisit the settings later to change which applications are covered. The feature helps balance security with performance. For example, a user might keep a banking app protected for security while letting a weather app run outside the VPN. This ensures forecasts reflect the user's real location rather than the spoofed location provided by the VPN server.

Other methods of split tunneling exist but are less common in consumer software. URL-based tunneling sets rules by domain name, allowing users to keep the VPN active for sensitive search pages but off for local news sites. Route-based tunneling relies on specific IP addresses, while policy-based tunneling applies broader sets of rules. These options are mostly relevant to people managing networks for other users rather than individual desktop users.