Windows users can now route specific apps around VPN encryption

Virtual private network users on Windows can now determine exactly which applications remain inside the encrypted tunnel and which connect directly to the internet. Two major providers, ProtonVPN and NordVPN, have activated this granular control in their Windows clients, moving beyond the binary choice of turning the service on or off.

The feature addresses a known trade-off: while VPNs mask location and hide browsing data from internet service providers, they often reduce connection speeds. By sending selected traffic around the encrypted bridge, users can maintain low latency for performance-sensitive tasks like online gaming while keeping data-sensitive apps protected.

ProtonVPN places the split tunneling option on the right side of its main console. Once enabled, users can choose to include specific apps in the tunnel while excluding the rest, or reverse that logic by excluding specific apps. NordVPN requires users to click the cog icon in the bottom left of the interface, select the split tunneling menu, and flip a toggle. Both interfaces allow users to pick which programs receive protection.

The most common implementation is app-based routing. A user might keep a banking app inside the VPN for security while letting a weather app run outside of it to reflect the user's actual location. Other examples include local movie ticketing services and smart home devices that may struggle to communicate through a masked IP address.

Some services also offer URL-based routing, which applies rules by domain name rather than by application. This allows a user to keep a search engine protected while bypassing the VPN for a local news site. Less common methods include route-based tunneling by IP address and policy-based rules, which are typically reserved for administrators managing multiple users.

The setup process is generally a one-time task. While mobile platforms support similar controls, iPhones limit users to excluding websites and IP addresses rather than specific apps, unlike Android devices and desktop platforms. Once configured, the settings remain active, keeping protection in place where it is needed without requiring constant manual adjustment.

For users who have previously toggled their VPN on and off to manage local connectivity or speed, this update consolidates that workflow. The controls are now embedded directly in the main interface of the Windows applications, making the selection of protected apps a visible part of the daily user experience.