ProtonVPN and NordVPN activate app-level exclusion for Windows clients
The updates allow users to specify which software connects directly to the internet while other applications remain routed through the encrypted tunnel.
By Neha Iyer ·
ProtonVPN and NordVPN have released updates for their Windows clients that enable users to exclude specific applications from VPN encryption. This functionality, known as split tunneling, allows data from selected programs to travel directly to the internet while other traffic remains protected by the encrypted bridge. The feature addresses the trade-offs of using a virtual private network, such as potential speed reductions, by letting users bypass the tunnel for tasks that do not require location masking or enhanced privacy.
The implementation of split tunneling varies by platform. In the ProtonVPN application, a dedicated link appears on the right side of the main console. Users can enable the feature and choose to include specific apps in the tunnel or exclude them. The NordVPN interface requires users to click the cog icon in the bottom left corner of the main window and select the split tunneling option. Both services allow users to designate which applications receive protection and which connect directly.
App-based split tunneling is the most common form in consumer software. It allows a user to keep a banking app protected while allowing a weather app to run outside the tunnel. This ensures that local forecasts reflect the user's actual location rather than the one spoofed by the VPN. Other methods, such as URL-based and route-based tunneling, exist but are less common in consumer products. URL-based rules apply to specific domain names, while route-based rules rely on specific IP addresses.
The update is part of a broader trend in VPN services to offer granular control over traffic routing. Most paid VPN tiers now include some form of split tunneling. The feature is particularly useful for online gaming, where players may seek the fastest possible connection by keeping game clients outside the tunnel. It also helps users access local devices on a home network, such as printers and smart home gadgets, which can sometimes be difficult to reach when a VPN is active.
Mobile devices offer similar controls, though with some limitations. iPhones restrict users to excluding websites and IP addresses rather than specific apps. Android devices and desktop platforms provide more flexibility. For most users, configuring split tunneling is a one-time task. Once set, the rules apply automatically, reducing the need to manually toggle the VPN on and off for different applications.
The release follows earlier versions of these tools that required users to switch the entire VPN connection to change which traffic was protected. By allowing app-specific routing, the new features aim to balance security and performance. Users can revisit the settings at any time to adjust which apps are covered. The updates are available for Windows users now, with similar processes available for mobile devices through the respective app settings.
Source: Wired
