Split Tunnelling Explained: Use a VPN for Some Apps, Not Others
A split tunnelling VPN lets you choose which apps, websites, or traffic use your VPN connection and which continue using your normal internet connection. Instead of sending everything through the encrypted VPN tunnel, you can be selective: protect the apps that need privacy while keeping other services running locally.
TL;DR
- A split tunnelling VPN routes some traffic through the VPN and leaves other traffic outside it.
- It can help with banking apps, local services, gaming, smart home devices, and work tools that may not behave well through a VPN.
- The trade-off is that any traffic excluded from the VPN does not get VPN encryption or IP masking.
- Use split tunnelling carefully: include sensitive apps in the VPN tunnel and exclude only what genuinely needs direct access.
- Streaming platforms may restrict region switching in their terms, and content libraries vary by location.
What Is Split Tunnelling?
Split tunnelling is a VPN feature that gives you control over how your internet traffic is routed. With a standard VPN connection, your device sends all internet traffic through the VPN server. This helps hide your IP address from websites and encrypts traffic between your device and the VPN server.
With split tunnelling, you can divide that traffic. For example, you might send your browser and messaging app through the VPN, while allowing your banking app or online game to use your regular connection.
That makes split tunnelling useful when you want privacy for some activities, but do not want every app on your device to behave as though it is connecting from the VPN server’s location.
How a Split Tunnelling VPN Works
When you connect to a VPN, your device creates an encrypted tunnel between itself and the VPN provider’s server. Split tunnelling adds a rule layer on top of that connection.
Depending on the VPN app and operating system, you may be able to choose:
- Which apps always use the VPN
- Which apps bypass the VPN
- Which websites or IP addresses use or avoid the VPN
- Whether all traffic uses the VPN by default except selected exclusions
The exact controls vary by VPN provider and device. On mobile, app-based split tunnelling is common. On desktop, some VPNs may offer app rules, website rules, or network-level routing options.
Why Use Split Tunnelling?
Split tunnelling is about balancing privacy, convenience, and compatibility. A VPN is often useful, but there are times when routing everything through it can be unnecessary or inconvenient.
Access Local Australian Services More Easily
Some Australian services expect your connection to come from a local ISP or location. Banking apps, government services, delivery apps, local retailers, and utility accounts may sometimes request extra checks when your VPN is on.
Split tunnelling can let those apps use your regular connection while keeping other apps protected by the VPN.
Keep Some Apps Fast and Direct
Certain activities can be sensitive to latency. Online gaming, video calls, and remote desktop tools may feel better when they take the most direct route available.
A split tunnelling VPN can allow those apps to bypass the VPN while your browser, email, or messaging apps stay inside the encrypted tunnel.
Use Local Network Devices
Printers, smart TVs, media servers, and other home devices can sometimes be harder to reach when a VPN is active. If your VPN app supports the right split tunnelling controls, you may be able to keep local network access working while still protecting selected internet traffic.
Reduce Unnecessary VPN Traffic
Not every app needs a VPN all the time. App updates, cloud sync, and low-risk background traffic can consume bandwidth through the VPN tunnel without adding much practical benefit. Split tunnelling lets you reserve the VPN for the apps where privacy matters most.
Split Tunnelling vs Full VPN Protection
A comparison can help clarify the trade-offs.
| Setup | What happens | Best for | Main trade-off |
|---|---|---|---|
| Full VPN tunnel | All internet traffic goes through the VPN | Maximum simplicity and broad protection | Some apps or local services may be less convenient |
| Split tunnelling by exclusion | Everything uses the VPN except selected apps | People who want VPN protection by default | Excluded apps are not protected by the VPN |
| Split tunnelling by inclusion | Only selected apps use the VPN | People who want VPN for specific activities | Easy to forget to add an app that should be protected |
For most privacy-conscious users, “VPN by default, exclusions only when needed” is the safer mindset. It reduces the chance of accidentally leaving sensitive traffic outside the tunnel.
Common Split Tunnelling Examples
Browser Through VPN, Banking App Outside
You might want your web browsing to use the VPN while your Australian banking app connects normally. This can reduce login friction while keeping your browser traffic routed through the VPN.
Torrent Client Through VPN, Other Apps Outside
Some users route a specific file-sharing app through a VPN while keeping general apps on the normal connection. Make sure you only download and share content you have the right to access, and follow applicable laws and platform terms.
Work Apps Outside, Personal Browsing Inside
If a workplace system expects your normal network or uses its own security tools, you may exclude that work app from your personal VPN while keeping personal browsing private. Always follow your employer’s IT policy.
Games Outside, Messaging Inside
Gaming often benefits from low latency. You may choose to keep games outside the VPN and route messaging or browsing through the VPN.
Is Split Tunnelling Safe?
Split tunnelling can be safe when used thoughtfully, but it reduces coverage compared with routing all traffic through the VPN.
The key point is simple: traffic outside the VPN is not protected by the VPN. Your ISP, network administrator, or other relevant parties may be able to see connection metadata for excluded traffic, and websites or apps outside the tunnel will see your regular IP address.
That does not mean split tunnelling is unsafe by default. It means you need to be deliberate. Use the VPN for sensitive apps and exclude only the apps that genuinely need direct access.
Risks and Mistakes to Avoid
Excluding Too Many Apps
If you exclude half your device, you may lose much of the privacy benefit. Keep your split tunnelling rules narrow and purposeful.
Forgetting Background Apps
Some apps run in the background and send data even when you are not actively using them. Check which apps are included or excluded, especially cloud storage, messaging, browsers, and email clients.
Assuming It Works for Every Website
Website-based split tunnelling can be tricky because modern websites often load content from multiple domains. If your VPN supports only app-based split tunnelling, website-level control may not be available.
Relying on It for Streaming Guarantees
Some people think split tunnelling will make streaming access predictable. It may help with app routing, but streaming platforms can enforce their own terms and technical restrictions. Content libraries vary by region, and region switching may be restricted by service terms.
How to Decide Which Apps Should Use the VPN
A practical way to organise your setup is to group apps by privacy need.
Apps that often make sense inside the VPN tunnel include:
- Web browsers
- Messaging apps
- Email apps
- Public Wi-Fi activity
- Research or browsing you prefer to keep private
- File-sharing apps, where lawful and permitted
Apps you might consider excluding include:
- Banking apps that trigger extra checks
- Online games where latency matters
- Smart home or local network apps
- Work apps that must comply with employer settings
- Streaming apps, depending on your account terms and needs
There is no universal perfect setup. The right split tunnelling VPN configuration depends on your device, your apps, and what you are trying to protect.
Split Tunnelling on Public Wi-Fi
Public Wi-Fi in airports, hotels, cafés, and shopping centres can be convenient, but it is also a place where VPN use is especially sensible. If you use split tunnelling on public Wi-Fi, be careful about what you exclude.
A conservative approach is to keep browsers, email, messaging, and any sign-in-heavy apps inside the VPN tunnel. Only bypass the VPN for apps that need it and do not handle sensitive information.
Split Tunnelling and Privacy in Australia
Australians use VPNs for many everyday reasons: privacy on public Wi-Fi, reducing tracking by websites, securing traffic while travelling, and keeping browsing more private from networks they do not fully trust.
VutVPN is a VPN app built for Australia, with one-tap connect, no activity logs, and free download on Google Play. If you use any VPN with split tunnelling, the same principle applies: decide what needs the VPN, then keep exclusions as limited as possible.
Best Practices for Split Tunnelling
- Start with full VPN protection, then exclude apps only when there is a clear reason.
- Keep browsers and messaging apps inside the VPN unless you have a specific need.
- Review your rules after installing new apps.
- Be careful on public Wi-Fi, where broader VPN coverage is usually preferable.
- Remember that excluded apps use your normal IP address and connection path.
- Follow laws, workplace policies, and platform terms.
Split tunnelling is most useful when it solves a real compatibility or performance issue. Used carefully, it gives you flexibility without forcing you to turn your VPN off completely.
FAQ
What does split tunnelling VPN mean?
A split tunnelling VPN lets you choose which apps or traffic go through the VPN and which use your regular internet connection.
Should I use split tunnelling all the time?
Not necessarily. Full VPN protection is simpler. Use split tunnelling when certain apps need direct access, lower latency, or local network compatibility.
Does split tunnelling make my VPN less secure?
It can reduce coverage. Any app excluded from the VPN does not receive VPN encryption or IP masking, so choose exclusions carefully.
Can split tunnelling help with streaming apps?
It may help route specific apps, but it does not guarantee access to any content library. Streaming services may restrict region switching in their terms, and availability varies.