Raven Wu
Fact-checked by Eric Goldstein
-
🥇 ExpressVPN
: It offers app-based split-tunneling on its Android, Windows, and macOS apps. It’s also one of the few VPNs out there that supports split-tunneling on routers. Additionally, it has servers in 105 countries, blazing-fast speeds, and high-end security features to protect your privacy. Every ExpressVPN subscription is backed by a 30-day money-back guarantee for first-time users.
Split-tunneling is offered by most top VPNs, but not all of them do it well. Some provide only basic functionality, while the best ones are more versatile, more intuitive to use, and work on a greater variety of platforms.
I conducted extensive research and testing to find the 5 best VPNs with split-tunneling. My top pick is ExpressVPN because it supports split-tunneling on most major platforms (including routers), delivers super-fast speeds, and has strong security features. Editors’ Note: ExpressVPN and this site are in the same ownership group.
Quick Summary of the Best VPNs for Split-Tunneling
Editors’ Note: Intego, Private Internet Access, CyberGhost and ExpressVPN are owned by Kape Technologies, our parent company
🥇1. ExpressVPN — Best Overall VPN for Split-Tunneling
Approved by our experts
ExpressVPN is my favorite VPN with split-tunneling. It offers app-based split-tunneling on Android, Windows, and macOS (version 10.15 and below), and it supports inverse split-tunneling. I also like that it has a split-tunneling feature on its router app called Device Groups. It lets you create up to 5 “groups” of devices that each connect to different locations (or exclude from the VPN tunnel entirely).
You can easily find ExpressVPN’s split-tunneling feature in its settings menu under the General tab, and adding app rules for split-tunneling is very intuitive. All you have to do is choose how you want to split-tunnel your traffic. You can choose all apps to use the VPN, exclude selected apps from the VPN, or only allow selected apps to use the VPN. If you choose the latter two options, simply click on the “+” button and select the apps you want to exclude or use the VPN.
In my tests, all of its features worked flawlessly. For example, when I excluded my browser from the VPN tunnel and checked my IP address on the website “WhatsMyIP,” the site correctly displayed my real IP address. Plus, inverse split-tunneling worked seamlessly — in my test, I routed my qBittorrent traffic through the VPN tunnel, and the torrent client didn’t leak my IP address to my peers.
ExpressVPN’s plans start at £3.86 / month, and it backs new subscriptions with a 30-day money-back guarantee.
Bottom Line:
ExpressVPN is the best VPN for split-tunneling. Its split-tunneling tool works flawlessly on Android, Windows, and macOS (version 10.15 or below) and is easy to use. It also supports inverse split-tunneling and has a split-tunneling tool on its router app. ExpressVPN backs all new subscriptions with a 30-day money-back guarantee.
Read the full ExpressVPN review
🥈2. Private Internet Access — Highly Customizable Split-Tunneling Tool
Private Internet Access (PIA) has a very versatile split-tunneling tool. It can exclude both apps and IP addresses from the VPN tunnel on its desktop apps, so you can exclude specific websites.
Like ExpressVPN, it offers inverse split-tunneling for apps. Plus, it gives you the option to split-tunnel your DNS traffic. In other words, you can route all of your DNS requests through PIA’s servers for extra privacy without encrypting your traffic or changing your IP address. PIA’s split-tunneling feature is available on Android, Windows, and macOS.
To find the split-tunneling feature in PIA’s app, go to the settings menu and select the Split-Tunnel tab. You can then add apps and IP addresses with just a couple of clicks and configure the rules for each entry individually. This gives you a lot of control over exactly what your VPN covers.
Private Internet Access’s plans start at just £1.69 / month, and every plan is backed by a 30-day money-back guarantee.
Bottom Line:
Private Internet Access’s split-tunneling tool is highly customizable and very flexible. It works for both apps and IP addresses, allows inverse split-tunneling, and can even split-tunnel your DNS traffic. It’s available on Android, Windows, and macOS. PIA backs purchases with a 30-day money-back guarantee.
Read the full Private Internet Access review
Editors’ Note: Private Internet Access and this site are in the same ownership group.
🥉3. CyberGhost VPN — Easy-to-Use VPN With Split-Tunneling
CyberGhost VPN only has split-tunneling on Android, and it only works on apps. But its Exceptions tool (available on Windows) functions similarly, allowing you to exclude specific websites from the VPN tunnel. It’s definitely less flexible than the split-tunneling features of ExpressVPN and Private Internet Access, though.
On Android, I like how CyberGhost lists all of the installed applications on your phone and how you can exclude an app from the VPN tunnel with a single tap. Similarly, adding a website to Exceptions on Windows is as simple as copying and pasting the URL into a box.
You can find split-tunneling on Android in the settings menu by selecting the VPN tab. The Exceptions tool can be found in the Exceptions tab of Smart Rules in the settings menu.
CyberGhost VPN’s plans start at an affordable £1.92 / month, and its money-back guarantee is generous (up to 45 days for long-term plans).
Bottom Line:
CyberGhost VPN supports app-based split-tunneling on its Android app and site-based split-tunneling on its Windows app (via its Exceptions tool). Both tools are really easy to configure. CyberGhost backs purchases with a money-back guarantee (up to 45 days for long-term plans).
Read the full CyberGhost VPN review
Editors’ Note: CyberGhost and this site are in the same ownership group.
4. NordVPN — Auto-Excludes Incompatible Apps on Android
NordVPN offers app-based split-tunneling. It also supports inverse-split-tunneling. It only has split-tunneling on its Android and Windows apps, though. If you need split-tunneling on your macOS device, you should instead check out ExpressVPN or Private Internet Access.
You can enable split-tunneling in the settings menu under Split tunneling. You’ll need to toggle the switch to the On position before adding any rules.
One unique thing about NordVPN’s split-tunneling tool is that on its Android app it automatically detects and excludes apps that aren’t compatible with VPNs (like banking apps), which saves you the trouble of having to add them to the list yourself.
NordVPN’s plans start at £2.62 / month, and all of its plans come with a 30-day money-back guarantee.
Bottom Line:
NordVPN offers app-based split-tunneling on its Android and Windows apps and supports inverse split-tunneling. On its Android app, it automatically excludes apps that don’t work when connected to a VPN. NordVPN subscriptions come with a 30-day money-back guarantee.
5. Surfshark — Good for Split-Tunneling on iOS
Surfshark is the only VPN on this list with split-tunneling on iOS. This is rare among VPNs (TunnelBear and IPVanish are just two of the few VPNs that have this). It also provides split-tunneling on Android, Windows, and macOS. Additionally, it can split-tunnel both apps and websites, and offers inverse split-tunneling.
You can find this feature in the settings menu of the Surfshark app under Bypasser, which is what it calls its split-tunneling tool. Once you toggle on the feature, just follow the prompts to add apps or websites / IP Addresses. You can see the full list of apps, websites / IP Addresses that you pick in the window.
Surfshark’s plans start at £1.69 / month, and every purchase is backed by a 30-day money-back guarantee.
Bottom Line:
Surfshark is one of the only VPNs out there that offers split-tunneling on iOS. It also supports split-tunneling on Android, Windows, and macOS, can split-tunnel both apps and websites, and offers inverse split-tunneling. Every Surfshark subscription comes with a 30-day money-back guarantee.
Read the full Surfshark review
Quick Comparison Table
Editors’ Note: Intego, Private Internet Access, CyberGhost and ExpressVPN are owned by Kape Technologies, our parent company
Testing Methodology: Comparison & Ranking Criteria
To create this list of the best VPNs in 2025 for split-tunneling, I checked which platforms each provider’s split-tunneling tool supports and how flexible it is. I also evaluated each provider’s speeds, security, ease of use, etc. following our proven testing methodology. Get a detailed breakdown of how I ranked and compared the VPNs on my list below:
- I chose VPNs with great split-tunneling tools. The provider’s split-tunneling tool must work flawlessly, be easy to use, and be available across multiple platforms. I also gave extra points to VPNs that give users more control by allowing IP-based split-tunneling or inverse split-tunneling.
- I picked VPNs with fast connection speeds. Using any VPN will reduce your speeds slightly because of the time it takes to encrypt your data. However, all of the VPNs I recommend maintain very fast speeds for smooth browsing, streaming, and torrenting.
- I tested how easy the VPNs are to use. The ones on my list make it easy to navigate to settings and find/control the split-tunneling tool, and they’re also really easy to use overall.
- I made sure each VPN’s split-tunneling feature is secure. Poorly implemented split-tunneling can result in accidental data leaks and expose your real IP address, so I only chose VPNs with secure split-tunneling tools. Additionally, all of the VPNs on my list come with industry-standard security features, including military-grade 256-bit AES encryption, a strict no-logs policy (they don’t track your online activities), and a kill switch, which cuts your internet connection if your VPN connection drops unexpectedly.
- I evaluated each VPN’s overall value. I only put a VPN on my list if it has reasonably-priced plans, allows multiple simultaneous connections, and comes with lots of bonus features for extra value. Plus, the providers I recommend back all purchases with a money-back guarantee, so you can test them out risk-free.
What Is Split Tunneling & How Does It Work?
Split-tunneling is a feature that lets you choose which internet traffic goes through the VPN and which uses your regular connection. Normally, VPNs send all of your data through an encrypted tunnel, but using split-tunneling, you can send sensitive activities (like gambling or torrenting) through the VPN while allowing other traffic (like streaming or gaming) to bypass it.
This works by setting rules within the VPN app for which traffic should be excluded from the VPN tunnel. Most VPNs only let you exclude app traffic, while others also allow you to exclude traffic for specific websites or IP addresses.
What Are the Different Types of Split-Tunneling?
Split-tunneling comes in many forms. You should choose a VPN with split-tunneling that fits your needs. Here’s a quick overview of the different types:
- App-based split-tunneling. This is the most common. It lets you choose which apps use the VPN and which connect directly to the internet. For example, you can route your torrent client through the VPN while leaving your gaming app on your regular connection.
- Site-based split-tunneling. Allows you to exclude specific websites from the VPN tunnel. This is useful for securing sensitive traffic, like your traffic on an online banking site, without affecting your activities on other browser tabs.
- IP-based split-tunneling. Similar to URL-based split-tunneling, but it works by specifying IP addresses instead of domain names. This is often used for corporate networks or remote work setups.
- Inverse split-tunneling. Instead of selecting which traffic bypasses the VPN, inverse split-tunneling lets you specify which traffic must go through the encrypted tunnel, with everything else using the regular connection. This type of split-tunneling is a great time saver if you only want to secure the traffic for a couple of apps.
- Device-based split-tunneling. Found in VPN router apps, this lets you choose which devices use the VPN and which connect normally. ExpressVPN even allows you to connect different devices to different servers.
Why Use Split Tunneling?
One major reason why people use split-tunneling is to get faster speeds. VPN encryption reduces your connection speeds slightly, so you may want to exclude non-sensitive activities, like streaming or gaming, from the VPN tunnel.
The second major reason to use split-tunneling is compatibility — some apps may not work with a VPN. For example, banking apps may block VPN connections for security reasons, and food delivery apps require your actual geolocation. Without split-tunneling, you would have to disconnect from the VPN entirely to access these services. With split-tunneling, you can simply exclude them from the VPN tunnel.
Top Brands That Didn’t Make the Cut
- PrivateVPN. It has user-friendly apps, affordable prices, and is great for bypassing censorship. However, it doesn’t have a split-tunneling feature.
- Proton VPN. It can split-tunnel apps and IP addresses, but it’s only available on Windows and Android. Additionally, its money-back guarantee is prorated, meaning even if you get a refund within the 30-day period, you’ll still be charged for every day that you were subscribed for.
- IPVanish. It’s one of the few VPNs with split-tunneling on iOS. I also like that it lets you exclude both apps and websites. But it doesn’t have inverse split-tunneling and lacks advanced security features that other top VPNs have.
Frequently Asked Questions
Is split-tunneling safe?
Yes, if it’s properly implemented. Badly implemented split-tunneling can result in data and IP leaks. All of the VPNs I recommend have safe and reliable split-tunneling tools. Just be aware that split-tunneling excludes the traffic you select from the encrypted tunnel, meaning that traffic won’t be protected by your VPN.
Does using split-tunneling improve my speeds?
Split-tunneled apps will be slightly faster compared to non-split-tunneled apps because your traffic to them isn’t being encrypted (encryption takes extra time). Of course, this means sacrificing the extra privacy and security provided by said encryption, so generally speaking, it’s not worth split-tunneling just for faster speeds. This is especially true if you’re using a VPN like ExpressVPN that offers blazing-fast speeds even after encryption.
Is there a VPN with split-tunneling for iOS and/or macOS?
Yes, Surfshark supports split-tunneling on both iOS and macOS, and Private Internet Access supports split-tunneling on macOS, but these are rare exceptions. Most other VPNs don’t offer split-tunneling on these platforms because Apple has strict security rules that limit how apps can control network traffic.
What is inverse split-tunneling?
Regular split-tunneling lets you choose which apps or websites bypass the VPN; inverse split-tunneling does the opposite — only the apps or websites you choose will use the VPN (everything else will use your regular internet connection). This feature can be really convenient if you only want to use a VPN for very sensitive online activities, like torrenting. ExpressVPN is the best VPN with inverse split-tunneling.
