VPN Split Tunneling: Route Traffic Your Way
Choose which apps and websites use BearVPN and which connect directly. Keep VPN protection where it matters while preserving access to local services and VPN-sensitive apps.
What is VPN split tunneling?
VPN split tunneling divides your internet traffic between two paths. Apps and websites assigned to BearVPN travel through an encrypted VPN tunnel and use the VPN server’s IP address. Excluded traffic connects through your regular internet connection and uses your local public IP. This lets you keep the VPN active for selected traffic without forcing every app, website, or local service through the same route.
Benefits of VPN split tunneling
Split tunneling replaces the all-or-nothing approach with routing rules you control. It can keep selected traffic inside the VPN while letting trusted apps and local services connect directly.
Split tunneling modes and controls
Split tunneling can protect most traffic while excluding selected services, or route only selected traffic through the VPN. Available controls vary by platform.
Use the VPN by default, then exclude selected trusted apps or domains that need your regular connection. Often called split-exclude mode, it leaves excluded traffic outside VPN encryption and exposes your local public IP to those services.
Send only selected apps or domains through the VPN while all other traffic connects directly. Often called split-include or inverse split tunneling, it is useful when only a few activities need VPN encryption or a VPN server IP.
Create rules for individual apps or supported domains instead of treating all device traffic the same. Domain routing is available on supported desktop versions, while mobile versions use app-based routing only.
How does VPN split tunneling work?
BearVPN applies the rules you choose, then sends your traffic along two separate connection paths.
Choose the default route
Choose whether the VPN is the default route or whether only selected traffic should use it.
Add routing rules
Add supported apps or domains to the appropriate VPN or direct-connection list.
Create two traffic paths
BearVPN sends selected traffic through the encrypted tunnel while excluded traffic uses your regular connection.
Know which IP each app uses
Apps on the VPN path use the VPN server’s IP; excluded apps use your local IP, so review the rules before handling sensitive data.
When should you use split tunneling?
Use split tunneling when a trusted app needs your regular connection or when only selected traffic needs the VPN. These are some of the most practical use cases:
Split tunneling controls by platform
On supported desktop versions, route apps or domains through or around the VPN. On mobile, create app-based routing rules. Available modes may vary by platform and app version.
How to set up split tunneling in 3 steps
Choose a routing mode, add supported apps or domains on desktop or apps on mobile, and connect.
1
Install the latest BearVPN app and sign in to your account.
2
Open Split Tunneling or Split Tunnel and choose a routing mode. Add apps or domains on supported desktop versions, or select apps on mobile.
3
Connect, then compare an IP checker in a VPN-routed app or browser with one that is excluded. They should show the VPN server IP and your regular public IP respectively.
Go PremiumGet BearVPN
Free DownloadDownload Now
More ways to control your VPN connection
Combine split tunneling with BearVPN’s privacy, security, and connection tools for greater control over each VPN session.
Kill Switch
Stops covered traffic if the VPN connection drops, reducing the risk of it continuing outside the encrypted tunnel.
Hide IP
Traffic routed through BearVPN uses the VPN server’s IP address instead of exposing your public IP to destination websites.
Split Tunneling
Choose which supported apps or domains use the VPN and which connect through your regular internet connection.
AES-256 encryption
Protect traffic inside the VPN tunnel with AES-256 encryption while it travels between your device and the VPN server.
No-logs policy
Browse with a VPN that does not keep logs of your browsing activity or the websites you visit.
Up to 10 devices
Use one BearVPN account on up to 10 devices and adjust supported connection settings for different activities.
Dedicated IP
Use a stable IP assigned only to you for remote access, IP allowlists, and more consistent account logins.
Double VPN
Route selected traffic through two VPN servers for an additional privacy layer when extra protection matters more than speed.
Fastest VPN
Connect through high-performance servers and use split tunneling to avoid routing traffic that does not need the VPN.
VPN split tunneling FAQs
Split tunneling is safe when you configure it carefully. Traffic sent through BearVPN remains encrypted and uses the VPN server’s IP address. Traffic that bypasses the VPN uses your regular connection, so it does not receive VPN encryption or IP masking. Keep sensitive or untrusted apps inside the VPN tunnel and review your routing rules regularly.
Full tunneling sends all device traffic through the VPN. Split tunneling lets selected apps or domains use the VPN while other traffic connects directly. A direct route may improve performance for excluded traffic, but it does not receive BearVPN encryption or IP masking. Use full tunneling when consistent VPN coverage matters most, and split tunneling when you need more control over specific apps or services.
Yes. BearVPN provides split tunneling on desktop and mobile, but the available controls differ. Supported desktop versions let you create routing rules for apps or domains, while mobile versions use app-based routing only. Check the latest BearVPN app on your device for the modes available to you.