Split Tunneling
Split Tunneling
Control exactly which apps use the VPN and which connect directly. With per-app routing, you get the best of both worlds: privacy where you need it and direct access where you want it.
What Is Split Tunneling?
Split tunneling gives you granular control over which apps on your device route their traffic through the VPN tunnel and which apps connect directly to the internet. Instead of an all-or-nothing approach, you decide on a per-app basis.
This is essential when certain apps need direct internet access (such as banking apps that block VPN connections) while others need VPN protection (such as web browsers and messaging apps). Split tunneling lets both coexist on the same device simultaneously.
Excluded Apps
Apps on the excluded list bypass the VPN entirely. Their traffic goes directly through your regular internet connection, even while the VPN is active.
On-Demand Apps
Apps on the on-demand list automatically trigger a VPN connection when launched. Opening the app starts VPN protection without manual intervention.
Excluded Apps
The excluded apps list defines applications that should bypass the VPN tunnel. When the VPN is connected, these apps send and receive data directly through your regular internet connection as if the VPN were not active.
Why Exclude Apps?
Banking & Finance
Many banking apps detect VPN usage and may lock your account or require additional verification. Excluding them avoids these friction points.
Local Services
Apps that rely on your real location for local services, delivery, or navigation work better with a direct connection.
High-Bandwidth Apps
Large file sync services or backup apps may perform better with a direct connection, freeing VPN bandwidth for privacy-sensitive activities.
Adding Excluded Apps
Open Settings
Navigate to Settings in the OrbVPN app from the bottom navigation bar.
Find App Control
Scroll to the App Control section and tap on Excluded Apps to view the current exclusion list.
Tap Add
Tap the Add button to see a list of all installed apps on your device.
Select Apps
Tap on each app you want to exclude from the VPN. A checkmark confirms the app has been added to the exclusion list.
Save Changes
Confirm your selection. The excluded apps will now bypass the VPN whenever you are connected.
Removing Excluded Apps
Open Excluded Apps List
Navigate to Settings, then App Control, then Excluded Apps to view your current exclusions.
Swipe to Remove
Swipe left on the app you want to remove from the exclusion list. A Remove button will appear.
Confirm Removal
Tap Remove. The app will now route its traffic through the VPN like all other apps.
Immediate Effect
Changes to the excluded apps list take effect immediately. If the VPN is currently active, newly excluded apps will switch to direct routing without needing to disconnect and reconnect.
On-Demand Apps
On-demand apps are the opposite of excluded apps. Instead of bypassing the VPN, these apps automatically trigger a VPN connection when you launch them. This is perfect for privacy-sensitive applications that should always be protected.
Why Use On-Demand Apps?
Automatic Protection
No need to remember to connect the VPN before opening sensitive apps. The VPN activates automatically when you launch the app.
Privacy-First Browsing
Add your web browser to ensure every browsing session is automatically protected through the VPN.
Messaging Security
Protect messaging and communication apps by adding them to the on-demand list. Your conversations stay private without extra steps.
Adding On-Demand Apps
Open Settings
Navigate to Settings in the OrbVPN app from the bottom navigation bar.
Find App Control
Scroll to the App Control section and tap on On-Demand Apps to view the current list.
Tap Add
Tap the Add button to browse all installed apps on your device.
Select Apps
Tap on each app that should trigger an automatic VPN connection when launched. A checkmark confirms your selection.
Save Changes
Confirm your selection. These apps will now automatically start the VPN whenever you open them.
Removing On-Demand Apps
Open On-Demand Apps List
Navigate to Settings, then App Control, then On-Demand Apps to see your current list.
Swipe to Remove
Swipe left on the app you want to remove. A Remove button will appear.
Confirm Removal
Tap Remove. The app will no longer trigger an automatic VPN connection when launched.
Common Use Cases
Here are practical scenarios where split tunneling improves your experience.
Banking + Browsing
Exclude your banking app to avoid account locks while keeping your browser routed through the VPN for private browsing.
Local + International
Exclude local delivery and ride-sharing apps that need your real location while routing social media through the VPN.
Work + Personal
Exclude corporate apps that connect to an internal network while routing personal apps through the VPN for privacy.
Streaming + Downloads
Route your streaming app through the VPN for geo-restricted content while excluding large file download managers for faster speeds.
Best Practices
Start Selective
Begin by excluding only the apps that genuinely need direct access. The more apps that route through the VPN, the more comprehensive your privacy protection.
Review Periodically
Revisit your excluded and on-demand lists periodically. As you install new apps or your needs change, update the lists to maintain optimal coverage.
Test After Changes
After modifying your split tunneling configuration, verify that excluded apps can connect directly and VPN-routed apps show the VPN IP address.
Security Consideration
Excluded apps are not protected by the VPN. Traffic from these apps is visible to your ISP and network observers. Only exclude apps when there is a specific, practical reason to do so.
Your Apps, Your Rules
Take full control of your traffic routing with per-app split tunneling. Protect what matters, exclude what needs direct access, and enjoy the best of both worlds.