Send only chosen apps through the VPN and keep the rest on your normal connection.
Split tunneling lets you decide, app by app, which traffic goes through the VPNGeek tunnel and which uses your normal internet connection. It is useful when a service blocks or throttles VPN traffic, when you need a local printer or NAS to stay reachable, or when you simply want your bandwidth-heavy downloads to bypass the encrypted path while your browser stays protected.
What split tunneling does
By default the VPNGeek Windows app routes all of your device's traffic through the tunnel. Split tunneling changes that at the application level. You choose one of two modes: send only a named list of apps through the VPN, or send everything through the VPN except a named list. Traffic that is excluded from the tunnel leaves through your regular adapter with your real IP address.
Before you start
A couple of minutes of preparation makes the rules behave predictably.
- Update to VPNGeek app v3 or newer — earlier builds route by IP, not by application.
- Know the exact executables you want to route. Some apps ship several (for example a launcher plus the game it starts).
- Decide your default: is it safer for you if unlisted apps are protected (choose "All except") or unprotected (choose "Only these apps")?
1. Open the split tunneling settings
Launch the VPNGeek app and click the gear icon, then open Settings > Split tunneling. Toggle the feature On. You will see a mode selector and an empty app list.
2. Choose a mode
Pick the mode that matches your intent:
- Only these apps — everything uses your normal connection, and only the apps you add are sent through the VPN. Best when you want to protect one or two apps.
- All except these apps — everything is protected by the VPN, and only the apps you add bypass it. Best when you want broad protection with a few local exceptions.
3. Add applications
Click Add application. The app shows your installed programs; if the one you want is missing, use Browse to point directly at its .exe file (typically under C:\Program Files or %LocalAppData%). Repeat for each app you want in the list. Changes take effect immediately — you do not need to reconnect.
4. Verify the split is working
Connect the VPN, then confirm each side is routed as you expect. Open a browser or app that should be tunneled and visit an IP-check page — it should show a VPNGeek server IP and location. Then check an app that should bypass the tunnel; it should show your real ISP address. Doing both proves the rule is applied and not just that the VPN is up.
Troubleshooting
An app still shows my real IP
You most likely added a launcher rather than the process that makes the connections. Many apps start a separate child process; add that executable too, or switch to "All except" mode so anything unlisted stays protected.
Excluded apps lose internet when I connect
This is usually the kill switch. A strict kill switch blocks all non-tunnel traffic on disconnect, which can also catch your split-tunnel exceptions during reconnection. Set the kill switch to its app-aware mode, or accept a brief drop while the tunnel re-establishes.
My changes do not seem to apply
Rules match on the executable path. If you moved or updated the app to a new folder, remove the stale entry and re-add it from the current location.