Journalist 
Mastering nordvpn exceptions your guide to app network exclusions is all about how to fine-tune NordVPN so it works perfectly with the programs you rely on. Yes, you can run apps that need direct network access alongside a VPN, and this guide walks you through practical steps, best practices, and real-world tips. Below you’ll find a step-by-step guide, common pitfalls to avoid, and a collection of quick-reference tips so you can set up app exclusions like a pro.
Useful URLs and Resources text only
- NordVPN official site – nordvpn.com
- NordVPN support – support.nordvpn.com
- Windows Firewall help – microsoft.com
- macOS Firewall help – support.apple.com
- How VPNs work – en.wikipedia.org/wiki/Virtual_private_network
- App exclusions basics – www.techradar.com
- Router VPN setup basics – www.digitaltrends.com
Introduction
Yes, you can run specific applications outside the NordVPN tunnel while keeping the rest of your traffic protected, and this guide shows you how. Here’s a quick roadmap:
- Why app network exclusions matter
- How to set up per-app exceptions on Windows and macOS
- Common scenarios: gaming, banking, streaming, and local network devices
- How to test and verify exclusions
- Troubleshooting tips and best practices
- Quick-start checklist and troubleshooting cheatsheet
What are NordVPN app exclusions and why they matter
- App exclusions are rules that tell NordVPN to skip the VPN tunnel for particular programs.
- This helps with latency-sensitive apps gaming, software that requires local network discovery, or services that don’t play well with VPNs.
- Using exclusions correctly can improve performance without sacrificing security for the rest of your traffic.
Key concepts you’ll use
- Split tunneling: NordVPN’s official term for choosing which apps go through the VPN and which don’t.
- Kill switch: A safety net that drops internet traffic if the VPN connection drops—vital when you’re excluding apps to avoid leaks.
- DNS and IP leaks: Ensure your exclusions don’t accidentally reveal your real IP or DNS queries.
- Traffic routing: How data packets are steered through the VPN tunnel or directly to the internet.
Best practices before you start
- Update NordVPN to the latest version for the most accurate app-exclusion controls.
- Decide which apps truly need exclusions e.g., game clients, local network discovery tools, banking software.
- Enable the kill switch if you plan to exclude apps; this avoids leaks if the VPN disconnects.
- Test with multiple servers to see if exclusions behave consistently across locations.
Section-by-section walkthrough Windows and macOS
- Note: The steps below reflect the latest NordVPN UI as of 2026. If you see slight UI differences, the underlying concepts remain the same.
Windows: Per-app exclusions split tunneling
- Step 1: Open NordVPN and sign in.
- Step 2: Go to Settings > Split tunneling sometimes labeled App exclude or App rules.
- Step 3: Turn on Split tunneling.
- Step 4: Choose the method:
- Exclude apps from VPN: select apps that will bypass the VPN.
- Include apps with VPN: only these apps go through the VPN.
- Step 5: Add an app:
- Click Add/exclude, browse to the app executable e.g., Steam, Discord, a banking app.
- Confirm the selection.
- Step 6: Toggle the Kill Switch recommended if you’re excluding apps. This ensures if VPN drops, excluded apps don’t leak.
- Step 7: Save changes and test:
- Launch the excluded app and verify it uses your regular network not the VPN.
- Check IP location via a test site like whatismyipaddress.com.
MacOS: Per-app exclusions split tunneling
- Step 1: Open NordVPN and sign in.
- Step 2: Navigate to Settings > Split tunneling.
- Step 3: Enable Split tunneling.
- Step 4: Choose the method Exclude apps from VPN or Only allow listed apps.
- Step 5: Add apps by browsing to the Applications folder and selecting the executable or app bundle.
- Step 6: Enable the Kill Switch if you want to avoid leaks.
- Step 7: Test the excluded app to confirm it bypasses the VPN.
Common use cases and how to handle them
- Gaming: Exclude the game executable and related services to reduce latency. Some games require local network discovery for multiplayer. Keep the VPN on for the rest of your system to protect updates and downloads.
- Banking or sensitive apps: Typically keep these to use VPN for privacy, unless the app has strict geo or connectivity requirements. If you must exclude, ensure it’s a trusted app and enable Kill Switch.
- Streaming on certain devices: If the streaming app on your PC or console doesn’t work well with VPN, you can exclude the streaming client while still protecting the rest of your traffic.
- Local network devices: If you’re using network-attached storage NAS or printers, you might need to exclude the NAS app or discovery service so the device is reachable on the local network.
How to test app exclusions thoroughly
- Step 1: Verify VPN status for excluded apps:
- Use a site like whatismyipaddress.com to confirm the IP reported by the app is your real IP when the app runs.
- Step 2: Check DNS leaks:
- With the excluded app running, visit dnsleaktest.com to ensure DNS requests aren’t leaking through the VPN.
- Step 3: Check for IPv6 leaks if your VPN supports IPv6:
- Disable IPv6 in the app or ensure your exclusion rules also cover IPv6 traffic if needed.
- Step 4: Test kill switch:
- Disconnect the VPN physically from the UI or simulate a drop and verify that excluded apps stop connecting if the kill switch is on.
- Step 5: Real-world testing:
- Use the excluded app for its normal tasks gaming, video calls, file transfers and monitor performance, latency, and stability.
Troubleshooting tips
- App doesn’t exclude as expected:
- Double-check the app’s exact executable name; some apps spawn helper processes that also need exclusion.
- Ensure you’re using the correct split tunneling mode exclude vs. include.
- VPN disconnects frequently when an app is excluded:
- Enable the Kill Switch and consider keeping that app out of the VPN entirely, or adjust the server to a more stable one.
- DNS leaks despite exclusions:
- Verify that DNS settings are not overridden by the OS. Use DNS leak tests and consider forcing VPN DNS servers for the non-excluded traffic if possible.
- Slower performance in excluded mode:
- Some apps still route through the VPN if background services touch network resources. Monitor with network sniffer tools or temporarily disable background processes.
Security considerations with app exclusions
- Limit exclusions to trusted apps only. The more apps you exclude, the greater the surface for potential leaks or privacy gaps.
- Keep your system firewall enabled Windows Defender Firewall or macOS Firewall to add another layer of protection.
- Regularly review your exclusions list—apps change, and so do their network requirements.
- Use strong, unique credentials for apps that require banking or sensitive data when the VPN is off.
How to manage exclusions on routers and mobile devices
- Router VPN with exclusions:
- Some routers support per-device routing rules. This is handy if you want the entire home network to be split-tunneled.
- Look for features like VPN policy routing or application-aware rules in your router firmware.
- Mobile devices:
- NordVPN app on Android and iOS supports split tunneling, but the interface differs. On iOS, the feature might be limited by OS constraints; you can still manage per-app traffic to some extent.
- For iOS, you might rely on system-wide VPN with selective app behavior via app settings, or use other OS-native controls for app-level traffic.
Performance and reliability data you should know
- VPN overhead is typically around 5-15% latency increase and 10-20% throughput impact depending on server location and encryption level.
- Exclusions can help reclaim latency-sensitive traffic, but misconfigured exclusions can cause leaks or inconsistent behavior.
- NordVPN maintains a large server network over 6000 servers in 90+ countries as of 2026, which helps you find a stable server for your needs when you rely on VPN for most traffic but exclude a few apps.
Advanced optimization tips
- Use a nearby server for excluded apps that require low latency, while keeping higher-latency servers for bulk traffic that benefits from VPN protection.
- Consider setting up a secondary profile or different user account on your device for work with stricter VPN rules.
- For households with multiple devices, document your exclusions to avoid confusion when someone else uses the computer.
Common mistakes to avoid
- Excluding essential system services or background processes by mistake—this can cause instability or leaks.
- Relying on the VPN kill switch alone without testing, since some apps might still leak when the VPN is unstable.
- Not testing under load; performance can change when you’re streaming, gaming, or downloading large files simultaneously.
A quick-start checklist
- Update NordVPN to the latest version.
- Decide which apps need exclusions and note their executable names.
- Enable Split tunneling and Configure Exclusions Exclude apps from VPN or similar.
- Enable Kill Switch for extra safety.
- Test each excluded app individually for IP, DNS, and IPv6 leaks.
- Monitor performance and adjust as needed.
- Review exclusions monthly or after major software updates.
Real-world examples from users
- Example 1: A gamer excludes the Steam client to reduce latency while keeping the rest of the system protected. Result: smoother gameplay without IP leakage.
- Example 2: A remote worker excludes a local VPN client from NordVPN to access corporate assets directly, while NordVPN remains on for browsing and email.
- Example 3: A streamer uses app exclusions for OBS Studio to bypass potential encoder instability that can occur with VPN-tunneled traffic, while keeping the game traffic protected.
Table: Quick reference for common apps and recommended exclusion approach
- Gaming clients Steam, Battle.net: Exclude from VPN
- Banking apps: Consider keeping on VPN unless the app requires direct access; enable Kill Switch if excluded
- Local network tools NAS, printers: Exclude to maintain discovery and local access
- VOIP and video conferencing apps: Test both with and without VPN to see what gives best results
- System update processes: Generally keep on VPN for security, unless you know you need to bypass them for speed updates
What to do if NordVPN exclusions aren’t working
- Restart NordVPN and your device after changes.
- Re-create the exclusion rule with the exact executable name, sometimes excluding the main executable isn’t enough.
- Check for updates or beta features that might affect split tunneling behavior.
- Ensure there are no conflicting firewall rules or other VPNs that could override NordVPN settings.
Frequently asked questions
Frequently Asked Questions
How do I enable app exclusions in NordVPN on Windows?
Open NordVPN > Settings > Split tunneling > Turn on Split tunneling > Choose Exclude apps from VPN > Add the apps you want to exclude > Save.
Can I exclude apps on mobile devices?
Yes, NordVPN supports per-app rules on Android in many cases. iOS support may vary due to OS limitations, but you can often manage behavior by choosing different connection modes or using OS-level settings.
Will exclusions leak my real IP?
If configured correctly and with a Kill Switch enabled where appropriate, no. Always test with a DNS leak test and a real IP check after enabling exclusions.
Can I exclude a browser app?
Typically you exclude the browser’s executable if you want that browser traffic to bypass the VPN, leaving other apps protected.
How does split tunneling affect security?
Split tunneling can increase risk if you exclude sensitive apps. Use the Kill Switch and only exclude what’s absolutely necessary. Getting the best nordvpn discount for 3 years and what to do if its gone
Do I need to disable IPv6 for exclusions to work?
It depends on your network. If you’re seeing IPv6 traffic leaks, consider disabling IPv6 in the VPN settings or OS settings, or ensure IPv6 traffic is included in your exclusion rules if you know what you’re doing.
What if NordVPN doesn’t show Split tunneling in settings?
Ensure you’re using an updated app version and your account type supports split tunneling. Some platform editions may have limited features; check NordVPN support articles for your OS.
Can I use exclusions with a corporate VPN?
Yes, but you’ll want to coordinate with your IT department to ensure it doesn’t conflict with corporate policies. Some corporate networks disallow local split tunneling.
How do I test that an app is using the VPN or not?
Check the IP address and DNS leaks using online tools while the app is running. If the app shows your real IP, it’s using an exclusion.
What should I do if a game disconnects when VPN is on?
Try a nearby server, disable background apps that might interfere, or reduce the encryption level only if necessary. If still problematic, consider excluding the game or choosing a different server. Nordvpn email address your complete guide to managing it
If you need more tailored help for a specific device Windows 11, macOS Sonoma, Android 14, or iOS 18 and a particular app, tell me which setup you’re using and what app you’re trying to exclude, and I’ll tailor the steps.
Sources:
用流量翻墙会被封卡吗：完整VPN使用指南、风险分析、设置要点与实操攻略
Vpn不稳定：全面诊断、优化步骤与场景应用，提升连接稳定性的实用指南
V2ray 更新订阅失败 解决方案全指南：订阅链接失效、配置更新与服务器轮换技巧 Troubleshooting the nordvpn Desktop App When It Refuses to Open: Quick Fixes, Tips, and Long-Term Solutions