Tunnel mode encrypts both your data and original IP address information before sending it over the internet. This essentially creates a secure tunnel between subnets — smaller IP network groupings.

Using tunnel mode increases privacy and helps ensure data packets reach the correct destination. Many VPNs still use IPSec for tunnel mode, though PIA uses the latest protocols, WireGuard® and OpenVPN.

Yes. Split tunneling is safer than not using a VPN, but it’s important to remember that traffic outside the VPN won’t be encrypted. You should only run trusted apps and websites outside your VPN, and keep everything else inside to ensure you block ads, trackers and other malicious software.

Get PIA’s advanced split tunneling to enjoy the best of both worlds: secure access to sites and services via the VPN, and the ability to use your standard connection for fast access to local content.

Yes. Our split tunneling feature allows standard and inverse split tunneling. Choose whether all apps run through the VPN with minimal exceptions or vice versa.

You also get several advanced options, including routed packet splitting for Linux and compatibility with Windows Store apps.

Split tunneling is available on Windows, Linux, and macOS (pre-Monterey only). You can also use standard split tunneling on Android devices, and we support allowlisting on PIA VPN browser extensions for Chrome, Opera, and Firefox.

The general rule is if you don’t trust an app, website, or IP, route it through the VPN. Most apps should run through the VPN to protect your anonymity online, but some exceptions exist.

For services that require better speeds, like regional channels, running them outside the VPN could provide a small speed boost. Many local network resources and banking services pose a minimal security risk and may require a local IP address, so some of these services will also need to run outside the VPN.