Guides

ExpressVPN split tunneling on Mac

Two things are true and they pull in opposite directions.

ExpressVPN's own Mac app has split tunneling, in the version from their website (the App Store version doesn't). You set each app, IP or subnet to Only VPN or Bypass VPN, and choose what happens to all other apps, so it works both ways. If you're happy in the ExpressVPN app, you already have this.

But you can't use ExpressVPN with a WireGuard-based per-app tool like VPNonly. ExpressVPN's apps default to its own protocol, Lightway, and although they now offer WireGuard too, ExpressVPN doesn't hand out WireGuard config files. There's nothing to import. Tools that route by WireGuard need a config, and ExpressVPN doesn't provide one.

So what are the options

• Stay in the ExpressVPN app and use its built-in split tunneling. For opt-in, set all other apps to bypass the VPN and mark the ones you want as Only VPN. You'll need the website version and to allow its split-tunnel network extension.
• Want per-app routing that isn't tied to one provider — so you can switch, or use two — use a provider that issues WireGuard configs. Mullvad, Proton, IVPN and NordVPN all do, and VPNonly works with any of them.

This isn't a knock on ExpressVPN. Its WireGuard support just lives inside its own apps, not in a file you can take elsewhere.

Other providers

NordVPN · Mullvad · Proton VPN · Surfshark · IVPN · AirVPN · Windscribe · TorGuard · AzireVPN · OVPN · your own server. Or see which Mac VPNs have split tunneling, provider by provider.