Windscribe's macOS app already does split tunneling, in both directions: Exclusive leaves chosen apps off the VPN, Inclusive sends only chosen apps through it. It lives under Preferences → Connection → Split Tunneling and needs Windscribe's split-tunnel system extension switched on. If that works for you, it's included with your plan and there's no reason to buy anything else.
If you'd rather not run Windscribe's app at all, a paid plan also gets you WireGuard configs you can use with a per-app tool.
Windscribe-Tokyo-WG.conf..conf, or select several (or the folder you saved them in) at once. Pick the exit from the menu at the bottom.Leave the file as it is. Windscribe's configs carry a PresharedKey, which the import handles, and their own guide warns against removing it or changing AllowedIPs. If a handshake never completes, check your Mac's clock; Windscribe notes a wrong system time breaks it.
Documented from Windscribe's config generator and knowledge base (September 2026). Standard WireGuard configs; not separately tested on our hardware.
The app’s exact privileged engine source is public and MIT licensed.
NordVPN · Mullvad · Proton VPN · Surfshark · IVPN · AirVPN · TorGuard · AzireVPN · OVPN · ExpressVPN · your own server. Or see which Mac VPNs have split tunneling, provider by provider.