[VPNs]
How to whitelist websites on NordVPN
Camille Moreau // November 9, 2026 // 8 min // [en]
A practical guide to whitelist or allow specific sites while using NordVPN, including settings paths and tips.
How to whitelist websites on nordvpn
If you want certain websites to bypass or be exempt from NordVPN’s protection, you’re likely looking to use an allowlist (also called split tunneling or a site allowlist). NordVPN supports methods to let specific sites or apps connect directly to the internet while the rest of your traffic rides through the VPN. The exact steps depend on your device and the NordVPN app version you’re using. Below is a practical, platform-by-platform guide to help you implement a website allowlist effectively.
Quick compare – site allowlist vs. app-based split tunneling
| Feature | Site allowlist (URL-based) | App-based split tunneling | Both offer | When to use | Pros | Cons |
|---|---|---|---|---|---|---|
| Control granularity | Medium | High | Yes | Specific sites vs. apps | Flexible | Management overhead |
| Platform support | Major platforms | Major platforms | Yes | If platform supports both | Broad coverage | Some platforms limited |
| Traffic scope | Selective sites | Entire apps | Yes | Targeted traffic control | Precise routing | May miss hidden services |
| Ease of setup | Moderate | Moderate to high | Yes | Simple lists | Clear rules | Updating lists needed |
| Rule size limit | Small to medium | High | Yes | Large app lists | Handles many entries | Cumbersome with many sites |
| Conflict handling | Sites override apps | Apps override sites | Yes | Resolve routing conflicts | Predictable | Rare edge cases |
| Verification needed | Yes | Yes | Yes | Confirm routing | Reduces leaks | Requires testing |
| Best use case | Web access control | App-level isolation | Yes | Mixed environments | Flexible | Complexity rises |
Compiled November 2026; check the provider's site for current details.
What is an allowlist and when to use it
Understanding the concept
- An allowlist lets you specify trusted websites or apps that should bypass certain VPN protections or routing rules.
- Use cases include: accessing a banking site that blocks VPN IPs, ensuring a streaming site loads without tokenized blocks, or keeping security software updates reachable without VPN interference.
Types you might encounter
- Split tunneling by app: route only selected apps through the VPN. The rest use your normal connection.
- Split tunneling by site: route traffic to specified domains directly, bypassing the VPN for those sites.
- Threat protection exceptions: temporarily whitelisting sites if real-time protection blocks legitimate pages (use cautiously).
How to enable allowlist / split tunneling on major platforms
Windows
- Open the NordVPN app and sign in.
- Go to Settings or Preferences.
- Look for Split Tunneling or Allowlist.
- Choose the option to enable Split Tunneling by site or by app, depending on your goal.
- If site-based, add the domain(s) you want to bypass VPN protection (for example, banking.example.com).
- Apply changes and restart the browser or app to ensure the new rule takes effect.
MacOS
- Launch NordVPN and access Settings.
- Find Split Tunneling or Allowlist section.
- Turn on the feature and select Site allowlist or App allowlist as appropriate.
- Add the domain(s) or app paths you want to exclude from the VPN tunnel.
- Save changes and test by visiting the whitelisted site.
Android
- Open the NordVPN app.
- Tap the gear icon to open Settings.
- Navigate to Split Tunneling or Allowlist.
- Enable the feature and choose Site allowlist.
- Enter the website domain(s) you want to bypass the VPN for.
- Confirm and re-open the browser to test access.
IOS
- NordVPN on iOS supports similar split tunneling controls but may have limited options compared to desktop.
- Open the app, go to Settings, and locate Split Tunneling or Allowlist.
- Enable and add the site(s) you want to bypass the VPN as allowed domains.
- Test in Safari or your preferred browser.
Linux
- Linux users often use the NordVPN Linux client or NetworkManager integration.
- Use commands or the GUI to enable split tunneling.
- Add the site allowlist in the appropriate configuration file or via the app’s UI, if available.
- Restart services to apply changes.
Practical steps for adding websites to an allowlist
Steps that work across platforms
- Decide the scope: by site (domain) or by application that requires direct internet access.
- Gather exact domains: for sites you trust, use the base domain (example.com) and consider subdomains if needed (login.example.com).
- Test in increments: add one site at a time to reduce troubleshooting effort.
- Verify behavior: after configuration, visit the site with the VPN on and off to confirm it’s bypassing correctly.
Common pitfalls and fixes
- Problem: A site loads slowly or is blocked even after adding.
- Fix: Double-check the exact domain. Some sites rely on multiple domains or CDNs.
- Problem: VPN kill-switch or real-time protection blocks the site unintentionally.
- Fix: Adjust allowlist while preserving security features for other sites. Consider temporarily turning off protection for testing (if safe).
- Problem: Changes don’t apply after updating the NordVPN app.
- Fix: Reopen the app, re-enter the allowlist, and restart the browser or device.
A quick compare: site allowlist vs. app-based split tunneling
Below is a quick reference to help choose the right method for whitelisting.
| Method | What it does | When to use | Pros | Cons |
|---|---|---|---|---|
| Site allowlist (split tunneling by site) | Routes specified domains outside the VPN; other traffic uses VPN | You need specific websites to bypass VPN, not whole apps | Fine-grained control; preserves VPN for most sites | Some sites use multiple domains; can be tricky to cover all assets |
| App-based split tunneling | Routes entire apps outside the VPN; others remain on VPN | You want certain apps to access the internet directly | Simple to implement for apps that don’t require VPN | Less granular; may expose more traffic |
How to enable allowlist / split tunneling by platform
| Platform | Enable method | UI path (approx) | Key toggle/setting | Supported types | Notes |
|---|---|---|---|---|---|
| Windows | Settings > VPN | Settings > Privacy/VPN | Split tunneling toggle | Site and app | System-wide toggle affects all apps |
| macOS | Preferences > VPN | Preferences > Privacy | Split tunneling / Enable | Site and app | Some builds differ by version |
| Android | NordVPN app > Settings | App > Settings > Split tunneling | Add apps or sites | App-based | Site-based often limited on mobile |
| iOS | NordVPN app > Settings | App > Split tunneling | Add apps only (sites limited) | App-based | iOS sandboxing limits sites |
| Linux | Desktop app / CLI | Preferences or config file | Include/exclude lists | Site-based | Manual editing possible |
| Web VPN portal | Web-based control | Account dashboard | Manage lists | Site-based | No app needed |
Compiled November 2026; check the provider's site for current details.
Testing and verification
- Test after configuration: clear browser cache, then open an incognito window and visit the whitelisted site to confirm bypass.
- Compare the IP: visit a site like whatismyip.com with VPN on and off to ensure the site isn’t using a VPN-origin IP.
- Check for protections: ensure that Real-time protection or Threat Protection does not block legitimate content you’ve whitelisted. Adjust if necessary.
Security considerations when whitelisting
- Whitelisting a site means it may bypass certain VPN protections or traffic scrutiny. This can expose you to risks if the site is compromised or a malicious site imitates a trusted one.
- Only whitelist domains you control or fully trust.
- Avoid broad domain patterns (like *.example.com) unless you’re sure all subdomains are safe in your context.
- Keep your NordVPN app updated. Some protections and allowlist features improve over time.
Troubleshooting quick-start checklist
- Confirm the correct feature is enabled: site allowlist or split tunneling by site.
- Ensure the exact domain is added without typos.
- Reopen the app and restart the browser after changes.
- Test with both VPN on and off to compare results.
- If issues persist, disable conflicting protections temporarily to isolate the problem.
Practical steps for adding websites to an allowlist
| Step | Action | Result | Example | Notes | Quick tip |
|---|---|---|---|---|---|
| 1 | Open allowlist panel | Ready to edit | "example.com" added | In VPN settings | Use full domain or wildcard |
| 2 | Enter domain | Domain stored | sub.example.org | Use with or without www | Be precise with TLD |
| 3 | Save changes | Rules apply | Changes take effect | May require reconnect | Some changes need reconnect |
| 4 | Test site | Page loads | Site loads via VPN | Check leak test | Clear browser cache |
| 5 | Add multiple | List grows | add.one, two.example | Use batches | Import where available |
| 6 | Verify routing | Confirm via tool | Traceroute shows VPN exit | Confirm no leak | Do DNS check too |
Compiled November 2026; check the provider's site for current details. How to easily disable VPN or proxy on your TV
When to use NordVPN’s support and additional resources
- If you’re unsure whether a site should be whitelisted or if a site employs multiple domains, consult NordVPN support or the official knowledge base.
- Look for guidance on how to handle sites using CDNs or dynamic domains, which may require adding several domain variants.
- For advanced setups, NordVPN’s documentation on split tunneling and allowlists provides platform-specific steps and examples.
Final recommendations
- Start with a single, clearly trusted site to learn the workflow, then gradually expand your allowlist as you gain confidence.
- Prefer site-based allowlisting when you only need to bypass VPN for particular domains. Use app-based split tunneling if you want a whole program to bypass VPN consistently.
- Regularly review and prune your allowlist to maintain security posture while preserving access to necessary sites.
- Keep your NordVPN application up to date to benefit from the latest allowlisting improvements and security features.
If you want a tailored walkthrough for your exact device and NordVPN version, tell me your platform (Windows, macOS, Android, iOS, or Linux) and the current app version. I can provide precise step-by-step instructions and example domains to test with.