NymVPN split tunneling is now live across Windows, macOS, and Android, letting users choose which apps route through the VPN and which connect directly to the internet. The feature arrives alongside post-quantum key exchange, a cryptographic upgrade designed to protect against attacks from future quantum computers. Together, these updates signal NymVPN’s shift toward quantum-resistant privacy—a rare move in consumer VPN software.
Key Takeaways
- NymVPN split tunneling allows selective app routing through 2-hop fast or 5-hop anonymous modes.
- Post-quantum key exchange is the first milestone in NymVPN’s quantum security roadmap.
- macOS beta (v2026.6) adds split tunneling with Full Disk Access requirement; Windows and Android already supported.
- Future 2026 enhancement will let users route different apps to different modes or fully bypass the VPN.
- Unlike standard VPN split tunneling, NymVPN protects metadata through mixnet architecture, not just IP addresses.
What NymVPN split tunneling actually does
Split tunneling solves a real friction point in VPN usage: some apps work poorly through a VPN. Gaming servers may reject encrypted traffic. Local services like printers or smart home devices need direct network access. Banking apps sometimes block VPN connections entirely. NymVPN split tunneling lets you bypass these problems without disconnecting from the VPN entirely.
The feature works by letting you select individual apps in the NymVPN settings and toggle them on or off. Apps marked for VPN routing pass through NymVPN’s network; unmarked apps connect directly. On macOS, you need to grant the app Full Disk Access to see and manage your installed applications. This permission requirement exists because the VPN driver needs visibility into what’s running on your system.
What separates NymVPN split tunneling from the split tunneling available in competitors like ExpressVPN or Surfshark is the underlying architecture. Standard VPN split tunneling just separates your traffic into two buckets: encrypted or not. NymVPN offers two encrypted paths—a faster 2-hop route for general browsing and a more anonymous 5-hop mixnet for sensitive traffic. This means even your routed traffic retains metadata protection most VPNs can’t touch.
Post-quantum encryption: why it matters now
Quantum computers don’t exist yet in a form that threatens current encryption. But security researchers take the threat seriously. A sufficiently powerful quantum computer could theoretically crack RSA and elliptic curve cryptography—the math that protects most internet traffic today. Governments and tech companies are already moving toward quantum-resistant algorithms.
NymVPN’s post-quantum key exchange is the first step in a longer quantum security roadmap. The implementation uses cryptographic methods designed to resist quantum attacks, protecting your VPN connection against a hypothetical future where quantum computers become practical. This is not paranoia—it’s defensive preparation. If someone is recording your encrypted traffic today and a quantum computer becomes available in 10 years, post-quantum encryption ensures that old traffic remains unreadable.
Most consumer VPN providers have not yet moved on post-quantum cryptography. NymVPN’s early adoption positions it ahead of the curve, though the practical security benefit remains theoretical for now.
How to enable NymVPN split tunneling on your device
The setup process is straightforward across all platforms. Open the NymVPN app and navigate to Settings. Tap Split tunneling. You’ll see a list of installed applications. Next to each app, you can toggle NymVPN on or off. When NymVPN is toggled on for an app, that app’s traffic routes through the VPN. When toggled off, the app connects directly.
On macOS, the process is identical except you must first grant Full Disk Access to the NymVPN app. This is a one-time permission grant in System Settings under Privacy & Security. Without it, the app cannot enumerate your installed applications to offer split tunneling controls.
Windows, Android, and macOS all support split tunneling now, though macOS users are currently on a beta version (v2026.6). NymVPN plans to expand the feature further in 2026, allowing users to route apps not just on or off, but to different modes—some through fast 2-hop, others through anonymous 5-hop, and others fully offline.
Split tunneling security trade-offs
Split tunneling is powerful but not risk-free. Any app you exclude from the VPN sends unencrypted traffic directly to the internet. If you’re on a public Wi-Fi network, that traffic is visible to anyone monitoring the network. If you’re at home, your ISP sees it. The solution is simple: only exclude apps that actually need to be excluded, and understand what you’re trading away.
NymVPN’s mixnet architecture mitigates some of this. Even apps routed through the VPN get metadata protection—your true IP and traffic patterns are obscured by Nym’s distributed network. This is stronger than traditional VPN encryption alone, which protects content but often leaks metadata through timing and volume analysis.
Frequently asked questions
Can I use split tunneling on all NymVPN platforms?
Split tunneling is available on Windows, macOS (beta in v2026.6), and Android. NymVPN has not announced split tunneling support for iOS yet. The feature rolled out to Android first, then Windows, then macOS in beta.
What’s the difference between NymVPN’s 2-hop and 5-hop modes?
The 2-hop fast mode prioritizes speed and is suitable for general browsing. The 5-hop mixnet mode adds multiple routing layers for superior metadata protection but introduces higher latency. In 2026, split tunneling will let you assign different apps to different modes simultaneously.
Does post-quantum encryption slow down my VPN?
NymVPN has not published performance benchmarks comparing post-quantum and standard key exchange. The cryptographic overhead is typically minimal in modern implementations, but real-world impact depends on your hardware and network conditions.
NymVPN split tunneling represents a practical step forward for VPN flexibility, while post-quantum encryption is a forward-looking security investment. If you’re tired of disconnecting from your VPN to use gaming servers or local services, split tunneling solves that. If you’re concerned about long-term privacy against quantum threats, post-quantum encryption signals that NymVPN takes that risk seriously. Neither feature is essential today, but both are worth understanding if you’re evaluating a privacy tool for the next several years.
Edited by the All Things Geek team.
Source: Tom's Guide
