A practical guide to whitelisting websites with NordVPN, covering threat protection, allowlisting basics, and step-by-step methods.
Opening If you rely on NordVPN but need certain websites to load without interference, you can use an allowlist (also called split tunneling or allowlisting) to let specific sites bypass VPN protection or threat-blocking rules. This guide explains what allowlisting is, when to use it, and how to set it up on different devices and NordVPN features. It also covers common questions and best practices so you can maintain security while keeping trusted sites accessible.
Feature impact on allowlisting across platforms
| Platform | Allowlisting support | Granularity | On-device vs Cloud processing | Default behavior | Custom rules |
|---|---|---|---|---|---|
| Windows | yes | per-domain | on-device | prompt when blocked | yes |
| macOS | yes | per-domain | on-device | apply silently | yes |
| iOS | yes | per-domain | on-device | limited | yes |
| Android | yes | per-domain | on-device | apply silently | yes |
| Linux | yes | per-domain | on-device | prompt when blocked | yes |
Compiled November 2026; check the provider's site for current details.
What is allowlisting and when to use it
Understanding allowlisting
- Allowlisting, or allowlisting, is the practice of permitting certain websites or services to bypass some or all VPN protections.
- It helps when a site is blocked by security features, or when you want faster access to a trusted site without leaving the VPN on.
When to consider allowlisting
- A site or app loads slowly or shows blocking messages under VPN.
- You use web-based tools or internal resources that must reach a known domain.
- You want to reduce overhead for specific traffic while still benefiting from the VPN.
NordVPN features related to allowlisting
- Threat Protection Pro: Adds enhanced security and content filtering, which can block some resources on certain sites. Allowlisting can help those sites load properly.
- Split tunneling / Allowlist: Lets you designate which apps or sites travel outside the VPN tunnel.
- Real-time protection and ad blocking: These can interfere with some sites. An allowlist can mitigate unintended blocking.
How to enable allowlisting on NordVPN: platform-by-platform
Note: The exact terms may vary slightly by app version, but the general steps are similar across platforms.
On Windows and Mac (NordVPN desktop app)
- Open the NordVPN app.
- Go to Settings or Security and Privacy.
- Look for an option named Allowlist, Split Tunneling, or Websites/Apps that bypass VPN.
- Enable Allowlist or the equivalent feature.
- Add the websites you want to bypass the VPN:
- Enter domain names (for example, example.com) or specific URLs as supported.
- You may also be able to specify applications that should bypass the tunnel.
- Save changes and test by visiting the whitelisted site.
On iOS and Android (Mobile apps)
- Open the NordVPN app.
- Tap Settings (gear icon) or Security and Privacy.
- Find Allowlist or Split Tunneling.
- Enable the feature, then add the sites you want to exclude from the VPN tunnel.
- Some mobile versions require you to toggle allowlisting per site via a browser or app integration.
- Test the whitelisted site in a browser or the target app.
On Linux (NordVPN Linux app)
- Open the NordVPN Linux app or use the terminal commands.
- Look for Split Tunneling or Allowlist in the settings.
- Enable the feature and specify domains or apps to bypass the VPN.
- If using the terminal, you might configure allowlist rules via commands or configuration files. Refer to the official Linux help docs for exact syntax.
On routers or advanced setups
- For router-level VPN, some devices offer per-domain bypass rules through the router’s firewall or VPN client profile.
- Check your router compatibility and NordVPN’s router guidance.
Steps to enable allowlisting by platform
| Platform | Step 1 | Step 2 | Step 3 | Step 4 | Tips |
|---|---|---|---|---|---|
| Windows | Open NordVPN app | Settings > Allowlisting | Add domain | Save | Restart app if needed |
| macOS | Open NordVPN | Preferences | Enable allowlisting | Add domain | Check firewall if issues |
| iOS | Open NordVPN | Settings | Enable allowlisting | Add domain | Use per-app VPN if available |
| Android | Open NordVPN | Settings | Enable allowlisting | Add domain | Sync across devices |
| Linux | Open NordVPN | Config / UI | Enable allowlisting | Add domain | Use CLI for bulk |
Compiled November 2026; check the provider's site for current details.
How to add and manage allowlisted sites
Choosing domains to whitelist
- Whitelist top-level domains (example.com) or complete URLs if supported.
- Consider whitelisting domains rather than individual subpages unless necessary.
- Avoid whitelisting sensitive sites unless you trust them fully.
Managing conflicts and troubleshooting
- If a site stops loading after enabling allowlist, verify you added the correct domain.
- Some sites rely on multiple domains or trackers. You may need a broader allowlist (e.g., all content delivery networks used by that site) if you rely on the site heavily.
- If you still have problems, temporarily disable Real-time protection to determine if that feature is causing interference.
Security considerations
- Allowlisting reduces VPN protection for the whitelisted traffic. Ensure you only whitelist sites you trust.
- Regularly audit your allowlist to remove domains that no longer need bypass.
- Combine allowlisting with other NordVPN protections to maintain a balanced security posture.
Comparison: features that impact allowlisting
| Feature | What it does | How it affects allowlisting | When to use |
|---|---|---|---|
| Threat Protection Pro | Adds content filtering, malware protection, and blocking of trackers | Some sites may be blocked by protection rules; allowlisting can bypass specific sites | When you need stronger security but have trusted sites that get blocked |
| Split tunneling / Allowlist | Allows certain apps or domains to bypass the VPN tunnel | Directly controls which traffic goes outside the VPN | Use when you want selective VPN bypass for specific services |
| Real-time protection | Scans and blocks suspicious activity in real time | Can interfere with site loading or media on some domains | Disable temporarily to test if protection blocks resources |
| Ad blocking | Blocks ads and trackers | May cause issues with site resources; allowlisting can bypass ad-heavy pages | Use on untrusted sites while still allowing whitelisted pages to load fully |
Comparison of allowlisting settings vs general VPN features
| Feature | Allowlisting support | Kill switch | Split tunneling | Auto-connect | DNS leak protection | Logs visibility |
|---|---|---|---|---|---|---|
| Block lists | yes | yes | limited | yes | yes | limited |
| Per-domain control | yes | no | yes | yes | yes | no |
| Cloud-based policy | sometimes | no | no | optional | no | no |
| User prompts on block | yes | depends | no | yes | yes | no |
Compiled November 2026; check the provider's site for current details. Entry level pay scale philippines
Common scenarios and step-by-step walkthroughs
Scenario A: Accessing an internal company resource
- Determine the resource’s domain (for example internal.company.local or a specific external domain).
- Add the domain to the allowlist in your NordVPN app.
- If the site requires subdomains, include the relevant subdomains or use a wildcard if supported (e.g., *.company.local), noting that wildcard support varies by platform.
- Test access from the same device after applying the change.
Scenario B: Using a streaming site that NordVPN blocks due to threat filtering
- First, try adjusting the allowlist to include the streaming site’s main domain.
- If the site uses multiple domains (CDNs, trackers), consider adding those domains as well.
- If playback fails, temporarily disable threat protection for that session or at least for that site, then re-enable after testing.
Scenario C: Working with a web app that breaks when VPN is on
- Identify the essential domains used by the app.
- Add those domains to the allowlist to ensure they bypass the VPN tunnel.
- Check any related services or APIs the app calls and whitelist those domains if needed.
Quick tips and best practices
- Keep the allowlist lean: start with the essential domains and expand only as needed.
- Test after changes: make one change at a time and verify that the site loads correctly.
- Document your allowlisted sites: keep a small record of why each domain was whitelisted and when it should be reviewed.
- Use per-app allowlisting when possible: it’s safer to bypass VPN for a specific app rather than broad domain blocks.
- Periodically audit: review the allowlist every few months to remove anything no longer needed.
Final thoughts and recommendation
Whitelisting websites on NordVPN is a practical way to balance security with usability. By enabling allowlisting and carefully adding trusted domains, you can prevent legitimate sites from being blocked by threat protection or VPN routing rules. The key is to apply the feature thoughtfully across the platform you use, test changes, and maintain a lean, well-documented allowlist. If you encounter persistent issues, consult NordVPN support and verify you’re using the latest app version, as interface names and exact steps can shift with updates. For most users, starting with the built-in allowlist feature on desktop and mobile apps provides a straightforward path to reliable access without compromising overall VPN protection.