How I Put Only One App Behind a VPN Without Breaking the Rest of My Phone

The mature-tagged Reddit post finally opened.

Then my banking app locked me out.

I had turned on a VPN because Reddit had started placing an age-verification page in front of certain UK users. The VPN removed that screen, but it also moved my entire phone onto a foreign connection.

My bank showed an unusual-location warning. The railway app switched currencies. A local streaming service stopped working. Even the weather widget moved several hundred miles away.

I disconnected the VPN to approve a payment.

When I returned to Reddit, the age prompt was back.

For the next ten minutes, I repeated the same routine: connect for Reddit, disconnect for banking, reconnect for Reddit, disconnect when another local app complained.

The VPN could change my location. The real problem was that it changed the location for everything.

I needed Reddit inside the VPN and the rest of my phone outside it.

The Whole Phone Did Not Need to Move

This became a more common problem after stronger UK age checks took effect on 25 July 2025. Sites and apps carrying pornography and certain other harmful content had to introduce more effective age assurance. VPN activity rose sharply after the rules arrived. (Ofcom)

Many of those new users did not want every app on their phone to appear foreign. They wanted to open one age-gated page, mature Reddit community or restricted service without submitting a selfie or identity document.

A standard VPN connection often sends the whole device through one tunnel. Reddit sees the new route, but so do the bank, maps, shopping apps and local services.

That explained the side effects on my phone. The bank did not know the VPN was intended only for Reddit. It simply saw a login arriving from an unfamiliar location. The railway app saw the same foreign route and adjusted accordingly.

Other users describe the same frustration: one app needs the VPN, while banking, gaming and local services need the normal connection. (Reddit) The desired result is much simpler than the technical name suggests.

One app takes the VPN route.

Everything else stays local.

My First Split-Tunnelling Setup Worked Backwards

The feature that separates app traffic is usually called split tunnelling or app routing.

On Android, a VPN can send selected apps through the tunnel or exclude selected apps from it. (Google) For someone who wants most of the phone protected, an exclusion list can make sense.

I needed the opposite.

My first provider let me choose which apps should bypass the VPN. I opened its settings and began building the list.

Banking app. Maps. Railway app. Streaming app. Food delivery. Smart-home controls.

After saving the changes, I reconnected. Reddit opened and my bank worked again.

Then I tried to approve a payment through a separate authentication app I had forgotten to exclude. It saw the foreign route and refused to continue.

I added it to the list and reconnected once more.

The feature was working, but I was maintaining the phone backwards. I needed a VPN for one app, yet I was being asked to remember every app that did not need it.

Each newly installed local app would become another possible mistake.

That changed the comparison. The useful setup was not the one with the longest list of exceptions. It was the one that let me name the single app I wanted to protect.

Manual Switching Was Even Worse

I briefly returned to turning the VPN on and off.

That felt easier until I forgot which state the phone was in.

A Reddit notification arrived while the VPN was disconnected. I tapped it and landed directly on the age-verification screen. Later, I reconnected for Reddit and forgot to switch it off before opening the bank.

Neither mistake was serious, but both revealed the same flaw.

The privacy-sensitive app could escape the tunnel during an off moment. An unrelated app could inherit the foreign connection during an on moment. The more often I toggled the VPN, the more likely I was to route the wrong traffic.

I did not need a quicker switch. I needed a rule that remained true when I stopped thinking about it:

Reddit uses the VPN.

The rest of the phone does not.

I Selected the App Instead of Excluding the Phone

I opened OnlydogVPN on the Android phone used for testing.

Basic use did not require a conventional email-and-password account, so I could start without attaching another persistent login to the session.

In the app-routing control, I chose the option that sends only selected apps through the VPN. I selected Reddit and left everything else on the normal connection.

Then I chose the preset for reaching a restricted page and connected.

I opened Reddit.

The mature-tagged discussion loaded.

There was no age-verification handoff, selfie request or document prompt. The comments expanded normally, and I could read the post I had originally opened the app to find.

Then I switched directly to my bank.

It still saw my ordinary UK connection. There was no unusual-location warning and no need to disconnect the VPN. The railway app remained in pounds. Maps kept my real area. Local streaming continued to work.

I returned to Reddit.

Its VPN route was still active.

That was the first setup that solved both sides of the problem at once. The app that needed a different route received one. Everything that had been disrupted by the whole-device VPN stayed local.

The Result Was More Important Than the Networking Lesson

Android’s per-app routing kept Reddit inside the VPN while the other apps used the phone’s ordinary connection. The service’s restricted-page preset then supplied the route Reddit accepted.

Its HTTP/3-based transport and traffic obfuscation also helped avoid the repeated challenges I had met on more familiar shared routes.

I could not observe Reddit’s internal filtering rules, so I could not identify the exact signal behind every earlier failure. The visible result was enough: Reddit opened through the VPN while the rest of the phone behaved as though no VPN had been turned on.

That mattered more than the size of the server map.

I was no longer choosing a foreign location for the device. I was assigning the right route to one task.

External Links Can Leave the Selected App

One small detail became obvious when I tapped a link inside Reddit.

Android offered to open it in my regular browser. Because that browser was not on the VPN list, it used my normal UK connection.

That was not a malfunction. It was exactly the rule I had created.

For that session, I kept the link inside Reddit’s in-app browser. Later, when I wanted a separate browser to use the same route, I added that browser to the selected-app list and reconnected.

The logic remained clear: only the apps named in the list used the VPN.

This was much easier to manage than excluding nearly every other app and wondering which one I had forgotten.

The Next Privacy Benefit Appeared Naturally

While I continued reading, the blocked-request counter began to rise.

The service was filtering advertising and tracking requests inside Reddit’s VPN traffic. That was not what solved the routing problem, but it addressed the next concern naturally.

I had isolated Reddit so the rest of the phone remained local. Within that isolated traffic, fewer unnecessary requests were leaving the app.

The counter made the effect visible without giving me another settings project. Reddit remained usable, and its background traffic became quieter.

The service does have a shorter public history, fewer locations and fewer independent ratings than the established provider I tried first.

For this task, those differences did not determine the result. The larger provider gave me an exclusion list that grew every time another local app needed attention. The smaller one let me select Reddit once and stop managing the connection.

Android Makes This Easier Than iPhone

The setup I used was on Android, where the operating system supports per-app allowed and disallowed VPN lists. (Google)

Apple supports per-app VPN as well, but its official documentation focuses heavily on configurations assigned to managed apps through device-management systems. (Apple) An organisation can use that approach for work devices, but an ordinary iPhone user may not see the same simple consumer-facing app selector.

That platform difference matters. “Use a VPN for one app” is not a universal switch hidden in every phone.

On Android, the setting may be called split tunnelling, app routing, allowed apps or only selected apps. The wording changes between services. The important distinction is whether the VPN lets you include the one app that needs the tunnel rather than excluding everything else.

The Best Rule Was the One I Could Forget About

I began with a VPN that successfully moved my entire phone.

That was more change than I needed.

Reddit required a different route. My bank, maps, railway tickets and local services did not. Sending all of them through the same tunnel created warnings, broken locations and a constant temptation to disconnect at the wrong moment.

The first split-tunnelling attempt improved things, but it still made me maintain a growing list of exceptions.

The smaller app reversed the logic: select Reddit once and leave the rest of the phone alone.

After that, I stopped watching the VPN icon.

Reddit opened through the private route. My bank continued to see me at home. The useful feature was not that the VPN covered more of my phone—it was that OnlydogVPN covered exactly the part I had asked it to.