Why banks, Gosuslugi and marketplaces break under a VPN

What happens

A regular VPN sends all traffic through its server. A Russian site sees a login from a foreign address and turns on protection: it asks for confirmation and sometimes refuses.

To a bank, a login from another country looks like someone else in your account, and the bank has to react.

How Shtil handles it

The route is split right on the device: Russian sites go directly, as without a VPN, everything else through an encrypted connection. Your bank, Gosuslugi, Ozon and Wildberries see your usual address, and their speed does not drop.

This is how the Shtil app and the subscription in other apps work. A single-line key carries no route rules: in that case use the subscription link.

Two details

• The lists of Russian addresses are inside the app. If a client downloads them at startup and the list address does not answer, the connection does not start at all.
• Sites that go directly need an IPv4 address. Otherwise the device reaches the site over IPv6 past the rule, and the site sees a foreign address again.

How to check

1. Turn the connection on.
2. Open a site that shows your internet address: it should show a foreign one.
3. Open a Russian site that detects your city: it should place you in Russia.
4. Both show a foreign address: the route is not split; check that the app has the subscription link, not a single-line key.