TravelHubChina logo TravelHubChina
VPN app interface on a smartphone with China map and connection status

Best VPN for China 2026: 5 That Still Work (Tested Monthly)

Best VPN for China 2026: ExpressVPN, Astrill, NordVPN, Mullvad and Surfshark tested monthly against the Great Firewall — which ones still connect.

By Wei Chen, Senior Editor 4 min read
Fact-checked Tomás Reyes · August 17, 2026

The Great Firewall blocks 90% of commercial VPN providers. The 5 listed here are the working 10% as of August 2026 — tested monthly by r/ChinaVPN.

The 5 working VPNs (2026 ranking)

RankVPNPricing2026 China statusBest for
1ExpressVPNCheck official pricingMost consistent, all servers workFirst-timers, business travelers
2AstrillCheck official pricing — premium tier, not a budget pickBest for sensitive periods (political events)Journalists, researchers, sensitive work
3NordVPNCheck official pricingWorks on obfuscated servers only (NOT standard)Budget travelers, tech-comfortable users
4MullvadFlat monthly price, no promosMost private, requires configTech users, privacy maximalists
5SurfsharkCheck official pricing — promo prices are introductoryMixed reviews, but works on NoBorders serversBudget users, multi-device households

On pricing: this table deliberately carries no price figures. VPN pricing is tier × term × introductory-vs-renewal — the same provider can be $2.69 on a 2-year intro and $11.59 after renewal, and Surfshark’s own terms state that renewal is charged at the standard non-promo rate. A single “per month” number is therefore not a real price. Check each provider’s official pricing page, and check the renewal price, not just the headline. (Every figure that used to appear here was wrong: NordVPN’s did not match any current tier, Astrill’s was roughly a third of the real minimum, and ExpressVPN’s was half the actual monthly rate.)

The rank column is China reliability, not price — it comes from monthly testing against the Great Firewall, not from cost.

All five are tested monthly against the Great Firewall by r/ChinaVPN’s lead tester (verified by Tomás Reyes, expat in Shanghai 2018-2026). Performance changes constantly — verify current status on r/ChinaVPN before your trip.

What does NOT work in 2026

  • All free VPNs — they sell your data, throttle severely, and are usually blocked within hours. Examples: Hola, Betternet, TurboVPN, SuperVPN.
  • All Chinese-based VPNs — legal issues for both you and the provider. Examples: TurboVPN (now Chinese-owned), VPN Master.
  • NordVPN’s standard servers — only the obfuscated servers work in China. If you connect to a US/New York standard server, you’ll get 100% packet loss. Enable Obfuscated Servers in settings, then connect to the listed servers.
  • Most “popular” VPNs that don’t have obfuscation — CyberGhost, IPVanish, Private Internet Access, TunnelBear, ProtonVPN, Windscribe. All are blocked.
  • Free browser extensions — Chrome/Firefox VPN extensions are 100% blocked in China.

The 3 setup mistakes that will get your VPN blocked at customs

  1. Downloading and testing at home but using a non-Chinese-tested server — your VPN “works” but only on servers that won’t actually connect from China. Test on a server that r/ChinaVPN confirms works, not just any US/Europe server.
  2. Connecting to hotel WiFi without VPN first — hotel WiFi in China blocks Google, Facebook, Instagram at the DNS level. If you connect to hotel WiFi before turning on your VPN, the DNS cache will block those sites for the rest of your session. Always connect to VPN BEFORE connecting to hotel WiFi.
  3. Discussing VPN on Chinese social media — WeChat, Weibo, Xiaohongshu all monitor for VPN keywords. Don’t post about VPN in any Chinese social app, and don’t ask Chinese friends “do you have a VPN?” via WeChat. The Great Firewall’s monitoring is automated; flagging can happen instantly.

Critical: download and test BEFORE flying

You cannot access ExpressVPN, NordVPN, Astrill, Mullvad, or Surfshark websites from inside China. All VPN provider sites are blocked. You must:

  1. Subscribe and download the app BEFORE flying
  2. Install on every device you’ll bring (phone, tablet, laptop)
  3. Test by connecting from your home network — load Google.com, YouTube.com, Instagram.com with VPN on
  4. Save offline .ovpn or WireGuard config files to a cloud service you CAN access in China without VPN (iCloud or OneDrive work, Google Drive does not)
  5. Have 2 different VPN providers installed as backup — if ExpressVPN fails during a sensitive political period, Astrill usually still works

What Works Without a VPN (80% of your trip)

This is the part most guides bury. Before paying for anything, know what already works inside China:

Maps

  • Amap (高德地图): English mode, walking / driving / transit / taxi in one app. The best default for visitors.
  • Baidu Maps (百度地图): deeper local data, less English.
  • Apple Maps: works, limited detail.
  • ❌ Google Maps: no transit, no reviews, sometimes wrong roads.

Messaging

  • ✅ WeChat (微信): text, voice, video, payments, Moments. Add people by QR code or phone number.
  • ❌ WhatsApp, Telegram, Signal, Messenger: blocked.

Payments

Travel

  • ✅ Trip.com (English) and Ctrip / 携程 (Chinese) for flights, hotels, HSR and attraction tickets.
  • ✅ 12306 for rail, with an English UI.
  • ✅ Amap for taxi hailing.

Translation

  • ✅ Pleco: the offline Chinese-English dictionary to download before you fly.
  • ✅ Google Translate camera mode: works in China; download the offline Chinese pack beforehand.
  • ✅ Baidu Translate: better than Google for Chinese → English.

Email

  • ✅ Outlook, Yahoo, iCloud, QQ Mail, 163 Mail.
  • ❌ Gmail: blocked.

What genuinely needs a VPN Google Search, Gmail, Drive, Photos, WhatsApp, Telegram, Instagram, X, Facebook, YouTube, Netflix, Wikipedia, NYT, ChatGPT, Claude, and most Western news sites — plus every VPN provider’s own website.

The 80/20 rule: 80% of a normal trip works with WeChat + Alipay + Amap + Pleco. The 20% that needs a VPN is mostly Western social media and Google services. Know both halves before you pay.

The official position (since 2023): China’s regulations require VPN providers to hold a government licence. Operating or using an unlicensed VPN is technically illegal inside China.

The practical position: no foreign tourist has a documented case of being fined or jailed for VPN use. Business travellers, expats and academics use them daily. Enforcement is aimed at providers, not at individual visitors.

Risk profile, roughly in order:

  • Low: a VPN for Google, Gmail, WhatsApp, YouTube.
  • Medium: reaching politically sensitive material (Tibet, Xinjiang, Taiwan, Tiananmen).
  • Higher: selling or distributing VPNs inside China.
  • Highest: using one for criminal activity.

Practical advice: use it normally, don’t discuss it openly, don’t access politically sensitive content, and don’t post about VPNs on Chinese social media. If a Chinese friend asks, “it’s for work” is the safe answer.

Hotel WiFi vs mobile data

Hotel WiFi is the most common failure point. Most 4-star+ hotels run firewall rules that block common VPN ports — OpenVPN 1194, IPSec 500/4500 — and some block VPN outright.

Workarounds, in the order worth trying:

  1. StealthVPN or WireGuard — obfuscated protocols slip past hotel firewalls better than plain OpenVPN.
  2. Mobile data — tether from your phone instead of using hotel WiFi. This is the single most effective fix.
  3. Switch server — Hong Kong, Japan and Singapore ranges are often treated differently from US ranges.
  4. Switch protocol — OpenVPN → WireGuard → IKEv2.
  5. Your backup VPN app — the second provider you installed before flying.

Mobile data works better with a VPN than hotel WiFi does, because eSIM traffic routes through foreign carriers, and Chinese mobile networks are generally less aggressive toward VPN traffic than hotel and campus WiFi.

Rule of thumb: keep mobile data active as your primary connection once you land, and treat hotel WiFi as the fallback.

eSIM vs VPN: do not confuse

eSIM (Airalo, Holafly, Nomad) provides China data — does NOT bypass the Great Firewall. An eSIM gives you a Chinese IP address, which means Google is still blocked.

VPN provides a foreign IP address — bypasses the Great Firewall. Get a US/Europe IP from your VPN, then Google works.

You need BOTH: eSIM for data, VPN for uncensored internet.

If your VPN stops working mid-trip

  • Switch servers: try Hong Kong → Japan → Singapore → US West
  • Switch protocol: WireGuard → OpenVPN (TCP) → IKEv2
  • Try your backup VPN
  • Wait 1-2 days — Great Firewall tightening is temporary and usually lifts

AI tools in China

Blocked without a VPN: ChatGPT, Claude, Google Gemini, Microsoft Copilot, Notion AI, Grammarly, Jasper, and most Western AI services. GitHub Copilot and Hugging Face are hit-or-miss.

Work without a VPN: Baidu Ernie Bot (文心一言), DeepSeek (深度求索), Alibaba Qwen (通义千问), Tencent Hunyuan (混元), Moonshot Kimi (月之暗面), Zhipu ChatGLM (智谱清言), Baichuan (百川), iFlytek Spark (讯飞星火).

Quality in 2026: DeepSeek and Qwen are competitive with GPT-4 on Chinese-language tasks. For English writing and code, ChatGPT or Claude through a VPN remain the better choice. For Chinese-to-English translation, Baidu Translate beats Google Translate; for lookups, Pleco is still the best offline dictionary.

How long you will actually need it

Rough daily demand for a typical trip:

UseTime
Email (Outlook, Yahoo)10 min/day
WhatsApp / Telegram20 min/day
Instagram and other social15 min/day
Google Maps (occasional backup)5 min/day
YouTube30 min/day
ChatGPT or Claude (work)20 min/day

That is roughly 50–60 hours of VPN use for a 7-day trip, or about 300 hours a month. Buy the annual plan if you are here longer than two weeks — monthly pricing is roughly triple.

Will these keep working?

Yes, and the reason matters: every provider on this list survives because of obfuscation, not because of a special relationship with China.

The Great Firewall adds detection methods; providers add obfuscation in response; the loop repeats. What this means practically:

  • ExpressVPN and Astrill hide VPN traffic inside ordinary HTTPS. Unobfuscated traffic is detected and dropped within minutes, so keep obfuscation on.
  • NordVPN, Mullvad and Surfshark only connect on their obfuscated servers. Standard servers give you a connection that looks fine at home and 100% packet loss from China.
  • If a provider ever changes or removes its obfuscation, it stops working the same week — not gradually.

Two practical consequences. Keep two providers installed so a single breakage is not a lost trip. And re-test one week before you fly, not the night before: if a provider has broken, you still have time to pick another.

Step by step

  1. Pick ONE VPN from the working list (do not use a free or untested VPN)

    Choose ExpressVPN (most reliable), Astrill (best for sensitive periods), NordVPN with obfuscated servers (works but inconsistent), Mullvad (most private), or Surfshark (mixed reviews). Do NOT use free VPNs — they sell your data, throttle severely, and are usually blocked within hours. Do NOT use a Chinese-based VPN (legal issues for both you and the provider). Pay for 1 year upfront — a 1-year term is always cheaper per month than monthly billing. Compare prices on the providers' own pricing pages, and check renewal rates as well as the introductory offer.

  2. Download and install BEFORE you fly (China blocks VPN provider websites)

    Once you're in China, you cannot access expressvpn.com, nordvpn.com, astrill.com, mullvad.net, or surfshark.com. All VPN provider sites are blocked. You cannot install a new VPN after you land. Install on ALL devices you'll bring: phone, tablet, laptop. Set up the app, log in, and connect once to confirm it works at home. If your home country blocks VPN too (China, Russia, Iran), use a hotel WiFi network in a third country (Japan, Singapore, Thailand) to download and test.

  3. Configure the kill switch and obfuscation

    Kill switch: blocks all internet traffic if VPN drops (prevents accidental exposure to blocked sites). Obfuscation: disguises VPN traffic as regular HTTPS (essential in China — non-obfuscated VPN traffic is detected and blocked). For ExpressVPN: enabled by default. For NordVPN: enable Obfuscated Servers in settings, then connect to specific obfuscated servers (the standard servers do NOT work). For Astrill: enable StealthVPN in settings. For Mullvad: enable WireGuard + obfuscation. For Surfshark: enable NoBorders mode.

  4. Save offline config files as backup

    If the app gets blocked or fails to connect, you can manually configure VPN on your device using .ovpn or WireGuard config files. ExpressVPN: download .ovpn files from the website before flying. NordVPN: download .conf files. Mullvad: download WireGuard config. Save these to a cloud service you can access in China WITHOUT VPN (Google Drive will not work, but iCloud or OneDrive will). When the app fails, you can import the config directly.

  5. Test by connecting to blocked services from your home network

    Open the VPN, connect to a US/Europe server, then try to load Google.com, YouTube.com, Instagram.com. If all three work, the VPN is properly configured. If any fail, switch servers or contact support BEFORE flying. This step is the #1 thing first-timers skip, and they arrive in China to discover their VPN doesn't work.

  6. If your VPN stops working mid-trip, use these workarounds

    (1) Switch servers — try Hong Kong, Japan, Singapore, US West before giving up. (2) Switch protocol — WireGuard → OpenVPN → IKEv2. (3) Try the alternate VPN you installed as backup. (4) Use a hotel WiFi network that has its own VPN (rare but some international hotels do). (5) Use the Great Firewall Report's mirror site to access Google through their servers (last resort, slow). The Great Firewall gets tightened 2-3 times per year (usually around major political events); if your VPN suddenly stops working during your trip, wait 1-2 days and try again.

FAQ

  • Of 50+ commercial VPN providers, only 5 are reliably working as of August 2026: ExpressVPN (most consistent), Astrill (best for sensitive periods), NordVPN with obfuscated servers (works inconsistently), Mullvad (favored by tech users), and Surfshark (mixed reviews). Tested monthly by r/ChinaVPN. Pricing changes constantly and differs by plan and term — check each provider's official pricing page.
  • No. All VPN provider websites (expressvpn.com, nordvpn.com, astrill.com, mullvad.net, surfshark.com) are blocked by the Great Firewall. You must download and install your VPN BEFORE flying to China, and verify it works from a coffee shop or hotel WiFi at home. If your home country also blocks VPN, download from a third country like Japan, Singapore, or Thailand.
  • No. Free VPNs are usually blocked within hours of arrival, throttle severely, and sell your data to third parties. They also lack the obfuscation technology needed to evade the Great Firewall. Always use a paid, established provider. Do NOT use Chinese-based VPNs (legal risk for both you and the provider).
  • Obfuscation disguises VPN traffic as regular HTTPS, making it undetectable to China's Deep Packet Inspection (DPI) systems. Non-obfuscated VPN traffic is automatically detected and blocked within minutes. Each provider implements it differently: ExpressVPN has it on by default, NordVPN requires manually selecting 'Obfuscated Servers' in settings, Astrill calls it 'StealthVPN', Mullvad uses WireGuard + obfuscation, and Surfshark has 'NoBorders' mode.
  • Five workarounds in order: (1) Switch servers — try Hong Kong, Japan, Singapore, or US West before giving up. (2) Switch protocol — WireGuard to OpenVPN to IKEv2. (3) Try the alternate VPN you installed as backup. (4) Use a hotel WiFi with its own VPN (rare, but some international hotels do). (5) Use the Great Firewall Report's mirror site to access Google through their servers (slow, last resort). The Great Firewall gets tightened 2-3 times per year; if your VPN suddenly stops during your trip, wait 1-2 days and try again.
  • Three critical mistakes: (1) Trying to use a non-working or free VPN that the Great Firewall has already blocked — this flags your device. (2) Connecting to blocked services (Google, Instagram, YouTube) from hotel WiFi without VPN first — your traffic is immediately visible. (3) Discussing VPN usage on Chinese social media (WeChat, Weibo) — this can trigger secondary scrutiny. Always connect VPN first before opening any browser, and never discuss VPN tools with strangers.
  • For about 80% of a normal trip, yes. Maps (Amap, Baidu Maps), messaging (WeChat), payments (Alipay, WeChat Pay), travel booking (Trip.com, Ctrip, 12306), food (Dianping, Meituan) and translation (Pleco, Google Translate camera) all work without one. What genuinely needs a VPN is the other 20%: Google Search, Gmail, Drive, WhatsApp, Telegram, Instagram, X, YouTube, Netflix, Wikipedia, ChatGPT and Claude — plus every VPN provider's own website, which is why you must install before you fly.
  • Since 2023 China's regulations require VPN providers to hold a government licence, which makes operating or using an unlicensed VPN technically illegal inside China. In practice there is no documented case of a foreign tourist being fined or jailed for VPN use; enforcement targets providers. Risk rises if you sell or distribute VPNs, use one for criminal activity, or reach politically sensitive material. Use it normally, don't discuss it openly, and don't post about VPNs on Chinese social media.
  • Almost always obfuscation. Unobfuscated VPN traffic is detected by China's Deep Packet Inspection and dropped within minutes, so a connection that looks perfect in your home country gives you 100% packet loss from China. Fixes, in order: switch protocol (WireGuard, then IKEv2), connect to an obfuscated server rather than a standard one, switch to Hong Kong / Japan / Singapore, and finally try the second VPN app you installed as backup. Hotel WiFi is the most common culprit — switch to mobile data, which routes through foreign carriers and is far less aggressively filtered.
  • No. Chinese app stores (Huawei, Xiaomi, OPPO) have removed most Western VPNs, and the remaining 'free VPNs' are typically data-harvesting, advertising-heavy, or outright scams. They also lack the obfuscation needed to get past the Great Firewall, so they fail within hours. Use a paid, established provider from the list above.
  • Do not rely on it. Tor's default relays are blocked, and even bridges — the obfuscation layer built for exactly this problem — are mostly blocked too. If you have nothing else, a VPN is the more reliable route.
  • Chinese banking apps (ICBC, ABC and the rest) work fine without one. Foreign banking apps (Chase, Bank of America, HSBC) generally work unblocked but can be slow, and some banks run geolocation checks that flag a login from China. If your account does get locked, connect to a server in your home country and try again.
  • Usually yes. Beijing Capital, Shanghai Pudong, Chengdu Shuangliu and other major airports run free WiFi that does not aggressively block VPN. Smaller airports are less reliable. Keep mobile data as a backup rather than relying on airport WiFi to get through the first hours.
  • You cannot install one from scratch — every VPN provider website is blocked in China. Your options, roughly in order: ask your hotel business centre, where the connection is often unrestricted; have someone at home send you the install file over WeChat; get a friend to sign up a free trial for you; or simply travel without it, since 80% of a normal trip works unblocked. Do not expect to fix it on day one.
  • It varies by provider, tier and term — and VPN pricing moves constantly. Two rules cover almost everyone: a long subscription (1 year or more) is always cheaper per month than paying monthly, and always check the renewal price, because introductory promos expire. Every one of the five listed here sells 1-year plans at a discount versus monthly billing. Pay for the year BEFORE flying — you cannot subscribe from inside China. Use a payment method that works internationally (Visa, Mastercard, PayPal work; some Chinese-issued cards do not). For current numbers, use each provider's official pricing page rather than a third-party comparison.

Related guides

View all articles →