TravelHubChina

VPN for China 2026: What Still Works (and What's Blocked)

Real-tested China VPN 2026: NordVPN NordWhisper, ExpressVPN, Astrill, and free options. What works behind the Great Firewall, what to install before you fly.

By TravelHubChina Editorial 8 min read

Google, Gmail, WhatsApp, Instagram, YouTube, X, Facebook, Reddit, Telegram, and most Western news sites are blocked in mainland China. To access them, you need a VPN that works behind the Great Firewall (GFW). The GFW actively detects and blocks VPN protocols, so not every VPN works — and the ones that work today may not work tomorrow. As of mid-2026, the most reliable options are NordVPN (with its new NordWhisper protocol), ExpressVPN, Astrill, and a few others that consistently update their obfuscation. Install and test your VPN before you leave home — VPN provider websites are blocked in China, so downloading once you’re there is almost impossible.

This guide covers what works, what’s blocked, and the exact setup that survives a 10-day China trip.

What gets blocked in China (and what doesn’t)

China’s Great Firewall intercepts and blocks specific services. Here’s the 2026 reality:

Blocked without VPN:

  • Google.com, Gmail, Google Drive, Google Maps, Google Photos, Google Play
  • YouTube
  • Facebook, Instagram, WhatsApp, Messenger
  • X (Twitter)
  • Reddit, Discord
  • Telegram
  • Wikipedia (sometimes)
  • Most Western news: NYTimes, BBC, Reuters, Washington Post
  • Most VPN provider websites
  • Pinterest, Tumblr
  • Twitch
  • Slack
  • Notion (limited)

Works fine without VPN in China:

  • Apple iMessage, FaceTime
  • Microsoft services: Bing, Outlook, Hotmail, OneDrive, Teams, LinkedIn
  • Apple Maps (in China, not as good as Baidu/AMap)
  • WeChat, WeChat Pay
  • Alipay
  • Hotel and airline websites (international)
  • Booking.com, Agoda, Trip.com, Klook
  • Wikipedia Chinese version
  • Chinese services: Baidu, Weibo, Bilibili, Douyin (TikTok China), Taobao, JD.com, Meituan, Ele.me, 12306
  • Most news from Chinese state media

Verified: “If you need access to Google, Gmail, Facebook, Instagram, WhatsApp, etc., prepare an international roaming plan, eSIM or other legal connectivity solution before arrival. For daily travel in China, WeChat, Alipay, Amap, translation apps and airline/train apps are more practical.” — China Discovery China Travel FAQ, accessed 2026-07-24

What works: best China VPNs in 2026

The China VPN landscape changes monthly, but as of mid-2026 these are the most consistent performers:

NordVPN — best for newer users (with NordWhisper)

NordVPN updated its obfuscation protocol in July 2026 from OpenVPN to its own NordWhisper protocol. NordWhisper is designed specifically to bypass DPI (Deep Packet Inspection) by disguising VPN traffic as regular HTTPS traffic. As of mid-2026, this is the most modern anti-censorship protocol shipping in a major consumer VPN.

Pricing: $3–$13/month depending on plan length. 2-year plan is cheapest.

Why it works in China:

  • NordWhisper protocol is built to defeat DPI
  • More server locations covered by obfuscation than before
  • The protocol was specifically developed to counter increasingly aggressive filtering

Setup:

  1. Sign up on NordVPN’s website (before you leave home)
  2. Download the app for iOS, Android, Mac, or Windows
  3. Open the app, go to Settings → Connection
  4. Switch protocol to NordWhisper (the latest obfuscation option)
  5. Connect to a recommended server (Singapore, Tokyo, Los Angeles typically work)

Source: New QQ / TechRadar coverage of NordWhisper rollout.

ExpressVPN — most reliable, premium price

ExpressVPN has been the gold standard for China for nearly a decade. Their obfuscation technology is mature, server network is large (94 countries), and they update obfuscation quickly when the GFW cracks down on existing methods.

Pricing: $8–$13/month. More expensive than NordVPN but reliable.

Why it works in China:

  • Auto-connection feature detects when you’re on a restricted network and switches to obfuscated servers
  • Servers in Hong Kong, Singapore, Tokyo, Los Angeles all reliable from China
  • 24/7 live chat support that knows the China-specific settings

Setup:

  1. Subscribe at expressvpn.com
  2. Download the app
  3. Use the “Auto” protocol setting (it switches to obfuscation when needed)
  4. Connect to a recommended server

Astrill VPN — the “China specialist”

Astrill is more expensive but explicitly designed for restrictive networks. It’s the choice of many China-based expats because the company monitors the GFW daily and pushes updates within hours when protocols get blocked.

Pricing: $10–$30/month. The China-focused plan is more expensive.

Why it works:

  • Dedicated China-optimized servers
  • StealthVPN and OpenWeb protocols specifically designed to look like HTTPS
  • Fast customer support with China-specific advice
  • Hong Kong, Japan, US servers optimized for Chinese ISP routing

Setup:

  1. Sign up at astrill.com
  2. Download the app
  3. Choose “StealthVPN” or “OpenWeb” protocol
  4. Connect to recommended server (HK, Tokyo, LA)

Mullvad VPN — privacy-focused alternative

Mullvad is a Sweden-based VPN that has invested in anti-censorship research. Cheaper than Astrill, more private than the major brands, with a flat €5/month pricing.

Works in China: Variable. Test before relying on it.

Other VPNs that have worked in 2025–2026

  • ProtonVPN — has obfuscation but with mixed results in China
  • Surfshark — NoBorders mode helps; cheaper than ExpressVPN
  • Windscribe — has a free tier that’s occasionally useful for short trips
  • VyprVPN — Chameleon protocol is China-specific

Free VPNs: don’t bother for China

Free VPNs almost never work in China. The few that do (like the built-in VPN in some browsers) are slow, capped, and unreliable. The GFW specifically targets free VPN protocols because they’re easy to fingerprint. Spend $5–$10/month on a paid VPN for the trip — it’s worth it.

The setup checklist: do this before you fly

1. Subscribe and install at home (1 week before)

  • Pick a VPN (NordVPN, ExpressVPN, or Astrill recommended)
  • Subscribe on the provider’s website
  • Download the app to every device you’re bringing: phone, tablet, laptop
  • Sign in on each device
  • Test by connecting to a server in a different country
  • Switch to the obfuscation protocol and re-test

2. Test the obfuscation protocol explicitly (3 days before)

Don’t just test “auto” mode. Force the obfuscation protocol:

  • NordVPN: Settings → Protocol → NordWhisper
  • ExpressVPN: Settings → Protocol → Automatic (or Lightway if available)
  • Astrill: Connection → Protocol → StealthVPN or OpenWeb

Connect to a server in Singapore, Tokyo, or Los Angeles. Test that you can load Google.com. If it works, you’re set.

3. Save offline documentation (1 day before)

Take screenshots of:

  • Your VPN subscription email
  • Server recommendations for China (the providers publish these)
  • The protocol settings screen
  • Support contact info

These will be inaccessible once you’re in China. Save them in a photo album, notes app, or printed paper.

4. Configure the apps for China use (the day of travel)

  • iOS: Settings → General → VPN & Device Management → ensure your VPN profile is installed
  • Android: Settings → Network & Internet → VPN → verify your VPN is listed
  • Mac: System Settings → Network → VPN → verify connection

Also:

  • Disable battery optimization for the VPN app
  • Allow location “always” for the VPN app (some protocols use location)
  • Set up “always-on VPN” if your phone supports it

5. Have a backup plan

VPNs can be blocked temporarily. Have:

  • A second VPN installed and tested (e.g., NordVPN primary + Mullvad backup)
  • The provider’s support email address saved (if website is blocked, email may work)
  • Knowledge of which protocols to try if the primary one fails

What to do if your VPN stops working in China

The GFW occasionally upgrades its detection, which can temporarily break even the best VPNs. If your VPN won’t connect:

Step 1: Switch server

Don’t troubleshoot the protocol first — try a different server. Singapore, Tokyo, and Los Angeles are most reliable. If you can, try a server in a less-popular country (Norway, Iceland, Uruguay) — they’re less likely to be flagged.

Step 2: Switch protocol

Try a different obfuscation protocol. If you’re on NordWhisper, try OpenVPN TCP. If you’re on Lightway (ExpressVPN), try Automatic.

Step 3: Restart

  • Force-quit the VPN app
  • Turn airplane mode on for 10 seconds, then off
  • Reopen the app and try again

Step 4: Reinstall or update

If the app has been auto-blocked, you may need to update. The provider’s app update mechanism often works even when the website is blocked (the App Store and Google Play are accessible in China). Open the App Store / Play Store, search for the VPN, and update if needed.

Step 5: Use the support email

ExpressVPN, NordVPN, and Astrill all have support emails that work from China even when their websites are blocked. Email them your client version, error message, and current server — they’ll suggest a specific workaround.

Common VPN mistakes that break China trips

Mistake 1: Installing on the plane

You can’t download VPNs in China, but you can install on the plane’s WiFi (most long-haul flights have it). Do this as a backup, but install at home as primary.

Mistake 2: Not testing the obfuscation protocol

Many people test their VPN at home where it works fine, then discover in China that the default protocol is blocked. Always force the obfuscation protocol before you leave.

Mistake 3: Using a free VPN

Hotspot Shield free, Turbo VPN, SuperVPN, and similar free apps look attractive but are unreliable in China. They’ve been blocked since at least 2017. Use a paid VPN.

Mistake 4: Forgetting to enable on the right device

If you’re using a tablet or laptop in addition to your phone, set up the VPN on all devices. They don’t share accounts automatically.

Mistake 5: Leaving VPN off “to save battery”

Yes, VPN uses battery. But leaving it off means Google Maps won’t work when you need it. Run it on during the day; turn off at night if you want.

What if you need Google Maps specifically?

Google Maps works in mainland China only with a VPN, and even then it’s patchy. For navigation without VPN, use:

  • Apple Maps — works in China, has English interface, decent POI database
  • Amap (高德地图, Gaode Maps) — Chinese app, the most accurate in China, English interface available
  • Baidu Maps — Chinese, English interface

The full map app comparison is at Maps that work in China. For translation, see Translation apps for China.

Using a VPN in China is not illegal for individuals, but it exists in a gray zone. China has cracked down on VPN providers (blocking app downloads, removing them from app stores, fining providers), but the government has generally not prosecuted individual tourists for using a VPN. Travelers from dozens of countries use VPNs daily without incident.

What is illegal: selling VPN services inside China without a license, or using a VPN to commit other crimes. As a tourist using a VPN to read your Gmail, you’re in the clear.

Don’t talk about VPN use in front of Chinese officials (don’t bring it up at immigration, don’t joke about it loudly in public). Just use the VPN quietly and you’ll be fine.

Final recommendations

  • Best overall: NordVPN with NordWhisper protocol — $3–$13/month, modern obfuscation, large server network
  • Most reliable: ExpressVPN — $8–$13/month, mature obfuscation, 24/7 support
  • For China purists: Astrill — $10–$30/month, explicitly designed for China

The most important step is to install, test, and configure your VPN before you leave home. Treat it like a passport — without it, you can’t enter the modern internet in China.

For the full app stack you’ll need, see 15 essential apps for China. For the data connection itself, see Best eSIM for China.

Where to book

With VPN on, you have full access. Use it to plan and book:

Affiliate disclosure: Some links above are affiliate links. We may earn a commission at no extra cost to you. See our Affiliate Disclosure for details.