what VPN can use in china

Practical, up-to-date guide to which VPNs work in China, how the Great Firewall blocks traffic, legal cautions, and step-by-step setup + troubleshooting for Windows, macOS, Android, iOS, routers, and self-hosted solutions.

Quick summary (so you can decide whether to read the whole guide)

China’s internet is filtered by the “Great Firewall” (GFW). That means many foreign websites and apps are blocked or heavily filtered. The Citizen Lab
Some commercial VPNs still regularly work, but the situation changes — the most reliable approach is to prepare before you go (install, test, and save installers). Comparitech+1
Top commercial choices usually recommended for China in recent testing: ExpressVPN, NordVPN, Surfshark, Astrill, and VyprVPN — each has pros/cons, and none are guaranteed forever; use the provider’s China-specific guidance. TechRadar+1
Advanced/self-hosted options (Outline, Shadowsocks, V2Ray) are common among tech-savvy users but require more work and can be blocked quickly. Outline+1

1) Why do you need a special VPN for China?

China uses a multi-layer censorship and filtering system — the “Great Firewall” — that blocks IPs, filters DNS, inspects and drops traffic using deep packet inspection (DPI), and dynamically blocks circumvention tools. That means many ordinary VPN protocols (standard OpenVPN, WireGuard, etc.) may be detected and blocked. Technical research shows the GFW’s capabilities are actively developed and updated. The Citizen Lab+1

Takeaway: A VPN that wants to work reliably in China needs to hide or obfuscate traffic (so DPI can’t easily tell it’s a VPN), offer reliable support, and provide server/software options tailored for restrictive networks. VyprVPN

2) Is using a VPN in China legal?

Short answer: complicated/grey area. China restricts and regulates VPNs. The government allows only government-approved VPNs for certain business uses; unapproved commercial VPN services are subject to blocking, and operators can face penalties. Individuals have sometimes been fined or otherwise penalized in enforcement actions. For visitors, prosecutions are rare but not impossible — treat VPN use with caution, especially if you are a Chinese resident (foreigners typically attract less enforcement, but risk exists). Freedom House+1

Practical advice: Don’t rely on “it’s legal” as a shield. Use reputable services, follow local rules for corporate connections, and avoid actions that could be illegal beyond simply using a VPN. Freedom House

3) What features actually matter for a VPN that will work in China?

When choosing a VPN for China, prioritize these features:

Obfuscation/stealth protocols: Makes VPN traffic look like regular HTTPS so DPI struggles to detect it (VyprVPN’s “Chameleon”, Surfshark’s “NoBorders”, and similar technologies). VyprVPN+1
Reliable customer support with China experience: Providers that publish China setup guides and offer recommended servers for China users are more helpful. ExpressVPN
Server locations near China, Hong Kong, Japan, Singapore, and South Korea often give the best latency. ExpressVPN
Ability to manually configure (TCP 443, custom ports): Manual OpenVPN/IKEv2 configs and options to force TCP port 443 (HTTPS) improve the chance to connect. NordVPN Support
Kill switch + DNS leak protection: Prevents accidental exposure of your traffic if the VPN drops. TechRadar
Fast updates & maintenance: The GFW changes — providers who actively maintain China connectivity are preferable. TheBestVPN.com

4) Which VPNs are commonly recommended (short, practical reviews)

Important: This is a snapshot based on recent testing and provider guidance. Providers’ ability to work inside China can change rapidly. Always check a provider’s China-specific support article before you travel. TechRadar+1

ExpressVPN — reliable and beginner-friendly

Pros: Known for consistent China performance historically, easy apps, and strong support docs; recommends installing before arrival. Good support and numerous Asia servers. Comparitech+1
Cons: Pricier than many alternatives; no free tier.

NordVPN — strong security + obfuscated servers

Pros: Obfuscated servers and custom guidance for restricted networks; good speeds and security features. NordVPN
Cons: May require manual configuration in some networks; not 100% foolproof. Provider support docs acknowledge connection problems and give manual setup tips. NordVPN Support

Surfshark — budget option with dedicated obfuscation

Pros: NoBorders feature and guides for restricted countries; unlimited devices, good value. Surfshark Support+1
Cons: Some users report occasional instability; manual setup may be necessary.

Astrill — focused on censored regions (often recommended by expats)

Pros: Historically popular among residents in China for consistent bypassing via proprietary protocols (OpenWeb, StealthVPN). TechRadar+1
Cons: Expensive; UI and audited privacy claims have tradeoffs; availability and refunds can be an issue for users in China.

VyprVPN — proprietary Chameleon obfuscation

Pros: Chameleon protocol is specifically advertised to defeat DPI and blocks; decent support for restrictive environments. VyprVPN
Cons: Fewer extras compared with large rivals.

Advanced / self-hosted alternatives

Outline (easy-to-run self-hosted server): good for control; set up your own server on DigitalOcean/AWS, distribute access keys — but servers can be discovered and blocked over time. Outline
Shadowsocks / V2Ray: popular among technically experienced users; lighter and sometimes harder for censors to detect, but research shows GFW operators can and do block them; expect cat-and-mouse. GFW Report+1

5) Step-by-step: Prepare before you travel (CRITICAL)

This is the most important checklist — many users can’t download or update apps once in China.

Buy a trustworthy VPN subscription before you leave. If you try to sign up from inside China, the provider site may be blocked. Comparitech
Download and install the apps for all devices you’ll use: Windows/macOS installers, Android APK (or Play Store), iOS app (App Store), and browser extensions if needed. Save offline copies (installers/apks) to a USB drive or cloud storage you can access. The Food Ranger+1
Sign in and test the VPN at home: Connect to recommended servers (Japan, Hong Kong, Singapore) and confirm DNS/IP leaks are not happening. Note working server names/locations. ExpressVPN
Record manual configuration details: Export OpenVPN profiles or record explicit server IPs and ports the provider recommends for China. Save these to a safe offline place. NordVPN Support
Enable kill switch & DNS leak protection in the app settings. TechRadar
Keep a backup plan: Have at least two different VPN options installed (e.g., ExpressVPN + Surfshark or a self-hosted Outline server). Many expats recommend a second backup because providers sometimes fail intermittently. MPU Talk

6) Step-by-step: How to connect once you’re in China

(Adapt depending on whether you use a commercial VPN app or manual configs.)

A. Using the provider’s app (easiest)

Open the VPN app and try the recommended/obfuscated server or the provider’s “China” recommendations. ExpressVPN
If the default connection fails, switch protocols in the app (e.g., OpenVPN TCP, IKEv2, or the provider’s stealth mode). Try TCP port 443 if available. NordVPN Support
Enable the provider’s obfuscation/stealth feature (NoBorders, Chameleon, etc.). Surfshark Support+1
If still failing, try a nearby country server (Hong Kong/Japan/Singapore) or the provider’s alternate recommendations. ExpressVPN

B. Manual OpenVPN / IKEv2 setup (when apps struggle)

Use previously downloaded OVPN/IKEv2 config files. Set the port to 443 and TCP if the config allows. NordVPN Support
Use the provider’s manual guides (they often publish step-by-step instructions for restricted countries). ExpressVPN

C. Using Outline or Shadowsocks (self-hosted)

Make sure your server is in a nearby non-China region (Tokyo, Singapore, Hong Kong). Outline
Generate access keys and test from outside China before you travel. Share keys via a secure channel. Outline
If Outline/Shadowsocks stops working, you may need to rotate the server IP or port or redeploy a new server. The censor can block individual server IPs. GFW Report

7) Troubleshooting checklist (fast actions)

Switch protocol: from UDP to TCP, or try the provider’s stealth mode. NordVPN Support+1
Use TCP port 443: Many users report better success because traffic looks like HTTPS. NordVPN Support
Try a different server (Japan / Hong Kong / Singapore / UK): regional variability matters. ExpressVPN
Reboot device and router/toggle airplane mode (mobile): basic but sometimes effective.
Check DNS / WebRTC leaks: confirm through leak tests while connected (do this before travel). ExpressVPN
Contact support (use their support chat/email): good providers have up-to-date working servers; they often privately provide special servers or configs for China. ExpressVPN

8) Router, hotels, and public Wi-Fi: special notes

Router with VPN: Installing a VPN on a router (or buying a router with the VPN preinstalled) protects all devices, but setup can be complex. Some providers publish router guides — set this up before travel. ExpressVPN
Hotels & captive portals: You may need to open a browser, accept hotel terms, then start the VPN. If the hotel blocks VPN traffic strongly, switching ports/protocols helps.
Public Wi-Fi risk: Public networks are riskier from a privacy standpoint — make sure kill switch/DNS leak protection is enabled.

9) Operational security (OpSec) — what to avoid

Don’t assume privacy equals anonymity: A VPN hides traffic from your ISP, but websites can still track accounts you log into (Google, Facebook). Use private browsing / log out if privacy is desired.
Avoid unknown free VPNs: Free services often sell data or provide weak obfuscation — not recommended in high-risk environments.
Use two-factor auth where possible and avoid logging into sensitive accounts on shared machines.

10) Advanced: Self-hosted vs. commercial — pros & cons

Commercial VPNs: easier, supported, often use obfuscation tech; you trade some control for convenience. Good for tourists and most expats. TechRadar
Self-hosted (Outline / Shadowsocks / V2Ray): gives more control and can be harder to block en masse, but requires server management and frequent changes if blocked. Research shows GFW operators target these servers and block them over time. Outline+1

11) FAQ (short)

Q: Will a VPN get me arrested in China?
A: Arrests for merely using a VPN are rare for tourists, but the legal framework favors only government-approved VPNs for certain business uses; enforcement varies, and there have been fines in recent years. Don’t treat this as legal advice. Freedom House+1

Q: Which server location is fastest?
A: Servers in Hong Kong, Japan, and Singapore typically give the lowest latency for mainland China users. ExpressVPN

Q: Do Apple/Google app stores block VPN apps in China?
A: App availability has been restricted in the past — always download and install apps before travel or keep the APK/installer handy. Wikipedia

12) Final checklist (copy & use)

Buy a reputable VPN subscription before you travel. Comparitech
Download and install all device apps and backups (Windows/macOS/iOS/Android/routers). The Food Ranger
Test connections at home — note working servers and settings. ExpressVPN
Enable kill switch & DNS leak protection; save manual configs. TechRadar+1
Have a backup plan (second VPN or self-hosted server). Outline

(Selected, high-value references used in this guide)

Sources & further reading

Citizen Lab — GFWatch & measurements of the Great Firewall. The Citizen Lab
Freedom House — Freedom on the Net: China (2024) (legal & enforcement context). Freedom House
TechRadar / Tom’s Guide / TheBestVPN — recent roundups & tests of VPNs for China. TechRadar+2Tom’s Guide+2
VyprVPN — Chameleon protocol (obfuscation explanation). VyprVPN
ExpressVPN & Comparitech guides — practical “download before you go” and setup recommendations. ExpressVPN+1
NordVPN support — notes about connections in China and manual setup. NordVPN Support+1
Surfshark support — NoBorders and guides for restricted networks. Surfshark Support+1
Outline — get started & how to self-host a server. Outline
GFW research on Shadowsocks (how detection works). GFW Report+1
Astrill official & independent reviews (popular among residents in China). Astrill VPN+1

Closing notes

The “what VPN works in China?” question has no eternal answer — it’s a moving target. The single best habit is preparation: buy a reputable provider, install and test everything before you arrive, keep an alternate solution, and follow the pprovider’ssupportsupport support guidance for restricted countries. If you want, I can:

Produce a printer-ready 1-page checklist (PDF) with the exact pre-travel steps and config checklist.
Or create device-specific setup instructions (Windows + Android + iPhone) tailored to one provider you pick (ExpressVPN / NordVPN / Surfshark / Astrill / Outline).