Best VPN for China 2026: What Still Works Behind the Great Firewall

You've sorted out your visa-free entry. Flights booked, hotels booked. You land in Shanghai, pull out your phone to message home on WhatsApp, and… nothing. Google Maps? Blocked. Instagram, to post that first photo from the Bund? Also blocked.

That's the Great Firewall. It blocks most of the apps and sites you use every day, and here's the part most people miss: you can't reliably fix it once you're already inside China. The VPN that solves this needs to be installed before your plane lands. This guide covers what still works in 2026 and how to set it up.

What China's Great Firewall Actually Blocks

China blocks a long list of foreign websites and apps. That includes Google (search, Maps, Gmail, Drive — all of it), Facebook, Instagram, WhatsApp, X (formerly Twitter), YouTube, Snapchat, Telegram, the international version of TikTok, Netflix, Spotify, The New York Times, and thousands of other news sites, messaging apps, and services you probably use without thinking about it.

It's not a glitch. It's policy. The Chinese government runs the world's most sophisticated internet filtering system, and it applies to everyone inside the country — tourists, business travelers, and locals alike.

If you're visiting on any of the visa-free routes — the 30-day visa-free policy, the 240-hour transit policy, Hainan's 30-day visa-free policy, or a mutual visa exemption agreement — the firewall doesn't care. Your visa-free entry gets you past immigration, not past the firewall.

Chinese apps work fine. WeChat, Alipay, Baidu Maps, Didi (the local Uber), Meituan (food delivery) — all of those run normally because they're domestic platforms. But the moment you try to reach anything hosted or routed outside China, you hit the wall.

What a VPN Does (and Why You Need One)

A VPN — virtual private network — creates an encrypted tunnel between your device and a server outside China. Your internet traffic flows through that tunnel, so to the firewall it looks like you're browsing from Japan, the US, or wherever your VPN server sits. The blocked sites on the other end see a normal connection and let you through.

Without a VPN, you're limited to whatever the firewall allows. You can browse Chinese sites and use WeChat to message people, but you can't check your Gmail, navigate with Google Maps, or video-call home on WhatsApp.

Here's the part most people miss: downloading and setting up a VPN once you're already in China is unreliable. The VPN providers' websites are usually blocked, and the app stores inside China don't list the main VPN apps. There are workarounds (more on those below), but you shouldn't count on them. The safe move is simple: download the VPN app, create your account, and test that it connects before you board your flight.

The VPNs Most Commonly Recommended for China (2026)

China actively blocks VPN connections. Most free VPNs don't work, and plenty of paid VPNs that advertise "China support" fail the moment you try to connect from a Shanghai hotel.

The VPNs below are commonly recommended for China because they offer traffic-disguising servers, restrictive-network modes, or China-specific troubleshooting. However, no consumer VPN can guarantee reliable access in mainland China. The Great Firewall changes constantly, and a server or app that works one day may fail the next. Install and test before departure, and keep a backup option.

NordVPN

NordVPN offers stealth servers and China-specific troubleshooting, which makes it a common choice for restrictive networks. However, its mobile apps may not connect normally in mainland China, and NordVPN may require manual setup on iOS or Android. If you choose NordVPN, install it before travel and save NordVPN's manual setup instructions offline.

→ Get NordVPN and set it up before you fly

ExpressVPN

ExpressVPN is another common choice for China, with servers — especially in Hong Kong, Japan, and Singapore — designed for restrictive networks. As with any VPN, it may not connect on a given day, and you might need to try a few server locations to find one that works. Install and test it before you travel.

→ Get ExpressVPN and set it up before you fly

Surfshark

Surfshark is the budget-friendly option. Its NoBorders mode is designed to detect restrictive networks and switch to servers and protocols built for them. It's cheaper than NordVPN or ExpressVPN, and one account works on unlimited devices at once — handy if you're traveling with family or a group. As with any VPN, install and test it before you go.

→ Get Surfshark and set it up before you fly

All three let you test the service risk-free with a 30-day money-back guarantee. You can subscribe, download the app, fly to China, and if it doesn't work the way you need, request a refund when you get home.

Install and Test Before You Leave

This is the single most important step, and the one most people skip. Do this while you're still at home, at least a few days before your trip:

1. Subscribe to one of the VPNs above — NordVPN, ExpressVPN, or Surfshark.
2. Download the app to your phone and any laptops or tablets you're bringing.
3. Open the app and connect to a server. Try Hong Kong, Japan, or Singapore first — these tend to work best from inside China.
4. Make sure it actually connects. Don't just install it and assume it'll work — open your browser and confirm you can load a page through the VPN.
5. Check that WhatsApp, Gmail, Google Maps, and Instagram all load while the VPN is running.

If something doesn't work, you have time to contact support or try a different provider. If you wait until you land in Beijing to discover the app won't connect, your options shrink fast.

We recommend setting up a backup, not relying on a single VPN. Even the providers that work well in China get their servers blocked all the time — China is constantly hunting for VPN traffic and shutting it down, so the app that connects fine one day can quietly stop working the next. If you have a second VPN already installed and tested before you fly, you just switch to it instead of being stuck offline. Install at least two.

The eSIM Alternative: Built-In Firewall Bypass

Here's something most VPN guides skip: some China eSIMs route your data outside the firewall automatically, so you may not need a VPN at all.

An eSIM is a digital SIM card you install on your phone before you travel. The moment you land, you have mobile data — no hunting for a SIM counter, no dealing with a local carrier. You download it at home, switch it on when you arrive, and you're online.

Why this matters for China: some eSIM providers send your data through Hong Kong, which isn't behind the firewall. Your phone still uses a Chinese signal, but the internet itself comes in from outside China — so Google, WhatsApp, and Instagram just work, with no VPN needed.

The two eSIM providers travelers most often recommend for this are Airalo and Holafly. Both offer China eSIM plans, and both have Hong Kong-routed options that get past the firewall.

Deciding between a VPN and an eSIM? The eSIM is simpler (no connecting, no servers, it just works), but it only covers your phone and only while you're on mobile data. If you need your laptop connected, or you'll be on hotel WiFi a lot, you still want the VPN. Many travelers use both — eSIM for the phone, VPN for the laptop.

You can compare both options and see exactly how to set them up in our full guide: Best eSIM for China.

What Doesn't Work (Don't Waste Your Time)

Free VPNs. We don't recommend them. They get blocked fast, they're slow, many sell your data, and some are scams. If you're going to rely on a free VPN anyway, don't bring just one — download at least five to seven of them. Any single free VPN will very likely stop working in China, so you'll want a stack of others to fall back on.

VPNs not built for China. If a VPN doesn't specifically mention China support or stealth servers that disguise your traffic, it probably won't connect. Ordinary VPN traffic is easy for the firewall to spot and block.

Downloading a VPN after you arrive. The providers' websites are usually blocked inside China, and the App Store and Google Play Store inside China don't list the main VPN apps. Don't plan around installing one after you land — set it up before your flight.

Switching your iPhone region to download a VPN. Some guides suggest changing your App Store country to the US to grab a VPN app from inside China. It's technically possible, but it's a hassle (you need a valid US payment method and address), it can lock you out of apps you've already bought, and there's no guarantee it'll work. Just install the VPN before you leave.

How to Use a VPN in China (The Basics)

Once you land:

1. Turn on your VPN before you open any blocked apps. Connect to a server in Hong Kong, Japan, or Singapore.
2. Wait until the app confirms the connection. Don't assume it's working just because you tapped "Connect."
3. Open WhatsApp, Gmail, Google Maps, or whatever you need. It should load normally.

If the connection drops or won't connect at all:

• Switch to a different server. The firewall blocks individual VPN servers all the time, so the one that worked yesterday might not work today. Try another location.
• Toggle airplane mode on and off. Sometimes that's enough to reset the connection.
• Switch between WiFi and mobile data. Some hotel networks block VPNs more aggressively than mobile networks, or the other way around.
• Contact your VPN's support. NordVPN, ExpressVPN, and Surfshark all have 24/7 live chat and can point you to servers and settings that are working right now.

The VPN will slow your connection a bit — that's normal, since your data is traveling out of China to another country and back. Browsing and messaging still work fine. Streaming video can be slower and may pause to load.

Keep the VPN running the whole time you're online. The moment you disconnect, you're back behind the firewall.

Is Using a VPN in China Legal?

This is the question everyone asks, and the honest answer is: it's complicated.

China's law technically requires VPN providers to have government approval, and the approved VPNs are the ones that don't bypass the firewall — so they're useless for reaching blocked sites. The VPNs commonly used to get around the firewall (NordVPN, ExpressVPN, Surfshark) are not approved.

In practice, millions of people use these VPNs inside China every day — expats, business travelers, tourists, even some locals. The government goes after the companies selling VPNs, not tourists using one to check Gmail.

There are no widespread reports of foreign visitors getting into legal trouble just for using a VPN to reach WhatsApp or Google Maps during a short trip. The risk isn't zero, but it's very low for ordinary personal use.

That said, this is not legal advice. If you're uncomfortable with any legal ambiguity, don't use a VPN — stick to apps that work without one (WeChat, Baidu Maps, Alipay, Chinese hotel booking platforms), or rely on a firewall-bypassing eSIM for your phone. If you do use a VPN, use it for the obvious things — staying in touch with family, navigating, checking work email — and don't use it to do anything you wouldn't do on a normal connection back home.

What to Do If You Forgot to Install a VPN

If you're reading this from inside China and you didn't set one up before you arrived, here are your options:

1. Use a firewall-bypassing eSIM. If your phone supports eSIM and you can still reach a provider's website, you may be able to buy and install a China eSIM that routes through Hong Kong (try Airalo or Holafly). It won't help your laptop, but it'll get your phone working.

2. Ask someone outside China to help. Have a friend or family member abroad create a VPN account, then share the login over WeChat (which works inside China). Download the app and sign in. This is a workaround, not a guarantee — the app still might not be available in China's App Store.

3. Use airport or hotel WiFi in Hong Kong. If your route goes through Hong Kong, download and set up a VPN during the layover. Hong Kong isn't behind the firewall.

4. Lean on Chinese apps. WeChat works fine for messaging anyone else on WeChat, and Baidu Maps can replace Google Maps. You'll lose Instagram, Gmail, and most of your usual apps, but you can still communicate and get around.

This is exactly why we recommend setting up WeChat before you travel. Download it, and ask the people who matter — anyone you're traveling with, and family or friends back home — to download WeChat and add you too. WeChat works inside China without a VPN, so if your VPN fails or you never installed one, you can still reach each other.

The takeaway: don't be the person trying to troubleshoot this from a Beijing hotel room. Install the VPN before you fly.

Quick Checklist Before You Fly

• Subscribe to a VPN recommended for China — NordVPN, ExpressVPN, or Surfshark
• Download the VPN app to your phone, laptop, and any other devices you're bringing
• Open the app and test that it connects to a server (try Hong Kong, Japan, or Singapore)
• Confirm you can load Google, WhatsApp, and Gmail while the VPN is running
• Or: buy a China eSIM with Hong Kong routing (Airalo or Holafly) and install it before departure
• Don't wait until you land — the provider's site will likely be blocked and you may not be able to download anything

What Else You Need for Your China Trip

A VPN or eSIM solves the internet problem, but a few other things confuse first-time visitors to China:

• Payment apps. Almost everything in China is paid by phone through WeChat Pay or Alipay. Download both and link a credit or debit card before you arrive. Cash and foreign cards are accepted in some places, but in a lot of spots the local payment apps are the only easy way to pay.
• Booking platforms. For trains, hotels, or domestic flights inside China, you'll want Trip.com or another China-native platform that has the inventory and can process bookings for foreign travelers.
• Arrival card and immigration. If you're entering visa-free, you still go through normal immigration. Have your documents ready — passport, onward ticket (if your visa-free policy requires one), hotel booking, and your completed arrival card.

We've written a step-by-step guide to all of it — payments, apps, what to expect at the border, how to get around, and everything else first-time visitors need — here: First-time China trip guide.

Or if you'd rather have one resource that covers your whole trip — instead of jumping between a dozen articles and forum threads — we've put it all into one big PDF guide. Buy it once and it's yours to keep forever. Even if visa rules or app details shift over time, the core of getting around, staying connected, and traveling smoothly in China stays the same.

FAQ

Do I really need a VPN for China?
If you want access to Google, Gmail, WhatsApp, Instagram, Facebook, or most other non-Chinese apps and sites, yes. Without a VPN (or a firewall-bypassing eSIM), those services are blocked inside China.

Can I just download a VPN when I get to China?
You should assume not. VPN providers' websites are usually blocked, and the App Store and Google Play Store inside China don't list the main VPN apps, so downloads after arrival are unreliable. Install the VPN before you fly.

Which VPN is best for China?
NordVPN, ExpressVPN, and Surfshark are the three most commonly recommended for China, because they offer traffic-disguising servers, restrictive-network modes, or China-specific troubleshooting. No VPN can guarantee access, so install and test before you travel and keep a backup.

Will a free VPN work?
Almost never. Free VPNs are blocked quickly, they're slow, and many are scams. Use a paid provider with a money-back guarantee instead.

Can I use a VPN on my phone and laptop at the same time?
Yes. All three recommended VPNs allow multiple simultaneous connections on one account. Surfshark allows unlimited devices.

Is using a VPN illegal in China?
It's a gray area. Technically VPNs need government approval, and the ones that work aren't approved. But enforcement has focused on providers and sellers, not individual foreign tourists using a VPN for personal use during a short trip. The risk is low, but not zero. This is not legal advice.

What if my VPN stops working while I'm in China?
Try switching to a different server location (Hong Kong, Japan, Singapore). Toggle airplane mode. Switch between WiFi and mobile data. Contact your VPN's support team — they can suggest servers that are working right now.

Do I need a VPN if I have a China eSIM?
It depends on the eSIM. Some China eSIMs route data through Hong Kong and bypass the firewall automatically, so you don't need a VPN for your phone. But for a laptop or hotel WiFi, you'll still need a VPN. See our Best eSIM for China guide.

Can I access Netflix or YouTube with a VPN in China?
It depends on your VPN. The connection might be slower than normal internet, but it should be possible if your VPN is a good one.

How much does a VPN cost?
NordVPN, ExpressVPN, and Surfshark range from about $3 to $12 per month depending on how long you subscribe. All three offer 30-day money-back guarantees, so you can test one for your trip and request a refund if it doesn't work.

Sources & Notes

China's visa-free entry policies referenced in this article are documented by the National Immigration Administration (en.nia.gov.cn). See our detailed guides to the 30-day visa-free policy, the 240-hour transit policy, Hainan's 30-day visa-free policy, and mutual visa exemption agreements for the official sources behind each.

Claims about VPN functionality, the Great Firewall, and eSIM routing are based on widely reported traveler experience as of mid-2026, not on official government guidance. The firewall and VPN landscape changes often — verify that your chosen provider still works in China close to your travel date.

Bottom Line

If you're visiting China on any visa-free policy and you want to use Google, WhatsApp, Gmail, Instagram, or most other apps you rely on, you need a VPN — and you need to install it before you fly. Once you're inside China, the providers' websites and apps are usually blocked, so downloading one after you land is unreliable at best. NordVPN, ExpressVPN, and Surfshark are the three most commonly recommended for China, though none can guarantee access. Download the app, test the connection, and make sure everything loads while you're still at home. The alternative is a China eSIM that routes through Hong Kong and bypasses the firewall automatically, but that only covers your phone. Don't wait until you're standing in a Shanghai hotel room with no internet to think about this.