Quick answer
ExpressVPN and Proton VPN are the most dependable VPNs for China in 2026, both using purpose-built obfuscation that disguises VPN traffic as ordinary web traffic. NordVPN’s obfuscated servers and VyprVPN’s Chameleon protocol also work. Whatever you choose, install and test it before you enter China – provider websites are blocked from inside.
The best China VPNs at a glance
- ExpressVPN – most consistently working, best support
- Proton VPN – Stealth protocol, strongest privacy
- NordVPN – obfuscated servers, fastest when connected
- VyprVPN – Chameleon protocol built for censorship
- Surfshark – NoBorders mode, best value
- Mullvad – QUIC obfuscation, maximum anonymity
How the Great Firewall blocks VPNs
China’s filtering system does more than block domain names. It uses deep packet inspection to examine the shape of your traffic, and standard VPN protocols have recognisable signatures – the handshake pattern of OpenVPN or WireGuard is identifiable even though the contents are encrypted. Once identified, the connection is throttled or dropped.
It also actively probes suspicious servers. If a connection looks like it might be a VPN endpoint, the system can send its own traffic to test the server and blacklist the IP address if it responds like one. This is why VPN server addresses that work one week stop working the next, and why providers must constantly rotate IP ranges.
The answer is obfuscation: wrapping VPN traffic so it resembles ordinary HTTPS, which cannot be blocked wholesale without breaking the internet for everyone. Providers implement this differently – ExpressVPN automatically, Proton VPN as its Stealth protocol, NordVPN through dedicated obfuscated servers, VyprVPN as Chameleon, Surfshark as NoBorders, Mullvad through QUIC-based obfuscation.
Filtering also intensifies around politically sensitive dates and major events, so a VPN that worked last month may struggle during those periods. No provider can promise uninterrupted service.
Is using a VPN legal in China?
The position is ambiguous by design. Chinese regulations require VPN services to be licensed by the state, and unlicensed services are not legally authorised. In practice, millions of people in China use unapproved VPNs daily, and enforcement against individual foreign visitors is essentially unheard of.
There have been occasional reports of fines issued to Chinese citizens for using or selling unauthorised VPN services, and operators of VPN businesses have faced serious penalties. The risk profile for a business traveller using a mainstream commercial VPN to reach work email is very different from that of someone selling circumvention services.
None of this is legal advice, and the environment changes. If your work or circumstances make this a material question, consult someone qualified in Chinese law rather than relying on a review site.
How we tested
We assessed providers on their obfuscation technology, their published track record in China, the responsiveness of their support in providing working server addresses, and reports from users connecting from Beijing, Shanghai and Shenzhen. Conditions inside China vary by city, network and week, so we weighted consistency over peak speed.
1. ExpressVPN – most consistently working
ExpressVPN has the longest track record of functioning in China among mainstream providers. Its obfuscation runs automatically rather than requiring you to find the right setting, which matters when you are troubleshooting on hotel Wi-Fi at midnight.
Its support team maintains current lists of which servers are working from China and will provide them by email, which is critical given that live chat on the website may be unreachable. Shanghai, Hong Kong and Japan servers are the usual recommendations for latency.
Price: from $4.99/mo, 8 devices.
2. Proton VPN – best privacy with Stealth
Proton VPN’s Stealth protocol was built for exactly this environment and connects reliably from China in most conditions. Because the apps are open source and the company is Swiss, it is also the strongest choice for anyone whose reason for needing a VPN in China is confidentiality rather than convenience.
Secure Core routing adds another layer for high-risk users, sending traffic through a hardened data centre before it exits.
Price: free, or from $4.99/mo.
3. NordVPN – fastest once connected
NordVPN’s obfuscated servers, found under the speciality servers list when OpenVPN is selected, work from China with reasonable consistency. When the connection holds, speeds are the best of any provider here thanks to well-provisioned Hong Kong, Taiwan and Japan infrastructure.
You must enable obfuscation manually, which is a small barrier but a one-time one.
Price: from $3.39/mo, 10 devices.
4. VyprVPN – purpose-built Chameleon protocol
Chameleon scrambles OpenVPN packet metadata specifically to defeat deep packet inspection, and VyprVPN has marketed itself at censored markets for years. It owns all its own server hardware, which removes a layer of third-party risk.
Speeds are mid-pack and the price is high for five devices, but as a backup provider it earns its place.
Price: from $5.00/mo.
5. Surfshark – best value option
Surfshark’s NoBorders mode detects a restricted network and automatically adjusts protocol and server recommendations, and Camouflage mode obfuscates OpenVPN traffic. At about $2.19 a month with unlimited devices, it is the cheapest credible option for a family travelling together.
Consistency is slightly behind ExpressVPN’s, so carry a second provider if the trip matters.
Price: from $2.19/mo, unlimited devices.
6. Mullvad – maximum anonymity
Mullvad added QUIC-based obfuscation to its mobile apps, which disguises traffic as ordinary encrypted web browsing. Combined with no-email sign-up and cash payment, it is the choice for anyone who needs the provider itself to know as little as possible.
It will not unblock streaming, and support is email-only, which is a real limitation when you are troubleshooting from inside the firewall.
Price: EUR 5/mo flat.
Preparing before you travel to China
Install your VPN on every device before departure, sign in, and verify it connects. Provider websites, Google Play and sometimes the App Store are blocked or degraded inside China, so downloading after arrival may not be possible.
Enable obfuscation or stealth mode in advance and test it, since finding that setting for the first time on a filtered network is unnecessarily stressful. Save your provider’s support email address offline, along with any manual configuration files they offer. Consider subscribing to two providers for a trip that matters – the cost of a second month is trivial next to losing access to work email for a week.
Also download offline versions of anything critical: maps, translation apps, documents. A VPN is a fallback, not a guarantee.
What works and what does not inside China
Expect to switch servers frequently. A connection that worked in the morning may fail by evening, and the usual fix is a different server in Hong Kong, Japan, Singapore or Taiwan rather than a different provider. Mobile data networks sometimes permit connections that Wi-Fi blocks, and vice versa, so try both.
Speeds will be slower than you are used to. Obfuscation adds overhead, international bandwidth out of China is congested, and the nearest viable servers are still a few hundred kilometres away. Video calls generally work; 4K streaming often does not.
Free VPNs almost universally fail. They lack obfuscation, their IP ranges are blocked quickly, and several free apps marketed for China are of unknown provenance.
Frequently asked questions
Which VPN works best in China right now?
ExpressVPN and Proton VPN are the most consistently reported to work. Conditions change week to week, so carrying a second provider is sensible for important trips.
Can I download a VPN once I am in China?
Often not. Provider websites are blocked and app stores are restricted. Install everything before you arrive.
Is it illegal for tourists to use a VPN in China?
Unlicensed VPN services are not legally authorised, but enforcement against individual travellers using mainstream commercial VPNs is not something that is reported in practice. Operating or selling circumvention services carries far greater risk.
Will a VPN let me use Google, WhatsApp and Instagram in China?
Yes, when the connection holds. Those services are blocked at network level, and a working VPN routes around the block.
Do free VPNs work in China?
Almost never. They lack obfuscation and their servers are blocked quickly. Proton VPN’s free tier has Stealth on some platforms but the paid plan is far more reliable.
What to do if your VPN stops working in China
Work through this in order before concluding the provider has failed. Switch to the obfuscated or stealth protocol if you were not already using it. Try a different server, prioritising Hong Kong, Japan, Singapore and Taiwan. Switch between Wi-Fi and mobile data, since the two are filtered differently. Change port if your app allows it, with 443 the most likely to pass because it is the standard HTTPS port.
If none of that works, email your provider’s support with your location and ask for currently working server addresses. ExpressVPN, Proton VPN and VyprVPN all maintain internal lists and respond quickly. This is why saving the support email address offline before you travel matters.
As a last resort, some providers supply manual configuration files that can be imported into a generic WireGuard or OpenVPN client, which sometimes connects when the branded app does not.
Alternatives to a commercial VPN
Some travellers rely on international roaming instead. A foreign SIM roaming in China routes traffic through the home carrier’s network, which generally bypasses domestic filtering entirely. For a short trip this is often the simplest solution, albeit an expensive one.
Business travellers sometimes have access to a corporate VPN, which may be licensed and therefore unaffected. If your employer offers one, use it for work traffic.
Self-hosted options such as a personal server running obfuscation protocols exist and are popular with long-term residents, but they require technical skill to set up and maintain, and the legal considerations around operating circumvention infrastructure are more serious than around using a commercial service.
Verdict
ExpressVPN is the China VPN to buy if you want the highest chance of connecting without troubleshooting, and its support team’s working-server lists are genuinely valuable. Proton VPN is the pick if privacy, not just access, is the reason you need one. Whichever you choose, install it before you board the plane.