VPN: Install Before You Fly

The one rule: set it up before departure

China's internet filters block most Google services, WhatsApp, Instagram, Facebook, YouTube, and many news sites on local networks — including hotel Wi-Fi. A VPN routes around the block, but VPN websites and the app stores' VPN listings are themselves blocked inside China. If you land without one installed, logged in, and tested, you almost certainly can't get one. Install it at home, sign in, and connect once to confirm it works.

What's blocked on Chinese networks

You may not need one at all

International travel eSIMs and home-carrier roaming bypass the firewall by design: your phone connects to a Chinese cell tower, but the traffic exits through an international gateway (usually Hong Kong or Singapore) before it ever touches China's filters. Google, WhatsApp, and Instagram just work — no VPN, nothing to configure. For a typical 1–2 week trip this is the simplest setup, and many travelers never turn on a VPN at all.

• Airalo — cheapest entry point; China plans from about $4, roughly $25 for 10GB, unlimited ~$23/7 days. Buy and install before departure — its site and app are blocked inside China.
• Holafly — unlimited data only; about $51 for 15 days, $75 for 30 days. Pricier, but no data anxiety.
• Nomad — budget per-GB plans from ~$4–5/GB; usually allows hotspot.
• Trip.com eSIM — solid mid-range option, and its store still loads from inside China for top-ups.
• When eSIM alone isn't enough: data is metered and pricier per GB than a local SIM, and you get no +86 number. For stays beyond 2–3 weeks, heavy data use, or anything needing a Chinese number, the standard setup is a local China Unicom SIM for Chinese apps plus a VPN (or a small eSIM kept alongside) for blocked services.

Picking a VPN that actually works in China

Most VPNs that work elsewhere fail against China's firewall, and reliability shifts month to month — especially around political events, when blocking tightens. What separates the survivors is obfuscation: a stealth protocol that disguises VPN traffic as ordinary HTTPS (plain OpenVPN and WireGuard get detected and cut). As of mid-2026, these are the ones travelers and expats consistently report working; pick one main plus a different backup rather than trusting any single brand:

• Astrill — the long-time expat favorite; its StealthVPN protocol has the highest success rate through firewall crackdowns. Also the priciest: $30 for a single month, ~$15/month on a 1-year plan, and no refunds.
• ExpressVPN — well-known global brand with good support and automatic obfuscation; $12.99 for one month. Works in China most of the time but can drop during tightening periods — keep a backup.
• NordVPN — works only on its obfuscated servers (or NoBorders mode), so you must switch that on in settings before relying on it; around $13 for one month. A solid second choice.
• Surfshark — the budget pick; its NoBorders/Camouflage mode connects for many users but tests show roughly 40–60% reliability, often needing server cycling. Fine as a cheap backup ($15.45/month, far less on long plans), not as your only VPN.
• Proton VPN, Mullvad, and most others — inconsistent to non-working inside China even with stealth modes; don't bring them as your only option.
• Free VPNs — generally don't connect from China and carry privacy risks. Skip them.

Setup checklist (do this at home)

1. 1
   Choose and subscribe before your trip

   A 1-month plan typically runs $5–15. Consider installing a second, different VPN as backup — it costs little and saves the trip if your first choice gets blocked.

2. 2
   Install on every device

   Phone, laptop, tablet. You can't add devices easily once inside China.

3. 3
   Log in and connect once

   An installed-but-never-logged-in app can fail in China if the login flow needs a blocked server. Verify you can actually connect.

4. 4
   Note offline support contacts

   Screenshot the provider's troubleshooting page and mirror/backup URLs — you may not be able to load their website from China.

If your VPN stops working in China

1. 1
   Switch servers

   Try servers in Hong Kong, Japan, Singapore, or US West — nearby servers usually connect best.

2. 2
   Switch protocols

   In the app settings, try the stealth/obfuscated option (StealthVPN, Lightway, NoBorders or similar). Plain OpenVPN and WireGuard are detected most easily.

3. 3
   Toggle networks

   Try mobile data instead of hotel Wi-Fi (some hotels throttle VPN traffic), or vice versa.

4. 4
   Fall back to networks that bypass the firewall

   International eSIM data and home-carrier roaming route outside China — buy a small eSIM plan online via roaming data if you're desperate. Trip.com's eSIM store usually loads from inside China.

5. 5
   Use unblocked equivalents meanwhile

   Apple Maps and Bing work without a VPN; iMessage and email generally work; Amap covers navigation; your hotel can print or handle anything urgent.

Common questions