- Using a VPN as a foreign visitor is a legal grey area, but in practice tourists and expats are not prosecuted for it. The law targets people selling unlicensed VPN services and, occasionally, Chinese citizens using them to post political content. Millions of people in China use VPNs every day.
- The Great Firewall blocks the IP addresses of known VPN servers and uses deep packet inspection to detect and throttle standard VPN protocols like OpenVPN, WireGuard and IKEv2. Providers that work in China use obfuscated or proprietary protocols that disguise VPN traffic as normal HTTPS.
- Usually not. VPN provider websites are blocked, and the Chinese Apple App Store and Android stores do not list VPN apps. Install and test everything before you arrive, and save the installer files somewhere accessible.
- ExpressVPN works intermittently, especially with the Lightway protocol, but reliability has dropped and it often goes down around sensitive dates. NordVPN is mostly blocked in China despite its obfuscated servers. Neither should be your only option.
- Often not. When you roam on a foreign SIM or an international eSIM such as Airalo or Holafly, your data traffic exits through your home carrier, so Google, WhatsApp and Instagram usually work without a VPN. You still need a VPN on hotel and cafe Wi-Fi.
- Use a VPN with a protocol built for China, such as Astrill's StealthVPN or Surfshark's NoBorders mode, and install it before you arrive. Carry a second VPN as a backup, connect to nearby servers like Hong Kong, Japan or Singapore, and expect some downtime around politically sensitive dates.
- Google (Search, Gmail, Maps, Drive), YouTube, Facebook, Instagram, WhatsApp, X/Twitter, Reddit, Wikipedia, Netflix, Slack, Discord, Dropbox, ChatGPT and most Western news sites are blocked. Apple services, Bing, LinkedIn (limited) and Microsoft Teams generally work.