- Using a VPN as a foreign visitor is a legal grey area, but in practice tourists and expats are not prosecuted for it. The law targets people selling unlicensed VPN services and, occasionally, Chinese citizens using them to post political content. Millions of people in China use VPNs every day.
- The Great Firewall blocks the IP addresses of known VPN servers and uses deep packet inspection to detect and throttle standard VPN protocols like OpenVPN, WireGuard and IKEv2. Providers that work in China use obfuscated or proprietary protocols that disguise VPN traffic as normal HTTPS.
- Usually not. VPN provider websites are blocked, and the Chinese Apple App Store and Android stores do not list VPN apps. Install and test everything before you arrive, and save the installer files somewhere accessible.
- ExpressVPN works intermittently, especially with the Lightway protocol, but reliability has dropped and it often goes down around sensitive dates. NordVPN is mostly blocked in China despite its obfuscated servers. Neither should be your only option.
- Often not. When you roam on a foreign SIM or an international eSIM such as Airalo or Holafly, your data traffic exits through your home carrier, so Google, WhatsApp and Instagram usually work without a VPN. You still need a VPN on hotel and cafe Wi-Fi.
- Use a VPN with a protocol built for China, such as Astrill's StealthVPN or Surfshark's NoBorders mode, and install it before you arrive. Carry a second VPN as a backup, connect to nearby servers like Hong Kong, Japan or Singapore, and expect some downtime around politically sensitive dates.
- Google (Search, Gmail, Maps, Drive), YouTube, Facebook, Instagram, WhatsApp, X/Twitter, Reddit, Wikipedia, Netflix, Slack, Discord, Dropbox, ChatGPT and most Western news sites are blocked. Apple services, Bing, LinkedIn (limited) and Microsoft Teams generally work.
- Hotel Wi-Fi is filtered like any other Chinese connection, so you need a VPN that works in China. Some hotel networks are stricter than mobile data. If your VPN will not connect on Wi-Fi, try its stealth protocol, change server, or switch to mobile data.
- Not from the Chinese App Store, which does not list VPN apps. If your Apple account is registered outside China you can still download and update apps, but VPN websites are blocked, so install everything before you travel and do not switch your Apple account region to China.
- Hong Kong, Japan, Singapore, South Korea and US West Coast servers are usually fastest. Europe is slower. If a nearby server will not connect, try another nearby location before trying further away.
- No. Hong Kong and Macau are outside the Great Firewall, so Google, WhatsApp and Instagram work normally. You need a VPN once you cross into mainland China, so install and test it before you go.
- They work without a VPN in China, but can be slow or trigger extra security checks with one on. Use your VPN's split tunnelling to exclude Chinese apps, or turn the VPN off briefly when paying.