Quick answer: To use a VPN in China you should install and test your app before you fly, pick a provider that still works there in 2026, and keep a working China eSIM as your data layer. This China VPN setup guide walks through which services still work, how to install, and what to do if your connection fails.
Disclosure: This post contains affiliate links. If you buy through them, we may earn a small commission at no extra cost to you. This never affects what we recommend or what you pay. We are not paid to publish positive reviews.
Set it up before you go
Why you need a VPN in China even if you have an eSIM
A China travel eSIM routes your data through Hong Kong or Singapore, which usually lets Google, WhatsApp, Instagram, and Gmail work without extra setup, but if you want a free VPN for China or need a reliable vpn for WhatsApp in China, installing a tested VPN before departure is essential. But routing can change – the Great Firewall updates frequently, and what works today may not work tomorrow. A VPN is your reliable backup: it encrypts your connection and guarantees access to blocked services regardless of how your eSIM routes data.
This guide covers exactly how to choose, install, and use a VPN for China travel – written for people who are not technical and just want their apps to work when they land. For our recommended VPN providers, see our best VPN for China travel comparison.
The one rule that matters: install before you fly
VPN provider websites are blocked in China. You cannot visit NordVPN.com, ExpressVPN.com, or any other VPN website – including Mullvad VPN China options – from inside China without already having a VPN – a circular problem that catches many travelers. Install and test your VPN at home on your normal WiFi before departure. Once you are in China behind the Great Firewall, it is too late to download a VPN unless you already have one running.
Before your flight checklist: (1) Choose a VPN provider. (2) Download the app on every device you are bringing – phone, laptop, tablet. (3) Create your account and log in. (4) Test the connection by connecting to a server outside China. (5) Confirm that blocked sites (try Google or YouTube) load through the VPN. Do all five steps at home.
How to install a VPN on your phone: iPhone and Android
iPhone (iOS)
Go to the App Store and search for your VPN provider by name. Download the app. Open it and log in with the account you created. The app will ask for permission to add a VPN configuration to your phone – tap Allow and enter your passcode. Once configured, tap Connect and choose a server outside China (US, Japan, Singapore, or UK all work well). A VPN icon will appear in your status bar. To disconnect, open the app and tap Disconnect. That is it – no technical settings needed for most major VPN apps.
Android
Go to Google Play and search for your VPN provider. Download and open the app. Log in. The app will request permission to set up a VPN connection – tap OK. Choose a server outside China and tap Connect. A key icon appears in your notification bar when connected. The process is nearly identical to iPhone. If Google Play blocks the VPN app in your region, download the APK directly from the provider’s website before your flight.
How to install a VPN on your laptop: Windows and Mac
Go to your VPN provider’s website and download the desktop app. Install it like any other program. Log in, select a server outside China, and click Connect. Most VPN desktop apps add an icon to your system tray or menu bar that shows connection status – green means connected and protected, red or gray means disconnected. Set the app to launch at startup so you never forget to turn it on.
Which VPN protocol to use in China
Most VPN apps let you choose a protocol – this is the technical method the VPN uses to encrypt your connection. For China specifically, choose in this order: (1) WireGuard – fastest, works well for most users. If WireGuard is blocked, try (2) OpenVPN with obfuscation (sometimes called “stealth” or “obfuscated” mode) – designed to hide the fact that you are using a VPN. If that also fails, try (3) IKEv2 or L2TP as a last resort. Most modern VPN apps automatically select the best protocol, so you usually do not need to change this setting. Only experiment with protocols if your connection is slow or blocked.
What to do if your VPN stops working in China
China periodically blocks VPN servers. When this happens, you will notice that websites stop loading even though the VPN says it is connected. The fix: disconnect, switch to a different server (try a different country or city), and reconnect. If that does not work, switch protocols (from WireGuard to OpenVPN with obfuscation). If neither works, try connecting at a different time of day – blocks sometimes ease during off-peak hours. As a last resort, contact your VPN provider’s support through their website or email – they usually know which servers are currently working in China and can direct you to one.
When to turn your VPN on and off
Turn your VPN ON when: you need to access Google, Gmail, WhatsApp, Instagram, Facebook, YouTube, or any Western news site; you are using public WiFi (airport, hotel, cafe); you need guaranteed privacy for banking or sensitive logins.
Turn your VPN OFF when: you are using Chinese apps like WeChat, Alipay, Amap, or local food delivery apps – these work better without a VPN because they connect to local Chinese servers, and routing through a VPN can make them slow or cause location errors; you are streaming Chinese video platforms (Bilibili, iQiyi); you are using a mobile payment QR code at a shop – VPN can sometimes interfere with the payment confirmation.
A good habit: turn your VPN on in the morning to catch up on WhatsApp and email, then turn it off when you go out exploring. Turn it back on at the hotel in the evening. You do not need it 24/7 – use it when you need blocked services, not all day.
Free VPN vs paid VPN for China travel
Free VPNs almost never work reliably in China for more than a day or two. They have fewer servers (easier for China to block), slower speeds, data caps, and worse privacy – some free VPNs make money by selling your browsing data. For a 1-4 week trip, a paid VPN costs $10-15 for a monthly subscription. This is a fraction of your flight cost and guarantees internet access. If your budget is extremely tight, use an eSIM as your primary access and a paid VPN only as backup when specific apps are blocked.
eSIM + VPN: the best combination for China travel
The optimal setup for most travelers: use a China travel eSIM for your daily internet (maps, translation, WeChat, and local apps) and a VPN as backup for when specific apps are blocked. This combination gives you the speed and convenience of eSIM routing with the guaranteed access of a VPN. Total cost: about $15-25 for a short trip (eSIM data plan + one month of VPN). For eSIM recommendations, see our best eSIM for China travel guide. For VPN recommendations, see our best VPN for China comparison.
Recommended Tools for Your China Trip
NordVPN
Best for China reliability
- Obfuscated servers for China
- Fast WireGuard protocol
- 30-day money-back guarantee
Airalo eSIM
From $5.00 ยท Stay online instantly
- Easiest setup for beginners
- China Unicom 4G/5G
- WhatsApp, Google, Instagram work
VPN setup keyword notes
Searches such as VPN for China travel, free VPN to China, VPN on macOS, and blocked apps in China are usually about preparation timing. Install, sign in, and test your VPN before arrival; once you are already in mainland China, downloading or activating tools can be harder.
The practical VPN setup that avoids most China problems
The safest China setup is not “one VPN and hope.” Use three layers: a travel eSIM that works on arrival, one paid VPN installed before departure, and one backup method such as a second VPN app or hotel WiFi plus roaming. This matters because China access can vary by city, hotel WiFi, mobile carrier and date.
| Before departure | What to do | Why it matters |
|---|---|---|
| Phone | Install the VPN app, log in, and save login details offline. | You may not be able to download or log in easily after landing. |
| Laptop | Install the desktop VPN too, not only the phone app. | Hotel WiFi and work tasks often need laptop access. |
| eSIM | Install your China travel eSIM before the flight. | It gives you internet immediately, even before hotel WiFi. |
| Test | Connect to two different server locations and open Google, Gmail, WhatsApp and Instagram. | You need to know the app works before the trip. |
| Backup | Keep screenshots of setup steps and support email. | If the app fails, you need help without searching blocked sites. |
VPN vs eSIM in China: what each one actually solves
A China eSIM solves the first problem: getting online after landing. A VPN solves the second problem: reaching blocked services on WiFi or regular internet. Some eSIMs may route traffic outside mainland China and make Google work without a separate VPN, but you should not rely on that as your only plan. For the full buying comparison, use the best VPN for China travel page and the best eSIM for China page together.
What to do if the VPN does not connect in China
- Turn airplane mode on and off, then reconnect mobile data or WiFi.
- Switch server location. Try nearby regions first, then the US or Europe.
- Switch protocol inside the VPN app if the option exists.
- Try mobile data instead of hotel WiFi, or hotel WiFi instead of mobile data.
- Restart the phone, then open the VPN before opening Google or social apps.
- If nothing works, use your eSIM or roaming data to contact VPN support.
China VPN mistakes that cost travelers time
- Waiting until arrival to download the VPN.
- Installing it on the phone but not the laptop.
- Forgetting the login password or two-factor authentication method.
- Using only free VPNs and expecting reliable access.
- Testing the app at home but not testing Google, Gmail, WhatsApp and maps.