Conditions behind the Great Firewall change without notice. Every figure here is dated — check how we verify before you rely on it.

VPNs That Actually Work in China

March 2026 Performance Audit

What is the best VPN for China in March 2026? Our March 2026 audit ranks Astrill VPN scores 6.1/10. Once our top pick, it has faded from recent China reporting and we no longer rate it first. ExpressVPN (7.6/10) is the simplest option for travelers at from $3.49/mo. Astrill VPN (7.1/10) is the most consistently reported to survive crackdowns. NordVPN and ProtonVPN are unreliable and their status is contested — we withdrew our earlier "blocked" verdict and are re-verifying.

Ranked by long-term excellence and privacy — not marketing budgets.

ExpressVPN Seal

ExpressVPN

Lightway Best for: Easiest to use
7.6 Our Score
Working
Astrill VPN Seal

Astrill VPN

StealthVPN / OpenWeb Best for: Most reliable
7.1 Our Score
Working
Surfshark Seal

Surfshark

NoBorders Best for: Best value
7.0 Our Score
Working
TorGuard Seal

TorGuard

Stunnel / OpenVPN / WireGuard Best for: Most configurable
6.5 Our Score
Working
PrivateVPN Seal

PrivateVPN

Stealth Mode Best for: Cheap and occasionally effective. Not something to travel on as your only option.
5.9 Our Score
Working
LetsVPN Seal

LetsVPN

Proprietary Best for: A China-market app that frequently works. Treat it as a convenience tool, not a privacy tool.
5.8 Our Score
Working

What Are the Privacy Risks of Using LetsVPN?

LetsVPN is a newer tool reporting high success rates, but it carries significant risks. Users report that it is run by AI systems and maintains logs of user activity. Accounts have been locked for "suspicious activity" like high-bandwidth gaming. Its corporate origin is unknown and unverified.

What Works

Frequently reported to work. One-tap connection. Good for short-term tourists who need WhatsApp and Google Maps.

What's Risky

Unknown corporate origin. Reported data logging. Aggressive account bans for high-bandwidth use. Never use for sensitive activities (banking, corporate logins).

Why Are NordVPN and ProtonVPN Blocked in China?

NordVPN and ProtonVPN are experiencing total connection failure across all major carriers. Users on Reddit consistently report that these "mainstream Western VPNs" do not work in China, regardless of technical protocols claimed by their developers. NordVPN is reported as "useless" during month-long stays. ProtonVPN is no longer viable.

Do not purchase these services for China use. View the full block list →

What If VPNs Don't Work? Is eSIM an Alternative?

VPNs not working? International eSIMs bypass the Great Firewall entirely by routing your data through Hong Kong or Singapore gateways. No software, no detection — just hardware-level bypass with high reliability.

Airalo Logo

Best Value

Airalo

$19.00 / 5 Days

Nomad Logo

Most Reliable

Nomad

$12.00 / 10GB

Holafly Logo

Highest Data

Holafly

Unlimited / Massive Use

View Full eSIM Comparison →

Looking for VPNs that don't work in China?

See which VPNs we say to avoid →

NordVPN, ProtonVPN, CyberGhost, and PIA are currently marked as "Blocked" due to total connection failure.

Great Firewall Guide Team VPN Audit Lead Editorially reviewed

We track VPN behaviour in China through public reporting and vendor documentation, and publish our reasoning rather than a black-box score.

China VPN FAQ (2026)

Answers to the most common questions about VPNs in China.

What is the best VPN for China in 2026?

We do not name a single winner, because the top three finish within 0.2 points of each other. For a short trip, ExpressVPN (7.6/10) — simplest setup, 30-day refund. For long-term residence, Astrill (7.1/10) — most consistently reported to survive crackdowns. On a budget, Surfshark (7.0/10) at $2.49/month.

Why do NordVPN, ProtonVPN, and ExpressVPN fail in China?

These VPNs use standard WireGuard and OpenVPN protocols that the GFW's behavioral heuristics can instantly identify and drop. As of August 2026, NordVPN and ProtonVPN report complete connection failure across all major Chinese carriers. ExpressVPN (Lightway) works inconsistently at best. None have the proprietary obfuscation layer required to survive deep packet inspection.

Do I need to download my VPN before arriving in China?

Yes — this is critical. VPN provider websites and app stores are blocked inside China. You must download and configure your VPN app before entering the country. Test the connection at least once before travel. Astrill, Astrill VPN, and Surfshark all allow pre-travel setup.

What is the difference between Astrill StealthVPN and Astrill VPN Chameleon?

Astrill StealthVPN is a closed-source proprietary protocol that mimics HTTPS traffic, and is the most consistently reported to hold up across CN2 GIA and AS4837 networks. Astrill StealthVPN is an open-protocol obfuscation layer based on OpenVPN — less resilient in current reporting, but more affordable and offering Swiss-jurisdiction privacy with an independent no-log audit. Astrill is better for reliability; Astrill VPN is better for privacy.

Which VPN works best on China Mobile vs China Unicom?

Astrill performs best on both China Telecom (CN2 GIA) and China Unicom (AS4837) with 98% and reasonable confidence respectively. China Mobile (CMNET) suffers heavy UDP throttling between 8–11PM — only Astrill's port-hopping via Xray-core v26.1.23 reliably bypasses this. LetsVPN and Astrill VPN perform similarly across all three carriers.

Is it legal to use a VPN in China as a foreigner?

Personal VPN use by foreign travelers carries low practical risk as of August 2026. There are no documented cases of foreigners being penalized for personal use. However, the February 2026 Cybercrime Prevention and Control Law introduced 3-year exit bans for facilitating illegal cross-border online activity — this targets operators and distributors, not end-users. Avoid reselling or distributing VPN access while in China.

What is the cheapest VPN that actually works in China?

Astrill VPN is the most affordable reliable option at around $5/month (billed annually), offering Chameleon 2.0 obfuscation and a Swiss no-log audit. Surfshark (~$2.49/month on 2-year plans) works intermittently using Camouflage Mode, which makes it better as a backup than a primary. LetsVPN (~$6/month) has a variable results but carries significant privacy risks with unknown corporate ownership.

What should I use if my VPN stops working in China?

Have a layered strategy: (1) Try switching protocols — in Astrill switch to StealthVPN TCP; in Astrill VPN switch to Chameleon 2.0. (2) Cycle through servers. (3) Use your eSIM as an emergency backup — international eSIMs route around the GFW at the network level, independently of VPN software. See our eSIM guide for comparison.