Bordermark

VPN for China: the law, the Great Firewall, and what actually works

Is a VPN legal in China, why most fail behind the Great Firewall, and which obfuscated providers are reported to work — a dated, sourced guide for travellers and expats. Not legal advice.

You can use a VPN in China, but it sits in a legal grey zone: only government-approved VPN services are authorised, so the consumer VPNs travellers actually want are technically unauthorised. In practice, enforcement targets the companies that sell and operate unsanctioned services, not foreign visitors — as of September 2026, no foreign tourist is known to have been penalised for personal use. The bigger day-to-day problem is technical, not legal: the Great Firewall actively detects and blocks VPN traffic, so an ordinary connection often simply fails.

One development to watch: a draft cybercrime-prevention law published in January 2026 could, if enacted, shift personal use from administrative penalties toward a criminal framework. Nothing has changed for tourists yet, but it's why we date everything and tell you to re-check before you fly. For the wider picture of how China fits among other restrictive states, see our VPN legality-by-country guide.

This is information, not legal advice. Rules and enforcement in China can change quickly and apply differently to residents, businesses and visitors. Verify the current position from an official source before you travel.

Why most VPNs don't work behind the Great Firewall

China's censorship system uses deep-packet inspection to fingerprint the signatures of common VPN protocols like OpenVPN and WireGuard, then throttles or drops that traffic. It also probes suspicious servers and blacklists their IP addresses. That's why a VPN that works perfectly at home can connect and then stall in Shanghai, and why free VPNs — which rarely invest in evasion — almost never work there.

The feature that beats this is obfuscation (also called 'stealth' or 'camouflage'), which wraps VPN traffic so it looks like ordinary encrypted web browsing. A provider also has to keep updating its servers as the firewall adapts, which is a real, ongoing engineering cost. When people ask which VPN 'works in China', they're really asking which providers keep winning that cat-and-mouse game this month.

Which VPNs are reported to work in China

Results change week to week, so treat every recommendation as dated. Among paid providers, ExpressVPN has a long track record in China and offers obfuscated servers, and NordVPN provides obfuscated (stealth) servers as well; Surfshark includes a camouflage mode. Those are affiliate links — we may earn a commission, which never changes what we report here.

Two names we earn nothing from deserve special mention for China. Astrill is built around a China audience and its StealthVPN protocol is widely cited by long-term residents; Mullvad runs no affiliate program at all and is respected for its privacy engineering. We recommend them on the merits precisely because there's no payout involved — independence is the whole point when the stakes are this specific.

Set up your VPN before you arrive

This is the single most important practical step: install, sign in and test your VPN before you enter China. Provider websites and app-store listings are frequently blocked inside the country, so downloading or activating one after you land is difficult. A short pre-trip checklist:

  1. Install the app and sign in while you're still on an open network at home.
  2. Turn on obfuscation/stealth mode and note two or three nearby server locations (Hong Kong, Japan, Singapore) that are working.
  3. Enable the kill switch so nothing leaks if the tunnel drops on an unstable connection.
  4. Save the provider's support contact and any manual-configuration details offline, in case the app needs reconfiguring.
  5. Consider a China-specific eSIM with international roaming as a backup route to the open internet.

What a VPN can and can't do for you in China

Used sensibly, a VPN restores access to home services — your bank, email, maps, workplace tools and messaging — that you rely on and that may be blocked or degraded locally. That's a legitimate reason to run one. What it can't do is make you anonymous or place you above Chinese law: it shifts your trust to the provider, and it doesn't change the rules on what's legal to access or publish while you're physically in the country. Keep your use to ordinary connectivity and privacy, not to anything that would be an offence locally.

Frequently asked questions

Is it illegal for a tourist to use a VPN in China?
Using an unauthorised VPN is technically not permitted, since only government-approved services are authorised. However, enforcement focuses on providers rather than users, and no foreign tourist is known to have been penalised for personal use as of September 2026. It remains a grey area, and a draft 2026 law could tighten it, so check the current position before you travel.
Which VPN works best in China in 2026?
There's no permanent winner because the Great Firewall constantly adapts. Providers frequently reported to work include ExpressVPN, NordVPN and Surfshark (all with obfuscation/stealth modes), plus Astrill and Mullvad, which we earn nothing from. Choose one with obfuscation and a track record of updating for China, and set it up before you arrive.
Do free VPNs work in China?
Rarely. Free VPNs seldom invest in the obfuscation and constant server updates needed to beat deep-packet inspection, so they're usually detected and blocked. Some free apps also monetise by logging or selling data, which is exactly the wrong trade-off in a censored network. For China, a reputable paid provider with stealth features is the practical choice.
Why won't my VPN connect once I'm in China?
The Great Firewall fingerprints common VPN protocols and blocks their traffic, so a standard connection often stalls. Switch on your provider's obfuscation or stealth mode, try a different nearby server, and update the app. Because download sites are blocked locally, it's far easier if you installed and tested everything before entering the country.
Can I use a VPN to access my home bank and email in China?
Yes — connecting to a server in your home country can restore access to banking, email and workplace tools that are blocked or degraded in China, which is a legitimate use. It isn't guaranteed, since some services detect VPN IPs, and it doesn't override local law. Keep your use to ordinary connectivity and privacy.