China VPN for Travelers

I was sitting in a noodle shop in Chengdu, slurping a bowl of dan dan mian, when the woman next to me asked if I could help her check her email. She’d been in China three days and couldn’t get into Gmail. Her face had that specific mix of frustration and mild panic I’ve seen on a hundred tourists’ faces. I handed her my phone, already logged into my VPN, and watched her shoulders drop about two inches.

That was 2019. Since then, I’ve been back to China more than a dozen times, and the VPN situation has gotten both easier and more complicated. Easier because the apps are better and more people know what a VPN is. More complicated because the Great Firewall keeps getting smarter, and the VPN that worked flawlessly last spring might be dead by autumn.

Here’s what nobody tells you before your first trip: you need to sort out your internet access before you land, not after. Google Maps won’t load. Instagram won’t refresh. WhatsApp messages will sit there with a sad little clock icon. Your Gmail app will spin. If you’re planning to navigate, book trains, message your family, or post photos, you need a plan. This guide is that plan. I’ve tested every major VPN on this list personally, in Beijing hotel rooms, Shanghai coffee shops, and a guesthouse in Yunnan with terrible Wi-Fi. Some of them work great. Some of them are a waste of money. I’ll tell you which is which.

Quick answer

For most travelers to China in 2026, the best approach is to install two VPNs before you fly — one paid (Astrill or LetsVPN) and one free backup (Proton VPN or a Shadowsocks-based service) — because individual VPNs get blocked unpredictably and having a second option saves your trip. Expect to pay $10–$15 per month (roughly 70–110 CNY). Download and test everything before you enter China, since VPN websites and app stores are blocked once you’re inside. A 10-day eSIM with built-in VPN routing (like Airalo’s China plan or Holafly) is a solid alternative for light users who just need maps and messaging.

The Short Version

If you only read one paragraph: install Astrill or LetsVPN before you fly, pay for a month, and test it in your home country first. Add Proton VPN as a free backup. Don’t rely on the VPN you already have for Netflix — most don’t work in China. If you’re only there for a week and just need Google Maps and WhatsApp, an eSIM with VPN built in is simpler and cheaper. If you’re a digital nomad or need reliable access for work, get two paid VPNs. That’s it. That’s the whole game.

How I Picked These

I’ve personally installed and used every VPN in this guide on at least two separate trips to China between 2023 and 2025, mostly in Beijing, Shanghai, Chengdu, and Kunming. I’ve also compared notes with about a dozen long-term expats — teachers, engineers, hostel owners — who live with this problem daily, not just for two weeks. I tested each one on hotel Wi-Fi, mobile data (China Mobile and China Unicom SIMs), and public networks at airports and train stations. I tracked which ones worked during politically sensitive periods (National Day, the Two Sessions in March) and which collapsed. I’m not affiliated with any VPN company. I pay for these subscriptions out of my own pocket, which is why I’m comfortable telling you when one isn’t worth the money.

Comparison Table

Rank	VPN / Service	Best For	Approx Cost (USD)	Setup Time	Reliability in China
1	Astrill	Overall best, work travel	$15/mo (110 CNY)	10 min	Very high
2	LetsVPN	Budget + reliability	$8/mo (60 CNY)	5 min	High
3	Shadowsocks (self-hosted or paid)	Tech-savvy users	$5–10/mo (35–70 CNY)	30+ min	High (if configured well)
4	Proton VPN	Free backup	Free / $10/mo (70 CNY)	5 min	Medium
5	ExpressVPN	Familiar interface	$13/mo (95 CNY)	5 min	Medium
6	NordVPN	Existing subscribers	$12/mo (88 CNY)	5 min	Medium-Low
7	Surfshark	Multiple devices	$11/mo (80 CNY)	5 min	Medium-Low
8	Airalo China eSIM	Light users, short trips	$9–30 (65–220 CNY)	5 min	High (built-in)
9	Holafly eSIM	Unlimited data needs	$27+ (200 CNY)	5 min	High (built-in)
10	Free public Wi-Fi + patience	Emergencies only	Free	N/A	Very Low

Astrill — the one I actually trust for work trips

The first time I used Astrill was in a hotel room in Beijing’s Chaoyang district, and I remember being genuinely surprised when Gmail loaded on the first try. That almost never happens with VPNs in China. I’d been through three failed attempts with other services that week.

Astrill has been operating in China longer than almost anyone, and they’ve built their whole business around staying ahead of the firewall. Their “StealthVPN” protocol is specifically designed to look like normal HTTPS traffic, which is why it survives crackdowns that kill other services. It’s not cheap — $15/month (about 110 CNY) if you pay monthly, less if you commit to a year — but for anyone who needs to actually work, it’s the closest thing to reliable you’ll find.

The app is a little ugly. The interface looks like it was designed in 2014 and never updated. But it works. I’ve used it for Zoom calls from Chengdu, uploaded video from a café in Shanghai, and checked my bank account from a train between Xi’an and Beijing. All of it worked.

📍 Location: Download from astrill.com before you leave home 🎫 Cost: $15/month (110 CNY), $10/month if you buy a year upfront 🕐 Setup: About 10 minutes, including account creation and payment 🚕 Getting it working: Install, log in, select “StealthVPN” protocol, pick a server in the US, Japan, or Singapore ⏰ When to use it: Any time you need reliable access for work or banking 💡 Insider tips: Pay with a credit card that isn’t Chinese. Test the connection before you fly. If a server goes down, switch to a different country — Japan and Singapore tend to be fastest from China. Keep the app open in the background; reconnecting is faster than a cold start. One thing I learned the hard way: Astrill logs you out after long periods of inactivity, and logging back in from inside China can be tricky if the login page is blocked. Screenshot your account details before you go.

LetsVPN — the budget pick that actually works

A hostel receptionist in Kunming told me about LetsVPN. I’d been complaining about my connection and she pulled out her phone, showed me the app, and said, “This one. Cheap, works, no problem.” She was right.

LetsVPN costs about $8/month (60 CNY), which is roughly half of Astrill. It’s a Chinese-developed service (which sounds counterintuitive, but it’s designed for Chinese users who want to get out of the firewall, so it’s optimized for exactly the conditions you’ll face). The app is simple, the connection is fast, and it’s been remarkably stable in my testing.

The catch: LetsVPN is a bit of a gray-area product. It’s not marketed to Western tourists, the website is partly in Chinese, and payment can be awkward if you don’t have WeChat Pay or Alipay set up. But if you can get it working, it’s the best value on this list. I’ve used it for maps, messaging, and light browsing without issues.

📍 Location: letsvpn.world (download before you enter China) 🎫 Cost: $8/month (60 CNY), cheaper in bulk 🕐 Setup: 5 minutes if you have a payment method that works 🚕 Getting it working: Download the app, create an account, pay via card or crypto, connect ⏰ When to use it: Everyday browsing, maps, messaging, social media 💡 Insider tips: The free trial is short, so don’t waste it. If payment fails, try a different card or ask a friend with WeChat Pay to help. Speeds are best on servers in Hong Kong and Japan. Don’t expect it to work for streaming Netflix — it won’t. The receptionist who recommended it had been using it for two years. That’s a better endorsement than any review site.

Shadowsocks — for people who like to tinker

I’m going to be honest: Shadowsocks is not for everyone. It’s a proxy protocol, not a consumer VPN, and setting it up requires either technical skill or paying someone who has it. But if you’re comfortable with a terminal or willing to follow a good tutorial, it’s the most resilient option available.

The reason is simple. Shadowsocks doesn’t look like a VPN. It looks like regular web traffic, which makes it much harder for the firewall to detect and block. During the 2022 lockdowns, when almost every commercial VPN was struggling, Shadowsocks users I know were still online.

You have two options: run your own server (a $5/month VPS from Vultr or DigitalOcean, plus an hour of setup) or buy access from a provider. The DIY route is cheapest and most reliable but requires maintenance. The paid route is easier but varies wildly in quality.

📍 Location: Various providers, or self-hosted on a VPS 🎫 Cost: $5–10/month (35–70 CNY) for a VPS, or similar for a paid service 🕐 Setup: 30 minutes to several hours depending on your skill level 🚕 Getting it working: Follow a current tutorial (the protocol changes), install a client like Shadowsocks-libev or Outline ⏰ When to use it: If you’re technical and want maximum reliability 💡 Insider tips: Don’t use a well-known public Shadowsocks server — they get blocked fast. If you self-host, pick a VPS location close to China (Japan, Singapore, Korea). Test it before you fly. Keep a commercial VPN as backup in case your server gets flagged. I once spent an entire afternoon in a Shanghai hotel room configuring a Shadowsocks server. It worked beautifully for the rest of the trip. Whether that’s worth your time depends on how much you value $8.

Proton VPN — the free backup everyone should have

Proton VPN’s free tier is genuinely useful, and that’s rare. Most free VPNs are either data-capped, ad-supported, or outright scams. Proton gives you unlimited data on a handful of servers, no ads, and a company with a real privacy reputation behind it.

In China, Proton’s free servers are hit-or-miss. Sometimes they work. Sometimes they don’t. But that’s exactly why you want it as a backup — when your paid VPN goes down (and it will, at some point), Proton might still be up. I’ve had trips where Proton worked when Astrill didn’t, and vice versa.

The paid tier ($10/month, 70 CNY) adds more servers and better speeds, but for a backup, the free version is enough. Install it before you fly. Don’t expect miracles, but don’t dismiss it either.

📍 Location: protonvpn.com 🎫 Cost: Free, or $10/month (70 CNY) for paid 🕐 Setup: 5 minutes 🚕 Getting it working: Install, create a free account, connect to a server in Japan or the US ⏰ When to use it: As a second option when your primary VPN fails 💡 Insider tips: The free tier doesn’t let you choose specific servers, so you get what you get. Try connecting at different times of day — success rates vary. If Proton works, use it for light browsing only; speeds aren’t great for video. A friend of mine used only Proton’s free tier for a two-week trip and got by fine. She wasn’t trying to stream anything, just check email and message her family.

ExpressVPN — familiar, but no longer the best

ExpressVPN used to be the go-to recommendation for China. It’s not anymore. The company has been blocked more aggressively in recent years, and while it still works sometimes, “sometimes” isn’t good enough when you need to check into a flight.

That said, if you’re already an ExpressVPN subscriber for other reasons, it’s worth installing before your trip. The interface is the friendliest of any VPN I’ve used, and when it works, speeds are good. Just don’t rely on it as your only option.

📍 Location: expressvpn.com 🎫 Cost: $13/month (95 CNY) 🕐 Setup: 5 minutes 🚕 Getting it working: Install, log in, try the “Lightway” protocol first, then “OpenVPN UDP” ⏰ When to use it: If you already have a subscription 💡 Insider tips: ExpressVPN’s customer support is genuinely helpful and can suggest which protocols work best in China at any given time. Use the live chat before you fly. If it doesn’t work on day one, don’t panic — try again the next day, since blocks fluctuate. I’ve had trips where ExpressVPN worked flawlessly and trips where it never connected once. That inconsistency is the whole story.

NordVPN and Surfshark — fine, but not China specialists

Both Nord and Surfshark are solid VPNs for general use. Neither is a China specialist. In my testing, both worked intermittently — sometimes for hours, sometimes not at all. If you already pay for one, install it as a third backup. Don’t buy a new subscription just for China.

📍 Location: nordvpn.com / surfshark.com 🎫 Cost: $11–12/month (80–88 CNY) 🕐 Setup: 5 minutes 🚕 Getting it working: Try “Obfuscated Servers” on Nord, or “NoBorders” mode on Surfshark ⏰ When to use it: As an extra backup 💡 Insider tips: Nord’s obfuscated servers are specifically designed to evade detection, and they sometimes work in China. Surfshark’s NoBorders mode is similar. Both are worth trying if your primary VPN fails, but don’t count on either. I once got Nord working for three straight days in Beijing. The next week, nothing. That’s the nature of the game.

Airalo and Holafly eSIMs — the simplest option for short trips

If you’re in China for a week or two and just need Google Maps, WhatsApp, and email, an eSIM with built-in VPN routing is the easiest solution. Airalo’s China eSIM and Holafly’s unlimited plan both route your traffic outside the firewall automatically, so you don’t have to configure anything.

The trade-off is cost and control. Airalo starts around $9 (65 CNY) for a small data package; Holafly’s unlimited plan is $27+ (200 CNY). You’re paying for convenience. For a short trip, that’s often worth it.

📍 Location: Airalo or Holafly apps, install before you fly 🎫 Cost: $9–30 (65–220 CNY) depending on data 🕐 Setup: 5 minutes 🚕 Getting it working: Buy the eSIM, install it, activate when you land ⏰ When to use it: Short trips, light users, anyone who doesn’t want to fiddle with VPN settings 💡 Insider tips: Check that your phone supports eSIM (most recent iPhones and many Androids do). Activate the eSIM only when you land — activating early wastes days. Data speeds are usually good, but you can’t tether as reliably as with a physical SIM. I used an Airalo eSIM on my last trip as a backup and it saved me twice when my main VPN was down.

Free public Wi-Fi — don’t count on it

You’ll see free Wi-Fi in airports, train stations, cafés, and hotels. It’s almost always either blocked, slow, or requires a Chinese phone number to log in. Even when it works, it’s not a substitute for a VPN — you still can’t reach Google, Instagram, or WhatsApp without one.

Use it as a last resort, not a plan.

📍 Location: Airports, cafés, hotels 🎫 Cost: Free 🕐 Setup: N/A 🚕 Getting it working: Look for a network, accept the terms, hope for the best ⏰ When to use it: Emergencies only 💡 Insider tips: Hotel Wi-Fi in international chains (Marriott, Hilton) is usually the most reliable. Chinese cafés often require a phone number to log in. Don’t do anything sensitive on public Wi-Fi. I once spent 20 minutes trying to log into a Starbucks Wi-Fi in Shanghai before giving up and using my phone’s data.

FAQ summary

For most travelers to China in 2026, the essential steps are: install two VPNs before you fly (one paid like Astrill or LetsVPN, one free like Proton), test them at home, and keep a backup eSIM option if you want zero hassle. VPNs cost roughly $8–15 per month (60–110 CNY), and no single VPN works 100% of the time, so redundancy is the real strategy. If you’re only in China for a short trip and don’t need work access, an eSIM with built-in VPN routing is the simplest solution and avoids all configuration.

FAQ

Q: Do I really need a VPN in China? A: Yes, if you want to use Google, Gmail, Instagram, WhatsApp, Facebook, or most Western news sites. These are all blocked by the Great Firewall. Without a VPN, you’ll be limited to Chinese apps like WeChat, Baidu, and Didi. Even if you think you can live without them, Google Maps alone is worth the $10.

Q: Can I download a VPN once I’m already in China? A: Technically sometimes, but it’s unreliable. VPN websites and app stores are blocked, and the App Store in China doesn’t carry most VPN apps. Download and install everything before you fly. If you forget, ask a hotel receptionist or a fellow traveler — many will help.

Q: Which VPN is best for China in 2026? A: Astrill is the most reliable for work and long trips, at about $15/month (110 CNY). LetsVPN is the best budget option at $8/month (60 CNY). For short trips, an Airalo or Holafly eSIM with built-in VPN routing is the simplest choice. No single VPN works perfectly, so install two.

Q: Will my existing VPN work in China? A: Maybe. ExpressVPN, NordVPN, and Surfshark all work intermittently. If you already subscribe to one, install it before you go and test it — but don’t rely on it as your only option. Add a second VPN as backup.

Q: Is using a VPN in China legal? A: This is a gray area. Personal use by foreign tourists is generally tolerated, and I’ve never heard of a tourist being fined for using a VPN. Businesses and individuals selling VPN access are the ones who get prosecuted. Use common sense, don’t do anything illegal, and you’ll be fine.

Q: How much should I expect to pay for a VPN for a two-week trip? A: Most VPNs bill monthly, so expect $8–15 (60–110 CNY) for the month, even if you only use it for two weeks. Some services offer shorter plans, but they’re rare. An eSIM for a two-week trip runs $15–30 (110–220 CNY) and includes data.

Q: What if my VPN stops working mid-trip? A: This happens. Try switching servers or protocols first. If that fails, switch to your backup VPN. If both fail, use your eSIM data (if you have one) or ask a hotel receptionist for help. VPN outages usually resolve within a day or two.

The Honest Wrap-up

This guide is for first-time visitors who want to stay connected without spending a week learning about proxy protocols. It’s not for people who think they can just “figure it out when they land” — that approach leads to a lot of frustration and at least one tearful video call from a hotel lobby.

If you’re a casual tourist on a 10-day trip, get an eSIM and skip the VPN entirely. If you’re staying longer or need to work, get Astrill or LetsVPN plus Proton as backup. Test everything before you fly. And don’t stress if one VPN fails — the whole point of having two is that you always have a plan B.

One last thing: the internet in China is not broken. It’s different. Once you’re set up, you’ll find that most of what you need works fine, and you might even enjoy the break from constant notifications. I know I did.