Disclosure: VPNFin is reader-supported. If you buy a VPN through links on this page, we may earn a commission at no extra cost to you. This never affects our ratings — here’s our full disclosure.
Choosing a VPN for China comes down to one test: does it still connect after the Great Firewall has had a look at it? Most providers fail. In VPNPicked’s June 2026 retest, Mullvad, Proton VPN and Private Internet Access each failed more than three quarters of connection attempts, while ExpressVPN and Astrill connected every time.
This guide sets out which VPNs published 2026 tests found working in China, how to set each up before you land, and what the law says about using one. The short version: pick an obfuscation-capable provider, install it at home, and keep a second one ready.
VPN for China: The Short Answer
ExpressVPN is the most reliable mainstream VPN for China. It connected in every VPNPicked attempt, ranked first overall at GreatFirewallGuide, and switches on obfuscation automatically. Our ExpressVPN review covers the rest.
Astrill has the strongest raw record, at 98% on China Telecom in GreatFirewallGuide’s April tests, but it costs $30 a month and has no audit. NordVPN and Surfshark work with the right settings, and TorGuard suits technical users.
Using an unapproved VPN in China is a regulatory violation, with an individual fine of up to RMB 5,000, as our China legality page explains.
Which VPNs Work in China in 2026
| VPN | 2026 test results | What to switch on |
|---|---|---|
| ExpressVPN | 100% of attempts (VPNPicked); 85%, ranked 1st (GreatFirewallGuide) | Nothing: obfuscation is automatic |
| Astrill | 100% (VPNPicked); 98%, ranked 4th on cost (GreatFirewallGuide) | StealthVPN or OpenWeb |
| Surfshark | 92% (VPNPicked); 65% (GreatFirewallGuide) | OpenVPN over TCP, NoBorders |
| NordVPN | 86% (VPNPicked); results vary by protocol | NordWhisper or obfuscated servers |
| TorGuard | 78%, ranked 2nd (GreatFirewallGuide) | Stealth VPN or Stealth Proxy |
The two testers measured differently. VPNPicked counted connection attempts in a June retest; GreatFirewallGuide scored success on specific Chinese carriers in April and ranked providers on price and ease as well. So the numbers are not interchangeable, but the order is broadly consistent.
Mullvad, Proton VPN and PIA failed most attempts in VPNPicked’s test. They are strong privacy tools elsewhere, but not for this job. PIA’s result also shows that ownership guarantees nothing: it shares a parent, Kape Technologies, with ExpressVPN.
The Best Picks, One by One
ExpressVPN. Its Lightway protocol engages obfuscation on its own when it detects a Chinese network, which is why testers found it the simplest to live with. Gizmodo noted it slips mainly around politically sensitive dates. On its current offer, Basic costs $83.72 for 28 months, then $99.95 a year. ExpressVPN vs Astrill compares it with the specialist.
Astrill. Built for the Great Firewall, it is the one expats recommend to each other, and its StealthVPN protocol is aggressive. It costs $300 for two years, logs some session data while connected, and reviewers dispute its refund policy. Our Astrill review covers the trade-offs.
NordVPN. Standard NordLynx connections are blocked within seconds, but NordWhisper and obfuscated OpenVPN servers held up in spring and June 2026 tests. SafetyDetectives, however, reported in February that it did not work, so treat it as something to test. NordVPN vs Astrill sets out the evidence.
Surfshark. It needs OpenVPN over TCP, which turns on Camouflage Mode, plus NoBorders. Results range from 65% to 92% depending on the tester, and it shares a parent, Nord Security, with NordVPN. Surfshark vs Astrill explains the gap.
TorGuard. Its Stealth VPN servers and Stealth Proxy scored 78% with GreatFirewallGuide, and it suits technical users who want dedicated IPs. TorGuard vs Astrill compares the two stealth specialists.
Setting Up a VPN for China Before You Fly
Install everything at home. From a mainland connection, the App Store, Google Play and most VPN websites are unreachable. Download the apps, log in on every device, and save server lists before you leave.
Switch to the right protocol in advance. ExpressVPN needs nothing; NordVPN needs NordWhisper or obfuscated servers; Surfshark needs OpenVPN over TCP and NoBorders; Astrill needs StealthVPN or OpenWeb. Our obfuscation guide explains why these modes work.
Turn on the kill switch, so a dropped connection does not expose your traffic, as our kill switch guide explains. Choose servers in Hong Kong, Japan, Taiwan or Singapore for the shortest routes.
Carry two providers. Testers agree that filtering tightens around sensitive dates. A second VPN, or a saved manual configuration, is cheap insurance. Our travel guide covers the rest of the preparation.
What the Law Says
The rules name the user. China’s implementing regulations set an administrative fine of up to RMB 5,000 for an individual who connects through an unapproved channel, and RMB 15,000 for an organisation. Criminal prosecution has been reserved for operators and sellers.
Enforcement is uneven. Many business travellers and expats use VPNs without incident, but the US State Department’s advisory warns of device confiscation, fines and detention among possible outcomes. Our legality page, linked above, sets out the detail.
| Country | What the rule aims at | Reaches the user? |
|---|---|---|
| Turkey | The tunnel — ISPs must block | No |
| The UAE | Conduct behind an address | No |
| India | The provider's records | Not nationally |
| China | Provider, tunnel and user | Yes |
| Brazil | Nothing, until a court acts | For 39 days |
| Indonesia | Paperwork — registration | No |
| The UK | The destination you visit | No, and ministers said so |
| The US | The platform, state by state | No, in all twenty-seven |
| Russia | The search, not the tool | Only if you went looking |
| Australia | The platform, and the tunnel itself | No — platforms must detect it |
| France | The VPN provider itself | No, the orders bind five companies |
| Italy | The provider, by regulator order | No, but one VPN left the market |
| Spain | The provider, by injunction without a hearing | No, and only two firms were named |
| Germany | The provider's logfile, for three months | No, and the courts twice removed it |
If the VPN Stops Working
Change protocol first, then server. Switching between TCP and UDP, or between a stealth protocol and a standard one, often restores a connection the firewall has started throttling.
Try a different region. Hong Kong and Japan are the usual first choices, but a server a little further away can survive when the nearest ones are filtered. Our troubleshooting guide and our guide to checking a VPN cover the rest.
How We Research
The China results come from VPNPicked’s June 2026 retest, GreatFirewallGuide’s reviews published in April 2026, Gizmodo, Technerdo and SafetyDetectives, each named where used and read in September 2026. Prices come from the providers’ own pages, read on 25 September 2026. China’s legal position comes from our legality page, which cites the implementing regulations and the US State Department advisory. We do not run our own tests. Our full approach lives on the About Us page.
VPN for China FAQ
On 2026 tests, ExpressVPN and Astrill. Both connected in every VPNPicked attempt in June, and Astrill scored 98% with GreatFirewallGuide. ExpressVPN is simpler and cheaper; Astrill is the specialist.
With NordWhisper or obfuscated servers, often yes: VPNPicked recorded 86% of attempts in June 2026. Standard NordLynx connections are blocked, and one February report found it not working at all.
Using an unapproved VPN is a regulatory violation. The rules set an individual fine of up to RMB 5,000. Enforcement is uneven, but the rule names the user.
Rarely. The App Store, Google Play and most VPN websites are blocked from mainland connections. Install and log in before you travel.
Not reliably. In VPNPicked’s test even Proton VPN, which has a respected free tier, failed most attempts. Use a paid provider with obfuscation.
The Verdict
For most visitors, the best VPN for China is ExpressVPN: it works with no settings to change and a 30-day refund if your network defeats it. For long stays where a failed connection costs more than the subscription, Astrill’s record justifies its price.
Whichever you choose, install it at home, switch on its stealth mode before you land, and carry a second option.