How to Use a VPN in China — Stealth Mode, Best Servers and What Works in 2026

Last updated: May 2026

China operates the most sophisticated internet filtering system in the world — the Great Firewall (GFW). It blocks thousands of foreign websites and actively detects and disrupts VPN connections. For business travellers, expats, students, and tourists, getting reliable internet access in China requires preparation. This guide covers what is blocked, why standard VPNs fail, and how to set up a connection that actually works.

What Is Blocked in China

The Great Firewall blocks far more than the famous handful of services. The current scope of blocking in 2026:

Google services: Google Search, Gmail, Google Maps, Google Drive, Google Docs, Google Calendar, Google Photos, YouTube — all blocked.

Social media: Facebook, Instagram, Twitter/X, Reddit, Pinterest, Snapchat, LinkedIn (intermittently), TikTok (the international version — Chinese users have Douyin instead).

Messaging: WhatsApp, Telegram, Signal, Facebook Messenger. Chinese users use WeChat, which works for foreigners but is not a complete substitute.

Streaming and media: YouTube, Netflix, Spotify, Vimeo, Twitch, Hulu, Disney+.

News: The New York Times, BBC, Wall Street Journal, Reuters (intermittently), Bloomberg (intermittently), most Western news outlets.

Cloud services: Dropbox, Microsoft OneDrive (works partially), iCloud (works but slow), most US-hosted SaaS tools.

Other blocked services: Wikipedia (blocked in 2019), Slack (intermittent), Notion, Trello, Discord, Twitch, GitHub Pages (intermittent).

What works without a VPN: Bing (Microsoft cooperates with Chinese censorship), Apple services (with significant restrictions), Yahoo, and most Chinese alternatives (Baidu, WeChat, Weibo, Alipay).

Why Standard VPNs Fail in China

The Great Firewall uses deep packet inspection (DPI) to identify VPN protocols by their cryptographic signatures and packet patterns. When it detects a VPN connection, it blocks or disrupts it within minutes. This is what makes China different from every other restrictive country — the Gulf, Russia, and Iran detect VPNs but rarely block individual connections in real time. China actively disrupts them.

Standard OpenVPN and WireGuard connections in China typically fail within 5–30 minutes. This is why obfuscation (stealth mode) is essential. Obfuscated VPN traffic looks like normal HTTPS web browsing, which the GFW does not block.

How to Set Up a VPN for China

Step 1: Buy your VPN before you travel. This is non-negotiable. VPN provider websites — including the ones listed in any travel guide — are blocked inside China. You cannot purchase, download, or install a VPN after you arrive without significant difficulty. Buy your account at home. You can get a VPN account here.

Step 2: Install on every device you will use. Phone, laptop, tablet — install before you leave. Many travellers forget the laptop and arrive with only their phone configured.

Step 3: Enable obfuscation/stealth mode. In your VPN app’s settings, find the option for “obfuscated servers,” “stealth mode,” or “camouflage mode” and turn it on. Without this, your connection will fail in China.

Step 4: Connect to a nearby server. Best server locations from China:

• Japan (Tokyo) — lowest latency, best speed, most reliable
• Hong Kong — closest geographically, but check whether your VPN’s HK servers are still routed outside the GFW (some have been compromised)
• Singapore — reliable alternative if Japan is slow
• US West Coast — higher latency but reliable for streaming US content

Avoid US East Coast and European servers from China — the latency is too high for video calls or HD streaming.

Step 5: Test before relying on it. Try opening Google, Gmail, and YouTube in your hotel WiFi the first day. If everything works, you are set. If connections are unstable, switch obfuscation methods or server locations.

What to Do If Your VPN Stops Working in China

The Great Firewall is updated regularly, particularly during politically sensitive periods (the National Party Congress every five years, major anniversaries, and during international events). VPNs that worked yesterday can fail today. If your VPN stops working:

1. Switch obfuscation method. If your VPN offers multiple stealth protocols (Stunnel, Shadowsocks, XOR), try a different one.

2. Switch server location. Sometimes specific servers get blocked while others remain accessible. Try Japan, then Singapore, then Hong Kong.

3. Switch protocol. If WireGuard fails, try OpenVPN. If OpenVPN fails, try IKEv2.

4. Switch network. If your hotel WiFi has aggressive filtering, try mobile data (China Mobile, China Unicom, China Telecom).

5. Use a different VPN. Best practice in China is to have a backup VPN account from a different provider. When one fails, switch to the other.

Is Using a VPN Legal in China

This is a grey area. The Chinese government does not formally permit unauthorised VPN use by individuals. In 2017, China announced restrictions on VPN providers, requiring authorisation that no foreign provider has received. In practice, individual foreigners and Chinese citizens use VPNs widely without consequence. There have been a small number of fines for individuals (typically a few hundred dollars) but no significant prosecutions of foreign tourists or business travellers.

Businesses operating in China that need to access blocked services (Google, Microsoft, banking) often use authorised “leased line” connections instead of consumer VPNs. For individuals, consumer VPN use is widespread and tolerated, but legally unsupported. For a full breakdown see our are VPNs legal page.

Frequently Asked Questions

Will my VPN work in China?

It depends entirely on whether the VPN supports obfuscation and which protocols it uses. Free VPNs almost never work in China. Major commercial VPNs work intermittently — some better than others. Specialised China-focused VPNs work most reliably. Always test before travelling, and have a backup.

Can I download a VPN after I arrive in China?

Generally no. VPN provider websites are blocked, the App Store on iPhones registered in China removes most VPN apps, and Google Play is unavailable entirely. The only way to install a VPN after arriving is to use a foreign Apple ID or sideload an Android APK from a trusted source — both require setup before you arrive anyway.

Does Chinese WiFi block VPNs differently?

The Great Firewall is enforced at the national ISP level, so all Chinese networks (China Mobile, China Unicom, China Telecom, all WiFi connecting through them) apply the same filtering. Hotel WiFi may add additional restrictions on top.

Can I use a Hong Kong VPN server from mainland China?

Hong Kong is geographically and politically closest, so it has the lowest latency. However, some VPN providers’ Hong Kong servers route traffic back through the GFW, making them ineffective. Test before relying on them. Japan or Singapore servers are often more reliable.

Does WeChat work for foreigners in China?

Yes, WeChat works for everyone — it is Chinese, not blocked. However, WeChat is monitored by Chinese authorities, so do not use it for sensitive communications. WhatsApp is blocked and requires a VPN.

Will I get in trouble for using a VPN as a tourist?

No. Tourist VPN use is essentially never enforced. The 2017 regulations target VPN providers and large-scale unauthorised commercial VPN use, not individual foreigners checking Gmail. Hundreds of millions of expats and tourists use VPNs in China daily without consequence.

Are there any VPN-free alternatives to access Google in China?

Bing works (Microsoft cooperates with Chinese censorship). Yahoo works. Some specific Google services have Chinese-hosted alternatives, but for full Google functionality (Gmail, Maps, Drive, YouTube), a VPN is required.

Related Articles

• VPN Obfuscation Explained (Stealth Mode)
• Can ISPs Detect VPN Usage?
• How to Unblock WhatsApp With a VPN
• Hong Kong VPN
• Japan VPN
• Are VPNs Legal?