Arriving in Beijing or Shanghai often means losing access to Google Maps, WhatsApp, and Instagram within hours of landing. China's Great Firewall blocks these services and thousands of other websites, and it also detects and blocks most commercial virtual private networks, the tools people rely on to reach them. For anyone planning a trip or a long stay, the practical question is no longer which VPN is fastest, but how to prepare a setup that has a reasonable chance of working on a given day.
Why the Setup Happens Before You Fly
Most of the groundwork has to be done at home. VPN company websites are blocked on the mainland, Google Play does not function there, and Apple's Chinese App Store does not carry foreign VPN apps. A traveler who has not installed and signed in to a VPN before boarding may find it nearly impossible to fix the problem after landing.
Providers themselves are cautious about the destination. None of the major services we reviewed promises that its software will work in China, and most say so openly. Their guidance tends to focus on steps that improve the odds: installing apps on every device, keeping a second service as a backup, testing obfuscation settings before departure, and saving manual configuration files in case the app itself fails.
How the Firewall Detects VPNs, and How Providers Respond
The Great Firewall relies on several methods at once. It blocks the IP addresses of known VPN servers, filters domain names and keywords, and inspects traffic for patterns that standard VPN protocols produce. When a connection looks suspicious, it can probe the server to confirm whether it is a VPN. Researchers have reported that the system has also flagged fully encrypted traffic that does not resemble any recognized protocol.
Obfuscation is the countermeasure. Obfuscated VPN traffic is designed to resemble ordinary web browsing or other common encrypted traffic, which makes it harder to single out. Providers implement this differently: some disguise the protocol itself, others wrap it inside a proxy layer, and some offer several methods so users can switch when one stops working. Blocking also varies by region, carrier, and time, and disruptions tend to rise around politically sensitive dates.
Choosing a Service and Keeping a Backup
Among the providers we examined, NordVPN, Proton VPN, and ExpressVPN each offer obfuscation built into their apps, with NordVPN additionally providing a manual IKEv2 configuration as a fallback. Surfshark recommends a manual WireGuard setup for users who cannot connect through its app, and Mullvad, which has a strong privacy reputation, has stated that the firewall blocks its Asian servers, leaving US locations as the usual option. Astrill is designed for heavy daily use and is priced accordingly, while LetsVPN paused service for mainland users in April 2026 and has since resumed without promising that it works there.
Speed tests in Hong Kong, the closest test location to the mainland, showed that obfuscation reduces performance to varying degrees. Download speeds generally stayed high enough for 4K video, but upload speeds fell noticeably on several services, which affects video calls and large file transfers. Results also depend on time of day, since international links tend to be busiest in the evening China time.
A second VPN installed beside the first is the most common recommendation, ideally one using a different obfuscation method. A travel eSIM is another useful layer: it can provide mobile data that does not depend on a VPN, though it does not encrypt traffic and does not cover hotel Wi-Fi or laptops.
Legal Context and Practical Limits
Only government-approved VPN services are legal in China, and none of the providers discussed here is approved. The US State Department has warned that using a VPN there is illegal in most cases and can lead to fines, detention, or confiscation of devices. Enforcement has focused mainly on sellers of VPN access, though individual users have been fined in documented cases. Hong Kong and Macau have different rules, and VPNs are legal in both.
The practical lesson is that no VPN can guarantee access in China, and travelers should plan accordingly. Install and test the software before departure, keep a backup, store manual configurations offline, and expect that some services will fail during periods of tighter control. For everyday use outside China, the same privacy considerations, from logging policies to jurisdiction, apply, and they are worth weighing against the convenience and speed each service offers.
