China's Great Firewall blocks thousands of Western sites and apps. Here's everything you need to stay connected — and what you must set up before you board.
Install Your VPN Before You Arrive — No Exceptions
VPN provider websites are blocked in China. You cannot download or purchase a VPN once you're inside the country. If you arrive without one, you're stuck. Set it up at home, test it works, then board your flight. Everything else on this page assumes you've done this first.
🧱
The Great Firewall — What Is It?
Understanding China's internet censorship system
The Golden Shield Project — universally known as the "Great Firewall" — is China's national internet censorship and surveillance system. It blocks access to thousands of foreign websites, apps, and services, and filters content across all internet connections within mainland China.
It is not a glitch, a regional issue, or something that varies by hotel. It applies everywhere in mainland China, on all networks — hotel Wi-Fi, local SIM cards, mobile data, everything. Hong Kong and Macau are exempt.
The practical effect for foreign travellers: Google, WhatsApp, Instagram, most Western news sites, and thousands of other services are completely inaccessible without a VPN. This affects everything from looking up directions to messaging family at home.
Hong Kong and Macau are different. The Great Firewall does not apply in Hong Kong or Macau — these operate under "one country, two systems" with unrestricted internet. If you're visiting both mainland China and HK/Macau, your VPN is only needed for the mainland portion.
📵
What's blocked
Google (all services), Facebook, Instagram, WhatsApp, Twitter/X, YouTube, Netflix, Spotify, most Western news sites, many VPN websites, and thousands more.
✅
What works fine
WeChat, Alipay, Baidu, all Chinese apps, TikTok's Chinese version (Douyin), local streaming, and most international apps not based on Google infrastructure.
⚖️
Is VPN use legal?
Technically, only government-approved VPNs are legal in China. In practice, foreign tourists using VPNs are not prosecuted. Millions of Chinese people also use VPNs without legal consequence. No tourist has ever been prosecuted for personal VPN use.
🔒
Choosing a VPN for China
Not all VPNs work in China — these ones do
China's firewall actively detects and blocks VPN traffic. Many popular VPNs that work everywhere else in the world simply don't work in China. The VPNs below have a consistent track record of working — though no VPN is 100% reliable 100% of the time, especially around sensitive political dates.
⭐ Most Reliable
Astrill VPN
★★★★★
The go-to choice for people who need reliable China connectivity. StealthVPN protocol is specifically designed to bypass the firewall. Consistently rated the best-performing VPN in China by expats and frequent visitors.
StealthVPN protocol beats the firewall
Fast speeds, good for streaming
Reliable even during sensitive periods
Good apps for all platforms
More expensive than competitors
No free trial
~$10–15/month (cheaper on longer plans)
⭐ Best Value
ExpressVPN
★★★★½
Consistently works in China with their Lightway protocol. One of the most widely used VPNs globally — large server network, easy apps, and a 30-day money-back guarantee makes it low-risk to try.
Works reliably in China
Very easy to use
30-day money-back guarantee
Fast global servers
Occasionally slower during firewall crackdowns
Slightly pricier than NordVPN
~$6–13/month depending on plan
NordVPN
★★★★
One of the most popular VPNs worldwide. Works in China but can be inconsistent — some servers work better than others. Obfuscated servers (found in settings) are essential for China use.
Affordable pricing
Large server network
Good apps
Must use obfuscated servers in China
Reliability varies more than Astrill/Express
~$3–5/month on longer plans
Surfshark
★★★½
Budget-friendly option that works in China. Not as consistently reliable as the top two, but a reasonable choice for short trips or budget travellers. Enable NoBorders mode for China.
Very cheap on long plans
Unlimited devices
NoBorders mode for China
Less reliable than premium options
Speeds can be slower
~$2–5/month on 2-year plan
Free VPNs do not reliably work in China and many have serious privacy concerns. During politically sensitive periods (major holidays, party meetings, anniversaries), even the best VPNs can experience slowdowns. This is temporary — reliability returns to normal after a few days.
Buy a plan with a money-back guarantee (ExpressVPN, NordVPN, Surfshark all offer 30 days). Test it thoroughly before your trip — connect to a server, check that Google loads, try a YouTube video. If it doesn't work, get a refund and try another provider.
⚙️
Step-by-Step Setup Guide
Do all of this at home before you travel
Setting up a VPN for China is straightforward — the only rule is that everything must be done before you arrive. Once you're in China, the provider's website is blocked and you can't purchase, download, or configure anything.
1
Choose and purchase a VPN
Pick one of the recommended providers above (Astrill or ExpressVPN for reliability). Purchase at least a 1-month plan. Use a credit card — easier to claim a refund if needed.
2
Download the app on all your devices
Install the VPN app on your phone, tablet, and laptop. Do this while you still have unrestricted internet access. Log in and confirm your account works.
3
Enable the China-specific settings
Most VPNs have a special mode for China — Astrill's "StealthVPN", ExpressVPN's "Lightway", NordVPN's "Obfuscated servers", Surfshark's "NoBorders". Find and enable this before your trip, not after.
4
Test it — actually test it
Connect to a server and open Google, YouTube, and Instagram. If they load, your VPN is working. Try servers in nearby countries (Japan, Singapore, Hong Kong, South Korea) — these tend to work best from China.
5
Save the VPN app to your home screen
Make it easy to find and activate when you land. Also note your VPN login details somewhere offline (e.g. a note in your phone) — you don't want to need your email to log in while already in China.
6
Know which servers to try if one doesn't work
If your usual server stops working in China, switch to another country. Japan, South Korea, Singapore, and Taiwan typically offer the best speeds from China. Having 2–3 server options saved is smart.
On arrival: Connect to your VPN as soon as you're on Chinese Wi-Fi or data. You don't need to turn it on for everything — WeChat, Alipay, DiDi, and Chinese apps all work better without the VPN. Turn it on only when you need to access blocked sites, and turn it off when you're done.
🍎
iPhone / iPad
Download VPN from the App Store before departure. iOS VPN apps work well — the VPN runs system-wide. You can also set up a VPN profile in Settings → VPN if your provider supports IKEv2.
🤖
Android
Download from Google Play before arrival. If you forget, download the APK directly from the provider's website via a non-Chinese connection. Some providers also offer OpenVPN config files as a backup.
💻
Laptop (Mac / Windows)
Download the desktop app before departure. Also save the provider's OpenVPN or WireGuard config files offline — these work as a backup if the main app stops connecting.
🚫
What's Blocked in China
A practical guide to what works and what doesn't
Service / App
Status
Notes
Google Search
Blocked
All Google services are blocked — Search, Maps, Drive, Gmail, Translate, Meet
YouTube
Blocked
Use Bilibili (哔哩哔哩) as an alternative for video content
WhatsApp
Blocked
Switch to WeChat for local communication; use WhatsApp with VPN
Instagram
Blocked
Xiaohongshu (小红书 / RedNote) is China's equivalent
Facebook
Blocked
Blocked since 2009
Twitter / X
Blocked
Blocked since 2009; Weibo (微博) is the Chinese equivalent
TikTok
Blocked
TikTok is not available in China — Douyin (抖音) is the separate Chinese version
Netflix / Spotify
Blocked
Use iQiyi, Youku (video) or NetEase Cloud Music (audio) locally
BBC / NYT / Guardian
Blocked
Most major Western news sites are blocked
Gmail
Blocked
Access via VPN, or use the Gmail mobile app (sometimes works via IMAP)
Dropbox / Google Drive
Blocked
Download files before arrival or use Baidu Cloud (百度网盘) locally
Telegram
Blocked
Use WeChat or Signal (with VPN) instead
WeChat
Works
Works without VPN — essential for China travel
Alipay
Works
Works without VPN — essential for payments
Zoom
Partial
The Zoom.us version works, but can be slow. Zoom's China-specific app (Zoom.com.cn) works natively
iMessage / FaceTime
Partial
Usually works but can be unreliable. FaceTime calls may drop. Works better with VPN.
LinkedIn
Partial
Professional features work; some content may be filtered
Microsoft Teams / Outlook
Works
Microsoft services generally work in China without VPN
Slack
Partial
Mostly works but can be slow or intermittent without VPN
Download offline content before your trip — Netflix titles, Spotify playlists, Kindle books, podcast episodes. These play locally on your device without needing any internet connection.
🔄
Chinese Alternatives to Western Apps
What locals use instead — and how useful they are for tourists
China has built a parallel digital ecosystem over the past two decades. Many Chinese apps are genuinely excellent and worth using on their own merits — not just as replacements for blocked services. Here's what's worth knowing about.
Instead of…
Use in China
English support
Worth using?
Google Search
Baidu 百度
Limited
Useful for local results; poor for English queries
Google Maps
Baidu Maps 百度地图
English mode available
✅ Essential — far more accurate for China
WhatsApp
WeChat 微信
Full English interface
✅ Essential — everyone in China uses it
Uber
DiDi 滴滴
Full English interface
✅ Essential — dominant ride-hailing app
Google Translate
Baidu Translate / Microsoft Translator
Full English
✅ Both work great without VPN
YouTube
Bilibili 哔哩哔哩
Limited
Interesting but mostly Chinese content
Instagram
Xiaohongshu 小红书
Minimal
Fun for travel inspiration, mostly Chinese
Yelp / TripAdvisor
大众点评 Dianping
Minimal (photos readable)
✅ Useful — star ratings and photos universal
Booking.com (payments)
Trip.com / Ctrip 携程
Full English
✅ Essential for trains and domestic flights
Spotify
NetEase Cloud Music 网易云音乐
Partial
Large Chinese music library; limited international
Netflix
iQiyi 爱奇艺 / Youku 优酷
Limited
Mostly Chinese content; some international with subtitles
📶
Wi-Fi in China
What to expect and how to connect
Free Wi-Fi is widely available in China — hotels, cafes, restaurants, malls, airports, and train stations almost always offer it. The same firewall rules apply on all Wi-Fi networks. You'll still need a VPN to access blocked content.
🏨
Hotel Wi-Fi
International hotels generally have reliable Wi-Fi in rooms and lobbies. Password is usually at check-in or on a card in your room. Speed varies — typically fine for messaging, slower for streaming. International 5-star hotels sometimes offer faster speeds.
☕
Cafes & Restaurants
Starbucks, local coffee chains, and many restaurants offer free Wi-Fi. You often need to scan a QR code to connect, which may require a Chinese phone number for verification. Have your SIM ready or just use your mobile data instead.
🚂
Trains & Stations
High-speed train stations have free Wi-Fi. On the trains themselves, Wi-Fi is available on some routes but can be slow and unreliable. Mobile data often works better on the train than the on-board Wi-Fi.
✈️
Airports
All major Chinese airports have free Wi-Fi. Beijing Capital and Pudong have strong, reliable networks. Registration usually requires a passport scan or phone verification. Useful for activating your VPN and getting connected immediately on arrival.
Pro tip: When you first land, connect to airport Wi-Fi, activate your VPN, and get everything working before you leave the terminal. It's much easier to troubleshoot connectivity issues with stable airport Wi-Fi than in the back of a taxi.
❓
Frequently Asked Questions
Common questions about internet and VPNs in China
Technically, only government-approved VPNs are legal under Chinese law. In practice, no foreign tourist has ever been prosecuted for personal VPN use. Millions of Chinese citizens also use VPNs daily without legal consequences. The restrictions are primarily aimed at Chinese internet companies and individuals distributing VPN software commercially, not tourists checking Instagram. The realistic risk for a foreign tourist is essentially zero.
First, try switching servers — connect to Japan, South Korea, Singapore, or Taiwan instead of your current server. These tend to work best from China. Next, try changing the VPN protocol in settings (look for "Stealth", "Obfuscated", or "Shadowsocks" modes). If one protocol doesn't work, try another. If your main VPN is completely down, this sometimes happens temporarily during sensitive political dates — it typically resolves within a day or two.
No — and it's actually better not to. Chinese apps like WeChat, Alipay, Baidu Maps, and DiDi all work better without the VPN. Turn the VPN on when you need to access blocked services (Google, WhatsApp, Instagram), then turn it off when you're done. Running the VPN constantly also drains your battery faster and can slow down Chinese apps.
We strongly advise against it. Free VPNs are almost universally unreliable in China — the firewall identifies and blocks them quickly. More importantly, many free VPNs make money by selling your browsing data, which creates a serious privacy risk. The cost of a reliable VPN for a 2-week trip (roughly $5–15) is trivial compared to the peace of mind. If cost is the concern, use a service with a money-back guarantee and cancel after your trip.
Corporate VPNs vary significantly. Some enterprise VPNs (especially those using older protocols like L2TP or PPTP) are reliably blocked. Others using modern protocols with obfuscation may work. If you need to work remotely from China, test your work VPN before you travel — and have a personal VPN as backup. Check with your IT team whether they have China-compatible settings.
Yes — with a working VPN connected to a server in a Netflix-supported country (US, UK, etc.), Netflix works in China. Download shows for offline viewing before you travel as a backup. Note that Netflix actively tries to block VPN use, so performance can vary. ExpressVPN and NordVPN are generally the most reliable for Netflix access.
You have a few options, though none are ideal. Ask someone already in China (friend, hotel staff, expat) to send you the VPN APK file via WeChat or email — some provider APKs can be shared directly. Some hotels, particularly international 5-star properties, offer "international internet access" through their own network that bypasses the firewall. A final option: buy a SIM card from Hong Kong or Macau before crossing into mainland China — these may route traffic differently. Prevention is far easier than the cure.