Can I download a VPN once I'm in Shenzhen?

This is very difficult. VPN websites are blocked inside China, and the App Store restricts some VPN apps for Chinese IPs. Install and test your VPN before you arrive. If you forget, you may be able to use a friend's foreign hotspot to download it.

Why should I turn my VPN OFF for payments?

Chinese payment apps like Alipay and WeChat Pay detect VPN usage and will block transactions or flag your account. Always disable your VPN before using Alipay, WeChat Pay, Didi, or any Chinese banking app.

China VPN 2026: 3 Still Working (Astrill, ExpressVPN, Surfshark Tested)

Q: Is using a VPN illegal in China?

VPNs are in a legal grey area in China. Unauthorized services are technically illegal for businesses, but enforcement against foreign tourists and business travelers is essentially non-existent. Tens of millions of people in China use VPNs daily. Use common sense and don't discuss it loudly in public.

Q: Which VPN works best in China in 2026?

Astrill is the most reliable for long-term use with its StealthVPN protocol. ExpressVPN is easiest for short visits (use OpenVPN mode, not the default Lightway). Surfshark works on hotel WiFi but is unreliable on Chinese mobile data. Install 2-3 options before you arrive.

Q: Which server location is fastest from Shenzhen?

In order of speed from Shenzhen: Hong Kong, Japan (Tokyo), Singapore, USA West Coast. The closer the server, the lower the latency. Hong Kong is fastest but sometimes more aggressively targeted by the firewall — switch to Japan if HK is slow.

Q: Will my VPN work the entire trip?

Expect occasional slowdowns or brief disconnects — no VPN works 100% of the time in China. Reliability also drops significantly during national holidays and political events. Keep two VPNs installed as backup.

Already in China and your VPN just stopped? Skip to the fix →

What does China's firewall actually block?

China's "Great Firewall" blocks most Western internet services. This includes:

Blocked	Works Without VPN
Google (Search, Maps, Gmail, Drive)	Baidu, Bing
YouTube	Bilibili
Instagram, Facebook, Twitter/X	WeChat, Weibo
WhatsApp	WeChat
Netflix	iQiyi, Youku
ChatGPT, Claude	Kimi, Doubao
Most Western news sites	—
Many VPN provider websites	—

💡 Apple Maps works. Google Maps does not. Download Apple Maps offline tiles before crossing.

Why must I install a VPN before arriving?

You cannot reliably download VPN apps from inside China:

VPN websites are blocked
App Store sometimes restricts VPN apps when accessed from a Chinese IP
If you forget, you're stuck — no VPN = no Google, no Instagram, no WhatsApp

Install and test your VPN at home. Connect once before you travel.

Which VPN works best in China in 2026?

This section includes affiliate links. Astrill and ExpressVPN are not affiliate partners — we don't earn anything when you buy them. We earn a small commission only from Surfshark purchases. Our rankings are based on reliability testing and community reports, not on who pays us.

No single VPN wins every situation in China — different protocols work better in different cities, on different networks, and at different times of year. Install 2-3 before you go.

🥇 Astrill — Most Reliable

Astrill is the go-to for expats and long-term China residents who need maximum reliability. Its StealthVPN protocol is specifically engineered against Chinese deep packet inspection and consistently outperforms every other option in community reports.

Protocols: StealthVPN (proprietary, desktop only), OpenWave — advanced options for tech-savvy users
Speed: Fast, especially on VIP servers (paid add-on); Japan and Singapore servers recommended from Shenzhen
Reliability in China: Excellent — active server updates to stay ahead of the firewall; community reports 90%+ connection success rates
Price: ~$15/month (annual plan), no free trial
Downside: Expensive; StealthVPN not available on iOS (WireGuard only on iPhone, which is weaker in China)

Best for: Business travelers, long stays, anyone who needs it to just work

🥈 ExpressVPN — Easiest to Use

ExpressVPN is the most popular choice for China tourists and works well for most short trips — but its performance has become more variable in 2025 following a protocol update. Community sentiment has shifted from "just works" to "works most of the time, needs the right setup."

Protocol: Use OpenVPN with obfuscation (not Lightway/Turbo) for best China results — set protocol manually in Settings before entering China
Speed: Fast when connected; HK servers are closest but often targeted — Japan and Singapore are more stable
Reliability in China: Good for most short trips, less consistent than 2023-2024; expect occasional reconnects; keep a backup VPN installed
Price: ~$8.32/month (annual plan), 30-day money-back guarantee
Downside: 2025 Turbo protocol update caused complaints from long-term users; inconsistent on mobile data

Best for: First-timers, short trips — simple interface, widely supported

🥉 Surfshark — Best Budget Option for Hotel WiFi (affiliate link — we earn a commission)

Surfshark overhauled its China infrastructure in 2024 and is now a viable budget option — with one significant caveat: it works well on hotel and apartment broadband, but performs poorly on Chinese mobile data (4G/5G SIM cards).

Protocol: Enable NoBorders mode manually in settings before entering China; set protocol to Automatic (will fall back to OpenVPN TCP when needed)
Speed: Decent on hotel WiFi; drops off sharply on mobile data
Reliability in China: ~75% connection success on broadband, ~40-50% on Chinese SIM cards — not suitable as your only VPN if you'll rely on mobile data
Price: ~$2/month (long-term plan), 30-day money-back guarantee, unlimited simultaneous devices
Downside: Genuinely weak on 4G/5G Chinese networks — don't rely on this as your sole VPN if you're using a local SIM

Best for: Budget travelers who'll mainly be on hotel WiFi, or as a backup alongside another VPN

⚠️ If your primary data source is a Chinese SIM card (not a foreign eSIM), use ExpressVPN or Astrill instead of Surfshark.

NordVPN — Cheapest Option

NordVPN works but requires using their "obfuscated servers" setting — the standard servers don't work in China. Do not use NordLynx (WireGuard) or the default mode; it will fail.

Protocol: Obfuscated servers only via OpenVPN TCP (Settings → Advanced → Obfuscated Servers)
Speed: Moderate — slower than ExpressVPN or Astrill
Reliability in China: Inconsistent — works well on broadband, frequently blocked on Chinese SIM cards; avoid Hong Kong servers (flagged within 24-48 hours), use Japan or Singapore
Price: ~$4/month (2-year plan)
Downside: Easy to misconfigure; NordLynx and standard servers simply don't work in China

Best for: Budget travelers who already have NordVPN and are willing to configure it correctly

LetsVPN — The Expat Backup ($5–8/mo)

LetsVPN doesn't appear in most English-language review articles (it has no Western affiliate program) but gets consistent praise from expats and long-term China residents on Reddit. It's built specifically for use inside China — which is both its strength and its risk.

Protocol: Proprietary obfuscation — no manual config needed, it just tries to connect
Speed: Good for daily use — messaging, browsing, maps. Not ideal for HD streaming
Reliability in China: High — frequently cited on r/chinalife as "the one that actually works" alongside Astrill
Price: ~$5–8/month, no meaningful long-term discount
Payment: Accepts Alipay and WeChat Pay — one of only two VPNs on this list that do
Downside: Shady refund policy — multiple Reddit users report a 30% "international transaction fee" deducted from refunds, even when the service didn't work. No company info on their website despite claiming to be Canadian. Customer support is slow.

Best for: Expats who want a cheap China-optimized backup. Don't rely on it as your only VPN — pair it with Astrill or ExpressVPN.

⚠️ LetsVPN works for many people, but the lack of transparency about the company behind it is a real concern. If you do try it, pay monthly (not annual) and test immediately so you can dispute the charge if it doesn't connect.

Search "LetsVPN" directly — their site is accessible from outside China.

Psiphon — Free Emergency Fallback

Psiphon is a free censorship-circumvention tool (not technically a VPN) designed for restricted internet environments. It routes traffic through a network of proxy servers and can sometimes punch through China's firewall.

Price: Free
Reliability in China: Inconsistent — works for some users, completely fails for others. Not reliable enough to depend on
Speed: Slow when it connects — fine for sending a text message, painful for anything else
Downside: No server selection, no streaming, no guarantee it connects at all

Best for: Emergency fallback if your paid VPN goes down and you need to send one message. Not a replacement for a real VPN. Download it before you arrive as an extra backup — it's free, so there's no reason not to.

❌ VPNs That Don't Work in China

These are widely popular globally but have poor China performance:

VPN	Status in China
PureVPN	❌ Mostly blocked
HideMyAss	❌ Blocked
VyprVPN	❌ Mostly blocked
Free VPNs (most)	❌ Blocked or compromised
Lantern	⚠️ Inconsistent

⚠️ Never use a free VPN in China. Many are honeypots that log your traffic. Use a paid, reputable provider.

When should I turn my VPN OFF?

This is what most guides don't tell you and it causes real problems.

Turn VPN OFF when:

Using Alipay or WeChat Pay
Logging into Chinese banking apps
Using Didi (ride hailing)
Using Meituan (food delivery)
Using any Chinese government service

Why? These apps detect VPN usage and will block transactions or flag your account. Some will log you out and require re-verification.

Workflow: Turn VPN on when you need Google/WhatsApp. Turn VPN off when you're paying or using Chinese apps. Get used to toggling.

Will my VPN slow down during political events?

China significantly increases firewall activity around:

National holidays (Golden Week, National Day October)
Major political events (Party Congress, etc.)
Politically sensitive anniversaries

During these periods, even good VPNs become unreliable. If you're traveling during these times, have Astrill as your primary (it's most resilient) and a backup option.

How do I set up my VPN step by step?

Before You Leave Home

Choose a VPN from the list above
Download the app on all devices you're bringing (phone, laptop, tablet)
Log in and test — connect to a server and confirm Google loads
Download the VPN app's offline config if available (some apps work even if their server is temporarily blocked)
Note your login credentials — write them somewhere offline

Once You Arrive

Open your VPN before opening any Western app
Connect to a server in Japan, Singapore, or Hong Kong (fastest from Shenzhen)
Verify it's working: Google Maps should load
Remember: turn OFF for payments

What if you need to buy a VPN from inside China?

You're reading this from a hotel in Shenzhen, you forgot to install a VPN, and Google won't load. This is the worst-case scenario — and your options are limited, but not zero.

Option 1: Ask someone outside China to help

The fastest fix. Call or text a friend back home using WeChat (it works without a VPN). Ask them to:

Purchase a VPN subscription for you (Astrill or ExpressVPN recommended)
Send you the login credentials via WeChat message
Share the app installer file if possible (APK for Android — iOS is harder)

Hotel WiFi usually allows WeChat file transfers even though VPN websites are blocked.

Option 2: Use your foreign eSIM

If you have a foreign eSIM (like Airalo or Holafly) that routes through Hong Kong, your internet already bypasses the firewall. Open a browser, go to the VPN website, buy and install normally. This is the easiest workaround — and one more reason to set up an eSIM before you fly.

Option 3: Hotel business center

Some international hotels (Marriott, Hilton, Hyatt) have business center computers with less restricted internet, or staff who can help you access blocked websites. Walk to the front desk and ask. No guarantee, but worth trying.

Option 4: Buy a VPN that accepts Alipay

If you can access a VPN provider's website through any of the workarounds above, only two VPNs accept Chinese payment methods:

VPN	Alipay	WeChat Pay	Price
Astrill	✅	✅	~$15/mo
LetsVPN	✅	✅	~$5–8/mo

ExpressVPN, Surfshark, and NordVPN all require a foreign credit card, PayPal, or cryptocurrency. No Alipay, no WeChat Pay.

The real lesson

Every option above is a workaround for a problem that shouldn't exist. Install your VPN before you board the plane. Test it once. Write down your login. That's it.

Legal disclaimer

As of March 2026: Shenzhen Decoded is not a legal advisory service. As of March 2026, we are not aware of any foreign tourist or business traveler being prosecuted for personal VPN use in China. Enforcement has historically targeted Chinese businesses offering unauthorized VPN services. Laws and enforcement can change — verify current conditions before traveling. We recommend VPNs for practical purposes (email, maps, banking, messaging), not as legal advice.

A VPN alone is not enough — you also need data and payment sorted before crossing:

Best eSIM for China — a good data connection matters almost as much as the VPN itself
How to pay in Shenzhen — set up Alipay while your internet still works normally
Arrival checklist — the full first-day sequence if you want everything in order

Frequently Asked Questions

Is using a VPN illegal in China? VPNs are technically in a legal grey area in China. Unauthorized VPN services are illegal for businesses. For foreign tourists and business travelers, enforcement against individuals is essentially non-existent. Tens of millions of people in China use VPNs daily. That said: don't discuss VPN usage loudly in public, and use common sense.

Will my VPN work the entire trip? Expect occasional slowdowns or brief disconnects. No VPN works 100% of the time in China. Keep two VPNs installed if reliability matters.

Can I download the VPN once I'm in Shenzhen? Unlikely to work. The VPN providers' websites are blocked and the App Store restricts some apps for Chinese IPs. Possible workarounds: use a friend's hotspot from outside China, or have someone email you the APK. Much easier to just install at home.

Which server location is fastest from Shenzhen? In order: Hong Kong → Japan (Tokyo) → Singapore → USA West Coast. The closer the server, the less latency.

My VPN is slow — what do I do?

Switch server (try HK or Japan if not already)
Change protocol (try different options in your app settings)
Try at a different time of day (congestion varies)
If on WiFi, try mobile data — some hotel networks throttle VPN traffic

Can I buy a VPN with Alipay or WeChat Pay? Only Astrill and LetsVPN accept Alipay and WeChat Pay. ExpressVPN, Surfshark, and NordVPN all require a foreign credit card, PayPal, or cryptocurrency. If you're already in China without a VPN, the fastest fix is asking someone outside China to buy a subscription and send you the login via WeChat.