Best VPN for China 2026: Astrill, ExpressVPN, Surfshark

Already in Shenzhen and unable to connect? Start with the connection troubleshooting guide.

The honest answer to "what's the best VPN for China?" is that no provider is guaranteed on every network. What you control is the setup: install your chosen VPN before you leave, sign in, and save its support instructions. Then sort out mobile data separately. A VPN can't give an offline phone an internet connection, and a test that works at home doesn't prove it will connect from Shenzhen.

If you already pay for a VPN, check that provider's current China guidance before you buy a second subscription. For a short trip, compare three things: the full amount charged, the devices covered and the refund conditions. A low monthly figure on a two-year plan can be an expensive answer to a one-week visit.

Which VPN to use in China: start with your device

The provider notes below come from the September 18 review of provider documentation. That was not a new connection or speed test in Shenzhen. An earlier version of this guide reported an April 10–15 field test, but those results can't tell you which provider will work on your hotel or mobile network today, so we removed its success percentages and speed ranking.

ExpressVPN in China

Its current connection guide starts with the Automatic setting, which usually picks Lightway, and also tells you to update the app and try a recommended location. We used to say "avoid Lightway, force OpenVPN" (too categorical, as it turned out). On a restrictive network, follow support's current advice for your device.

Surfshark in China

Its China support section has manual WireGuard instructions for Windows, macOS, Android and iOS, so iPhone and Android users can save the exact guide for their phone. That documentation doesn't establish a success rate on Shenzhen hotel WiFi or Chinese mobile data.

Does Astrill work in China?

Nobody can promise that from a desk. Review Astrill's current plans and confirm your device's features with its support team. Don't assume a feature shown for one operating system is available on another.

Whichever you pick, it is not a guaranteed connection for the whole trip. Keep your booking details and a way to contact your hotel available without relying on one app.

Set up your China VPN before you fly

1. Install from the provider's official website or its verified app-store listing.
2. Sign in on every device you plan to use. Check you can still recover the account if your usual email or phone number is unreachable.
3. Save the support page and the instructions for your operating system on the device itself.
4. Decide how you'll get online on arrival: roaming, a travel eSIM or a local SIM.
5. Save your hotel's Chinese name, address and booking confirmation, and agree a contact method with anyone meeting you.

Don't leave the install until a hotel login screen is your only way online. Downloads and access to overseas services can be restricted. While you're preparing, the maps guide covers the next step: save the destination details you need, and check what your map app actually offers offline for Shenzhen.

Do you need a VPN in China, or just an eSIM?

They solve different problems. A SIM or eSIM plan gives you a mobile connection; a VPN runs over a connection you already have. Whether a particular service works depends on the plan, the network and the service itself.

Before you buy a travel eSIM or rely on your home plan, ask:

• Will the exact apps I need work on this plan in mainland China?
• Can I tether my laptop, and is there a separate limit for that?
• Is my phone supported and unlocked?
• What happens when the data allowance runs out?

Don't assume every travel eSIM needs a separate VPN, or that every travel eSIM makes every app available. The China eSIM guide has the plan checks. Travelling for work? Confirm your employer's approved access method before the trip.

Free VPN for China: what to check first

Don't build an important call or an arrival pickup around an app you've never used. Check who runs it, its privacy terms, its data limits and what support it offers. Paying doesn't guarantee access either; the point is to have an alternative ready and know where to get help.

If you're stuck, don't download an unfamiliar installer from a message or a random mirror. Go through the provider's own support channel.

If your VPN stops working in Shenzhen

Check the underlying connection first. The hotel may want you to log in on a web page, or your mobile data may have run out. Fix that before you touch any VPN settings.

Then update or restart the app as the provider's support guide says, try a recommended location, and contact support if it still won't connect. If you have a second connection, test on it to tell a local-network problem from an app problem. There's no fixed order of server countries that is fastest for everyone.

If a payment fails, check your transaction history before trying again. Read the error message and check your card authorization and internet connection. Pausing the VPN can help diagnose a connection problem; it isn't proof that Alipay or WeChat Pay blocks every VPN user. Carry on with the payment setup guide or Alipay troubleshooting.

Paying for your VPN subscription

Use whatever methods your own checkout shows. Your country, your currency and whether you buy through an app store or directly can all change the options. We once said Astrill and LetsVPN were the only services taking Alipay and WeChat Pay; the checkout evidence didn't support that.

Check the upfront charge, the renewal date and the refund conditions before you confirm. Keep control of your own account: never send a stranger your password or buy shared login credentials.

Affiliate disclosure: the Surfshark link below is an affiliate link, so a purchase may earn us a commission. It does not establish that Surfshark will work on your connection.

Check Surfshark's current plans and terms →

Is a VPN legal in China? Check before you travel

Don't treat a travel blog, this one included, as a guarantee that visitors are exempt from local internet rules. Read the UK government's China travel advice and your own country's current guidance. Business travellers should also confirm their employer's approved setup.

Do next

Choose your mobile data setup, save your hotel and map details, and prepare payments. You'll want all three sorted before your first taxi ride.

Questions

Do I need a VPN for China?

It depends on the apps you need and how you connect. A SIM or eSIM plan supplies the mobile connection, and a VPN runs over an existing one. Do not assume every travel eSIM needs a separate VPN, or that every travel eSIM makes every app available. Ask your plan provider which apps work on it in mainland China.

Is a VPN illegal in China?

Being a visitor is not a guarantee of exemption from local internet rules. Check current official travel advice and, for business travel, your employer’s approved connection arrangements. This guide does not provide a legal clearance.

Which VPN is best for China?

We cannot verify a provider that works on every Chinese network. Check your device and the provider’s current China support instructions before buying. Install and sign in before departure, and keep a separate connection and communication plan.

Does Astrill VPN work in China?

We have no current test proving Astrill, or any other provider, always connects from China. Review Astrill’s current plans, confirm your device’s features with its support team, and do not assume a feature shown for one operating system exists on another.

How do I use a VPN in China?

Install it from the provider’s official website or app-store listing before you leave, sign in on each device and save its support instructions. In China, first make sure the underlying connection works, including any hotel login page, then follow the provider’s current guidance and try a recommended location.

Is there a free VPN that works in China?

A free plan may have data, device or support limits. Check its operator and privacy terms, and do not rely on an untested app for an important call or arrival pickup. A paid subscription does not guarantee access either.

Can you download a VPN in China?

Downloads and provider websites can be restricted, so install and sign in before departure. If you are already in Shenzhen, use the provider’s official support channel rather than an unfamiliar download mirror.

Which VPN server location is fastest from Shenzhen?

There is no fixed fastest location for every network. Follow your provider’s current recommendations and compare available locations on the connection you are actually using.

Why should I turn my VPN off for payments?

Pausing a VPN is a connection troubleshooting step, not a universal payment requirement. Check the error message, transaction history, card authorization and internet connection before retrying a payment.

Will my VPN work the entire trip?

No provider can be treated as a guarantee for every network throughout your trip. Save support instructions and booking details, and prepare an alternative way to connect or contact your hotel.

Can I buy a VPN with Alipay or WeChat Pay?

Check your own checkout for the supported payment methods. They can vary by country, currency and whether you buy directly or through an app store. We have not verified a universal Alipay or WeChat Pay acceptance list.

What is the most stable VPN for China in 2026?

We have no current Shenzhen test that establishes a most-stable provider across devices and networks. Our older field-test report should not be read as a guarantee for your trip.

What are the best alternatives to LetsVPN for China?

If LetsVPN is failing, first check the underlying connection and ask its support team. Before paying for an alternative, compare your device’s current support instructions, full subscription charge and refund terms.

How does Astrill compare to ExpressVPN and Surfshark in China?

Compare current device support, setup instructions and checkout terms. ExpressVPN recommends starting with Automatic; Surfshark publishes China-specific manual connection guides. We do not have a current test proving one is always the most reliable.