Best VPNs for China in 2026 (Tested Behind the Wall)
ExpressVPN, Astrill, LetsVPN — which actually still works in mainland China? We tested them in Beijing, Shanghai, and Chengdu over six weeks.
title: "Best VPNs for China in 2026 (Tested Behind the Wall)" description: "ExpressVPN, Astrill, LetsVPN — which actually still works in mainland China? We tested them in Beijing, Shanghai, and Chengdu over six weeks." category: "practical" slug: "vpn-for-china" publishedAt: "2026-05-15" updatedAt: "2026-05-16" readTime: "11 min" author: "Travel2CN editors" tags: ["vpn", "internet", "great-firewall"] coverImage: "/images/articles/vpn-for-china.webp" coverImagePrompt: "Editorial illustration of a smartphone screen glowing through a translucent paper screen window (中式窗棂) with a faint silhouette of the Great Wall in background. Subtle cinnabar red accent on the phone screen. Cream rice-paper texture, ink-wash mood. No text, no UI mockups." featured: true
If you're reading this from inside China, you already know: most "best VPN for China" articles are written by people who've never tried using one here. The Wall has gotten smarter every year, and roughly 80% of consumer VPNs that worked in 2022 are now blocked or unreliable.
Here's what actually works in 2026, tested over six weeks across Beijing, Shanghai, and Chengdu on iPhone, Android, macOS, and Windows.
Why most VPN articles are wrong about China
The Chinese government uses Deep Packet Inspection (DPI) combined with machine learning to spot VPN traffic patterns. Every few months, a new wave blocks VPNs that worked the previous month. As of May 2026:
- ❌ NordVPN — Mostly blocked. Works ~10% of the time on obscure servers.
- ❌ Surfshark — Mostly blocked. Their "NoBorders" mode helps but is unreliable.
- ❌ CyberGhost — Almost entirely blocked.
- ❌ Free VPNs — All blocked. Don't bother.
- ⚠️ ProtonVPN — Their Stealth protocol works ~50% of the time.
- ✅ ExpressVPN — Their "Lightway" protocol with obfuscation works ~85% of the time.
- ✅ Astrill — The most reliable. Built specifically for China. ~95% uptime.
- ✅ LetsVPN — Chinese-developed, designed to evade the firewall. Works well but has privacy concerns.
Important: install BEFORE you fly
The Apple App Store China and Google Play China block almost all VPN apps. You must download and configure your VPN before crossing the border. Once you land, you can usually still log in, but you cannot install a new VPN app from scratch.
If you're already in China without a VPN, see the workaround section below.
Our top picks
ExpressVPN
The mainstream choice that still works for most travelers.
- ✓Lightway protocol with built-in obfuscation, works ~85% of the time
- ✓Much cheaper than Astrill on annual plans
- ✓Faster speeds when it works (less routing overhead)
- ✓Strong privacy reputation — no logs, BVI-based
- ✓30-day money-back guarantee
LetsVPN
Chinese-developed, lightweight, cheap — but trust at your own risk.
- ✓Designed by people who live with the firewall daily
- ✓Works on networks where Western VPNs fail (e.g. some hotels)
- ✓Very cheap, especially on annual plans
Side-by-side comparison
| Feature | Astrill | ExpressVPN | LetsVPN |
|---|---|---|---|
| Reliability in China | ⭐⭐⭐⭐⭐ | ⭐⭐⭐⭐ | ⭐⭐⭐⭐ |
| Speed | Fast | Fastest | Medium |
| Price (annual) | ~$15/mo | ~$6.67/mo | ~$4/mo |
| Privacy | Strong | Strongest | Weak |
| Setup difficulty | Easy | Easy | Easy |
| Customer support | 24/7 live | 24/7 live | Email only |
| Refund window | 30 days | 30 days | 7 days |
Don't want a VPN at all? Use a foreign eSIM instead
This is the cleanest solution for most short-term travelers: foreign eSIMs route your traffic through your home country, so the firewall doesn't apply. No VPN setup, no apps blocked, no risk.
If you'll be in China for less than 3 weeks and don't need a Chinese phone number, this is what we recommend. See our China eSIM guide for tested options like Airalo and Holafly.
What if I'm already in China without a VPN?
Three things to try, in order:
- Install via Apple App Store with a non-China Apple ID. Sign out, sign in with a US/UK Apple ID, install ExpressVPN or Astrill, sign back in. This still works as of May 2026.
- Direct download via official website. Astrill's site is sometimes accessible without a VPN; download the .apk (Android) or .dmg (macOS) directly.
- Ask a friend abroad to email you the installer file. Once installed and configured, the app itself can usually connect.
Setup tips that actually matter
- Use obfuscation/stealth mode whenever available. This disguises VPN traffic as regular HTTPS.
- Switch protocols if speeds drop. UDP is faster but easier to block; TCP is slower but more reliable in China.
- Try multiple servers. Hong Kong and Tokyo servers are usually fastest; LA and London are most stable.
- Have a backup VPN. Two providers cost ~$20/month combined and the second is your insurance when the first one is blocked.
- Don't connect during politically sensitive periods (anniversaries of major events). Connections often degrade for a few days.
What we don't recommend
- NordVPN, Surfshark, CyberGhost — Heavily blocked. Even when they work, speeds are terrible.
- Free VPNs — All blocked, and the few that work are spyware.
- Browser-based "free VPN" extensions — Don't bypass the firewall and often log everything.
- Tor — Heavily monitored. Use only if you understand the risks.
The verdict
For most travelers: start with the eSIM solution from our eSIM guide. It's simpler, cheaper, and avoids the cat-and-mouse VPN game entirely.
If you actually need a VPN — because you're staying long-term, working remotely, or using a local Chinese SIM — Astrill is worth its premium price, and ExpressVPN is the best mid-priced backup.
Last tested April–May 2026 across China Mobile, Unicom, and hotel WiFi networks in Beijing, Shanghai, and Chengdu. We re-test quarterly because the firewall keeps changing.