Do you actually need a VPN in China?
For most visitors, yes, and China is the one country on this site where we would put it that plainly. Elsewhere a VPN is mainly a privacy tool. Here it is also the difference between having your normal internet and not having it, because the country blocks most of the services you use every day, and the local apps people use instead are substitutes rather than a route back to the ones you know.
You probably need one if you rely on Google for email, documents or maps, if your team runs on WhatsApp, or if you want to read the news and social media you read at home. You probably do not need one if you are on a short trip, you are happy to use WeChat for messaging and a local maps app for getting around, and work can wait.
The honest caveat, before anything else on this page. A VPN in China faces filtering that does not exist in the other countries we cover, and it is correspondingly less predictable. How well it will work for you is not something anyone can tell you in advance, and it can stop working for a while and then start again. On top of that, no VPN provider guarantees a way through, and this page makes no promise about reaching any blocked service.
One practical consequence worth planning around: circumvention and proxy sites were the most heavily censored category when researchers last measured the firewall's DNS filtering at scale, in work published in 2020, so assume you may not be able to reach your own provider's website from inside the country. Both NordVPN and Surfshark run 24/7 live chat and email support, so if you have a setup question, ask it before you fly rather than after you land, and keep your account details written down offline.
What the rules actually say
Almost every page written about this quotes the same instrument, a notice issued by the industry ministry in January 2017, and quotes only that one. It is worth reading what it says and what sits alongside it.
That notice requires approval from the telecommunication management departments before dedicated lines, including virtual private networks, are created or hired to conduct cross-border business activity, and it requires carriers leasing international lines to tell customers those lines are limited to internal office use. Read in full, it addresses licensing and operating requirements for service providers, and it contains no provision addressing individual users. Alongside it, lawful cross-border connectivity for companies runs through circuits leased from the three licensed operators and is restricted to internal official business. That is the approved route, and it is a corporate one.
Older, and usually left out, is a second instrument. The older State Council provisions from 1996 restrict the channels through which cross-border network connections may be made at all, and unlike the 2017 notice they are written in terms that reach individuals as well as organisations.
What we could not find is the part most pages state confidently. Having read the 2017 notice in translation, those 1996 provisions, and two independent Chinese law firm analyses of the same regime, we could not establish any documented rule addressing a visitor using a VPN app on their own phone. That is a gap in the published record, not a finding that the gap is safe, and we are not going to turn one into the other. Read that as unsettled rather than as permission, and treat a subscription as a privacy tool, not as a licence.
What is actually blocked in China
This is the section worth reading before you fly, because it decides how much you will miss the VPN on the days it does not hold. The list below is from GreatFire's Analyzer as at 30 August 2026. GreatFire is an anti-censorship project rather than a neutral lab, and its results are network observations from a limited number of vantage points rather than a guarantee of what every visitor sees. The list also moves.
Blocked, and you will notice within the hour:
- Google, including Search, Gmail, Maps, Drive, Docs, Calendar and Photos, which share the blocked domain
- YouTube
- WhatsApp, Instagram, Facebook and X
- Most Western news, including the BBC, The New York Times, The Guardian, The Wall Street Journal and Bloomberg
- Wikipedia, in every language
- Reddit, Discord, Telegram, Dropbox and ChatGPT
Usually reachable without a VPN:
- Bing, which is the one major foreign search engine that works there, though its results are censored in China and it is not a substitute for Google
- The global Microsoft 365 service, including Outlook and Teams. Microsoft's own documentation, updated in March 2026, says the service is accessible from mainland China but performs poorly, and blames that on congestion at the regulated border gateways, with live audio and video worst affected
What people around you are using: WeChat for messaging and payments, Baidu for search, a local maps app for navigation, and Alipay for most of the rest. If you are there for more than a few days, setting those up before you go is worth roughly as much as the VPN.
The filtering is also not uniform across the country. Research covering late 2023 to early 2025 found that Henan province runs additional filtering of its own on top of the national system, with a blocklist that has been several times larger and that changes far faster. Where you are matters, so a friend telling you their VPN was fine last month in a different city is weaker evidence than it sounds.
The feature that matters most, and why it is still not a guarantee
If you take one technical thing from this page, take this one. One of the firewall's most significant mechanisms does not look for VPNs by name at all. Since late 2021 it has run a system that judges whether traffic resembles ordinary internet traffic, exempts what does, and blocks what does not. The researchers who reverse-engineered it drew the conclusion that matters to you: making a connection look random is not enough, because random is exactly what gets blocked. What helps is a connection that looks like ordinary encrypted web browsing.
Obfuscation, meaning traffic that looks like ordinary encrypted web browsing rather than like a VPN, is the feature that matters most here, and both of our picks offer it, though you switch it on differently in each app. In NordVPN it is a category of server rather than a setting: you scroll to Specialty servers in the server list and pick Obfuscated Servers. In Surfshark it comes with the protocol, so setting the protocol to OpenVPN, either UDP or TCP, puts you on obfuscated servers. Switch it on at home, on a connection you trust, because you may not be able to reach a help page to work it out once you have landed. Having it is not the same as it working: no VPN provider guarantees a way through, and this page makes no promise about reaching any blocked service.
The apparatus is also still being built. Since April 2024 it has been reading the hostnames inside a newer kind of encrypted traffic at scale, something it could not do before, using a separate blocklist. In April 2026 carriers in parts of China were reported to have been told to sweep their networks for VPN services. Whatever worked for someone last year is not evidence about this year.
Recommended VPNs for China
NordVPN, best for short trips and month-by-month plans
It is the one for you if you are covering yourself, or you and a partner, and want something simple to run and easy to forget about. One plan covers 10 devices, which is usually enough for a couple travelling with a phone, a laptop and a tablet each. Plans run by the month, the year or over two years, all with a 30-day money-back guarantee.
Surfshark, best for long stays and unlimited devices
It is the one for you if one subscription needs to cover everyone. Connections are unlimited, so every device you travel with and everyone you travel with runs on one subscription. That is worth more in China than almost anywhere, because if a connection stops holding you end up testing it across several devices at once. Its plans come in the same three lengths, though both of the longer ones add three bonus months, so a 12-month plan is billed as 15. The same 30-day money-back guarantee applies.
Speeds and server access for China
Speed comes down mostly to distance: the closer the server, the shorter the detour your traffic takes. For a sense of which nearby locations actually carry traffic well, the most useful source here is not a VPN company. Microsoft, which has no interest in selling you a VPN, names Hong Kong, Singapore, Japan and South Korea in its March 2026 guidance as the low-latency places for traffic to leave mainland China. Hong Kong sat outside the Great Firewall rather than behind it on the most recent reporting we found, from 2024, which is not a guarantee that it still does so.
It is commonly said that VPNs in China are worse at night because of congestion. The only measured daily pattern we found points the other way. Measurements taken in Beijing, Shanghai and Guangzhou and published in 2025 found that blocking by one specific filtering mechanism was heaviest in the early hours and eased during the day, because the inspection work is expensive to run and degrades under daytime load. That is a measurement of the filtering, not of VPN speed, so it is not a timetable. It is a reason to try again later rather than to write off a subscription on one bad attempt.
It is also worth knowing that the system sometimes simply breaks. On 20 August 2025 it disrupted every connection on the standard secure web port for about 74 minutes, indiscriminately, before returning to normal. That is not a reason to avoid a VPN. It is a reason to treat a bad hour as an hour rather than as a verdict. Save two or three nearby servers as favourites so you can switch quickly.
We publish no speed numbers for China, because a figure from one hotel on one evening would tell you nothing about yours. The 30-day money-back guarantees on NordVPN and Surfshark are the honest way to find out. Claiming a refund means reaching the provider, which you may not be able to do from inside the country, so start that from the app's own support screen or from an email address you can reach, and do not leave it until you are home.
How to choose between them
The differences that matter fit in one table, and the last two rows are there to name the two promises you should not believe from anyone, us included. The two providers give different numbers of bonus months on the one-year plans, so the billed term is shown alongside each total.
| Feature | NordVPN | Surfshark |
|---|
| 1 month | $14.99 | $16.45 |
| 1 year plan, total upfront | $65.88 (12 months billed) | $50.85 (15 months billed) |
| 2 year plan, total upfront | $94.23 (27 months billed) | $67.23 (27 months billed) |
| Devices per plan | 10 | Unlimited |
| Kill switch and auto-connect | Yes | Yes |
| Independently audited no-log policy | Yes (2025) | Yes (2025) |
| Money-back guarantee | 30 days | 30 days |
| Guarantees access to blocked sites | No | No |
| Puts you outside local law | No | No |
On a single month NordVPN is cheaper. Over a year or two Surfshark is. On everything else the choice is about shape rather than money: 10 devices and a simple setup on one side, unlimited devices on the other. Neither difference decides whether a connection holds in China, which is the honest reason the choice comes down to how many devices you need covered rather than to which one performs better here.
Setting up before you travel
This is the step people get wrong, and it is the one that cannot be recovered afterwards. Testing of the China Apple App Store published in June 2024 found every one of 240 VPN apps unavailable there, and circumvention and proxy sites were the most heavily censored category when researchers last measured the firewall's DNS filtering at scale, in work published in 2020, so you cannot download an app, open an account or reset a password from inside the country.
- Buy and install before you fly. Set up NordVPN or Surfshark on every device you are taking, and sign in on each one.
- Switch on obfuscation. The two apps do it differently. In NordVPN, scroll to Specialty servers in the server list and pick Obfuscated Servers. In Surfshark, set the protocol to OpenVPN in the app's settings: UDP is the faster of the two, TCP the more stable. On Linux, NordVPN's obfuscated servers work only over OpenVPN, so switch protocol there first.
- Save two or three nearby servers as favourites so you can switch quickly, so you are not hunting for a working one later.
- Turn on the kill switch and auto-connect. The first stops your traffic travelling unprotected if the VPN drops, the second brings it back when your connection returns.
- Write your account details down offline. If you get signed out in China you may not be able to reach the support site to recover them.
- Set up the local apps too. WeChat and a payment app are the fallback for the days the VPN does not hold.
Both apps work on mobile data as well as Wi-Fi, so if you are picking up a local data plan the same setup covers it. Our Best eSIMs for China guide covers getting online the moment you land.
Final recommendation
For a trip, NordVPN is the pick: 10 devices covered and a 30-day guarantee that outlasts most visits. For a household, a group travelling together, or anyone who wants every device on one subscription, Surfshark covers unlimited devices.
Buy either one for what it is for: an encrypted connection on the shared Wi-Fi you will use constantly, and a home-country connection for the services that dislike foreign logins. In China it may also be the thing that gets you back to your own email and maps. Nobody can promise it will be. China blocks most of the services you use every day. No VPN provider guarantees a way through, and this page makes no promise about reaching any blocked service. On the rules, we could not establish any documented rule addressing a visitor using a VPN app on their own phone. Install it before you fly, keep a fallback, and judge it inside the 30 days.
