NordVPN's obfuscated servers and ExpressVPN's automatic obfuscation are the two reliable options for China — standard VPN protocols get blocked by the Great Firewall's deep packet inspection. Critical: install and test BEFORE you land (VPN sites are blocked in-country), use an eSIM like Saily for data since hotel Wi-Fi routes through the firewall, and expect cat-and-mouse outages during political events.
Why most VPNs fail in China
The Great Firewall doesn't just block websites — it detects VPN traffic itself using deep packet inspection. Standard OpenVPN and WireGuard handshakes have recognizable signatures and get cut within minutes. Working VPNs disguise traffic as ordinary HTTPS using obfuscation. On top of that, VPN websites and app stores are blocked inside China — you cannot fix a bad setup after landing.
What actually works
Both options rotate server IPs ahead of firewall updates. Neither is 100% — expect outages during politically sensitive dates, with access restored within hours to days.
| VPN | China method | Reliability | Cost |
|---|---|---|---|
| NordVPN | Obfuscated servers (OpenVPN) | High — dedicated obfuscation list, maintained for China | ~$3-4/mo long-term |
| ExpressVPN | Automatic obfuscation on all servers | High — picks protocols per-network automatically | ~$5-7/mo |
| Standard VPNs (most brands) | None / basic | Low — connections die in minutes | Wasted money |
Pre-trip checklist — do this at home
- Install before you fly — VPN sites and app stores are blocked in China; you can't download inside
- Log in and test an obfuscated server — confirm the connection works from home
- Save the current China server list — screenshot it; the live list lives behind the blocked site
- Enable the kill switch — prevents unencrypted leaks if the VPN drops
- Set up your eSIM in advance — Saily data keeps you off the most-restricted hotel networks for the VPN hop itself
Stay secure on travel Wi-Fi
NordVPN encrypts your connection on hotel, café, and airport networks — and keeps your usual sites and banking apps reachable from censored regions.
Is it legal — the honest answer
China's VPN rules technically require government-approved providers, making consumer VPN use a gray zone for residents. For tourists, enforcement is effectively nonexistent — millions of visitors use VPNs without incident; no documented tourist prosecution exists. Still: keep usage low-profile (email, maps, messaging), don't publicize it, and don't use it for anything that would draw attention regardless of jurisdiction.
What stays blocked even with a VPN
- Google Maps — works via VPN but China GPS data is offset ~500m; use Apple Maps or AMap/Maps.me instead
- Some banking apps — flag any VPN IP; whitelist your travel or use mobile data
- Chinese services — need a Chinese IP; your VPN does the opposite
Stay secure on travel Wi-Fi
NordVPN encrypts your connection on hotel, café, and airport networks — and keeps your usual sites and banking apps reachable from censored regions.
Best VPN for China (2026): What Actually Works Behind the Firewall — FAQ
Does NordVPN work in China in 2026?
Will my hotel Wi-Fi work with a VPN in China?
Can I get a VPN after arriving in China?
Is ExpressVPN or NordVPN better for China?
Related guides
Entry rules change without notice. Always verify with official government sources (travel.state.gov, embassy websites) before booking. Last reviewed November 2026. This page may contain partner links — see our affiliate disclosure.