Best VPNs for China: What Actually Works Right Now (2026)

In July 2026, a traveler posted on r/travelchina that NordVPN had stopped working on Android in China. The same month, a regular in r/chinalife called Astrill “the only thing that consistently works.” Two big-name VPNs, opposite verdicts, same week. That is the honest state of getting online in China in 2026: nothing works everywhere, for everyone, every day.

This guide is built from three layers: what providers state on their own sites, what independent trackers and reviewers measure, and what travelers report in recent Reddit threads. Specs were re-checked 2026-07-24. Treat every “works in China” claim below as a recent status report, not a promise.

The Great Firewall Is Not One Switch

The blocking system runs in layers. The academic measurement project GFW Report documented how China’s firewall detects and blocks fully encrypted traffic, including “active probing”: censorship infrastructure connects back to suspicious servers to fingerprint whatever sits behind the encryption. Standard VPN handshakes have distinctive patterns, and once a pattern or a server IP range gets flagged, it gets cut off — sometimes within days.

Research published on arXiv in 2025 tracks the countermeasures: obfuscation techniques that make VPN traffic look like ordinary HTTPS, or wrap it inside everyday protocols. Providers ship exactly these defenses, in their own words. Mullvad added QUIC obfuscation for WireGuard in September 2025, describing it as helping users “bypass firewalls and censorship” and countering “AI-guided traffic analysis.” Surfshark’s NoBorders mode “activates automatically” when the app detects that someone is restricting the network.

The practical consequence for you: this cat-and-mouse game never ends. Server IPs burn. New obfuscation ships. Enforcement tightens around politically sensitive dates. A VPN that connects fine in Shanghai on Tuesday can struggle in Chengdu on Friday. Experienced travelers pack backups, not opinions.

Five Providers, Their Stated Specs

The table pulls specs from provider websites and support documentation as checked on 2026-07-24, with success-rate figures from independent trackers and reviewer testing. “Stated China support” means the provider markets or documents use from China. It is not a guarantee.

Provider by Provider

Astrill: the reliability benchmark, at a price

Astrill has been the expat default for China for years, and 2026 reporting has not dislodged it. Per its pricing page, plans run $30/month month-to-month, $15/month billed annually, or $12.50/month on a two-year plan. That is several times what competitors charge. Protocols include the proprietary StealthVPN and OpenWeb alongside WireGuard and OpenVPN, and one account covers 5 simultaneous connections. The company is based in the Seychelles, per review sites.

Refunds are conditional. Astrill’s FAQ describes a “7 days conditional refund policy,” and its terms of service allow cancelling unused service within 30 days of a first purchase. A China-focused guide at tipsforchina.com goes further, reporting periods where Astrill offered China customers neither free trials nor refunds. Read the current policy before paying.

Field reports skew positive. In the r/chinalife VPN-and-eSIM megathread for June 2026, one commenter wrote that Astrill is “the only thing that works consistently because it has enough servers,” adding it “works best on Android.” Others push back on cost: the same subreddit hosts a thread titled bluntly “Astrill is not worth the money it charges”. Both things can be true at once.

ExpressVPN: the mainstream pick, with mixed signals

ExpressVPN runs its own Lightway protocol, and 2026 reviewers report it gets through. 01net writes that it bypasses the Great Firewall, and Gizmodo publishes a full China setup guide for it. The independent tracker Great Firewall Guide rates ExpressVPN its number-one pick at roughly 85% success. The counterpoint: one China-tour analysis argues that ExpressVPN and Surfshark lack the specialized obfuscation of tools like Shadowsocks and become unreliable during tightened periods.

Specs, from ExpressVPN’s own pages: a 30-day money-back guarantee on all plans; tiered pricing (Basic, Advanced, Pro) with Basic around $3.19/month on a two-year deal and $12.99 month-to-month; and device limits of 8, 10, or 14 depending on tier. The operator, Express Technologies Ltd., is registered in the British Virgin Islands. Traveler blogs including The Food Ranger note that ExpressVPN keeps mirror-site URLs reachable from inside China, which helps if you forgot to install at home.

NordVPN: cheap on long plans, with an Android caveat

NordVPN’s standard answer to the firewall is its obfuscated servers, enabled by switching protocol in the app settings; reviewers at 01net, Gizmodo, and Fastest VPN Guide confirm that path can work. Per NordVPN’s own pricing blog, plans run $2.99 to $16.59 per month depending on term length. The 30-day guarantee covers all plans, and one subscription now allows 10 devices at once.

Then there are the traveler reports. The r/travelchina thread “VPNs that WORK in CHINA JULY 2026” contains a flat verdict: “NordVPN isn’t working in China (Android).” Another June 2026 traveler wrote that they paid for both ExpressVPN and NordVPN in 2024 and neither worked properly. NordVPN is strong value on paper. Just do not make it your only line of defense.

Surfshark: the budget workhorse

Surfshark documents China explicitly. Its NoBorders feature is built for restrictive networks and activates when restrictions are detected. Gizmodo calls NoBorders “the only way to reliably use this VPN there” and says to enable it before connecting. Surfshark’s support runs a dedicated “Connecting from China” article that recommends the standalone WireGuard client as a fallback when the app cannot connect.

On paper it is the cheapest option here: the tracker Great Firewall Guide lists about $2.49/month, unlimited simultaneous devices, and a 30-day refund, with roughly 65% measured success. 01net highlights the traffic-disguising modes as the first step for China use.

Mullvad: the minimalist wildcard

Mullvad does not market itself for China, which is part of its appeal for privacy-focused travelers: one flat price of 5 euros per month with no discounts or tiers, 5 devices, and an account that needs no email address. In September 2025 it shipped QUIC obfuscation for WireGuard, aimed squarely at firewall detection. Reviewers at security.org put its money-back window at 14 days.

Traveler reports are split. On the r/travelchina June 2026 thread, one user lists “LetsVPN, Mullvad and Kiree” as all working for them. A 2026 roundup of Reddit discussions describes Mullvad as working but slower, with high ping and uneven reliability. Coastal cities report better odds than inland ones.

Before You Fly: The Setup You Cannot Do Later

This part decides most trips. In 2017, Apple pulled roughly 60 VPN apps from its China App Store after regulators began requiring VPN providers to register for approval. The BBC reported Apple’s statement: it was “required to remove some VPN apps in China that do not meet the new regulations.” Those apps have stayed effectively absent. If the app is not on your phone before you board, it may never get on.

Cloud backups need thought too. Gmail, Google Drive, and Dropbox are all blocked on Chinese networks, so configuration files stashed in your usual cloud drive may be unreachable exactly when you need them.

Travelers who get this right follow the same ritual. A June 2026 r/chinatravel post asked the community to rank VPNs that were “already installed, paid, logged in, and tested before arrival.” Note the order. On r/travelchina, a November 2025 commenter wrote that “having an eSIM even before landing was key to a stress-free” start.

After You Land: Connect, Then Adapt

Expect friction on arrival. That is normal. Airport Wi-Fi in Shanghai or Beijing will often let you complete a first handshake. If the connection hangs, work through a sequence instead of hammering the connect button:

1. Switch to the provider’s obfuscation mode: NoBorders, obfuscated servers, or StealthVPN.
2. Try nearby server countries. Japan, Singapore, and Hong Kong endpoints often fare better than US ones.
3. Fall back to a manual client. Surfshark’s support explicitly recommends its WireGuard client when the app cannot connect, and the same logic applies to any provider with downloadable configs.
4. Restart the app, then restart the device.
5. If the primary fails completely, switch to the backup provider entirely.
6. If both fail, switch to eSIM data. Travelers report roaming eSIM traffic bypasses the firewall, and r/chinatravel threads from 2026 debating whether eSIMs hold up during crackdowns report mostly yes.

Two honest caveats. First, performance varies by city, ISP, and day. A setup that fails in one hotel may connect fine from the cafe downstairs. Second, enforcement tightens around politically sensitive dates, and during those windows even proven providers can go dark for days. No VPN is guaranteed in China. Plan around that sentence, not around it.

Two Quiet Failure Modes

DNS leaks. A tunnel can show “connected” while DNS queries still go to the local ISP, announcing every domain you visit. Most VPN clients include a leak-protection toggle: turn it on before departure, and run a DNS leak test while you still have clean internet at home.

Free VPNs. This one is editorial rather than sourced: someone always pays for a free tunnel, and usually that someone is you, in data. On a trip where your passport photos, bank app, and work logins all ride the same connection, a few dollars a month is the cheapest insurance in your whole itinerary.

FAQ

Bottom Line

If a dead connection would cost you a flight change or a workday, buy Astrill as your primary, keep a budget provider as backup, and carry an eSIM in your pocket. If you are spending one week in Shanghai on a budget, Surfshark or NordVPN on a long plan will serve, with a second app installed for insurance. Either way, do the setup at home, in calm conditions, weeks before you need it.

VPN reliability in China changes constantly; install and test before you travel, and verify current status at the provider links above (last verified 2026-07-24).