Before You Go

Best VPN for China (2026): What Actually Works for Foreigners

The old advice — "buy a big-name VPN and you'll be fine" — is no longer the right starting point. The strongest pattern in 2025–2026 traveler reports is that a tourist eSIM does more of the real work than the VPN itself. VPN is still worth having; it just isn't your primary access layer anymore. The practical question has shifted from "Which VPN do I buy?" to "How is my mobile data routed?"

1Set up first

eSIM

HK or SG-routed mobile data — most blocked apps just work without any VPN.

2Keep handy

VPN

One tested account, only for hotel / café / airport WiFi.

3Before you fly

Test the chain

Verify both at home. You cannot fix this from China's airport WiFi.

For most short-term visitors this is the whole answer. The part most guides miss: a VPN only helps once you're already on a restricted connection — it tunnels you out. An eSIM with non-mainland routing means the restriction never applies in the first place.

💡 Considering an eSIM instead? Most travel eSIMs bypass the firewall on cellular data without any VPN app — but you still need one VPN for hotel WiFi. See our eSIM guide for how the two work together.

The setup to do before you fly

Three layers, in this order:

💡 A HK / Singapore-routed eSIM (or international roaming). Your everyday data exits through a non-mainland carrier, so Google, WhatsApp, Instagram, and Gmail just work — often with no VPN at all. Install it before departure; airport WiFi sits behind the same Great Firewall, so you cannot set it up on arrival.

👀 One tested VPN. Buy and install one VPN at home (LetsVPN, Astrill, ShadowFly, or V1VPN are the names currently surfacing). Treat it as backup for hotel / café / airport WiFi — not as your primary connection. The big Western brands (NordVPN, ExpressVPN, Mullvad) are showing more failure reports than working reports in 2025–2026.

⚠️ Verify both before you board. Turn off WiFi, open Gmail on cellular, then switch the VPN on and confirm it connects. Store login details somewhere offline. The mistake to avoid is boarding with an untested setup and trying to fix it from inside the firewall.

The one rule travelers forget

Here is the rule of thumb that prevents most "Google stopped working" panic:

On mobile data (eSIM)

No VPN needed

Apps just work — HK/SG routing bypasses the Great Firewall on cellular.

On hotel / café / airport WiFi

Turn on your VPN

You are back on the mainland network, so the firewall is back too.

A travel eSIM routes your cellular data through an international gateway. Hotel and public WiFi are local mainland connections, so blocked apps stop again — the VPN is what tunnels you out in that state.

"Didn't install a VPN. Worst mistake. No Gmail, Google Maps, WhatsApp or Instagram. For THREE DAYS."

— r/travelchina · 5 mistakes I made on my first China trip · 👍 228 · Nov 2025 🔗 Original thread

The practical answer is boring but important: finish the setup at home, on normal internet, where you can debug if something breaks.

Which VPN should you buy?

Treat any specific VPN recommendation — including ours — as community intelligence with a roughly 30-day shelf life, not stable infrastructure. A brand that worked flawlessly in August can fail by November. Re-verify within 4–6 weeks of your departure.

LetsVPN

Small, China-focused, the most-praised name in current 2025–2026 reports. Reasonable price, simple app. Check: re-verify it still works within 30 days of departure.

Astrill

Long-running China specialist. Consistent but expensive — standard tier sometimes insufficient. Check: the premium "VIP" plan is the one that typically holds up under crackdowns.

ShadowFly · V1VPN

Cheaper LetsVPN-style alternatives that also surface in recent threads. Check: verify the specific brand in your departure month — the names rotate.

The big Western brands have been the source of most recent failure reports. Treat the table above as a snapshot, not gospel — but treat the brands below as actively risky.

"Mullvad VPN seems to be having issues this year. Try Let's VPN — it has been working flawlessly for me."

— r/travelchina · 25 days in China: An absolute horror trip! · Nov 2025 🔗 Original thread

And the deeper paradigm shift — what frequent visitors actually settled on:

"trip.com eSIM is solid. I have no idea what people are yapping about. I've used it flawlessly in Shanghai, Beijing, Guilin, Yangzhou, Shenzhen and Hong Kong. I even had service deep inside a cave! No VPN needed. It streams Netflix, works with Facebook, Gmail etc. Zero issues."

— r/travelchina · My learnings from my current visit that I didn't get from reading comments · 👍 119 · Jun 2025 🔗 Original thread

Routing data through a non-mainland carrier means the connection never hits Chinese filtering in the first place — it doesn't make the VPN obsolete, it just demotes it to backup.

What still breaks

  • Waiting until arrival. Install and log in to your eSIM, VPN, Gmail, Alipay, and WeChat before you enter China. If something is going to fail, you want it to fail at home with normal internet — not at a hotel desk on day one.
  • Treating hotel WiFi as a reliable fallback. Hotel WiFi is slow, intermittent, and often actively blocks VPN traffic. Keep the eSIM as the real backbone; turn the VPN on only when you have to use WiFi.
  • Buying a brand-name VPN without an eSIM. A famous VPN brand is not a setup. Lead with the routing layer (eSIM); the VPN is layer two. Most "my VPN doesn't work" stories are really "I had no eSIM" stories.
  • Layering a VPN on WiFi that's already blocking VPN traffic. Some hotel networks disconnect you the moment a VPN switches on. That's a network-side block, not a brand failure. Switch back to cellular.
Bottom line

eSIM for data. VPN for WiFi. Test before you fly.

Three layers, set up in that order before you board. Most of the China internet panic never happens if you do. Budget roughly $15–40 for a two-week trip — far cheaper than landing disconnected.

Pre-trip checklist

  • [ ] Buy and install a tourist eSIM with HK or SG routing
  • [ ] Confirm your home carrier's roaming behavior in China (optional)
  • [ ] Install one VPN, log in, and run a connection test
  • [ ] Verify Gmail and WhatsApp work on the eSIM data layer
  • [ ] Save VPN login + eSIM activation details to an offline location
  • [ ] Don't rely on airport or hotel WiFi to rescue an unprepared setup
  • [ ] Plan the VPN as backup, not your primary access tool
👉 Get the complete China prep system: Complete China Guide ($19) → — eSIM, VPN, payments, transport, and city guides in one place.

Further reading

Official References

Two evidence layers: official Chinese sources do not publicly rank which VPN brands currently work best. The brand snapshot above is intentionally based on recent traveler reports, not official claims. Treat official facts as durable, the VPN snapshot as community intelligence to re-verify before you fly.

Research Coverage

  • Communities: r/travelchina, r/solotravel, r/digitalnomad
  • Search terms: "vpn china," "vpn esim roaming," "bought vpn never used," "china internet vpn," etc.
  • Time range: 2024-06 — 2026-05
  • Other source threads referenced:
  • Prepping for China in 2026? Current state of things · Jan 2026 — r/travelchina
  • China trip — my experience with trip.com e-sim, ShadowVPN and some other things · 👍 136 · Aug 2025 — r/travelchina
  • Official cross-checks: National Immigration Administration arrival card pages

Tags: vpn china 2026, china esim guide, china internet access, china roaming, china travel connectivity, vpn vs esim china, foreigner internet china 2026

Want the whole prep system in one place?

Payments, SIM, VPN, trains, tickets, maps, and backup plans — one offline-friendly checklist, $19 once.

Complete China Guide · $19