What’s the Best VPN for China? 5 that still work in 2018 (and some that don’t)

Published by on May 25, 2018 in VPN & Privacy

5 Best VPNs for China

If you plan to visit or live in China and want to maintain access to those western sites, apps, and services, then you’ll need a VPN. Not all VPNs work in China, and others are just too slow.

China’s advanced online censorship system, known as the Great Firewall, has made it a hotspot for VPN users. Both expats and native Chinese use VPN services to circumvent blocked sites and apps like Facebook, Google services, Tinder, western news media, Netflix, and even Comparitech.

Tip: Many VPN websites are blocked in China, even though the VPN itself will work, so it is best to sign-up to your chosen VPN before visiting China if you are not currently residing there.

Our main considerations when curating this list include factors we believe are of utmost importance to China VPN users. The top priorities are:

  • Reliability,
  • Customer support,
  • Speed,
  • Range of servers (especially in Asia)

Here are our top picks for the best VPN for China:

1. ExpressVPN

ExpressVPN pricing

ExpressVPN is possibly the most popular VPN service in China, particularly since Astrill’s ability to evade the Great Firewall has been patchy since early 2017. Express is not the cheapest VPN on this list, but it remains popular among users in China for good reason. It has a huge range of VPN server locations, excellent and consistent speeds, allows three simultaneous connections, offers 24/7 live chat support and claims 99.9% uptime.

The ExpressVPN app works across all major desktop and mobile platforms and is very simple to use. That includes Windows, MacOS, iOS, Android, Linux (command line), and compatible routers.

Torrenting is allowed on all VPN servers, and Express usually has a handful of servers that work with Netflix. If you’re only visiting China for a short period, consider the 30-day money-back guarantee.

READER DEAL: 3 Get months extra free with 12 month plans here and a 49% discount on the standard price (the 30 day money-back guarantee still applies so you can try it risk free).

Read our full review of ExpressVPN here.

2. NordVPN

NordVPN 3 year plan

NordVPN recently announced it now works from China, which is good news especially for Beijingers and Shanghaiists who want a lot of simultaneous connections for a low price. NordVPN offers great bang for your buck, offering six simultaneous connections on one inexpensive subscription. It can also unblock streaming sites like Netflix US and Hulu, which block most other VPN connections. Torrenting is tolerated, and servers are available in more than 60 countries.

NordPVN keeps zero logs of user activity and maintains strong encryption standards. Some servers are specialized with speed and security optimizations like anti-DDoS, ultra-fast streaming, double VPN, and Tor over VPN.

Both desktop apps–Windows and MacOS–work in China. Android users should opt for the beta version of the newest app. Unfortunately, NordVPN’s iOS app cannot evade the Great Firewall at this time.

Read our full NordVPN review.

DEAL ALERT: Our readers can save a huge 77% on NordVPN’s 3 year deal here.

3. StrongVPN

StrongVPN homepage

 

StrongVPN is another long-time favorite among expats and travellers in China. It offers over a dozen VPN server locations in the United States alone, although other countries are more limited. We aren’t huge fans of the desktop app, but the L2TP and SSTP protocols work well enough. Speed and uptime are reliable and the company is small enough to sometimes be overlooked by censors while the bigger companies get hammered.

Prices are mid-range, about the same as Astrill but with fewer paid extras. Each subscription comes with a 5-day money-back guarantee. The support team is available 24/7/365 but can only be reached via an online form.

Apps are available for Windows, MacOS, iOS, and Android.

READER DEAL: StrongVPN has a 42% discount on its annual plan here. There is also a 30 day money back guarantee so you can try it risk free.

4. VyprVPN

VyprVPN China

VyprVPN is one of the few tier-1 VPN networks with support for users in China, meaning it owns all of its own VPN servers and doesn’t rent them. That equates to fast, consistent speeds and excellent uptime. The Pro version includes a proprietary “Chameleon” protocol that masks VPN traffic to make it less susceptible to the Great Firewall’s deep packet inspection technology. It’s on the pricier side, but residents of China will be happy to know the company accepts payments from Alipay, a popular payment gateway in the country similar to PayPal.

VyprVPN offers a decent number of locations. Live chat support is available. Our only complaint is with some of VyprVPN’s less-than-private logging policies, so frequent torrenters and Popcorn Time VPN users might want to look elsewhere.

Apps are available for Windows, MacOS, iOS, and Android.

Check out our full review of VyprVPN here

READER DEAL: Try it with a 30 day money-back guarantee here.

5. Buffered

buffered servers and connected

Hungary-based Buffered offers a super simple app for Windows and MacOS that the company claims can get past the Great Firewall. Unfortunately, no mobile apps are available yet, but iOS and Android devices can still be set up manually using an OpenVPN app.  Up to five devices can be connected simultaneously on a single account, making Buffered a solid option for a family or group of housemates. Speed is reliable and connections rarely drop. The company operates servers in 37 countries, including several in the Asia Pacific region.

Apps are available for Windows and MacOS.

Update, December 24, 2017: We’ve had several reports that Buffered is no longer consistently working in China so recommend you opt for one of the other VPNs in this list.

Read our full review of Buffered

EXCLUSIVE DEAL: 30 day money-back guarantee to try it risk free here.

 6. Astrill

astrill ss 2

When I lived in China, I mostly used Astrill. Individual plans are available if you only use one device, or get a family plan for a few dollars more and connect every laptop and phone in the house. The app is great, allowing users to either connect to a simple HTTP proxy in a couple seconds or opt for a full VPN connection. Download speeds are solid enough to stream video if you pick a server without a heavy load. Subscribers get many locations to choose from. The live phone and chat support teams are experienced dealing with customers in China.

Prices are mid-range with a lot of optional add-ons.

Apps are available for Windows, MacOS, iOS, Android, Linux, and certain wifi routers.

VPNs to avoid in China

As a general rule, you’ll want to avoid so-called free VPN services in China. The chances of a free VPN being able to bypass the Great Firewall of China are slim. Even if it does, free VPNs tend to be less reliable, impose data and bandwidth limits, and have a much smaller selection of servers than paid ones. Furthermore, free VPNs often make money by spying on your online activities and selling the collected data to third-parties, including advertisers.

That being said, not all paid VPN services can bypass the GFW, either. If you need a VPN for China, avoid these:

Private Internet Access

While we praised PIA overall in our review, the company admits it has trouble maintaining connections in and out of China.

HideMyAss

Users report poor quality, slow connections from China on HideMyAss. The company is also notorious for substandard logging policies that have gotten users in trouble with authorities in the past.

VPN Gate

This free university-run peer-to-peer network of volunteer VPN nodes was created as an experiment and as a way to circumvent censorship. I used it for a while in Beijing a couple years ago, but it has since stopped working.

VPN vs GFW: an ongoing battle

For many expats in mainland China, VPNs are a daily necessity, and reliability trumps all other factors. The Great Firewall of China occasionally takes aims at VPN services, blocking their servers and throttling bandwidth. The VPNs that persist in the face of repeated efforts to stifle them find favor among foreigners.

Keep in mind that all VPNs get blocked by the GFW from time to time. A quick look through comments on Beijing or Shanghai expat forums will reveal that none are perfect. But the best VPNs for China have proven themselves against a well-armed adversary.

Using a VPN service is not technically illegal in China–in my three years of living there I’ve never heard of a single person being arrested for using one. The goal of the authorities is to censor, not to punish.

The Great Firewall uses a variety of tactics to detect and subsequently block access to VPN servers. One of these methods is called “deep packet inspection”, which looks at traffic as it passes through a local ISP’s servers to check for hallmarks of common VPN protocols like OpenVPN. Most of the VPNs we recommend above now use some sort of obfuscation to “scramble” the data and make it look like non-VPN traffic.

In response, a 2015 Princeton study found the Great Firewall now goes directly to the VPN server rather than just inspecting traffic destined for it in a tactic called “active probing.” The report explains:

“The censor acts like a user by issuing its own connections to a suspected proxy server. […] If the server responds using a prohibited protocol, then the censor now takes some blocking action, such as adding its IP address to a blacklist.”

VPN not working in China? Try this:

Even if you have a good VPN service in China, they occasionally get blocked. Here are a few steps you can take to get up and running again:

  • Change your server
  • Change your VPN protocol
  • Port forward to port 433 (SSL)
  • Try a different protocol

The SSTP protocol for Windows uses port 433 by default, making it a good option for VPNs that support it including ExpressVPN and StrongVPN. Because blocking port 443 altogether would disrupt the internet–every website that uses HTTPS would be inaccessible–it’s highly unlikely that China would block all traffic on port 443.

Another frequently recommended option is to use the L2TP/IPSec protocol. L2TP/IPSec is less likely to be blocked by the GFW than OpenVPN. Most devices have built-in support for L2TP, and your VPN provider’s app might include it as well. L2TP/IPSec offers similar speeds and level of security to that of OpenVPN.

Non-VPN methods to evading the Great Firewall

VPNs are the tried-and-true method for bypassing the GFW, but there are a few other methods that work with limited success.

  • Lantern, a free peer-to-peer internet circumvention software, has grown quite popular. It uses a volunteer peer-to-peer tunneling network with exit points outside of China.
  • Tor reportedly works with a bit of advanced configuration, however it won’t work out of the box. Tor exit points are fairly easy for the Great Firewall to identify and block. You’ll need to set up bridges.
  • Some SOCKS proxy applications such as Shadowsocks apparently work, but don’t expect great speeds or privacy. There’s also Surge for iOS, but it’s built for developers so don’t expect a very intuitive UI.

VPNs into China

If you’re outside China looking in and need a provider with VPN servers on the mainland, your options are pretty limited:

  • PureVPN is our top recommendation, with servers in Beijing, Shanghai and Guangdong. Users inside of China report mixed results for tunneling past the GFW, though.
  • EarthVPN and Astrill both have at least one server running in China.
  • FlyVPN and SenVPN run a few servers each in China, but Comparitech has not tested these and cannot vouch for them at this time.
  • HideMyAss has a server in China, but we would only recommend it as an absolute last resort.

For more information on using a VPN service to tunnel into the mainland, check out our tutorial on how to watch Youku from outside China.

Blocked sites and apps in China

Human rights watchdog Freedom House lists China’s internet as “not free” in its 2017 “Freedom on the Internet” report. China scored an 87 out of 100, with 100 being “least free”. The report states:

  • “For the third consecutive year, China was the world’s worst abuser of internet freedom, followed by Syria and Ethiopia.

This is not by any means an exhaustive list, but you can unblock the following websites and apps by using a VPN in China:

  • All Google services (Gmail, Translate, Search, Drive, Play Store, etc)
  • Facebook
  • Youtube
  • Twitter
  • News media
  • Instagram
  • Tinder
  • Snapchat
  • Dropbox
  • Github
  • Vimeo
  • Soundcloud
  • Flickr
  • Skype
  • WhatsApp

October 2017 update: WhatsApp is now fully blocked in China. After brief service disruptions during which users were unable to send photos and videos, China has now completely blocked the world’s most popular messaging app including normal text messages. The block coincides with the 19th National Congress of the Chinese Communist Party. Censorship is often ramped up prior to such events.

A VPN will unblock all of the sites and apps listed here, including WhatsApp.

What is the Great Firewall?

The Great Firewall is the unofficial nickname for China’s advanced internet censorship system. Officially called the Golden Shield project, state-owned internet service providers restrict all internet traffic to and from China to just a handful of access points.

This gives authorities the means to monitor and restrict access to content outside the country. The Great Firewall utilizes a combination of methods to censor the web including IP blocking, DNS tampering, keyword filtering, deep packet inspection, URL filtering, and manual enforcement.

IP blocking is a simple matter of blacklisting the IP address of a server hosting a website. DNS tampering involves modifying the entry of a DNS cache so that a URL–such as www.comparitech.com–is resolved into the wrong IP address. Keyword filtering mechanisms scan search queries, messages, and web page requests for sensitive words and phrases. ISPs can prevent unwanted communication by hijacking DNS requests containing sensitive keywords and injecting altered DNS replies. Deep packet inspection, or packet filtering, can scan internet traffic for sensitive keywords or determine if a packet has been encrypted using a VPN protocol. Manual enforcement involves using China’s 50,000-strong internet police force to find and block IP addresses and URLs.

To handle all of the internet traffic between the world’s most populous country to the outside world, complex intrusion detection systems (IDS) create copies of packets and pass them to filtering devices so that traffic flow isn’t interrupted.

Most websites blocked by the Great Firewall remain blocked permanently, but some are only blocked temporarily. Because it is implemented on all the major access points for internet traffic in and out of the country, the Great Firewall can throttle international traffic to a crawl. This often happens after a government scandal, during anti-government protests, and every year around June 4, the anniversary of the 1989 Tiananmen Square massacre.

Furthermore, websites that are blocked in one province might not be blocked in another province. This indicates internet censorship often begins at a lower level of government, and isn’t uniform nationwide. Tibet and Xinjiang, two western Chinese provinces known for insurrection and rebellion, have extremely limited internet access for only a few hours per day.

Are VPNs legal in China? (January 2017 update)

Yes, using a VPN is still legal in China.

Lately we’ve seen a lot of poorly-worded headlines suggesting otherwise. In January 2017, a Chinese government ministry issued a notice announcing a campaign to crack down on VPN and special cable services throughout the country until March 31, 2018.

The notice does not say using a VPN service is a crime. I cannot stress this enough, because this important point has been repeatedly misinterpreted by western media.

The notice says that VPN providers cannot legally operate in China without government approval. It does not affect VPN users in any legal way, so far as we can tell. It might result in VPN servers getting blocked more often, however, so expect more frequent downtime in the coming months.

No sane VPN provider maintains an official presence in China. Most do not have offices, employees, or servers on the mainland. That means they operate outside of the jurisdiction of Chinese authorities and do not require approval from the Chinese government to legally operate. Still, they might well be targeted for censorship by the Great Firewall if the government follows through on its threat.

There is no precedent on record of anyone being arrested, fined, or detained for using a VPN. Because VPN use in China is so widespread, especially among academics and expatriates, this is unlikely to change.

Will China block all VPNs by 2018?

In July 2017, a Bloomberg report citing anonymous sources said the Chinese government has ordered the country’s three major internet and mobile carriers–China Mobile, China Telecom, and China Unicom–to block individual access to VPNs by February 1, 2018. If true and enforced, the crackdown would block all access to VPN services used to circumvent the Great Firewall.

Update: China’s Ministry of Industry and Information Technology has called the Bloomberg article “false,” and says this year it has only blocked unauthorized VPNs used to conduct illegal business.

Update #2: The supposed deadline for the VPN has passed, and Chinese telecom companies have confirmed that no such ban exists and they have not received any such notice from authorities. People in China continue to use VPNs safely and legally.

Even if Bloomberg’s sources are reliable, it wouldn’t be the first time we’ve seen such rhetoric espoused by Chinese authorities. In truth, China already blacklists the IP addresses and domains of known VPN servers outside the country at infrequent intervals. In the past, these actions have caused some VPNs like Astrill to be almost completely shut down for users on the mainland. Most, however, only suffer temporary downtime until they’ve had a chance to update their software and server addresses.

While there’s always a chance that this could be “the big one” that blocks any and all VPNs indefinitely, we reckon it’s more likely to cause partial, temporary outages across the board. So don’t fret quite yet. The odds are that VPN users inside China will still be able to bypass the Great Firewall, although some might have to endure some service outages or change providers.

All of the VPNs we recommend in this list have been operating in China for a long time. They have learned how to evade blocks and other obstacles thrown at them by the Great Firewall. We don’t see that coming to an end any time soon.

When is your VPN likely to get blocked in China?

The Great Firewall can block VPN servers at any time, but blocks tend to happen in waves. Blocking a single server’s IP address isn’t very effective because users can simply switch to a different server. So China tends to gather a list of several VPN servers and block them all at once.

This often happens around events that draw a large amount of political attention to China. One consistent example is every year on or around June 4, the anniversary of the 1989 Tiananmen Square massacre, a dark stain on the Chinese Communist Party’s reputation of which every mention is scrubbed from the country’s internet.

During large government meetings and summits, such as the recent Belt and Road Summit in May. To quell political dissent leading up to and during these events, it’s common for many websites, VPN servers, and other content and services to be added to the Great Firewall’s blacklist.

Sometimes the new restrictions are permanent, and other times they are temporary. But VPN providers are usually able to resume normal operations within a few days.

Google Play and Android in China

Google Play, like all other Google services, is blocked in China. That means you might not be able to access the Android version of your VPN provider’s app.

Instead of Google Play, Android users in China are forced to use third-party app stores. There are tons of them, but they probably don’t have the app you’re looking for, either. Recently, China ordered domestic app stores to remove VPN apps from their listings, but even before that the chances of finding your VPN app were minimal.

If you have an Android device and plan on going to China, we strongly recommend you get your VPN app and subscription before your trip. If you’re already behind the firewall, check your provider’s website to see if they have an APK file available for direct download. An APK file is the installer for an Android app. You will need to allow apps from unknown sources in your device’s settings to be able to install using an APK. Also note that if you install an APK file, the app will not automatically update.

Be wary of APK files from third-party app stores and download sites that aren’t either Google Play or the VPN’s official website. APKs downloaded from third parties are often modified to carry malware and other nasty stuff.

If you’re in China and you have a VPN on your desktop or laptop but not your Android phone, you can try sideloading the app. There are many ways to do this, but the simplest is to download the APK file onto your computer, then move it into your Android device’s Downloads folder via USB cable. Then you can easily access the APK on your phone and install it.

iOS and the App Store in China

Unlike Google, Apple has been allowed to operate its own app store within China. But to do so, it must abide by Chinese laws and regulations. That means when Chinese authorities request for an app to be removed from the App Store, Apple must remove it if it wants to maintain a presence in the country.

In late July 2017, the realities of this arrangement hit home with VPN users. Apple has removed several VPN apps from the Chinese version of the App Store, including ExpressVPN and VyprVPN, among others. This comes on the heels of a regulatory notice earlier in the year announcing a crackdown on VPN services operating within China without a license.

Regrettably, Apple is now complicit in censorship VPN apps that allow access to blocked content in China. China has enlisted Apple in ensuring that users searching for VPN apps on the App Store will not be able to find them.

If you set up your iCloud and/or iTunes Connect in another country, you will still be able to find, download, and update VPN apps. They should continue to work even if you are inside China.

If you set up your iPhone or iPad from within China and connected it to the Chinese App Store, however, you will likely be unable to find or download the VPN you need. The solution to this is to change the location of your Apple accounts. To do this, however, you will need a form of payment native to another country. If you don’t have this, you can try purchasing an iTunes gift card from another country and using that as a payment method.

Great Wall of China” by Keith Roper licensed under CC BY 2.0

21 thoughts on “What’s the Best VPN for China? 5 that still work in 2018 (and some that don’t)

  • The 99.9% uptime claim by Express VPN is false. It does work for days at a time, and sometimes even for a week or two straight, but then it goes down for hours and sometimes days. I am an English teacher in Daqing and depend upon it as a source for English teaching material and to stay in touch with loved ones. When it goes down, I am cut-off and the tech support tends to blame China and then claim their engineers are working to reconnect. Their “automatic” setting does nothing automatically. Their lack of people in China is a sore point. They have tried to get me to do free troubleshooting to help them out without any offer of free months or discounts. If they actually had people here who suffered through the service blackouts, they might actually learn empathy. I am planning on trying another service for my next year here.

  • Astrill works fine. I’ve used it for over 6 years and have rarely experienced any issues. If a server doesn’t work, I switch, then I’m good. Usually it’s only annoying during certain sensitive government events, but other than that it’s fine. The OpenWeb proxy it offers makes web surfing and Youtube easy without having to wait for normal VPN connections.

    I can understand if you have some comments about the pricing or customer service. But completely crossing it off? Are you being paid by one of their competitors?

    Astrill works – I’m using it right now! My Gmail is open, my iPad has Instagram open. It clearly works in China. I would comment on other VPNs if I could, but I’ve never had to switch. I find that works okay on iOS and Android, best on Windows.

    • I have been using Astrill when I travel to China for the last 3 years. Love it.

      Only ever faced one technical issue, got the Astrill guys in chat and they helped me fix it within 5 minute. Thumbs up from me.

      Used ExpressVPN before that, but it was flaky and slow (not saying that happens for eveyone, but it was my experience).

    • Hi Ken, we got a lot of complaints about it not working, so it seems to not be consistent for everybody, which is why we crossed it off (but didn’t remove it completely).

  • ExpressVPN supposed to be the best? Doubt it.. 7 years in China and Express VPN only have 2 servers they recommend to use within China.

    I have an extremely fast home internet with a top router, updated cables and I use YouTube and Netflix without issues – tried ExpressVPN recently for fun, it’s not doing the trick. I recommend smaller VPN providers for China

  • I have used Astrill for 3 years in China. I do not think my ability to browse outside of china was ever interrupted for more than 5 mins…I have NOT experienced what others are saying. In fact, I had a great deal of trouble with VYPR.

    Even tech support was very quick to get back to me relating to any issue.

  • I can confirm what Hidemyass has very poor service with a horrible customer service who refuses to pay back my money. I was very unhappy with them and can only warn about that company

  • I’ve been using Astrill for over five years. No Issues. Friends using others have all complained of problems. I read all these articles not listing astrill… Strange.

  • i’ve tried a few of those comparitech listed back when i was there lat year. if you haven’t been able to use the app, try to configure vpns like express and ivacy overyour router instead. see if that works.

  • ExpressVPN is working most of the time in Taiyuan, Shanxi. Up to now I never had to contact service, because it just worked fine. You now get a license for up to 5 devices, which is enough for me. Let’s see if it will survive the announced shutdown on January 11th 2018.

  • Your statement about Astrill is totally inaccurate.
    I live in China for 8 years and I have tried all major VPN services that claim they work in China. I have used ExpressVPN for 2 years and had nothing but problems. I had a hotline with their support, but never was there a permanent solution.
    Now I am using Astrill and it works great! When it disconnects bevcause the Great Chinese Firewall blocks it for some reason, I just select a different server and am good to go! So please check all these VPN services regularly before you make your statements. Astrill is the only one that really works in China.

  • What alternatives do you suggest for companies with offices in China? My company uses a VPN to connect to manufacturing facilities outside of Beijing. We definitely need a fast, reliable option and soon.

  • What about international companies that depend on VPN for connecting to their offices in China? My company uses a VPN that has become problematic. We are looking for options.

    • I’m not sure what you’re asking. Do you need a VPN to access your company’s internal resources? Because that will have to something you set up yourself, not one of the commercial VPNs on this list.

    • astrill works for no more than a few minutes and then blocked in Hainan for the past 2 years. I am now switching. also very poor support. They never told me it was a persistent problem and wasted me a lot of time.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.