China is the hardest place in the world to use a VPN, and it is only honest to start there. The Great Firewall blocks most of the internet an Irish traveller takes for granted — Google, Gmail, Maps, WhatsApp, Instagram, Facebook, YouTube and most Western news — and it blocks your Irish services too. Worse, it actively hunts for and blocks VPN traffic, which is why most VPNs simply do not work in China. This is not a list where any of six will do.
The one we would rely on is ExpressVPN — the only provider our testing rates as working behind the Firewall, thanks to obfuscation that disguises VPN traffic as ordinary HTTPS so the Firewall cannot easily spot and drop it. NordVPN, Surfshark and Proton VPN have obfuscated modes of their own, but we will not pretend they are as reliable in China — behind the Firewall, reliability drops sharply. If a stable connection matters, ExpressVPN is the pick.
One rule outranks every other on this page: install and test it before you go. VPN websites and app stores are blocked inside China, so once you have landed you usually cannot download or sign up for one. Get it working at home first, and it will be there when you arrive.
Why China is the hard case: the Great Firewall
The reason China deserves its own page is the Great Firewall (GFW), the state-operated censorship system that sits between China and the rest of the internet. It is not a single block but a layered one, and each layer is a different way of stopping you reaching a site or running a VPN:
- DNS poisoning. When your device asks “where is google.com?”, the Firewall returns a wrong or dead answer, so the lookup fails before a connection even starts.
- IP blocking. The IP addresses of blocked services — and of many VPN servers — are simply dropped, so traffic to them goes nowhere.
- Deep packet inspection (DPI). The Firewall examines the shape of your traffic, not just where it is going, and can recognise the fingerprint of standard VPN protocols.
- TCP reset injection. When it spots something it does not like, it can inject reset packets that tear the connection down mid-flow.
For an Irish visitor this means the everyday internet largely disappears: Google and Gmail, Maps, WhatsApp, Instagram, Facebook, YouTube and most Western news are blocked, and so are your home services — RTÉ, Irish banking and the rest treat a Chinese IP as out of region. And because the Firewall detects and blocks VPN traffic itself, getting any of it back is genuinely hard.
This is the key difference from almost everywhere else you might travel. In most countries a VPN is a convenience; in China the network is actively trying to detect and stop the VPN — which is why the provider you chose decides whether you get online at all.
The honest truth: most VPNs don’t work (and the one that does)
Here is the part most VPN sites skate over: most VPNs do not work in China. Plenty of services that are excellent at home — fast, private, great for streaming — connect fine in Dublin and fail flat behind the Firewall, because DPI spots their traffic and the IP blocks catch their servers. A long feature list counts for nothing if the connection will not hold.
What you actually need is a well-maintained service with obfuscation (sometimes called stealth or camouflage mode), and even then it can be patchy. Obfuscation disguises your VPN traffic so it looks like ordinary encrypted web browsing, which is what lets it slip past deep packet inspection. The provider also has to keep rotating fresh server IPs faster than China can block them — real ongoing work, and precisely what separates the one we rely on from the rest.
On our data, that one is ExpressVPN — the only provider our testing rates as working in China, and the pick we would take, full stop. NordVPN (obfuscated servers), Surfshark (a NoBorders/camouflage mode) and Proton VPN (Stealth protocol) all have China-aimed features and are worth installing as backups, but we will be straight: behind the Firewall their reliability drops sharply, and we do not claim they punch through China-grade blocking the way ExpressVPN does. IPVanish and CyberGhost are not picks we would count on in China at all.
The honest summary: this is not a country where “any good VPN” will do. For a stable connection behind the Firewall, take ExpressVPN and treat the others as backups, not equals.
Is it legal to use a VPN in China?
This is a genuine grey area, and we will state it plainly rather than scare you or wave it away. Under Chinese law, using an unauthorised VPN — one not licensed by the state — to reach blocked sites is technically illegal. The law is real, and in 2026 the penalties were raised and enforcement tightened: police can fine an individual up to around RMB 5,000 (roughly US$750), with more for organisations.
And yet, in practice, VPNs are used every day by millions of residents, students and travellers to do entirely ordinary things. There is no real history of tourists being fined for ordinary personal VPN use — checking email, messaging home, opening Maps. The enforcement that does happen has overwhelmingly targeted people selling unauthorised VPN services or using them at scale, not a visitor on their phone in a hotel. For a tourist using one responsibly, the real-world risk is low — though not zero, so use it discreetly.
So our position is measured: know the law, do not use a VPN in China for anything you would not do openly, and accept that ordinary personal use sits in a tolerated grey zone rather than a clearly safe one. None of this applies at home — see are VPNs legal in Ireland.
Install it before you go
If you read nothing else on this page, read this. The single most important step for China is to install and test your VPN before you travel. The reason catches people out constantly: VPN provider websites and app stores are blocked inside China, so once you have arrived you usually cannot download the app or sign up for an account. Land without it and you may be stuck without it.
A short pre-departure checklist, all on your home connection:
- Sign up and install before you fly, on every device you are bringing — phone, tablet, laptop.
- Turn on obfuscation / stealth mode and test that it connects. With ExpressVPN this is largely automatic; with the others, find and enable it now.
- Test a Hong Kong, Japan or Singapore server — nearby regions tend to be the most reliable for speed from China.
- Note your login details offline and enable the kill switch so nothing leaks if the connection drops, which it will do more than usual behind the Firewall.
Travelling beyond China on the same trip? The install-before-you-go discipline applies anywhere, and our best VPN for travel guide has the wider pre-departure kit.
What you get back (Google, WhatsApp, Irish services)
When a VPN does hold in China, what it gives back is the ordinary internet. Your traffic leaves China encrypted and emerges somewhere uncensored, so the blocks no longer apply:
- Google and its apps. Search, Gmail, Maps and Translate — the tools you need to get around and stay in touch — come back.
- Messaging and social. WhatsApp to message home, plus Instagram, Facebook and the rest the Firewall blocks by default.
- Your banking and accounts. Irish online banking reads your IP for fraud checks, so a sudden login from a Chinese IP can trip a flag or a lockout; a server that puts you somewhere expected keeps that smoother. As ever, this is reaching your own accounts, never evading security.
- Irish TV and home services. Connect to a server that gives you an Irish IP and RTÉ Player and other Ireland-locked services treat you as home again.
Holding a stable connection in China is the hard part, and a Dublin endpoint is a heavier lift than a nearby Asian one. If an Irish IP is your main goal — on this trip or any other — the mechanism and the cleaner options are covered in our best VPN for an Irish IP address guide.
How we ranked the VPNs for China
A China ranking is unlike any other on the site, because most of the usual criteria are beside the point if the VPN cannot connect. The order here is decided first by one thing: does it actually work behind the Firewall? Everything else is a tie-breaker.
- Works in China (the gate). Our data rates exactly one provider as working there — ExpressVPN — and that alone puts it at number one. No amount of speed or value moves a VPN up this list if it does not get past the Firewall.
- Obfuscation / stealth. The feature that makes any of this possible. ExpressVPN leads, with NordVPN, Surfshark and Proton VPN offering obfuscated or stealth modes worth having as backups.
- Reliability and maintenance. China-readiness is ongoing work — fresh server IPs, updated protocols — so we weight providers that actively keep up the fight, not ones that did once.
- Nearby servers and speed. Hong Kong, Japan and Singapore endpoints make for a usable connection, and matter once you are through.
On that basis the order is ExpressVPN first and clear of the field, then NordVPN, Surfshark and Proton VPN as the credible backups, with IPVanish and CyberGhost last and not ones we would rely on behind the Firewall. For the all-round picture, see our best VPN for Ireland ranking.
Our top picks for China
ExpressVPN — the one to take to China
Our clear number one, and on our data the only provider rated as working in China. Its obfuscation disguises VPN traffic as ordinary HTTPS so the Firewall’s deep packet inspection cannot easily catch it, and it keeps rotating fresh server IPs to stay ahead of the blocks. If a stable connection behind the Firewall matters, this is the pick — full detail in our ExpressVPN review.
NordVPN — the strongest backup
The best of the rest and the one we would install alongside ExpressVPN. It has obfuscated servers built for restrictive networks and is the fastest VPN in our 2026 tests, so when it does connect in China it is quick. But behind the Firewall it is less reliable than ExpressVPN — a backup, not an equal. More in our NordVPN review.
Surfshark — value backup for a whole party
A NoBorders/camouflage mode aimed at restrictive networks, on unlimited simultaneous devices from around €1.99/mo — so a travelling family or group can all have it installed before they fly. Again, a backup behind the Firewall, not something we would bet the trip on.
Proton VPN — the privacy-first backup
Its Stealth protocol is designed to slip past censorship and DPI, backed by Proton’s strong privacy record — a reasonable backup, though as with the others reliability in China drops well below ExpressVPN. IPVanish and CyberGhost complete the list, but neither is one we would count on behind the Great Firewall.