Skip to main content
  1. China VPN Guide/

How to Set Up a VPN in China: Step-by-Step Download & Install Guide (2026)

Author
China Visa Guide News
Practical English-language guides about China visas, entry policies, transit rules, and travel preparation.
Table of Contents

You’re flying to China tomorrow. You’ve heard about the Great Firewall. You know you need a VPN. But how do you actually set one up?

The short answer: Download and install your VPN before you land in China. Once you’re behind the Great Firewall, VPN websites are blocked, app stores are restricted, and getting a VPN becomes 10× harder.

This guide covers both scenarios — the easy way (set up before arrival) and the hard way (you’re already in China without a VPN). We walk through every step for iPhone, Android, Mac, and Windows.

The Golden Rule: Install BEFORE You Arrive
#

If you take one thing from this guide:

Download, install, subscribe, and test your VPN before your flight to China. Do it at the airport if you have to. Do it on the plane. Just do it before you land.

Once you’re in China:

  • VPN provider websites are blocked (expressvpn.com, nordvpn.com — all of them)
  • Google Play Store is blocked on Android
  • Apple App Store may not show VPN apps on the Chinese store
  • You can’t easily download installation files

Setup takes 5–10 minutes. Do it now.

Pre-Arrival Setup Checklist (10 Minutes)
#

Before your flight, complete every item on this list:

  • Choose a VPN that works in China (see recommendations below)
  • Subscribe and create your account
  • Download the app on your phone AND laptop
  • Install and log in on all devices
  • Test the connection — connect to Japan or Hong Kong server, confirm it works
  • Save customer support email (for requesting mirror links once in China)
  • Install a SECOND VPN as backup (VPN websites are blocked in China — if your primary VPN fails, you can’t download another one)
  • Screenshot this guide or save it as a PDF (you may not be able to access it in China)

Which VPNs to Install
#

VPNInstall Before China?Why
ExpressVPN✅ YesMost reliable, auto-obfuscation, no config needed
LetsVPN✅ YesSimplest setup — one tap connect
NordVPN✅ YesBest value, but must select obfuscated servers
Astrill✅ YesFastest speeds, accepts Alipay
Surfshark✅ YesCheapest, unlimited devices

Recommendation: Install ExpressVPN (primary) + LetsVPN (backup). Total setup: 10 minutes, ~$18/month.

Platform-by-Platform Setup Guide
#

iPhone / iPad (iOS)
#

Before You Leave Home
#

  1. Open the App Store (make sure you’re on your home country’s App Store, not China)
  2. Search for your VPN (e.g., “ExpressVPN”)
  3. Download the app
  4. Open the app → sign in or create account
  5. Subscribe to a plan (monthly or annual)
  6. Connect to any server → confirm it works
  7. Done — your VPN is ready for China

In China: Connect in 3 Steps
#

  1. Open the VPN app
  2. Tap Connect (ExpressVPN: just tap the big power button)
  3. Wait 10–30 seconds → connected

If the app won’t connect:

  • Switch server location (try Japan → Hong Kong → Singapore → US West)
  • Switch protocol (Settings → Protocol → try Lightway, then IKEv2, then OpenVPN)
  • Switch to mobile data (some hotel WiFi blocks VPNs)

Already in China without a VPN on iPhone?

  • Apple App Store still works for some users — try searching for your VPN
  • If App Store is restricted, you need to change your Apple ID region:
    1. Sign out of your Apple ID
    2. Create a new Apple ID with region set to US or Hong Kong
    3. Sign in → download the VPN app
    4. Switch back to your main Apple ID
  • Or: buy a Holafly eSIM instead — bypasses GFW without a VPN app

Android Phone
#

Before You Leave Home
#

  1. Open Google Play Store
  2. Search for your VPN (e.g., “ExpressVPN”)
  3. Install the app
  4. Open the app → sign in or create account
  5. Subscribe to a plan
  6. Connect to any server → confirm it works
  7. Done

In China: Connect in 3 Steps
#

  1. Open the VPN app
  2. Tap Connect
  3. Wait 10–30 seconds → connected

Already in China without a VPN on Android?

Google Play Store is blocked in China. You have several options:

MethodHowDifficulty
APK downloadVisit APKMirror.com or APKPure.com → search your VPN → download APK → enable “Unknown Sources” → installMedium
Mirror linkEmail VPN support for a working download linkEasy
Friend sends fileHave someone outside China download the APK and send via WeChat/Google DriveEasy
VPN side-loadDownload a free proxy app first → use it to access VPN provider’s website → download directlyHard
Use eSIM insteadBuy Holafly eSIM → bypasses GFW without VPN appEasy

APK sideloading steps:

  1. Go to SettingsSecurity → enable “Install from Unknown Sources”
  2. Open browser → go to APKMirror.com or APKPure.com
  3. Search for your VPN (e.g., “ExpressVPN”)
  4. Download the latest APK file
  5. Open the downloaded file → Install
  6. Open the app → sign in → connect

Mac / MacBook
#

Before You Leave Home
#

  1. Go to the VPN provider’s website (e.g., expressvpn.com)
  2. Download the Mac installer (.dmg file)
  3. Open the .dmg → drag the VPN app to Applications
  4. Launch the app → sign in
  5. Connect to test → done

In China: Connect in 3 Steps
#

  1. Open the VPN app from Applications
  2. Click Connect
  3. Wait 10–30 seconds → connected

Already in China without a VPN on Mac?

  • Email the VPN provider’s support — they’ll send a direct download link that works in China
  • Some providers have mirror sites — search for “[VPN name] mirror link China 2026” on Bing (Bing works in China)
  • Use your phone’s VPN + USB tethering or mobile hotspot to share the connection to your Mac temporarily while you download the Mac VPN app

Windows PC / Laptop
#

Before You Leave Home
#

  1. Go to the VPN provider’s website
  2. Download the Windows installer (.exe file)
  3. Run the installer → follow prompts
  4. Launch the app → sign in
  5. Connect to test → done

In China: Connect in 3 Steps
#

  1. Open the VPN app
  2. Click Connect
  3. Wait 10–30 seconds → connected

Already in China without a VPN on Windows?

  • Same methods as Mac: email support, mirror links, or use phone tethering
  • Download on phone first → transfer the .exe to laptop via USB or Bluetooth

Already in China? Emergency VPN Download Methods
#

If you’re reading this from inside China and don’t have a VPN, here are your options ranked from easiest to hardest:

Method 1: Mirror Links (Easiest)#

VPN providers maintain alternative download URLs (“mirror links”) that aren’t blocked by the GFW. These URLs change frequently.

How to get one:

  1. Email the VPN’s support team:
  2. Say: “I’m in China and need a download link”
  3. They’ll reply with a working URL within hours
  4. Download and install

Don’t share mirror links on WeChat — links are monitored and get blocked quickly.

Method 2: App Store / In-App Purchase
#

Some users in China can still access:

  • Apple App Store — try searching for your VPN; some apps remain available
  • Samsung Galaxy Store — may have VPN apps not on Google Play
  • Huawei AppGallery — limited, but worth checking

In-app purchase trick: If you can access the App Store but the VPN’s website is blocked, you may be able to subscribe through in-app purchase (Apple/Google handles the payment, not the VPN’s website).

Method 3: APK Sideloading (Android Only)
#

  1. Enable “Install from Unknown Sources” in Settings
  2. Visit APKMirror.com or APKPure.com (these sites work in China)
  3. Download your VPN’s APK
  4. Install and sign in

Method 4: Buy an eSIM Instead
#

If downloading a VPN is too difficult, a travel eSIM bypasses the GFW entirely:

  1. Purchase a Holafly or Nomad eSIM online (payment works from China)
  2. Install the eSIM profile (may require a friend outside China to send you the QR code)
  3. Activate → internet works without VPN

Limitation: eSIM only covers mobile data, not WiFi. You’ll still need a VPN for hotel/cafe WiFi.

Method 5: Use a Free Proxy Temporarily
#

  1. Search for “free web proxy” on Bing (which works in China)
  2. Use the proxy to access your VPN provider’s website
  3. Download the VPN app
  4. Install and connect

Warning: Free proxies are slow and insecure. Only use them long enough to download your VPN.

Method 6: Hotel Business Center
#

Some international hotels (Marriott, Hilton, Sheraton) have business centers with unrestricted internet. Ask the concierge if you can briefly use a computer to download your VPN installer.

Connecting in China: What to Do When It Won’t Connect
#

Even with a properly installed VPN, connections sometimes fail. Here’s the troubleshooting chain:

Step 1: Switch Server Location
#

Try in this order: Japan → Hong Kong → Singapore → US West → Taiwan → South Korea

Step 2: Switch Protocol
#

VPNWhere to Find Protocol SettingsBest Protocols for China
ExpressVPNSettings → ProtocolLightway (auto), then IKEv2
NordVPNSettings → Connection → ProtocolOpenVPN (TCP) + Obfuscated Servers
AstrillSettingsStealthVPN, then WireGuard + VIP
LetsVPNNo settings — autoAuto-configured
SurfsharkSettings → VPN settingsNoBorders mode (auto)

Step 3: Switch Network
#

  • If on hotel WiFi → switch to mobile data (hotel networks often block VPNs)
  • If on mobile data → switch to WiFi (rare, but sometimes works)
  • Try airplane mode on → wait 10 sec → airplane mode off to reset your connection

Step 4: Switch VPN
#

Open your backup VPN and try connecting. This is why you installed two.

Step 5: Wait
#

During politically sensitive periods, the GFW intensifies blocking. VPNs usually recover within 1–24 hours as providers rotate server IPs. Check your VPN provider’s status page or Twitter account for updates.

VPN Settings to Configure Before You Arrive
#

These settings optimize your VPN for China — configure them before you land:

ExpressVPN
#

  • Protocol: Lightway (default) — auto-obfuscation works best
  • No special settings needed — ExpressVPN auto-detects China and adjusts

NordVPN
#

  • Enable Obfuscated Servers: Servers → Specialty Servers → Obfuscated Servers
  • Protocol: OpenVPN (TCP)
  • Critical: If you don’t enable obfuscated servers, NordVPN will NOT work in China

Astrill
#

  • Enable VIP addon (extra cost) — dedicated IPs that resist GFW blocking
  • Protocol: StealthVPN for maximum reliability
  • OpenWeb mode for application-level routing (choose which apps use VPN)

LetsVPN
#

  • No settings — designed to auto-configure for China
  • Just tap connect

Surfshark
#

  • NoBorders mode activates automatically in restricted regions
  • Protocol: WireGuard first; if blocked, try OpenVPN (TCP)

The Complete Pre-China VPN Checklist
#

Screenshot this. Check every box before your flight.

Essential Setup
#

  • VPN app downloaded on phone (iOS/Android)
  • VPN app downloaded on laptop (Mac/Windows)
  • Account created and subscription paid
  • Tested on both devices — confirmed connection works
  • Second VPN installed as backup on phone

Save Before You Fly
#

  • VPN customer support email address
  • VPN app login credentials (email + password)
  • Screenshot of your subscription confirmation
  • This guide saved as offline reading

Other Essential Apps
#

  • Alipay set up with linked international card
  • WeChat installed and account created
  • Apple Maps downloaded (works without VPN in China)
  • DiDi (China version) installed
  • Trip.com installed for train/flight bookings

What to Download for Offline Use
#

  • Translation app with Chinese language pack downloaded
  • Offline maps (Apple Maps auto-downloads, or use Maps.me)
  • Movies/shows on Netflix for offline viewing
  • Music playlists downloaded on Spotify
  • Important documents saved locally (not in Google Drive)

FAQ
#

Can I download a VPN after I arrive in China? Yes, but it’s much harder. VPN websites are blocked, and app stores are restricted. Use mirror links (email VPN support), APK sideloading (Android), or buy an eSIM as an alternative. Much easier to install before you arrive.

Do I need a VPN on my laptop too? If you plan to use hotel WiFi on your laptop, yes. A VPN on your phone only protects your phone’s traffic. For laptop protection, install the VPN on both devices. Most VPN subscriptions allow multiple simultaneous connections (ExpressVPN: 8, NordVPN: 10, Surfshark: unlimited).

Will my VPN work at Chinese airports? Usually yes, but some airport WiFi networks block VPN traffic. If your VPN won’t connect at the airport, switch to mobile data (turn on data roaming or use your eSIM).

What if I only installed one VPN and it fails? Email your VPN provider’s support for a mirror link to download their latest version. Updates often fix connection issues. You can also try downloading a free trial of another VPN through a proxy site, but this is unreliable.

Can I set up a VPN on someone else’s device in China? Yes, if you have the installer file. Share APK files (Android) via Bluetooth or USB. For iPhone, the person needs access to the App Store from a non-Chinese Apple ID.

Is it obvious that I’m using a VPN in China? No. To observers, your traffic appears as normal HTTPS browsing. The GFW can detect VPN traffic patterns, but this only results in your connection being blocked — not any consequence to you. Personal VPN use by foreign tourists is very low risk.


Related Guides: