You need a VPN in China. But on which devices?
Your phone is obvious — but what about your laptop? Your iPad? Your hotel’s WiFi router? Apple TV for Netflix? A Chromebook?
The answer depends on the device. Some have VPN apps you install and forget. Others need manual configuration. And some devices (like Apple TV, Kindle, Firestick) can’t run VPN apps at all — you need a router-level solution.
This guide covers every device with specific setup steps, limitations, and China-specific tips.
Quick Device Compatibility#
| Device | VPN App Available? | Setup Difficulty | Notes |
|---|---|---|---|
| iPhone / iPad | ✅ Yes | Easy | Install before arriving in China |
| Android phone/tablet | ✅ Yes | Easy | Google Play blocked — use APK if needed |
| Mac (macOS) | ✅ Yes | Easy | Download .dmg before China |
| Windows PC | ✅ Yes | Easy | Download .exe before China |
| Router | ⚠️ Manual config | Hard | Protects all devices on the network |
| Apple TV | ❌ No app | Medium (via router or sharing) | No native VPN app |
| Chromebook | ⚠️ Limited | Medium | Android VPN apps work on most models |
| Kindle Fire | ⚠️ Limited | Medium | Sideloading required |
| Linux | ⚠️ Manual config | Medium | Command-line setup |
Key principle: Install VPN apps on all devices before you arrive in China. VPN provider websites are blocked, and app stores may be restricted.
iPhone & iPad (iOS)#
Setup Steps (5 Minutes)#
- Open the App Store (make sure you’re on your home country’s store, not China)
- Search for your VPN (e.g., “ExpressVPN”)
- Download the app
- Open the app → sign in or create account
- Subscribe to a plan
- Tap Connect → done
iPhone-Specific Tips for China#
iCloud Private Relay does NOT bypass the GFW. Apple’s built-in privacy feature only hides your browsing from your ISP — it doesn’t help you access blocked websites in China. You still need a VPN app.
App Store may show different apps in China. If you can’t find your VPN:
- Go to Settings → your name → Media & Purchases → change region to US or Hong Kong
- Or create a secondary Apple ID with a non-China region
Which VPN apps work best on iPhone:
| VPN | iOS App Quality | China Setup | Connect Speed |
|---|---|---|---|
| ExpressVPN | ★★★★★ | Zero config — tap connect | 10–15 sec |
| Astrill | ★★★★ | Select StealthVPN protocol | 10–20 sec |
| LetsVPN | ★★★★★ | Zero config — one tap | 5–10 sec |
| NordVPN | ★★★★ | Must select obfuscated servers | 15–20 sec |
| Surfshark | ★★★★ | NoBorders auto-activates | 10–15 sec |
iPhone Settings to Configure#
After installing your VPN, configure these settings for China:
- Settings → VPN → connect on demand — automatically connects when needed
- Settings → General → VPN & Device Management — trust the VPN profile if prompted
- Enable Kill Switch (in the VPN app’s settings) — blocks all traffic if VPN disconnects
Can I Use Shadowrocket or Other iOS VPN Apps?#
Shadowrocket is a popular proxy client that works in China with manual configuration (you need a VPS or proxy subscription). It’s not a standalone VPN — it’s a tool for connecting to custom proxy servers. For most tourists, commercial VPN apps (ExpressVPN, Astrill, LetsVPN) are simpler and more reliable.
Android Phone & Tablet#
Setup Steps (5 Minutes)#
- Open Google Play Store
- Search for your VPN
- Install the app
- Open the app → sign in → subscribe → connect
If Google Play Store Is Blocked#
Google Play is blocked in China. If you’re already there without a VPN:
Method 1: APK Sideloading
- Enable Settings → Security → “Install from Unknown Sources”
- Visit APKMirror.com or APKPure.com (these work in China)
- Search for your VPN → download the APK
- Open the APK → install
Method 2: Alternative App Stores
- Samsung Galaxy Store — may have VPN apps
- Huawei AppGallery — limited VPN selection
- APKPure app — install once, then use as an app store
Method 3: Use a Proxy Temporarily
- Search “free web proxy” on Bing (works without VPN in China)
- Access your VPN provider’s website through the proxy
- Download the APK directly
Android-Specific Tips#
- Always-on VPN: Settings → Network & Internet → VPN → select your VPN → enable “Always-on VPN.” This keeps the VPN connected even after restarting your phone.
- Block connections without VPN: In the same menu, enable “Block connections without VPN.” This is your Kill Switch — prevents data leaks.
- Split tunneling: Some VPN apps let you choose which apps use the VPN. Exclude Alipay and WeChat — they work better without VPN.
Mac (macOS)#
Setup Steps (5 Minutes)#
- Go to your VPN provider’s website
- Download the macOS installer (.dmg file)
- Open the .dmg → drag the VPN app to Applications
- Launch the app → sign in
- Connect → done
Mac-Specific Tips for China#
- Allow the VPN extension: macOS will prompt you to allow a system extension. Click “Allow” in System Preferences → Security & Privacy. Without this, the VPN can’t create a tunnel.
- Keychain access: The VPN may ask to store credentials in your Keychain. Approve this.
- Manual configuration (if app fails): Most VPN providers offer manual OpenVPN or IKEv2 configuration for macOS. Download the .ovpn config files from their website and import into macOS Network preferences.
Mac Settings to Configure#
- System Preferences → Network → VPN connection → Advanced → check “Connect automatically”
- Enable Kill Switch in the VPN app’s settings
- Disable IPv6 (if your VPN doesn’t handle it): System Preferences → Network → select connection → Advanced → TCP/IP → Configure IPv6 → “Link-local only”
Windows PC / Laptop#
Setup Steps (5 Minutes)#
- Go to your VPN provider’s website
- Download the Windows installer (.exe file)
- Run the installer → follow prompts
- Launch the app → sign in → connect
Windows-Specific Tips for China#
- Run as Administrator: Right-click the VPN app → “Run as Administrator.” Some VPN features require elevated permissions.
- Windows Defender may flag the installer — select “More info” → “Run anyway.” This is normal for VPN software.
- Disable IPv6: Settings → Network & Internet → Change adapter options → right-click your connection → Properties → uncheck “Internet Protocol Version 6 (TCP/IPv6).” IPv6 can leak your real location.
Windows Kill Switch Options#
| VPN | Built-in Kill Switch | How to Enable |
|---|---|---|
| ExpressVPN | ✅ Yes | Settings → General → “Block internet when VPN reconnects” |
| NordVPN | ✅ Yes | Settings → Connection → Kill Switch → ON |
| Astrill | ✅ Yes | Settings → Kill Switch → ON |
| Surfshark | ✅ Yes | Settings → Connectivity → Kill Switch → ON |
Router: Protect All Devices at Once#
A VPN router encrypts traffic for every device connected to your WiFi — phone, laptop, iPad, Apple TV, Kindle, smart TV, everything. This is the only way to protect devices that can’t run VPN apps.
Two Approaches#
| Method | How | Difficulty | Cost |
|---|---|---|---|
| Pre-configured VPN router | Buy a router with VPN pre-installed | Easy | $100–300 |
| Flash your own router | Install DD-WRT, Tomato, or ASUSWRT firmware | Hard | $50–200 (router only) |
| Share VPN from phone/laptop | Use mobile hotspot with VPN active | Easy | Free |
Option 1: Pre-Configured Router (Easiest)#
Some VPN providers sell pre-configured routers:
- ExpressVPN: Aircove router (~$170) — ExpressVPN pre-installed, works out of the box
- Other providers: Check if your VPN offers router setup guides
Option 2: Flash Your Own Router (Advanced)#
Compatible router brands: ASUS (best support), Netgear, Linksys
- Check if your router supports DD-WRT or ASUSWRT firmware
- Follow your VPN provider’s router setup guide
- Configure OpenVPN or WireGuard with the provider’s .ovpn config files
- All devices on your WiFi are now protected
Option 3: Phone Hotspot Sharing (Quickest)#
If you don’t want to buy a router:
- Connect your phone to your VPN
- Turn on mobile hotspot (Settings → Personal Hotspot / Mobile Hotspot)
- Connect your laptop/tablet to the phone’s hotspot
- All traffic goes through your phone’s VPN
Limitation: Uses your mobile data, not hotel WiFi. Speed depends on cellular signal.
Why Use a VPN Router in China?#
- Apple TV / Firestick / Smart TV — these devices can’t run VPN apps. A router protects them.
- Hotel WiFi protection — your VPN router (or phone hotspot) encrypts all traffic on shared hotel networks
- Multiple devices — no need to install VPN on each device separately
Apple TV#
Apple TV does not support VPN apps. To use a VPN with Apple TV in China:
| Method | How | Works? |
|---|---|---|
| VPN router | All traffic routes through the router’s VPN | ✅ Best method |
| Phone hotspot | Share VPN-connected phone hotspot → Apple TV connects to it | ✅ Works but uses mobile data |
| Mac internet sharing | Connect Mac to VPN → share connection via WiFi → Apple TV connects | ✅ Works |
| Smart DNS | Some VPNs offer Smart DNS that unblocks streaming without encrypting | ⚠️ Doesn’t bypass GFW — only unblocks geo-restricted streaming |
Mac Internet Sharing Setup (for Apple TV)#
- Connect your Mac to VPN
- System Preferences → Sharing → Internet Sharing
- Share from: your VPN connection → To computers using: WiFi
- Apple TV connects to your Mac’s shared WiFi
- All Apple TV traffic now goes through the VPN
Chromebook#
Chromebook VPN support depends on whether it supports Android apps:
Chromebooks with Google Play Store (most modern models):
- Install your VPN’s Android app from the Play Store
- Works like any Android device
Older Chromebooks without Play Store:
- Use manual L2TP/IPsec setup: Settings → Network → Add connection → VPN → L2TP/IPsec
- Or use a browser extension (ExpressVPN, NordVPN offer Chrome extensions)
- Or connect through a VPN router or phone hotspot
Note: L2TP/IPsec is easily detected by the GFW. For China, use the Android app method or a router.
Kindle Fire / Fire Tablet#
Amazon’s Appstore has limited VPN options. To use a VPN on Kindle Fire:
- Enable app installation from unknown sources: Settings → Security → Enable “Apps from Unknown Sources”
- Download the VPN’s APK from APKMirror.com or your provider’s website
- Install and configure
Alternative: Connect your Kindle to a VPN router or phone hotspot.
How Many Devices Can You Protect?#
| VPN | Simultaneous Devices | Router Counts As? |
|---|---|---|
| ExpressVPN | 8 | 1 (counts as 1 device) |
| NordVPN | 10 | 1 (counts as 1 device) |
| Astrill | 5 | 1 (counts as 1 device) |
| Surfshark | Unlimited | 1 (counts as 1 device) |
| LetsVPN | 2–5 | N/A (no router support) |
For protecting many devices: Surfshark’s unlimited device limit makes it ideal for families or groups. Install it on everyone’s phone, laptop, and tablet — no device limit.
For maximum devices including TV/router: ExpressVPN’s Aircove router covers unlimited devices on your WiFi, plus 8 mobile devices with the app. Best total coverage.
Device-by-Device Setup Checklist#
Before your flight, set up VPN on every device:
- iPhone — VPN app installed, tested, Kill Switch ON
- Android phone — VPN app installed, tested, always-on VPN enabled
- MacBook — VPN app installed, tested, Kill Switch ON
- Windows laptop — VPN app installed, tested, Kill Switch ON
- iPad — VPN app installed, tested
- Router — VPN configured (if bringing one)
- Second VPN installed on phone — as backup
- Customer support email saved — for mirror links in China
- VPN login credentials saved — email + password (in case you need to reinstall)
FAQ#
Do I need a VPN on both my phone and laptop? Yes — a VPN on your phone only protects your phone’s traffic. If you use hotel WiFi on your laptop, you need a separate VPN on the laptop. Most subscriptions allow multiple simultaneous connections (ExpressVPN: 8, NordVPN: 10, Surfshark: unlimited).
Can I share my phone’s VPN with my laptop? Yes — turn on mobile hotspot on your phone while VPN is connected. Your laptop connects to the hotspot and all traffic goes through the VPN. This uses mobile data, not hotel WiFi.
Does Apple TV work with a VPN in China? Not directly — Apple TV has no VPN app. Use a VPN router, phone hotspot, or Mac internet sharing to route Apple TV traffic through a VPN.
Can I use one VPN account on all my devices? Yes — most VPNs allow multiple simultaneous connections. Check the device limit for your provider. Surfshark and ExpressVPN have the most generous limits.
What if I can’t download the VPN app on my device? If you’re already in China and can’t access app stores, use: (1) APK sideloading for Android, (2) Apple ID region change for iPhone, (3) email your VPN provider for a mirror download link, or (4) connect through a VPN router/phone hotspot.
Does my VPN’s browser extension work in China? Browser extensions (Chrome, Firefox) only encrypt browser traffic — not other apps. They also don’t work well against the GFW. Use the full VPN app instead of browser extensions for China.
Related Guides: