Your VPN was working yesterday. Today it won’t connect. Or it connects but nothing loads. Or it keeps dropping every 5 minutes.
This is normal in China. The Great Firewall is constantly updating its detection methods, and VPN providers are constantly adapting. Connection problems are not a sign that your VPN is bad — they’re a sign that the cat-and-mouse game is active.
This guide helps you diagnose and fix every common VPN problem in China, with specific steps for each major VPN provider.
Quick Diagnosis: What’s Your Problem?#
Match your symptom to the fix:
| Your Problem | Most Likely Cause | Jump To |
|---|---|---|
| VPN won’t connect at all | Server IPs blocked or protocol detected | Fix 1: Switch Protocol |
| Connects but no internet loads | DNS issue or routing problem | Fix 2: DNS Reset |
| Connects then disconnects | GFW killing the connection | Fix 3: Switch Server |
| Very slow (under 5 Mbps) | Server overloaded or throttled | Fix 4: Improve Speed |
| Works on phone but not laptop | Different network or app version | Fix 5: Cross-Device Issues |
| Works on mobile data but not WiFi | Hotel/cafe WiFi blocking VPNs | Fix 6: Hotel WiFi |
| Was working, suddenly stopped | GFW crackdown or app needs update | Fix 7: Sudden Failure |
| Can’t even open the VPN app | App needs update or reinstallation | Fix 8: App Won’t Open |
Fix 1: Switch Protocol#
The #1 fix for VPN problems in China. The Great Firewall detects specific VPN protocols. Switching to a different one often solves the problem immediately.
How to Switch Protocol on Each VPN#
ExpressVPN:
- Tap ≡ menu → Settings → Protocol
- Try in this order: Lightway (auto) → IKEv2 → OpenVPN (TCP) → OpenVPN (UDP)
- Reconnect after each change
NordVPN:
- Tap ≡ menu → Settings → Connection → Protocol
- Switch to OpenVPN (TCP)
- Then go to Specialty Servers → Obfuscated Servers (this is critical — without obfuscated servers, NordVPN won’t work in China)
- If OpenVPN TCP fails, try WireGuard (NordLynx) but it’s increasingly detected
Astrill:
- Tap Settings → Protocol
- Try: StealthVPN → WireGuard → OpenVPN (TCP) → OpenWeb mode
- If you have VIP addon, connect to a VIP server — dedicated IPs resist blocking
LetsVPN:
- No manual protocol switching — auto-configured
- If it’s not working, just close and reopen the app (it auto-rotates protocols)
Surfshark:
- Tap ≡ menu → Settings → VPN settings
- Ensure NoBorders mode is ON (should auto-activate in China)
- Switch protocol: WireGuard → OpenVPN (TCP) → IKEv2
- Reconnect after each change
Protocol Quick Reference#
| Protocol | Speed | Stealth | China Status (2026) |
|---|---|---|---|
| Lightway (ExpressVPN) | Fast | High | ✅ Usually works |
| StealthVPN (Astrill) | Medium | Very High | ✅ Most reliable |
| OpenVPN TCP | Slow-Medium | Medium | ✅ Good fallback |
| WireGuard | Very Fast | Low | ⚠️ Increasingly detected |
| IKEv2 | Fast | Low-Medium | ⚠️ Sometimes blocked |
| OpenVPN UDP | Medium | Low | ❌ Often blocked |
| Shadowsocks | Fast | Medium | ⚠️ Being targeted |
Fix 2: DNS Reset#
Your VPN says “Connected” but nothing loads — no websites, no apps, nothing. This is usually a DNS problem.
Quick Fix (2 minutes)#
- Disconnect VPN
- Toggle Airplane Mode ON → wait 10 seconds → OFF
- Reconnect VPN
- Test: try loading a simple site like
http://neverssl.com
If That Doesn’t Work: Manual DNS Change#
iPhone/iPad:
- Settings → Wi-Fi → tap the (i) next to your network
- Scroll to Configure DNS → select Manual
- Remove existing entries → add:
8.8.8.8and1.1.1.1 - Reconnect VPN
Android:
- Settings → Network & Internet → Private DNS
- Select Private DNS provider hostname
- Enter:
dns.google - Reconnect VPN
Mac:
- System Preferences → Network → select your connection → Advanced
- DNS tab → remove existing → add:
8.8.8.8,1.1.1.1 - OK → Apply → reconnect VPN
Windows:
- Settings → Network & Internet → Change adapter options
- Right-click your connection → Properties → IPv4 → Properties
- Use custom DNS:
8.8.8.8(preferred),1.1.1.1(alternate) - OK → reconnect VPN
Flush DNS Cache (Advanced)#
If manual DNS doesn’t help, flush your DNS cache:
Mac: Open Terminal → type: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
Windows: Open Command Prompt (admin) → type: ipconfig /flushdns
Fix 3: Switch Server Location#
Different server locations have different IPs. If one region is blocked, another usually works.
Try Servers in This Order#
- Japan (Tokyo, Osaka) — closest to China, fastest
- Hong Kong — very close, low latency
- Singapore — good speeds, reliable
- South Korea (Seoul) — fast, less congested
- Taiwan — good alternative
- US West (Los Angeles, San Jose) — far but has most server IPs
- UK / Germany — last resort, high latency
Why This Works#
The GFW blocks specific IP addresses, not entire VPN providers. When one server’s IP gets blocked, other servers in different countries may still work. VPN providers also rotate IPs — a blocked server today may work tomorrow.
Provider-Specific Tips#
| VPN | Special Server Feature |
|---|---|
| ExpressVPN | Auto-selects best server — just reconnect |
| NordVPN | Must use Obfuscated Servers tab (under Specialty Servers) |
| Astrill | VIP servers — dedicated IPs, far more resistant to blocking |
| Surfshark | NoBorders auto-selects — try 3–4 different countries if first fails |
Fix 4: Improve Speed#
VPN connected but crawling? Try these steps:
Step 1: Check Your Base Speed Without VPN#
- Disconnect VPN → run a speed test (use fast.com if speedtest.net is blocked)
- If base speed is under 10 Mbps, the problem is your connection, not the VPN
Step 2: Switch to a Closer Server#
- Japan/Hong Kong/Singapore give the best speeds from China
- US/EU servers add 150–300ms latency — avoid if speed matters
Step 3: Change Protocol#
- WireGuard = fastest (but may be detected)
- Lightway (ExpressVPN) = fast + good stealth
- OpenVPN UDP = faster than TCP but less stealthy
- OpenVPN TCP = slowest but most reliable when others fail
Step 4: Disable Heavy Features#
- Turn off Kill Switch temporarily (can slow connection)
- Disable Multi-hop / Double VPN
- Turn off split tunneling if not needed
Step 5: Try a Different Time of Day#
| Time (China) | Speed | Why |
|---|---|---|
| 6 AM – 9 AM | 🟢 Fast | Low network congestion |
| 9 AM – 12 PM | 🟡 Medium | Business hours starting |
| 12 PM – 2 PM | 🟡 Medium | Lunch break usage spike |
| 2 PM – 6 PM | 🔴 Slow | Peak business + afternoon usage |
| 6 PM – 11 PM | 🔴 Slowest | Evening streaming peak |
| 11 PM – 6 AM | 🟢 Fast | Best time for heavy downloads |
Fix 5: Cross-Device Fixes#
Works on phone but not laptop (or vice versa):
| Problem | Fix |
|---|---|
| Different app versions | Update both to the latest version |
| Different protocol settings | Match protocol settings across devices |
| Different network (WiFi vs data) | Try the same network on both |
| Laptop firewall blocking VPN | Temporarily disable Windows firewall / macOS firewall |
| Browser extensions conflicting | Disable all browser extensions, test VPN |
If VPN works on phone but not laptop:
- Use phone as mobile hotspot → connect laptop to phone’s hotspot → try VPN on laptop
- If VPN works through phone hotspot but not hotel WiFi → it’s a WiFi issue (see Fix 6)
- If VPN doesn’t work through hotspot either → reinstall the VPN app on laptop
Fix 6: Hotel WiFi Problems#
Hotel and cafe WiFi networks in China frequently detect and block VPN traffic. Symptoms: VPN connects on mobile data but not on hotel WiFi.
How to Diagnose#
- Connect to hotel WiFi → try VPN → note the result
- Switch to mobile data (turn off WiFi) → try VPN → if it works, it’s the WiFi
Solutions#
| Solution | Steps | Works For |
|---|---|---|
| Switch to mobile data | Turn off WiFi → use mobile data or eSIM | All VPNs |
| Use phone hotspot | Phone on mobile data + VPN → turn on hotspot → laptop connects through phone | All devices |
| Try TCP protocol | Switch VPN to OpenVPN TCP — harder for WiFi to detect | Some networks |
| Change DNS | See Fix 2 — change DNS to 8.8.8.8 on WiFi settings | DNS-level blocks |
| Ask hotel for “international” network | Some business hotels offer an unrestricted network | Upscale hotels |
| Use a different WiFi | Cafe, mall, or airport WiFi may not block VPNs | Alternative locations |
Hotel WiFi That Commonly Blocks VPNs#
- Budget hotels (7 Days, Hanting, Jinjiang) — aggressive blocking
- Airport WiFi — sometimes blocks VPNs
- University/office networks — often block VPNs
- International hotels (Marriott, Hilton, Sheraton) — usually fine
Fix 7: Sudden Failure (“Today It Just Stopped”)#
If your VPN was working fine and suddenly stopped:
Immediate Steps (5 minutes)#
- Close the VPN app completely (swipe it away from recent apps)
- Reopen and reconnect — this alone fixes 30% of problems
- Switch server to a different country
- Switch protocol (see Fix 1)
- Switch to your backup VPN — this is why you installed two
If Nothing Works: Check the Calendar#
The GFW intensifies blocking during politically sensitive periods. If your VPN fails on one of these dates, it’s likely a temporary crackdown:
| Period | Event | Duration | Severity |
|---|---|---|---|
| Oct 1–7 | National Day | 7 days | 🔴 Heavy |
| Early March | Two Sessions (两会) | 1–2 weeks | 🔴 Heavy |
| July 1 | CCP Anniversary | 1–3 days | 🟡 Medium |
| Early June | Tiananmen anniversary | 1–3 days | 🟡 Medium |
| Late Jan–Feb | Chinese New Year | Variable | 🟡 Medium |
| May 1–3 | Labor Day | 1–3 days | 🟡 Medium |
During crackdowns: VPNs usually recover within 1–24 hours as providers rotate their server IPs. Check your VPN provider’s Twitter/X account or status page for real-time updates.
Update Your VPN App#
VPN providers release emergency updates during crackdowns. If your app isn’t updating automatically:
- On iPhone: Open App Store → tap your profile → scroll down → pull to refresh → update any VPN app
- On Android: Open Play Store (if accessible) → My Apps → update VPN
- If Play Store is blocked: Email your VPN’s support for a mirror link to download the latest version
Fix 8: App Won’t Open or Update#
App Crashes on Launch#
- Restart your phone — fixes most crash issues
- Reinstall the app — delete and download again from App Store
- Check storage — if phone storage is full, apps crash
Can’t Download Updates#
VPN provider websites are blocked in China. To update:
| Method | How |
|---|---|
| Email support for mirror link | [email protected], [email protected] |
| Use in-app update | Some VPNs auto-update without visiting their website |
| Ask a friend outside China | Have them download the APK/installer and send it via WeChat |
| Use Bing to find mirror sites | Search “[VPN name] download link China 2026” on Bing |
Kill Switch Setup (Prevent Leaks)#
A Kill Switch blocks all internet traffic if your VPN disconnects — preventing accidental exposure of your browsing. Essential in China.
How to Enable Kill Switch#
| VPN | Where to Find It |
|---|---|
| ExpressVPN | Settings → Network → “Block internet when VPN reconnects” → ON |
| NordVPN | Settings → Connection → “Kill Switch” → ON |
| Astrill | Settings → “Kill Switch” → ON |
| Surfshark | Settings → Connectivity → “Kill Switch” → ON |
| LetsVPN | Built-in and always on |
Why it matters: If your VPN drops mid-session in China, your phone immediately tries to load the next request through the Chinese network — which means your request to google.com gets exposed. Kill Switch prevents this by blocking all traffic until the VPN reconnects.
The 5-Minute Emergency Fix#
If your VPN just stopped and you need to get online RIGHT NOW:
- Close the VPN app → reopen → reconnect (30 sec)
- Switch server to Japan or Hong Kong (30 sec)
- Switch protocol to OpenVPN TCP or Lightway (30 sec)
- Toggle Airplane Mode on → wait 10 sec → off → reconnect (30 sec)
- Switch to backup VPN (1 min)
- Switch to mobile data if on WiFi (30 sec)
Success rate of this sequence: ~85% for restoring VPN connectivity in China.
When Nothing Works: Your Last Resorts#
If you’ve tried everything above and nothing works:
- Wait 1–24 hours — VPN providers usually fix blocks within hours by rotating IPs
- Use a travel eSIM — Holafly/Nomad bypass the GFW entirely through roaming (mobile data only)
- Ask your hotel concierge — some hotels can help with connectivity
- Go to a Starbucks or international cafe — their WiFi is less likely to block VPNs
- Buy a different VPN via in-app purchase (if you can access the App Store) — LetsVPN is cheapest at ~$5
- Use Bing (works without VPN in China) for basic searches while you wait
FAQ#
Why does my VPN keep disconnecting in China? The GFW actively detects and terminates VPN connections. When it identifies your VPN’s traffic pattern, it blocks the connection. Switching protocols or servers usually fixes this. If it persists, it may be a sensitive political period — wait a few hours.
Why does my VPN say “Connected” but nothing loads? This is a DNS or routing issue. The VPN tunnel is established, but your device can’t resolve domain names. Try the DNS Reset in Fix 2, or switch servers. Toggling Airplane Mode also helps.
Is my VPN blocked because it’s a bad VPN? Not necessarily. ALL VPNs experience temporary blocks in China — even the best ones. The difference is how quickly they recover. ExpressVPN and Astrill typically recover within minutes to hours. Unknown VPNs may take days.
Should I use a free VPN in China? No. Free VPNs almost never work in China because they lack the stealth infrastructure needed to bypass the GFW. They also pose security risks. Invest in a paid VPN that’s proven to work in China.
Does VPN speed get worse during certain times? Yes. Peak hours (6 PM – 11 PM China time) are slowest because of high network congestion. Early morning (6 AM – 9 AM) is fastest. Plan heavy downloads for late night or early morning.
Can I use two VPNs at the same time? No — running two VPN apps simultaneously creates conflicts. Use one at a time. Switch to your backup only if the primary fails.
Related Guides: