Will my VPN work in China?

If you are flying to China on business or holiday and you assumed the VPN on your laptop would come with you, this is the article to read before you pack rather than after you land.

The short version: set it up before you fly, use a protocol designed to be hard to spot, and treat anyone who guarantees it works as a liar.

What actually happens when you land

China filters internet traffic at the national level. Two things follow.

The first is the obvious one: a long list of sites is unreachable. Google, Gmail, WhatsApp, Instagram, Facebook, X, YouTube, most Western news. If your work runs on Google Workspace, your working day stops at the airport.

The second is the one that catches people out: the filtering also looks for VPNs. It is not only blocking destinations, it is inspecting the shape of your traffic. A standard VPN connection has a recognisable shape, and recognisable connections get dropped.

So the VPN that works perfectly on hotel Wi-Fi in Manchester may simply refuse to connect in Beijing, with no useful error message.

Why the usual protocols struggle

WireGuard was never designed to hide what it is. It is fast and modern and its authors were solving a different problem — they wanted a small, auditable, quick protocol, not a disguised one. On a network actively hunting for VPNs, it stands out.

OpenVPN over TCP on port 443 looks superficially like ordinary HTTPS, which is why it survives hotel and office firewalls. Deep inspection can still tell the difference.

IKEv2 is the easiest of the three to spot and block.

What does get through

The approach that works is to stop looking like a VPN at all. VLESS, usually paired with something called REALITY, carries your traffic inside what appears to be an ordinary HTTPS connection to an unremarkable website. There is no distinctive handshake to recognise, because the handshake it performs is a real one to a real site.

It is slower. It needs a different app. That is the trade, and it is worth it only where you need it — which is why almost nobody should use it at home.

Veystrix includes VLESS on every subscription at no extra cost. The setup guide walks through it.

Do this before you fly

This is the part people get wrong, and it is the difference between a working trip and a fortnight of borrowed phones.

1. Install the app in the UK. The app stores inside China often will not serve the apps you need, and the websites you would download them from are frequently unreachable too. Arriving without the app installed is the single most common way people end up stuck. 2. Get your configuration and save it offline. Email it to yourself, put it in your notes, keep it somewhere that does not require the internet you are trying to fix. 3. Connect once before you go, so you know it works and you are not debugging in a hotel lobby at midnight. 4. Take more than one location. Blocking tends to be per-server rather than blanket. Having two or three saved means switching takes ten seconds.

The thing nobody should promise you

No connection method works reliably in China forever. Addresses get blocked, techniques get recognised, and the people running the filtering are competent and well funded. Anything that works today works today.

Any provider telling you their VPN is *guaranteed* to work in China is either not paying attention or is hoping you will not check. What an honest provider can offer is a method designed to be hard to identify, several locations to move between, and fresh configurations when one stops working.

A practical alternative worth knowing

If your trip is short, international roaming on your UK SIM often sidesteps the whole problem. Roaming data is generally carried back to your home network before it reaches the internet, so it does not pass through the same national filtering. It can be expensive, and it is not a substitute for a VPN on a laptop, but for a three-day trip where you mainly need your phone to work, it is worth pricing before you assume you need anything cleverer.

Where you stand legally

China restricts VPN use. Commercial use of an unauthorised VPN is clearly against the rules; personal use by a visitor sits in a grey area that is widely practised and rarely pursued. Foreign travellers using a VPN to check their email are not what the enforcement is aimed at.

That is a description of the situation, not advice, and not a promise about how anyone will behave. It is their country and their rules. If you are travelling for work, your employer's security team will usually have a position on this and it is worth asking them rather than us.

We say more about the general picture in are VPNs legal?

And the rest of the list

China is the strictest, but it is not alone. Iran, Russia, Turkmenistan and a handful of others filter traffic in similar ways, and the same advice applies: install before you travel, carry more than one option, and expect to switch.