Are VPNs Illegal in China? Or Can You Use Them in 2024?
- Are VPNs Legal in China?
- Can Tourists, Foreigners, and Expats Use VPNs in China?
- Do VPNs Work in China?
- Best VPNs for China in 2024
- Things to Keep in Mind When Using a VPN in China
- Quick Guide: How to Use a VPN in China in 3 Easy Steps
- Alternatives to VPNs for Accessing Content Securely in China
- FAQs About the Legality of VPNs in China
- The Bottom Line
Accessing the internet in China is a unique challenge due to the country's strict firewalls that block popular websites. The country enforces internet regulations through its notorious Great Firewall, and the legality of VPN usage isn't always black and white. The Chinese government has declared unauthorized VPNs illegal, yet many people (both locals and foreigners) continue to use them daily.
So, can you still use a VPN in China without running into legal trouble? The answer isn't straightforward, but understanding the laws and how they are enforced can help you use the internet in China more confidently.
Read on to learn what the law says about VPNs in China, why they’re restricted, and what options are available for securely accessing the internet while you're there.
Are VPNs Legal in China?
The legality of VPNs in China is a complex matter. While VPN technology itself isn't illegal, using an unapproved service to access websites and services blocked by the Great Firewall is against Chinese law.
The government maintains strict control over internet access, and only VPNs that are officially sanctioned are considered legal.
What the Law Says About VPNs
In 2017, the Chinese Ministry of Industry and Information Technology (MIIT) implemented regulations requiring all VPN services operating in China to obtain government approval. The government also ordered ISPs to block individual access to VPNs. This initiative was part of a nationwide effort to strengthen cybersecurity and clamp down on unauthorized internet activities.
Key points of the law include:
- Licensing requirements. All VPN providers must obtain a license from the Chinese government to operate legally within the country. Unlicensed VPNs are illegal for both personal and business users.
- Authorized usage provisions. Government-approved VPNs are primarily intended for businesses and organizations to conduct legitimate activities, such as secure communication and operation across borders. These organizations must seek approval from the MIIT to use a VPN, even if it’s only used to connect to other services within the business.
- Individual usage regulations. The law does not provide provisions for individuals to use licensed VPNs for personal reasons, even if you have access to one of these tools through your workplace.
It's important to note that using government-approved VPNs may not serve the purpose of ensuring online privacy. These VPNs are subject to government monitoring, which defeats the primary reason many users seek out these privacy services.
Why VPNs Are Seen as a Threat
VPNs are heavily regulated in China because they can circumvent the Great Firewall, granting access to content that may be considered sensitive or harmful by the government. This includes foreign news outlets, social media platforms, and other websites blocked in China.
By restricting VPN usage, the government aims to control the dissemination of information and prevent activities that could undermine social stability or national security.
How China Enforces VPN Restrictions
China enforces VPN restrictions through legal measures and has imposed penalties on individuals and businesses that violate these laws. While enforcement against individual users is relatively rare, there have been notable instances of fines and legal actions.
Some previous enforcement actions include:
- Guangdong consultant fined (2023). An unnamed individual in Guangdong Province was fined 1.06 million yuan (approximately $145,000) for using a VPN to access restricted websites as part of his remote work for a foreign employer between 2019 and 2022. The authorities deemed his income earned while using the VPN as "proceeds of crime," resulting in a fine equivalent to three years of his salary.
- Chongqing resident fined (2017). A resident of Chongqing was fined 500 yuan (approximately $70) for accessing blocked websites using an unauthorized VPN. This individual was penalized under the laws prohibiting unauthorized international connections.
The government has been more stringent in targeting individuals who provide or sell unauthorized VPN services:
- Wu Xiangyang's conviction (2017). Wu Xiangyang was sentenced to five and a half years in prison and fined 500,000 yuan (approximately $76,000) for illegally operating a VPN service. He was found guilty of providing software and hardware to help users bypass internet restrictions without obtaining the necessary licenses.
These cases highlight that while personal use of unauthorized VPNs is illegal, enforcement against individual users is not widespread. There are also no public reports of tourists getting fined for the same. Penalties are more commonly imposed on those who profit from VPN usage or engage in activities considered harmful to national security.
However, using an unauthorized VPN in China still carries a legal risk, and you should always be aware of the potential consequences.
What Is the Great Firewall?
The Great Firewall of China is an extensive system of internet regulations and surveillance implemented by the Chinese government. Officially part of the Golden Shield Project, it was developed to regulate the internet within China’s borders, aligning online content with national laws and policies. By controlling the flow of information, the government aims to maintain social stability and protect national security.
This firewall operates by filtering and blocking access to selected foreign websites and slowing down cross-border internet traffic. It restricts access to a wide range of content, including international news outlets, social media platforms like Facebook and X (Twitter), search engines like Google, and many other websites deemed inappropriate or threatening to the government's interests.
How the Great Firewall Blocks VPNs
To enforce its internet regulations, the Great Firewall (GFW) uses advanced technological methods to detect and block VPNs. Here's how it accomplishes this:
- Deep packet inspection (DPI). The GFW analyzes data packets transmitted over the network to identify VPN traffic based on specific patterns or encryption protocols. If it detects VPN usage, the connection can be throttled or terminated.
- IP address blocking. Known IP addresses associated with VPN servers are added to a blocklist. When you attempt to connect to these servers, or it detects traffic coming from one of these addresses, it blocks your connection.
- Keyword filtering. The firewall scans for specific keywords related to VPN services in URLs and data packets. Access is denied if such keywords are detected.
- Connection resetting. The system can interrupt VPN connections by sending reset packets, effectively disconnecting you from the VPN service.
- DNS poisoning. When a user tries to access a VPN website, the firewall can manipulate the Domain Name System (DNS) responses, redirecting the user to incorrect IP addresses or displaying error messages.
- Port blocking. Common VPN protocols may use ports that aren’t used by any other software, making it easy for the GFW to identify and block them.
Some VPN providers use obfuscation techniques to mask VPN use, making it harder for the firewall to detect. Depending on the VPN, it may hide your new IP address behind a proxy. Or, it may scramble your traffic’s metadata (put simply, its fingerprint) to make it look like you’re using a regular connection.
You should know that the Great Firewall is continuously updated and that we don’t know the entire inner workings of its technology. So, the methods it uses may change over time, and new blocking technology may be added. This effectively means there’s an ongoing technological battle between VPN services and Chinese internet enforcement mechanisms.
Chinese App Store Restrictions
In addition to direct network interference, the Chinese government restricts access to VPN applications through app store regulations:
- Removal of VPN apps. VPN applications that are not government-approved are removed from app stores accessible within China. This includes major platforms like Apple's App Store and various Android app stores.
- Compliance by tech companies. International companies operating in China are required to comply with local laws. For instance, in 2017, Apple removed numerous VPN apps from its Chinese App Store to adhere to government regulations.
- Limited access to foreign app stores. Access to international versions of app stores is often blocked or restricted, preventing users from downloading VPN apps that haven't been vetted by Chinese authorities.
These app store restrictions make it challenging for users within China to find and install reliable VPN applications. Even if someone manages to download a VPN app before entering China, the app may be rendered ineffective due to the firewall's sophisticated blocking techniques.
Can Tourists, Foreigners, and Expats Use VPNs in China?
The use of unauthorized VPNs is illegal in China for both citizens and foreigners. However, publicized enforcement against individual users, especially tourists and expats, has been relatively rare.
Legal Status for Foreign Nationals
Chinese law applies to everyone within its borders, regardless of nationality. Technically, using an unapproved VPN is illegal for both Chinese citizens and foreign nationals. The government emphasizes that all individuals, regardless of their citizenship status, must comply with national laws and regulations, including those related to internet usage and cybersecurity.
Enforcement Practices
In practice, Chinese authorities have largely focused on domestic VPN providers and individuals involved in distributing or profiting from unauthorized services. At the time of writing, there have been no publicly reported cases of tourists or expats facing legal penalties solely for using a VPN to access restricted content for personal use.
Enforcement against individual foreign users hasn’t been a high priority to date. The government tends to target larger issues that pose significant risks to national security or social stability.
Considerations for Tourists and Expats
While the risk of facing legal consequences may be low, it's important to be aware of the following:
- Unpredictable regulations. Chinese laws and their enforcement can change without notice. What is tolerated today may not be tolerated tomorrow. Always exercise caution and check local laws and regulations before you go online.
- Public usage. Using VPNs in public spaces or discussing them openly could attract unwanted attention.
- Device inspections. In rare cases, authorities may conduct random checks on electronic devices at border crossings or within the country.
Do VPNs Work in China?
Due to the Chinese government's sophisticated technology, only a handful of VPNs actually work in China. The Great Firewall uses advanced technologies to detect and block VPN traffic, making it challenging for most services to function effectively within the country. However, some VPN providers offer advanced features, letting you access the internet securely in China.
What to Look For When Choosing a VPN for China
When selecting a VPN for use in China, it’s not enough to select one that promises that it works. Here are a few key things to look for:
- Strong encryption and secure protocols. Ensure the VPN uses robust encryption standards like AES 256-bit and offers secure protocols such as OpenVPN or WireGuard.
- Proven reliability in China. Choose a VPN provider with a history of working consistently in China. Providers that frequently update their technologies to counteract new censorship methods are more likely to offer reliable service. User reviews and expert recommendations can help identify VPNs that remain effective despite ongoing efforts to block them.
- Servers in or near China. Nearby servers provide faster and more stable connections due to reduced latency. A reliable VPN for China won’t have servers in Mainland China, but it may offer connections in Hong Kong or Macau. These are technically part of China but aren’t covered by the GFW. Failing that, look for servers in Singapore or Japan.
- Obfuscation technology. Look for a VPN that offers obfuscated servers or stealth modes. Obfuscation disguises VPN traffic as regular internet traffic, making it harder for the Great Firewall to detect and block it. This feature is essential because standard VPN protocols are often identified and interrupted by China's internet restriction technology.
- No-logs policy. A VPN with a strict no-logs policy ensures that your online activity won’t be recorded, enhancing your privacy. This also means that if your VPN is served with a legal request for your information, it won’t have anything to share. This is particularly important in China, where your internet activity is closely monitored.
- Responsive customer support. Reliable customer support can be invaluable if you encounter connection issues while in China. I recommend looking for providers that offer 24/7 support. Email support is ideal, as services like Hotmail and Outlook may still be available in China.
- Multi-platform compatibility. Make sure the VPN is compatible with all your devices, including smartphones, tablets, and laptops. This ensures you can maintain secure connections across all your devices without hassle.
Best VPNs for China in 2024
1. ExpressVPN — Automatic Obfuscation for Secure Access in China
Tested November 2024 Try Risk-Free for 30 Days
ExpressVPN is one of the most reliable VPNs for China due to its advanced obfuscation technology. This scrambles your metadata and disguises your VPN traffic as regular internet activity, letting you use the VPN in restrictive environments. The best part is that the obfuscation activates automatically when the app detects restrictions — you don't have to manually configure any settings to securely access the internet in China.
It’s also the fastest VPN we tested. In our tests on ExpressVPN’s nearby servers, we experienced a minimal speed loss of only 8%. This means you can browse, stream, or game without any slowdowns. Plus, you’ll also appreciate that it has plenty of nearby server locations, including Japan, Hong Kong, and Taiwan. You’ll have no problem finding a speedy and reliable connection.
The only drawback is that ExpressVPN is slightly more expensive than some other VPNs. However, it’s not the most expensive one, and it frequently offers discounts to make your plan a bit more affordable. It comes with a 30-day money-back guarantee, so you can try it with no financial risk.
- One of the fastest VPNs
- Works with top streaming sites
- A proven no-logs policy
- Limited customization
- Smart Location isn't always the fastest
2. Astrill VPN — Reliable Connections in China With Advanced Stealth Features
Astrill VPN is among the most popular VPNs used in China. It offers a proprietary StealthVPN protocol specifically designed to work with the Great Firewall. Astrill VPN is known to experience very low downtime, too. This reliability means you can use the internet securely while you’re in the country.
While it isn't as fast as ExpressVPN, we only saw a 19% speed loss on nearby servers during our tests. With servers in neighboring countries like Hong Kong, Japan, and South Korea, you can expect fast speeds.
I’m a little disappointed by the lack of a money-back guarantee, particularly because it’s more expensive than most other VPNs. However, if you're looking for a dependable VPN that works well in China, Astrill VPN is a strong option to consider.
- Works in China
- Privacy-friendly
- High price
- Slow speeds
3. PrivateVPN — Customizable Security to Optimize Your Connection in China
PrivateVPN stands out with its customizable security features, letting you fine-tune your connection in China. For instance, you can adjust encryption levels between 128-bit and 256-bit. PrivateVPN also gives you the option to choose from a variety of protocols, including OpenVPN and L2TP. However, L2TP works well on restrictive networks, but it’s not as secure as OpenVPN.
Its user-friendly interface makes it a great choice for VPN beginners. The only problem is that its network is smaller compared to other VPNs, which might limit server options. However, with a 30-day money-back guarantee, you can test PrivateVPN without financial risk to see if it suits your needs.
- Excellent for torrenting
- Very affordable
- Solid security
- Small server network
- Speeds aren’t great
Things to Keep in Mind When Using a VPN in China
Using a VPN in China requires careful preparation and awareness of certain challenges to ensure a smoother experience. These are our top tips for using a VPN in China, whether you’re visiting or you live in the country.
- Download your VPN before arrival. Downloading a VPN in China can be tricky. Access to VPN websites and app stores is often restricted within China. By downloading your VPN before you arrive in the country, you'll be able to secure your internet connection straight away.
- Prepare for connectivity issues. Even the most reliable VPNs can face intermittent disruptions due to the GFW’s blocking technology. You might experience slower speeds, connection drops, or difficulty using certain servers. Having patience and trying different server locations or protocols can help mitigate these issues.
- Consider a backup VPN. Relying on a single VPN may not be sufficient given the dynamic nature of internet restrictions in China. Subscribing to more than one reputable VPN provides a fallback option if your primary service faces problems.
- Avoid government-approved VPNs. These services are monitored and may not offer the privacy or unrestricted internet access you desire. They are mainly intended for business use and may still restrict access to certain websites or services.
- Keep your VPN software updated. Regularly update your VPN software to benefit from the latest security patches and enhancements. Enable automatic updates if possible so you don't miss critical improvements. If your VPN does stop working, you may be able to email customer support and ask for them to email you the update files.
- Stay informed about current regulations. Internet regulations and censorship tactics in China can change rapidly. Get the latest information from trusted sources or your VPN provider to adapt your usage accordingly.
Quick Guide: How to Use a VPN in China in 3 Easy Steps
- Download a VPN. I recommend ExpressVPN because it offers automatic obfuscation on all its servers and strong security features, which makes it the most reliable option for China. If you’re traveling, it’s best to download the VPN before you arrive in the country.
- Connect to a server. Nearby servers usually give you the fastest speeds. Always choose an obfuscated server to minimize the risk of issues.
- Start browsing. Once connected, you can securely access the internet in China with your privacy protected.
Editor's Note: Transparency is one of our core values at vpnMentor, so you should know we are in the same ownership group as ExpressVPN. However, this does not affect our review process.
Alternatives to VPNs for Accessing Content Securely in China
Even the best VPNs stop working in China occasionally. This is because it takes a lot of resources to keep up with the constantly changing Great Firewall technology. While these options are less reliable than using a VPN, they are potential alternatives if you need a short-term backup.
- Tor network. The Tor network anonymizes internet traffic by routing it through multiple servers around the world. It is designed to protect users' privacy and allow access to a variety of services. However, access to the Tor network is limited in China, and connections can be slow and unreliable due to heavy restrictions.
- Shadowsocks. This is an open-source proxy project that creates a secure connection between your device and a proxy server outside of China. It was also developed to circumvent internet restrictions. While it can be more difficult to detect than traditional VPNs, the Chinese government has increased efforts to identify and block Shadowsocks traffic.
- SOCKS5. SOCKS5 proxies act as intermediaries between your device and the internet, masking your IP address. They can be used to bypass certain restrictions but typically lack encryption, making them less secure than VPNs. Additionally, many proxy services are blocked in China.
- Secure Shell (SSH) tunnels. SSH tunnels can provide encrypted pathways to access the internet by redirecting your traffic through a secure server. This method requires technical expertise to set up and may not be practical for everyone. Like other tools, SSH tunnels may also be subject to detection and blocking.
- Psiphon. This tool provides access to the internet using a combination of VPN, SSH, and HTTP proxy technologies. It's designed to be user-friendly and help bypass content-filtering systems. Despite its capabilities, Psiphon's performance in China can be inconsistent due to ongoing restrictions.
FAQs About the Legality of VPNs in China
What are the penalties for using a VPN in China?
Using unauthorized VPNs in China is illegal and can result in fines. Penalties for individuals typically range from 500 to over 15,000 yuan (approximately $70 to $2,200). In some cases, higher fines could be imposed, especially when VPN use is associated with other activities deemed illegal. While enforcement against individual users doesn’t appear to be common, it's important to be aware of these potential legal consequences.
Can China track VPNs?
China uses advanced technologies to detect and monitor VPN usage. Internet Service Providers (ISPs) can identify encrypted VPN traffic and may report such usage to authorities upon request. Authorities cannot see the content of your activities when you use a reputable and secure VPN, but they can see that a VPN is being used. It's important to understand that using unauthorized VPNs in China carries legal risks.
Are domestic Chinese VPNs safe?
Domestic Chinese VPNs that are government-approved are legal to use but are subject to government monitoring and censorship. They may not provide the level of privacy or secure access that you might expect from a VPN service. These VPNs are primarily intended for business purposes and may not be suitable if you’re looking to enhance your online privacy. If privacy is your goal, it’s better to use a VPN that upholds its no-logs policy.
What should I do if my VPN isn’t working in China?
First, make sure you’re using a VPN that has a proven track record of working in China. But if you’ve chosen a reliable provider and it still doesn’t work, you can try the following:
- Check for software updates. Ensure that your VPN application is updated to the latest version. Providers often release updates to improve connectivity and address issues specific to regions with strict internet regulations.
- Contact customer support. Reach out to your VPN provider's customer support for assistance. They may offer specific guidance or settings optimized for use in China.
- Try different servers. Some server locations may offer better connectivity. Experiment with different servers within the VPN app to find one that works more effectively.
- Switch VPN protocols. Within your VPN settings, try using different protocols (e.g. WireGuard, OpenVPN, etc.). Some protocols may perform better under certain network conditions.
- Adjust your protocol settings. Some protocols can be configured to use TCP port 443, which is the same port used by HTTPS web traffic. This means that the GFW won’t be able to simply block the port used by the VPN protocol, which could fix your issue.
- Adjust firewall or antivirus settings. Sometimes, security software can interfere with VPN connections. Ensure that your device’s firewall or antivirus isn't blocking the VPN application.
- Reinstall the VPN application. Uninstall and reinstall the VPN app to ensure a fresh setup, which can resolve configuration issues.
Are all international websites blocked in China?
Not all international websites are blocked in China, but many popular Western sites are inaccessible due to the Great Firewall. Blocked platforms include Google services, Facebook, X (Twitter), YouTube, and various international news outlets.
However, some international websites remain accessible, especially those related to business, education, and technology that comply with China's regulations. You can check the accessibility of specific websites using this online tool.
The Bottom Line
Using a VPN in China means navigating strict laws and potential risks. VPNs not authorized by the government are illegal, and while many people still use them, there can be consequences. If you decide to use a VPN, ensure you download it before entering China and choose a provider known for reliability in restrictive environments.
Stay informed about the latest regulations and use the internet cautiously. By preparing ahead and understanding the challenges, you can make more informed decisions about your online activities while in China.
To summarize, these are the best VPNs for China…
Editor's Note: We value our relationship with our readers, and we strive to earn your trust through transparency and integrity. We are in the same ownership group as some of the industry-leading products reviewed on this site: Intego, Cyberghost, ExpressVPN, and Private Internet Access. However, this does not affect our review process, as we adhere to a strict testing methodology.
Your data is exposed to the websites you visit!
Your IP Address:
Your Location:
Your Internet Provider:
The information above can be used to track you, target you for ads, and monitor what you do online.
VPNs can help you hide this information from websites so that you are protected at all times. We recommend ExpressVPN — the #1 VPN out of over 350 providers we've tested. It has military-grade encryption and privacy features that will ensure your digital security, plus — it's currently offering 82% off.
Please, comment on how to improve this article. Your feedback matters!