Is It Illegal to Use a VPN in China?
The short answer is no — but it's complicated enough that you need to understand the nuance before you land.
China has never prosecuted a foreign national for using a VPN to check their email or access Instagram. But VPNs exist in a legal gray zone, and most of them don't actually work once you're inside the country. Both of those things matter equally.
What Chinese law actually says
In 2017, China passed regulations requiring VPN providers to obtain government approval before operating within the country. Every major international VPN provider failed to get that approval, which means they're technically operating illegally — the providers, not the people using them.
That distinction is important. The law targets companies offering VPN services without a license, not individuals connecting through them. Enforcement has reflected that. Chinese citizens have been fined for VPN use, particularly in Xinjiang and other heavily surveilled regions. Foreign visitors have not.
If you're a tourist or short-term business traveler, your practical legal risk is close to zero. If you're a foreign national living in China long-term, it's still low but not nonexistent — the longer you're there, the more visible you become. If you're a Chinese citizen, the calculus is genuinely different and you should factor that in.
What's actually blocked
Most people know Google is blocked. Fewer realize how total that blockage is.
Everything Google makes is inaccessible: Search, Gmail, Maps, Drive, Docs, YouTube, Meet, the Play Store. If your work runs on Google Workspace, you are effectively locked out of your job the moment you land.
Beyond Google: Facebook, Instagram, WhatsApp, Telegram, Signal, Twitter, Snapchat. The New York Times, BBC, Reuters, Bloomberg, Wikipedia. Slack and Dropbox. The list runs to thousands of domains and gets updated regularly.
The detail that catches most travelers off guard: VPN provider websites are blocked too. If you don't have a VPN installed and your account active before you arrive, you often can't even download one once you're there.
Why most VPNs don't work in China
The Great Firewall doesn't just block websites. It actively analyzes internet traffic and identifies VPN connections by their traffic patterns — a technique called deep packet inspection. Standard VPN protocols like OpenVPN and WireGuard have recognizable signatures. The firewall sees them, flags them, and throttles or drops the connection.
This is why free VPNs almost universally fail in China. And why plenty of paid VPNs that work fine in other countries fail there too.
What gets through is obfuscated traffic — a VPN connection engineered to look like regular HTTPS browsing. The firewall sees what appears to be normal encrypted web traffic and lets it pass. Without that layer, you're relying on luck and the firewall's attention being elsewhere.
A few other things that matter for China specifically:
DNS leak protection is important. DoH (DNS over HTTPS) encryption prevents your DNS queries from being intercepted even when your VPN tunnel is active. Without it, the sites you're trying to reach can still be visible at the network level even if your traffic appears encrypted.
Server location affects speed more than most people expect. Connecting to a server in Japan or Singapore from Shanghai is noticeably faster than routing through the US or Europe. The physical distance adds latency that becomes annoying quickly on video calls or anything real-time.
Multiple server options matter because the firewall's blocking isn't static. What works today may not work next week, and during politically sensitive periods — Party congresses, major anniversaries, periods of unrest — enforcement tightens considerably. Having fallback server options is the difference between a minor inconvenience and being completely cut off.
Using Veilock in China
Veilock is built specifically for this. The platform uses Vortex, its obfuscation system, to mask VPN traffic as regular HTTPS — the firewall sees nothing unusual. It runs DoH encryption on DNS queries and maintains a no-logs policy, so there's no record of your activity on Veilock's infrastructure.
The app is available on Windows, macOS, Linux, and Android.
One thing worth repeating: set it up before you travel. You cannot access veilock.com from inside China. Download the app, activate your subscription, and test a connection at home before your flight. It takes five minutes and saves a lot of frustration.
Common questions
Can I get arrested as a tourist for using a VPN?
No documented case of this has ever occurred. Enforcement targets providers and Chinese nationals, not foreign visitors browsing the open internet.
Will it slow down my connection?
Some, yes. The obfuscation and encryption add overhead. Connecting to servers in Asia rather than the US minimizes this substantially. For most browsing and messaging it's barely noticeable. Video calls and large file transfers will feel it more.
What if it stops working while I'm there?
Switch server locations first — that fixes most issues. The Great Firewall periodically blocks specific server IPs, and moving to a different location usually restores the connection. Veilock support can help if you're stuck.
What about VPNs that are legal in China?
A handful have government approval, primarily for corporate use. They're monitored, and they don't offer real privacy or unrestricted access. They're not what you're looking for.
I forgot to set it up before I left. What now?
If your phone is on a data roaming plan from your home carrier, that traffic often routes outside China and bypasses the firewall. It's not reliable and it's not cheap, but it can get you access long enough to set something up properly. Some travelers have also had luck buying a SIM from a carrier based in Hong Kong at the border.
Bottom line
The legal risk for foreign visitors using a VPN in China is minimal and has been for years. The real problem is arriving without one that actually works. Set up Veilock before your flight, and it's a non-issue.