VPN for China: How International Students Access Blocked Sites and Stay on the Right Side of the Law

If you are heading to a university in mainland China, you will lose access to Google, Gmail, Facebook, Instagram, WhatsApp, YouTube, Wikipedia, BBC, The New York Times, ChatGPT, Dropbox, and around 10,000 other websites the moment your plane lands. The fix most students use is a VPN, but the legal picture sits in a gray zone, and the practical setup has to happen before you arrive. This guide covers the law, what is blocked, what universities themselves recommend, and how to choose and set up a VPN that survives the Great Firewall.

What the Great Firewall Blocks for Students

The Great Firewall is the filtering system China uses to block foreign sites and slow cross-border traffic. The list of blocked services is long and includes most of the tools Western universities assume their students have.

The full list maintained by LTL Mandarin School is updated each year and is a useful reference before you travel. Imperial College London estimates that around 10,000 sites are blocked, including Google services, YouTube, Facebook, Wikipedia, personal OneDrive, and most major Western news outlets, according to its official guidance for staff and students in China .

Hong Kong and Macau are Chinese territories but operate outside the Firewall, so Google, WhatsApp, and Instagram work on local networks with no VPN needed. A short trip across the border from Shenzhen to Hong Kong is one way to download apps that were blocked further north.

Is Using a VPN Legal for a Foreign Student?

Only VPNs licensed by Chinese authorities are lawful. The framework comes from the 1996 Provisional Regulations on the Administration of International Networking of Computer Information, particularly Articles 6 and 14, and a January 2017 notice from the Ministry of Industry and Information Technology that banned unauthorized VPN services.

Enforcement against individual users has been rare but is not zero. The most cited personal-use case is from December 28, 2018, when a man surnamed Zhu in Shaoguan, Guangdong province, was fined 1,000 yuan, roughly 150 US dollars, for setting up and using an illegal channel to reach international networks, as Sixth Tone reported .

Most prosecutions target providers and resellers, not end users.

Under Article 285 of the Criminal Law, providing tools to access blocked services draws up to three years in prison for "serious" cases, defined by the Supreme People's Court 2011 interpretation as supplying more than 20 people or earning 5,000 yuan in illegal income, and three to seven years for "especially serious" cases at five times those thresholds, per analysis published by The Dui Hua Foundation .

The Cyberspace Administration of China proposed Network Data Security Management Regulations in November 2021 that would raise penalties against providers to up to 500,000 yuan and 10 times any profits, as the South China Morning Post reported .

The practical takeaway for a foreign student:

• Personal use to reach Google Scholar or Gmail is technically a regulatory breach.
• No publicly reported case has targeted an international student for personal VPN use.
• Selling VPN access, sharing your subscription publicly, or running a server is the line that draws serious penalties.

What Universities Themselves Tell Students

Several universities now publish their own guidance for students based in mainland China. The official advice differs and is worth reading for your specific institution before you rely on a third-party VPN.

The pattern across all three is the same. Microsoft 365, Teams, Blackboard, Panopto, and Turnitin generally work without a VPN. Google Workspace, YouTube, personal OneDrive, and most Western news sources do not.

If your course relies on Google Drive or YouTube videos, raise it with your faculty before term starts.

VPN Apps Are Blocked Inside China, So Install Before You Arrive

Apple removed ExpressVPN and other major VPN apps from the China App Store on July 29, 2017, citing Chinese law, as confirmed by ExpressVPN and CNBC . They have not returned.

That means once you are in mainland China:

• The websites of ExpressVPN, NordVPN, Astrill, Surfshark, and Proton VPN are blocked.
• The Apple App Store, set to a Chinese region account, will not show their apps.
• Google Play is itself blocked, so Android downloads of VPN apps need a sideloaded APK or a working VPN already on the device.

Install before you travel, or use Hong Kong, Macau, or a stop in another country to download. Keep the installer files saved to your laptop. The University of Bristol guidance also recommends installing the Microsoft Authenticator app outside China to authenticate without a Chinese phone number.

Choosing a VPN That Still Works in 2025 and 2026

No VPN works perfectly all the time in China. Reliability changes during politically sensitive dates such as the National People's Congress in March and the anniversary of June 4, when filtering tightens.

The three providers most often cited as still functioning are ExpressVPN, NordVPN, and Astrill. Independent test reviews from Comparitech , TechRadar , and Cybernews consistently rank these three at the top, with Astrill flagged for the most consistent performance and the highest price.

Features that matter in China specifically:

• Obfuscation protocols that disguise VPN traffic as normal HTTPS, such as Astrill's StealthVPN or OpenVPN with obfuscation.
• Servers in nearby countries, especially Hong Kong, Japan, Singapore, and South Korea, which give the best speeds.
• Multi-device support, since you will run it on a laptop and phone at minimum.
• A money-back window of at least 30 days, so you have time to test inside China and refund the one that fails.

A second precaution is to use two providers, not two servers on the same provider. When one is throttled, the second usually still works.

Free VPNs and Why They Fail in China

Free VPNs almost always fail inside the Firewall. A June 2025 Tech Transparency Project investigation , summarized by AppleInsider , found that more than 20 of the top 100 free VPNs in the US Apple App Store in 2024 had Chinese ownership ties, including links to Qihoo 360, a firm sanctioned by the US Treasury.

None disclosed those ties, and Chinese law obliges those companies to share user data with the Chinese government.

For a student in China that means three risks:

• The provider is positioned to log your activity and hand it to authorities.
• Free protocols rarely include the obfuscation needed to evade detection.
• Bandwidth caps make video calls and lecture streams unusable.

If you genuinely cannot pay for a VPN, your university's VPN, if offered, is a safer route than a free app. Related: Great Firewall and VPN guide and best VPNs for students.

A Practical Setup Plan Before You Fly

1. Two to four weeks before departure, subscribe to two VPN providers and install their apps on every device you plan to bring.
2. Test both at home by connecting to servers in Hong Kong, Japan, and Singapore, since those are the routes you will rely on.
3. Save VPN installer files and your account login details to an offline location such as a password manager or a USB stick.
4. Buy an international eSIM or activate roaming for the first week, so you have internet even if both VPNs fail on day one.
5. Download offline copies of any essential Google Drive, YouTube, or Dropbox materials.
6. Set up Microsoft Authenticator and any university single-sign-on tools while still on your home network.
7. Read your university's China-specific guidance and email IT to request access to any institutional VPN before classes begin.

What to Do If Your VPN Stops Working Mid-Semester

Outages happen, and they happen most around political anniversaries and Party congresses. The Foreign Policy report on China's draft cybercrime law and recent Radio Free Asia coverage of regional censorship both note that filtering has intensified through 2025 and into 2026.

Steps when nothing connects:

• Switch protocols inside the same app, for example from Lightway to OpenVPN UDP, then to OpenVPN TCP on port 443.
• Switch to a different server location, prioritizing Hong Kong and Japan.
• Open your second VPN app from a different provider.
• Use mobile data with international roaming as a last resort.
• If your university offers its own VPN, fall back to it for accessing learning materials only, since institutional VPNs are state-approved and unblocked.

Do not post screenshots of VPN traffic, server addresses, or login pages on Chinese platforms like WeChat or Weibo. The legal risk for individuals comes from running, sharing, or selling, not from quietly using.

Sources

• GoClick China : VPNs in China: legal but limited
• South China Morning Post : China's VPN providers face harsher punishment
• Sixth Tone : Guangdong Man Fined $150 for Using a VPN
• The Dui Hua Foundation : Fortifying the Great Firewall, Part II
• LTL Mandarin School : Websites Banned in China (2025)
• University of Bristol : Accessing online learning in China
• Imperial College London : Guidance for those working from China
• University of Reading : Guidance for those working or studying from China
• ExpressVPN : Apple removes VPN Apps from China App Store
• CNBC : Apple removes VPN apps in China App Store
• Tech Transparency Project : Apple and Google's Chinese VPN problem
• AppleInsider : App Store hosted free VPNs with China military ties
• Comparitech : Great Firewall of China explained
• TechRadar : Best VPN for China
• Cybernews : Best VPNs for China
• Radio Free Asia : Regional Chinese censorship study