China blocks Google, WhatsApp, Instagram, and most of the apps travelers use at home, and its Great Firewall blocks most VPN connections as well. So before a trip, NordVPN subscribers usually want to know one thing: will the VPN they already pay for connect in Shanghai or Beijing?
A standard NordVPN connection is easy for the firewall to spot, and the settings that disguise it changed in mid-2026. Most of the work also has to happen before departure, because downloading and paying for NordVPN from mainland China is difficult. Here are the setup steps, followed by what to try when a connection fails.
How to Use NordVPN in China (October 2026)
- Subscribe to NordVPN at home, then install it on every device you’ll take to China.
- Set the protocol to NordWhisper in the app’s settings.
- Enable the kill switch to keep data from leaking if the connection fails.
- Connect to an obfuscated server in Hong Kong or Japan, and test it at home.
- Set up NordVPN’s manual IKEv2 connection as a backup.
Does NordVPN Work in China?
It can, but NordVPN doesn’t promise it. In fact, NordVPN’s own help center says its iOS, Android, macOS, and Linux apps are “fully blocked in China” and directs users to a manual IKEv2 connection. For Windows, it says both the app and manual setups “have recently been blocked,” and its developers are working on a fix.
NordVPN’s China articles don’t mention obfuscated servers, but its general advice for networks with restrictions starts with them. Results in China vary by city, network, and time of year. Connections also fail more often around sensitive political dates, such as the National People’s Congress sessions in March and the June 4 anniversary.
So prepare two methods before you leave: obfuscated servers in the app and the manual IKEv2 connection NordVPN documents for China. Before you go, keep in mind that NordVPN isn’t among the government-approved VPNs that China allows.
How VPN Obfuscation Works in China
The Great Firewall doesn’t only block websites. It also inspects traffic, a method called deep packet inspection, and looks for the patterns that standard VPN protocols create. Once it recognizes a VPN connection, it cuts it or slows it down until it’s unusable.
Obfuscation disguises a VPN connection as ordinary encrypted web traffic, the kind banking and shopping sites use. As a result, the firewall has a harder time telling it apart. Since July 2026, NordVPN’s obfuscated servers on Windows, Mac, and iPhone have used NordWhisper, its own protocol that wraps VPN traffic in a web tunnel.
Until then, they worked over OpenVPN, and switching to OpenVPN TCP no longer shows them. Instead, they appear only when the protocol is set to NordWhisper or Automatic. However, NordVPN designed NordWhisper for local blocks, such as office, school, or public Wi-Fi networks, and it says the protocol isn’t built for nationwide internet controls.
Disguising traffic also costs some speed and adds delay, more so on distant servers.
How to Set Up NordVPN Before You Travel to China
Do this at home, on a network that isn’t filtered. On a 27-month subscription, NordVPN’s cheapest tier, the Basic plan, is $3.49 a month. You pay $94.23 upfront, then $139.08 for each later year.
On a Windows PC or Mac
Install NordVPN, sign in, and open the settings. Under the protocol options, choose NordWhisper. Then go to servers, select Obfuscated, and choose a country. Connect once to confirm everything works. Next, enable the kill switch, a setting that stops your device from sending data outside the VPN if the connection fails.
It’s called Internet Kill Switch on Windows and VPN bypass prevention in the Mac App Store version. Windows users should also bring a phone or Mac with the manual IKEv2 connection set up. On Windows, neither the app nor the manual method is dependable in China at the moment.
On an iPhone or Android Phone
The path is similar on a phone: open the settings, set the protocol to NordWhisper, then choose Obfuscated servers. On iPhone, the kill switch is VPN bypass prevention, under the VPN connection settings. On Android, enable NordVPN’s kill switch or Android’s Always-on VPN.
Android users should also save NordVPN’s installation file (APK) from its website. Google Play isn’t available in China, and with the file, you can reinstall the app there if you have to.
NordVPN’s Manual IKEv2 Connection for China
NordVPN’s help center recommends this method for China. It uses IKEv2/IPsec, a standard VPN protocol built into iPhones and Macs and available on Android through the free strongSwan app. Because it doesn’t use the NordVPN app, it can connect when the app itself is blocked.
- First, create service credentials in your Nord Account, under the manual setup section, which requires a code sent to your email.
- Second, download NordVPN’s root certificate and set your device to trust it. Third, add an IKEv2 profile in the VPN settings on an iPhone or Mac, or in strongSwan on Android, using a server from NordVPN’s list for that device.
Do all of this before your trip. Gmail is blocked in China, and a code sent there may be unreadable. Afterward, save the service username and password in a note you can read offline. NordVPN’s live chat is also on its blocked website. Ask support any setup questions before you leave.
Which NordVPN Servers to Use in China
NordVPN has no servers in mainland China. Instead, use obfuscated servers in nearby locations: Hong Kong, Japan, Taiwan, South Korea, or Singapore. A nearby server keeps ping, the delay before data starts moving, lower than a European or US server would. We tested the Hong Kong and Tokyo obfuscated servers from Europe, with NordWhisper selected.
Hong Kong kept 140.29 Mbps of our 190 Mbps connection, and Tokyo kept 84.65 Mbps, enough for HD video on both. Ping was high, though, at around 400 ms, because Europe is far from both cities. From mainland China, they’re much closer. The same advice applies in Shanghai, Beijing, Shenzhen, and every other mainland city.
With a working connection, blocked apps such as Google, Instagram, and WhatsApp in China become available. Hong Kong is different. The mainland firewall doesn’t apply there, although some sites are blocked under the 2020 national security law, which is why people there still use VPNs in Hong Kong.
Already in China? How to Download NordVPN There
Mobile data on a foreign SIM card is the most practical way to download NordVPN after you arrive. So is a travel eSIM whose data leaves China through Hong Kong or Singapore. That data usually travels back through your home carrier’s network or those servers, which often leaves it unfiltered.
Results depend on the carrier, though, and NordVPN’s own blog says roaming traffic still passes through Chinese networks. Our list of eSIMs for China compares plans of this kind. Otherwise, the usual sources don’t work. NordVPN’s website is blocked in mainland China, Apple removed VPN apps from its Chinese App Store in 2017, and Google Play isn’t available.
Payment is another obstacle: NordVPN’s checkout is on the blocked site and doesn’t list Alipay, WeChat Pay, or UnionPay. If your trip passes through Hong Kong, subscribe and install NordVPN there before you cross into the mainland.
Hotel Wi-Fi won’t help with the download, though. NordVPN says hotel networks in China face the same censorship as other local networks.
NordVPN Not Working in China? Try These Fixes
When the app shows an error or remains on “Connecting,” follow NordVPN’s general advice for countries with internet restrictions, in this order:
- Check the protocol. Switch it to NordWhisper, or back to Automatic, and reconnect.
- Change the obfuscated location. Try Japan, Taiwan, or Singapore if Hong Kong fails.
- Try OpenVPN TCP on a standard server.
- Reset your device’s network settings, then restart it.
- Switch to the manual IKEv2 connection you set up before the trip.
- Change networks or devices. Try mobile data, a different Wi-Fi network, or your second device.
If nothing connects during a sensitive period, wait a day or two, because blocks around major political events can ease afterward. Keep the app updated before you leave, too, because updates are hard to install from China.
If NordVPN Stops Working: Backup Options
Pack a backup in case NordVPN doesn’t connect. ExpressVPN, for example, obfuscates every connection automatically, with no protocol or server type to choose. That makes it a simple second VPN to install next to NordVPN, and our ExpressVPN China guide covers its setup.
The cheapest way to buy ExpressVPN is the 28-month Basic plan, at $2.99 a month, and it renews at $99.95 a year. A travel eSIM that connects through a foreign network often works with blocked apps without a VPN. Don’t rely on it alone, though, because carriers set up their networks differently.
Finally, if NordVPN doesn’t connect during the trip, its 30-day money-back guarantee lets you cancel and claim a refund. Our guide to VPNs for China lists other VPNs to try.
Is It Legal to Use NordVPN in China?
No, in most cases. Unlike most countries, where VPNs are legal, China allows only VPNs approved by the government, mostly corporate connections through state telecom companies. Regulations from 1996 allow a warning and a fine of up to 15,000 yuan for an unapproved international connection.
The US State Department also says VPN use “is illegal in most cases and may result in confiscation of your device, a fine, or detention.” In practice, enforcement mostly targets people who sell or set up VPN services. Still, individuals have been fined. For example, a man in Guangdong was fined 1,000 yuan in a case reported in 2019.
In 2023, a programmer in Hebei had 1.058 million yuan in earnings confiscated after working for a foreign company over a VPN. The published cases involve residents, and Hong Kong has separate rules. Police can, however, ask visitors to delete VPN apps from their phones.
Final Verdict on NordVPN in China
NordVPN can work in China, but only for travelers who prepare before they leave. Switch NordVPN to NordWhisper, test an obfuscated location such as Hong Kong or Japan, and enable the kill switch. Then save the manual IKEv2 credentials NordVPN documents for China, because that method can connect on the days the app is blocked.
If neither method connects during the trip, ExpressVPN or a travel eSIM makes a sensible backup. Most importantly, test both methods at home before you leave.
NordVPN in China FAQ
Is NordVPN legal in China?
No. Only government-approved VPNs are legal in China, and NordVPN isn't licensed there. Most enforcement targets sellers, but individuals have faced fines, and police may tell visitors to remove VPN apps.
Why is NordVPN not working in China?
China's Great Firewall detects and blocks standard VPN connections, and NordVPN says its apps are blocked there. Obfuscated servers on the NordWhisper protocol, or a manual IKEv2 connection, are the methods to try.
Does NordWhisper work in China?
Yes, in some cases. NordVPN built NordWhisper for local network blocks and says it isn't designed for national firewalls. Its obfuscated servers use NordWhisper, and they're the in-app method to try in China.
Does NordVPN work in Shanghai?
Yes, sometimes. Shanghai is behind the Great Firewall, and NordVPN connects there only through obfuscated servers or its manual IKEv2 setup, with no guarantee. Hong Kong is outside the mainland firewall.
Does NordVPN have servers in China?
No. NordVPN has no servers on the Chinese mainland and can't supply a Chinese IP address. Travelers in China typically choose obfuscated locations nearby, like Hong Kong or Japan, which add less delay.
Can you download NordVPN in China?
No, not easily. The NordVPN site and Google Play don't work on the mainland, and VPN apps are missing from Apple's Chinese storefront. Installing the app before departure is far more dependable.
Does NordVPN offer a refund if it doesn't work in China?
Yes. NordVPN's money-back guarantee covers new subscriptions, including ones that don't connect in China, as long as the request arrives before the guarantee period ends.