A VPN for China on iPhone has three iPhone-specific catches on top of the usual ones. The Chinese App Store carries no VPN apps, so your Apple ID region must not be China, and changing it on the ground is awkward. iOS runs VPNs through configuration profiles, and two active profiles fight each other. And some Apple features, iCloud Private Relay in particular, do not operate in mainland China, which is easy to mistake for a broken VPN. Everything below is done at home in one evening: region, install, two protocols, test, backup.
For a short trip there is a route with no VPN at all: your carrier's roaming or a travel eSIM, on which your usual apps work because the data exits to the internet outside China. That option is compared in eSIM, roaming or local SIM in China.
Check the Apple ID region
Settings, your name, Media & Purchases, View Account, Country/Region. If it says China, VPN apps will not appear in the store; they were removed from the Chinese App Store years ago at the government's request, as widely reported at the time. Changing region requires a payment method from the new country and no active subscriptions, so do it at home. If the region is anything else, install the app now: from a Chinese network, the app's store page and the provider's website are usually unreachable.
Install, sign in, allow the profile
Install the app, sign in, and accept the prompt to add a VPN configuration. The profile appears under Settings, General, VPN & Device Management. Keep exactly one VPN profile there: if an old app left one behind, delete it, because two active profiles cause connections that drop without explanation. If the provider offers a configuration file or QR code, save a copy in Notes and in cloud storage you can reach from China.
Configure two protocols
The Chinese filter recognizes OpenVPN and WireGuard by their traffic pattern and often never lets them connect; protocols that look like ordinary HTTPS, such as VLESS with Reality, hold up better. Configure both if the app allows, plus two servers in different countries. Hong Kong, Singapore and Japan are closest. The reasoning and the legal side are in VPN for China: what to know before you land.
Connect On Demand and auto-start
The profile has a Connect On Demand switch. At home it is convenient: the tunnel comes up by itself. In China, leave it off for the first days: if the network refuses the tunnel, iOS keeps retrying and ordinary internet slows to a crawl. Turn it on once the connection has proven stable. The app's own auto-connect setting is safer, because it does not interfere with the network when the tunnel fails.
eSIM on iPhone
iPhones sold in most countries support eSIM, and a travel eSIM installs from a QR code under Settings, Cellular, Add eSIM. Do it at home: activation sometimes needs a connection. iPhones sold in mainland China have historically shipped without eSIM or with limited support; if the Add eSIM option is missing, that is why. On a foreign eSIM your usual apps work without a VPN; if it refuses to connect on arrival, the settings to check are in eSIM not working in China.
Private Relay, iMessage, Maps
iCloud Private Relay is not available in mainland China, which Apple states in the feature's description; it is not your VPN failing. iMessage and FaceTime work in China, and Apple Maps works too, drawing on a local mapping provider's data. Apple Pay in stores depends on whether the terminal accepts your card; the everyday payment method in China remains QR codes in WeChat and Alipay, which work without any VPN.
What works without a VPN
WeChat, Alipay, DiDi, Trip.com, Baidu Maps, Amap, Apple Maps, iMessage, FaceTime, plain calls, most banking apps from home, Bing, and translation apps with offline packs. Sign in to all of them at home. Everything else needs either roaming or the VPN.
If nothing connects on arrival
- Confirm ordinary internet works: open any Chinese website.
- Wait a minute; first connections from a new network can be slow.
- Switch protocol, then server.
- Switch between Wi-Fi and cellular.
- Turn Connect On Demand off if it was on, and retry.
- Check that only one VPN profile is installed.
- Switch on roaming for a few minutes to message home and fetch an updated configuration.
If it still fails, try again in the evening from the hotel: networks and times of day differ, and on some days almost nothing connects. The symptom-by-symptom guide is in VPN not working in China.
Backups and updates before you fly
Update iOS and every app at home: updating foreign apps from a Chinese network may not go through, and automatic updates over cellular burn through roaming packages, so switch them off in the App Store settings. Make an iCloud backup before departure. Keep your home SIM active for calls and SMS even when data runs over an eSIM or a local card: bank codes and Apple ID verification codes arrive on it while roaming, and incoming SMS is free with most carriers.
404 VPN for iPhone supports VLESS and WireGuard in one app, resolves DNS inside the tunnel, includes a kill switch, and has locations in Hong Kong, Singapore, Japan and Thailand. The free plan of 5 GB a day is enough to run every check above before you fly. We do not promise availability from every Chinese network. Start on the home page.