A VPN not working in China is the expected outcome for a classic setup, not a sign that you did something wrong. The national filter recognizes OpenVPN and WireGuard by their traffic pattern, so those connections never complete or drop after a few minutes; the app sits on "connecting" and says nothing useful. Add two more common causes, an app that was never installed because the app store and the VPN website are unreachable from Chinese networks, and a holiday week when filtering tightens, and you have most cases. Below, each symptom is matched to its likely cause and the fix to try, in the order that costs the least time.
If you are still at home, the single most useful thing is in VPN for China: what to know before you land: install, configure two protocols, test, back up. If you are already in China, start with the symptom list.
Symptom: stuck on "connecting"
The most common one. The tunnel handshake is being identified and dropped, or the server address is unreachable from this network.
- Wait a full minute. First connections from a new network are sometimes slow to establish.
- Switch protocol. If you are on WireGuard or OpenVPN, switch to VLESS with Reality or another protocol that looks like ordinary HTTPS. If you are already on VLESS, try a different server.
- Switch server to another country. Hong Kong, Singapore and Japan are close, but the filter may treat individual addresses differently.
- Switch between Wi-Fi and mobile data. Hotel Wi-Fi and a local SIM are not filtered identically.
If none of those help, it may simply be a bad day; see the last section.
Symptom: connects, then drops after a few minutes
The classic signature of a recognized protocol: the connection is allowed to start and then reset. Switch to a protocol that mimics HTTPS and stay on it. If the drops continue on VLESS, change server; some addresses get flagged while others on the same provider do not.
Symptom: connected, but nothing loads
Three possibilities. The tunnel is up but DNS is failing: check on What Is My IP whether the address changed, and if it did, the problem is name resolution, which the app's "DNS inside the tunnel" setting usually fixes. Or the kill switch is on and the tunnel silently dropped: turn the kill switch off and see whether ordinary internet returns. Or the server is overloaded: change server. The general checklist for this state is in Why does my VPN keep disconnecting.
Symptom: works on Wi-Fi but not on mobile data, or the reverse
Normal. Carriers and hotel networks are filtered separately, and a protocol that passes on one may be dropped on the other. Use whichever works and do not spend time forcing the other. If mobile data is the one that works, your phone's hotspot can carry the laptop.
Symptom: cannot install or update the app
VPN websites and the relevant app-store pages are unreachable from Chinese networks, and the Chinese App Store carries no VPN apps at all. Your options on the ground: switch on roaming for a few minutes, which exits to the internet in your home country and is not filtered, and download from there; or ask someone at home to send you the configuration file. Next time, install at home. The iPhone specifics, including the Apple ID region, are in VPN for China on iPhone.
Symptom: it worked yesterday and not today
Filtering tightens around national holidays, major political events and sometimes for no visible reason, and a server or protocol that worked can stop for a day or two. Do not reconfigure everything; change server, try again in the evening, and use roaming in the meantime. Things usually return to normal without any action on your part.
The order that saves the most time
- Protocol: VLESS with Reality first, WireGuard second.
- Server: three options in nearby countries, tried in turn.
- Network: Wi-Fi versus mobile data.
- Kill switch off, then on again once stable.
- Roaming for a few minutes to message home and fetch an updated configuration.
- Try again later in the day.
Why roaming is the reliable fallback
On international roaming and on most travel eSIMs, your data leaves the Chinese tower and exits to the internet in your home carrier's country. The filter treats that as carrier transit and does not touch it, so Instagram, WhatsApp and Google work without any VPN. It costs more and adds latency, but on the days when no tunnel connects it is the one thing that does. The comparison with a local SIM is in eSIM, roaming or local SIM in China.
What no VPN can fix
A network that refuses every tunnel on a given day. A hotel Wi-Fi that needs a Chinese phone number to log in. Apps that were never installed. And the local side of your trip: payments, taxis and deliveries run in WeChat and Alipay regardless of any VPN, so if those are what you need, close the VPN app and use them directly.
404 VPN offers VLESS and WireGuard in one app for iOS, Android, Windows and macOS, DNS inside the tunnel, a kill switch, and locations in Hong Kong, Singapore, Japan and Thailand. The free plan of 5 GB a day is enough to test the full checklist before you fly. We do not promise availability from every Chinese network on every day. Start on the home page.