VPN for China in 2026: what's working this year

This page is maintained through the year with current observations about network behavior on East Asian connections. It is aimed at travelers planning trips in 2026 and long-term residents reviewing their setup.

Last meaningful update: April 2026.

Summary for 2026

• Hysteria2 with salamander obfuscation is the fastest transport on mainland networks this year and is stable enough to use as a daily driver.
• Cloak-wrapped OpenVPN TCP on port 443 remains the most reliable fallback. The TLS fingerprint has been refined this year and blends cleanly into ordinary HTTPS traffic.
• OpenVPN UDP still works well on cleaner networks, but hotel Wi-Fi often pushes users back toward Hysteria2 or the TCP/443 fallback.
• Hong Kong and Tokyo continue to be the two endpoints that actually deliver usable speeds. Nothing changed on that front in 2026.

What changed since 2025

• Hysteria2 adoption is now broad enough that most serious providers ship it. If your VPN only supports older default transports, you are a protocol generation behind in 2026.
• Peak-hour routing into nearby East Asia endpoints has gotten a little more crowded. The practical impact: Tokyo has become a more viable default for northern China where it was previously a fallback.
• Android client behavior improved with the rollout of VpnService.Builder.setMetered API usage — modern VPN apps no longer trip battery-optimization aggressively.
• App Store review policies for VPN apps tightened further. The short version for users: buy and install before you travel, not from inside restricted networks.

Seasonal notes

Two predictable windows during the year see increased network variability and heavier user load on VPN infrastructure: Chinese New Year (late January to mid-February) and National Day / Golden Week (first week of October). Travelers arriving during these windows should test their setup at home before flying and keep both Hong Kong and Tokyo favorited.

Recommendations for 2026

1. Install on every device before you leave. Pre-departure checklist.
2. Favorite both Hong Kong and Tokyo in the app.
3. Enable automatic protocol selection. Trust the client to pick Hysteria2 or Cloak as needed.
4. Turn on the kill switch for situations where a leak would matter (banking, work documents).
5. Keep an APK of the Android app in your email as a backup install path.