ExpressVPN vs Astrill vs NordVPN in China — The 2026 Comparison

What ‘works in China’ actually means

Three things have to all be true:

• The VPN’s protocol must defeat Deep Packet Inspection (DPI). OpenVPN and IKEv2 are detectable and routinely blocked. Lightway with automatic obfuscation (ExpressVPN), StealthVPN (Astrill), and Obfuscated Servers running NordWhisper (NordVPN) are all built to evade DPI.
• The VPN must operate enough servers outside China to route around blocks. Hong Kong / Tokyo / Singapore are the practical entry points (US/EU is too far for low latency).
• The VPN must update its protocols faster than the GFW upgrades. This is the actual moat — most consumer VPNs stop working when China rolls out a new DPI rule and don’t recover for weeks.

Side-by-side specs

ExpressVPN — the default for tourists

ExpressVPN is the consumer favorite and what most travel blogs recommend. The reason is operational excellence: obfuscation is applied automatically across its apps and servers (Lightway itself doesn’t obfuscate by default — the client layers traffic shaping on top), they auto-route around blocked servers in the background, and the iOS / Android apps work out of the box without any configuration.

The trade-off: 2026 in-China reports are mixed rather than flawless — as of mid-2026, travelers on r/chinalife describe it working for most, with occasional outages — and the pricing needs reading carefully. The 2-year promo starts at $2.99/mo (Basic, billed $83.72 upfront for the first 28 months, verified 2026-08-28) but auto-renews at $99.95/year; the Advanced tier is $4.49/mo, renewing at $119.95/year. For a 1-2 week trip the cost is minor either way, and the 30-day money-back guarantee for new users is a genuine safety net the other reliability pick (Astrill) doesn’t offer.

• Best for: tourists who value one-tap setup and a refund safety net
• Works on: iOS / Android / macOS / Windows / Linux / routers
• Headline feature: automatic obfuscation with zero configuration; 10 (Basic) / 12 (Advanced) / 14 (Pro) simultaneous devices
• Weakness: mixed 2026 in-China traveler reports; auto-renewal price after the promo ($99.95/yr on Basic)

Astrill — the China expat favorite

Astrill is overrepresented among long-term expats in Shanghai / Beijing precisely because they upgrade their protocols faster than competitors when the GFW changes. Their StealthVPN and OpenWeb protocols are specifically designed for China, and as of August 2026, travelers on r/chinalife and r/TravelChina report Astrill as the most consistent of the three through firewall sweeps — including the April 2026 firewall upgrade.

The trade-off: more expensive ($30/month monthly, $15/month on the 1-year plan, $12.50/month on 2-year), and no safety net — Astrill’s own FAQ states ‘All Astrill service sales are final and no refunds are possible’, and there’s no standard free trial (a trial is only granted by asking support). Add worse UX (you sometimes need to manually toggle protocols), a website blocked in China so support needs to come via the pre-installed app, and marketing that’s dated 2010s.

But: travelers report that when ExpressVPN goes through a multi-day outage in China during a Party Congress or major political event, Astrill usually stays up.

• Best for: long-term expats, business travelers in China for weeks
• Headline feature: protocol diversity (4+ different obfuscation methods), can fall back manually
• Weakness: price, no refunds (all sales final), app UX feels old
• Worth it if: you’ve been burned by your VPN dying mid-trip

NordVPN — cheap but less reliable in China

NordVPN is the marketing-heavy player and globally the largest VPN by subscriber count. In China specifically, 2026 traveler reports rank it third of these three: the Obfuscated Servers category (now running NordVPN’s NordWhisper protocol) works for some, but as of mid-2026 it draws the weakest reports on r/chinalife and r/TravelChina — including a July 2026 report of NordVPN dead on Android in China — and during the firewall tightening travelers report around major political events, NordVPN is described as going down longer than the other two.

If you’ve already got NordVPN for general use (US/EU privacy, geo-unblocking Netflix), travelers report it working in China some of the time — you just shouldn’t rely on it as your only option.

• Best for: budget-conscious tourists who already have a subscription
• Headline feature: cheap (~$3.50/mo on 2-year plan)
• Weakness: less China-specific dev investment, outages are longer when they happen
• Reality check: in 2026 China-travel threads on r/chinalife and r/TravelChina, NordVPN draws the weakest in-China reports of the three

Practical setup for tourists — the right answer

If you have 1-3 weeks in China and you’ve never used a VPN before:

1. Subscribe to ExpressVPN before you fly (the 30-day money-back guarantee for new users is your safety net — note that Astrill offers no refunds at all).
2. Install on every device — phone, laptop, tablet. Each one needs the app present BEFORE the firewall.
3. Pre-configure the recommended servers: Hong Kong (lowest latency from mainland), Tokyo, Singapore.
4. Verify it works AT HOME — connect to Hong Kong server, try gmail.com. If it works at home you’ve at least ruled out account and app problems — the in-China connection is a separate hurdle that travelers report varies week to week.
5. When you land in China: open the app, tap connect. If it doesn’t connect within 30 seconds, switch to Tokyo or Singapore server.
6. If ExpressVPN is having a bad day (2026 traveler reports include occasional outages), download Astrill as backup — but only AFTER you have ExpressVPN working, because Astrill’s website is also blocked.

What about free VPNs?

Don’t. Every free VPN that markets ‘works in China’ is one of these:

• Already blocked (Hola, TunnelBear free tier, Windscribe free) — they don’t have China-specific obfuscation and the GFW takes them out same-day.
• Selling your traffic — Free VPNs need to monetize somehow. A 2016 CSIRO study of Android VPN apps found 75% included third-party trackers; some free VPNs literally sell user bandwidth.
• Operated by entities you don’t want to trust — several free VPNs are operated out of jurisdictions where data sharing with state actors is routine. For China specifically, that’s the worst tradeoff.