A VPN for China on iPhone has three iPhone-specific catches on top of the usual ones.
The Chinese App Store carries no VPN apps, so your Apple ID region must not be China, and changing it on the ground is awkward. iOS runs VPNs through configuration profiles, and two active profiles fight each other. And some Apple features, iCloud Private Relay in particular, don't operate in mainland China, which is easy to mistake for a broken VPN. Everything below is done at home in one evening: region, install, two protocols, test, backup.
For a short trip there's a route with no VPN at all: your carrier's roaming or a travel eSIM, on which your usual apps work because the data exits to the internet outside China. That option is compared in eSIM, roaming or local SIM in China.
[ ] Apple ID region not China
[ ] app and profile installed
[ ] two protocols configured
[ ] Private Relay off
[ ] know how to stop On Demand
└─ the region can only change at homeCheck the Apple ID region
Settings, your name, Media & Purchases, View Account, Country/Region. If it says China, VPN apps won't appear in the store; they were removed from the Chinese App Store years ago at the government's request, as widely reported at the time. Changing region requires a payment method from the new country and no active subscriptions, so do it at home. If the region is anything else, install the app now: from a Chinese network, the app's store page and the provider's website are usually unreachable.
non-Chinese Apple ID └─ install everything before you fly Chinese Apple ID └─ some apps are not listed switching region on arrival └─ needs local payment details
Install, sign in, allow the profile
Install the app, sign in, and accept the prompt to add a VPN configuration. The profile appears under Settings, General, VPN & Device Management. Keep exactly one VPN profile there: if an old app left one behind, delete it, because two active profiles cause connections that drop without explanation. If the provider offers a configuration file or QR code, save a copy in Notes and in cloud storage you can reach from China.
Configure two protocols, one that looks like HTTPS
The Chinese filter recognizes OpenVPN and WireGuard by their traffic pattern and often never lets them connect; protocols that look like ordinary HTTPS, such as VLESS with Reality, hold up better. Configure both if the app allows, plus two servers in different countries. Hong Kong, Singapore and Japan are closest. The reasoning and the legal side are in VPN for China: what to know before you land.
WireGuard fast, recognisable shape VLESS with masking looks like plain HTTPS └─ keep both configured: nobody knows in advance which one a given network will pass
Connect On Demand and auto-start
The profile has a Connect On Demand switch. At home it's convenient: the tunnel comes up by itself. In China, leave it off for the first days: if the network refuses the tunnel, iOS keeps retrying and ordinary internet slows to a crawl. Turn it on once the connection has proven stable. The app's own auto-connect setting is safer, because it doesn't interfere with the network when the tunnel fails.
Travel eSIM on iPhone for China
iPhones sold in most countries support eSIM, and a travel eSIM installs from a QR code under Settings, Cellular, Add eSIM. Do it at home: activation sometimes needs a connection. iPhones sold in mainland China have historically shipped without eSIM or with limited support; if the Add eSIM option is missing, that is why. On a foreign eSIM your usual apps work without a VPN; if it refuses to connect on arrival, the settings to check are in eSIM not working in China.
[ ] client installed and tested
[ ] keys saved as text, not only
inside the app
[ ] offline maps downloaded
[ ] offline translator downloaded
[ ] Private Relay turned offDoes Private Relay work in China? iMessage and Maps
iCloud Private Relay isn't available in mainland China, which Apple states in the feature's description; it isn't your VPN failing. iMessage and FaceTime work in China, and Apple Maps works too, drawing on a local mapping provider's data. Apple Pay in stores depends on whether the terminal accepts your card; the everyday payment method in China remains QR codes in WeChat and Alipay, which work without any VPN.
local maps, taxi and payments banking, tickets, hotels most travel logistics └─ a tunnel is for the apps you brought with you
What works in China without a VPN
WeChat, Alipay, DiDi, Trip.com, Baidu Maps, Amap, Apple Maps, iMessage, FaceTime, plain calls, most banking apps from back home, Bing, and translation apps with offline packs. Sign in to every one of them before you fly. Everything else needs either roaming or the VPN.
1 set the clock to automatic 2 different server 3 different protocol 4 mobile data instead of Wi-Fi 5 wait: evenings are worse
iPhone VPN not connecting in China
- Check that ordinary internet works at all: open any Chinese website.
- Give it a minute. Your first connection from a new network is often slow.
- Switch your protocol, then your server.
- Switch between Wi-Fi and cellular.
- Turn Connect On Demand off if it was on, and retry.
- Make sure you have only one VPN profile installed.
- Turn roaming on for a few minutes, message home, and pull down an updated configuration.
If it still won't connect, try again in the evening from your hotel. Networks and times of day are not the same, and on some days almost nothing connects. That's not you doing it wrong. The symptom-by-symptom guide is in VPN not working in China.
If something won't load and you can't tell whether the problem is the network, the connection type or the tunnel, describe it.
Help me work out what is wrong with my
connection while traveling.
Where I am: (city, province in China).
Connection: (roaming / travel eSIM / local SIM /
hotel Wi-Fi).
What will not load: (list it).
What loads fine: (list it).
Tunnel: (on and connected / on but will not
connect / not using one).
Tell me which part is failing: the network
itself, the way I am connected, or the tunnel.
And what to check first.
If the data is not enough, ask instead of
guessing.Backups and updates before you fly
Update iOS and every app at home: updating foreign apps from a Chinese network may not go through, and automatic updates over cellular burn through roaming packages, so switch them off in the App Store settings. Make an iCloud backup before departure. Keep your home SIM active for calls and SMS even when data runs over an eSIM or a local card: bank codes and Apple ID verification codes arrive on it while roaming, and incoming SMS is free with most carriers.
404 VPN doesn't have its own iPhone app yet; on iPhone the key from your account opens in Streisand, V2Box or Hiddify. The service runs on VLESS, the protocol to use in China, resolves DNS inside the tunnel, and has seven locations, including Hong Kong and Tokyo. The free plan of 2 GB a day is enough to run every check above before you fly. We don't promise availability from every Chinese network. Start on the home page.
