LeoTun

Internet Freedom Alliance

2026-10 sing-box upgraded: old configs no longer work. Sign in and re-scan the code on the sing-box page, once per device.
2026-09 New router firmware is out — please update. OpenVPN is back: download a profile, import it, and connect in one tap.
2026-09 New Personal plan: 4 USD/month for 2 devices, routers included — everyone should have a VPN router.
HomeRouterOpenVPNCiscoHiddifyProxyPrivateContact

Related guides

How to Use a VPN in China: Set Up Before You Land

Updated 2026-10-08

Set the VPN up before you travel, not after you land. Inside mainland China the app stores, download pages and many mailboxes you would need are much harder to open, so installing on the spot is hard work. Before you leave, install a client on every device you will carry, add a second connection method as a fallback, connect once at home to confirm the account works, and save one way to reach support that opens without a VPN. This guide covers that preparation, how hotel Wi‑Fi, local mobile data and a roaming SIM or eSIM differ, what to do on arrival, and what to do when nothing connects.

Five things to finish at home

  1. Create an account and connect once. LeoTun has a 24-hour free trial with no credit card. It lasts 24 hours, so spend it either on the test at home or on your first day in China; paid time is refunded pro rata at any time, so paying for a short period before the trip carries little risk.
  2. Install a client on every device you will carry. On the phone, install Cisco Secure Client (App Store, Google Play, or the installer on this site’s Cisco page), log in to the site, click a flag to copy a region’s address, and connect once with your site username and password.
  3. Add a second connection method. Interference with one protocol is independent of the others, so when one fails another usually connects. On the phone add Hiddify and import by QR code; on the laptop add the web-proxy extension.
  4. Save several region addresses. The fastest region in China is often not the one that was fastest at home; with two or three saved in the client, switching takes seconds.
  5. Save the contact routes. Note the four domains in order — leotun.com → 7d24hrs.com → 7x24btc.com → anyfq.com — which carry identical content and the same account, so if one fails you try the next. Note the support email and join at least one support group. Details are in How to reach us and never lose contact.

What to install on an iPhone, an Android phone and a laptop

One LeoTun account has six connection methods: router, OpenVPN, Cisco (AnyConnect), Hiddify, web proxy and private network (Tailscale). A short trip needs only a few of them, chosen by device.

  • iPhone and iPad: start with Cisco. The client is Cisco’s own Cisco Secure Client; you enter an address, a username and a password, with nothing to import. Add Hiddify as the second method: install it from the App Store, then scan a QR code on this site. See VPN on iPhone.
  • Android: the Cisco and Hiddify installers both download straight from this site, with no app store involved. Google Play does not open on mainland networks without a working route, so install before you leave. See VPN on Android.
  • Your own laptop: install Hiddify or Cisco, and preferably both. See VPN for Windows and Mac.
  • A company laptop: with no admin rights, or with a corporate VPN already running, use the web-proxy extension. It covers the browser only and leaves the system’s network settings alone.
  • Many devices or a long stay: consider a router, so that everything on its Wi‑Fi takes the route automatically. See Using a travel router in China.

Hotel Wi‑Fi, local mobile data, roaming: three different networks

  • Hotel, airport and café Wi‑Fi: finish the browser login page first, then start the route. A client set to auto-connect tries before that login and fails; reconnect by hand once. These networks often restrict UDP. Cisco runs over TLS and looks like a visit to an ordinary HTTPS site, which makes it the steadiest choice in a hotel.
  • Mobile data on a local SIM: it is managed the same way as local broadband, so you need the route. The same region often behaves differently on Wi‑Fi and on mobile data, so test each. On a weak signal with heavy packet loss, Hiddify is usually faster.
  • Roaming on your home SIM, or a travel eSIM: roaming data normally travels back to the issuing carrier’s network before it reaches the internet, so many sites that fail on local networks open on roaming without a VPN. How this works depends on the product you bought, and the data is expensive or capped. Its best use is as a fallback: when the VPN will not connect, roaming data gets you to an installer or to support. The trade-offs are in eSIM or VPN for China.
  • Phone hotspot: when the laptop cannot connect on hotel Wi‑Fi, join the phone’s hotspot and try again. It is the quickest way to tell a hotel-network problem from a route problem.

On arrival

  1. Join the network. On hotel Wi‑Fi, finish the login page first.
  2. Open the Cisco client and connect. If it fails, try another saved region, then switch to Hiddify.
  3. Choose a region. Go by carrier first, then by the red, yellow and green load lights on the region list, taking a green one. 8–11 pm is the evening peak, and switching to a green region then helps more than reconnecting. The by-carrier starting points are in Which region is fastest from inside China.
  4. Open everything you depend on once: mail, maps, messaging, video. The common ones each have a guide: Google, WhatsApp and YouTube.
  5. Local apps for payment, maps and ride-hailing need no route and are fastest on the direct connection. Disconnect when you are done with the route, or switch the Hiddify client to its auto split mode.

What to keep as a fallback

  • A second connection method: Hiddify beside Cisco on the phone, plus the web proxy on the laptop.
  • A second network: some roaming data or a local SIM beside the hotel Wi‑Fi.
  • Two or three saved region addresses: one region’s entry being interfered with is common, and another region usually connects.
  • A contact route that works with no VPN: the QQ group is the only one of the three support groups that opens inside China without a route. If you do not use QQ, keep the support email address and have a mailbox that opens on mainland networks (Gmail does not open there without a route).

If nothing connects

  1. Change network: Wi‑Fi to mobile data, or the reverse. Interference differs between networks.
  2. Change method: Hiddify, the private network and OpenVPN use UDP, so when they fail switch to Cisco; if whole-device methods keep dropping, switch to the web proxy.
  3. Change region. On smaller carriers, or when cross-border links are unstable, choose the China entry region.
  4. Check two basics: that the account has not expired, and that the device clock is right (turn on automatic time).
  5. Then contact support with four things in one message: the connection method, the region, the error text or a screenshot, and the time it happened. An AI assistant answers in the support groups around the clock; refunds and billing are handled by a person. For the China-specific checks in order, see VPN not working in China.

FAQ

I am already in China. Can I still set it up?

Yes, with more effort. The site’s four domains carry the same content, so if one fails try the next. Installers for Windows, macOS and Android download from the download center on this site, which opens inside China. An iPhone installs only from the App Store, where Cisco Secure Client is listed in most regions. If nothing opens, use roaming data for the download and the first login.

How do I use a VPN in China on an iPhone?

Install Cisco Secure Client from the App Store before you travel, copy a region’s address from this site, and connect with your site username and password. Save two more regions, and add Hiddify as a second method. The full walkthrough is in VPN on iPhone.

The VPN will not connect on hotel Wi‑Fi. What now?

Confirm that you finished the hotel’s login page in a browser, then switch to Cisco: hotel networks often restrict UDP, and Cisco over TLS is unaffected. If it still fails, try once on the phone’s hotspot. If it connects there, the hotel network is the cause.

I have roaming or a travel eSIM. Do I still need a VPN?

For one phone, a few days and enough data, roaming is often sufficient. A laptop, a tablet, anything on hotel Wi‑Fi, or a data allowance that runs out still needs a VPN. Carrying both is the safest plan; see eSIM or VPN for China.

The trip is only a few days. Do I need a month?

No. There is a 24-hour free trial, and single days can be activated with points, so you pay for the days you use. Paid time is refunded pro rata at any time.

Are there rules about using a VPN in China?

Mainland China has rules on cross-border internet access, and they differ by who you are and what you use it for. This guide covers the technical setup only. Inform yourself about the rules that apply to you before you travel.

Related pages

  • VPN not working in China? Why, and what to try →
  • Best VPN for China: how to judge one yourself →
  • eSIM or VPN for China →
  • Setting up for business trips and travel →
  • How to reach us and never lose contact →
  • Tencent Video or iQIYI Blocked Abroad? Fix It in 5 Steps →
  • How to Choose a China VPN →
  • Does Cisco AnyConnect Work in China? →
  • Choosing a VPN Router →
  • How to Import a Hiddify Subscription →
  • China VPN for Students Abroad →
  • What a Web Proxy Is and When to Use One →
  • Free or Paid China VPN? →
  • What the Private Network (Tailscale) Is →
  • How to Use OpenVPN and When to Choose It →
  • Flashing the Router Firmware: From Stock to Ours, Step by Step →
  • What the Router Firmware Does →
  • Where We Beat Other VPNs →
  • How to Recognise a Risky VPN App →
  • Which connection method fits which scenario →
  • Which Region Is Fastest from Inside China →
  • For the TV and the Grandparents at Home →
  • Watching Home Cameras and a NAS in China from Abroad →
  • What to Do When iOS Cannot Install an App →
  • Cannot Connect, Slow, or Dropping: What to Check →
  • On a Company Laptop: No Admin Rights, Corporate VPN Already On →
  • Many Devices, One Setup, No Redo on a New Phone →
  • Routing a Synology or QNAP NAS →
  • Routing a Linux Server and Command-Line Tools →
  • “Damaged” on a Mac, and how to verify the installer →
  • Using RustDesk for remote help →
  • What macOS's Network Extension Approval Is →
  • How split routing works on a VPN router →
  • Not enough device slots? Temporary vs long-term fixes →
  • Dropbox and other apps want an HTTP / SOCKS proxy — what to do →
  • How to Get Good Answers from the AI Support →
  • How to manually uninstall the Cisco client on a Mac →
  • Cisco error “remote user is disabled” →
  • Refund Policy and Feedback →
  • What a VPN is, what it is used for, and how to connect →
  • VPN vs “airport” proxy subscriptions vs accelerators →
  • VPN protocols compared: WireGuard, OpenVPN, AnyConnect, Hysteria2 →
  • Is a VPN Safe to Use? Who Can See What →
  • VPN Slow? How to Run a Speed Test and Find the Cause →
  • DNS Leak vs DNS Poisoning: How to Check and Fix →
  • VPN on iPhone: which method to use and how to set it up →
  • VPN on Android: which client to use and how to set it up →
  • VPN on a computer: which method for Windows and Mac →
  • Using ChatGPT in China: Why It Fails and What Matters →
  • No Verification Code for an Overseas App? Telegram, Instagram and TikTok in China →
  • What Is OpenWrt? Soft Routers, Bypass Gateways and VPN Routers for China →
  • Do VPNs Work in China? What NordVPN, ExpressVPN and Others Say Themselves →
  • Travel VPN Router for China: Setup and Who Needs One →
  • WhatsApp in China: Does It Work and How to Set It Up →
  • Google in China: Gmail, Maps and Google Play Explained →
  • YouTube in China: How to Watch, and Why Netflix Refuses →

Flags by Twemoji (CC-BY 4.0)·IP Geolocation by DB-IP

AboutGuidesContact

© 2007–2026LeoTun