If you've just landed in China and noticed your App Store has no VPN apps, that's not a bug. Apple pulled them in 2017. The fix is simple: switch your Apple ID region, install Happ, paste an IT CRP subscription URL. Four minutes total. This page walks through it step by step, with a section at the end on what to do if your iPhone is already in China and you didn't prepare.
Three things are different about iPhone vs Android or laptop. Knowing them upfront saves a lot of time.
If your Apple ID region is set to mainland China, your App Store is missing Happ, Shadowrocket, Streisand, NekoBox, and pretty much every other VPN client. This is Apple complying with Chinese regulations, not a network block — even with a working VPN, the China App Store catalogue won't show those apps. The way around it is to switch your Apple ID region to any non-China country (Hong Kong, US, UK, your home country). The change is free, reversible, and takes a minute in Settings.
If you've turned on iCloud+ Private Relay and assumed it would let you access Gmail from China — it won't. Private Relay is a privacy feature for Safari that hides your IP from the sites you browse; it's not designed to bypass national-level filtering. Apple also disables Private Relay entirely on mainland Chinese networks. You need a real VPN client (Happ, Shadowrocket) and a real subscription. Private Relay can stay on or off, doesn't matter.
Unlike on Mac or Windows, iOS apps can't run their own VPN driver. Happ and Shadowrocket use Apple's built-in NetworkExtension framework to set up the tunnel, which is why iOS asks for your permission ("VPN Configuration") the first time you connect. The practical effect: VPN protocol support on iPhone depends on what Apple allows. Older protocols (PPTP) are gone. Modern ones (VLESS-Reality + XTLS-Vision over TCP) work cleanly. IT CRP's profile is built around the protocols iOS supports natively.
Works whether your iPhone is in China already or you're setting it up before flying.
Settings → Apple ID → Media & Purchases → View Account → Country/Region → Change. Pick any non-China country. Free, reversible. Apps you've paid for stay accessible.
Search "Happ" in the App Store with your international Apple ID. Install. Free. (Or install Shadowrocket for $2.99 one-time if you prefer it.)
Open Safari, go to it-crp.com, click Sign up. Email and password — no card needed. Your 1 GB Happ key arrives by email under 30 seconds. Tap the link in the email — Happ catches it and imports the profile in one tap. Upgrade to Solo at $9/mo only after you've confirmed it works on your network.
Happ asks for permission to add a VPN configuration the first time. Allow. Tap the connect button. Gmail loads. WhatsApp loads. You're done.
All of these import an IT CRP subscription URL. They differ in price, polish, and how much configuration they expose.
| Client | Price · best for | Setup with IT CRP |
|---|---|---|
| Happ (recommended) | Free · first-time users, simplest path | One-tap subscription import from the email link |
| Shadowrocket | $2.99 one-time · long-term China expats | Paste subscription URL, manual rule config available |
| Streisand | Free · users who already know it | Paste URL, fewer routing options than Shadowrocket |
| NekoBox | Free · users coming from Android | Paste URL, more sing-box-style configuration |
| iOS built-in VPN settings | Free · not recommended for China | Doesn't support VLESS-Reality natively. Use Happ instead. |