Quick answer
If google.com will not open for you, start with the quick diagnosis in the next section, then the free fixes in order: encrypted DNS first, then the free tunnel that matches the block type (WARP, Psiphon or Tor).
Is it down or blocked for you?
Before changing any settings, spend one minute finding out which layer ate google.com. The fix depends on it, and the order below rules layers out cheaply.
- Check the site itself. Open https://downforeveryoneorjustme.com/google.com - it queries from several vantage points. If the site is offline for everyone, no circumvention method will help; the archived copies route is the honest fallback.
- Check the error you get. "Server not found" / NXDOMAIN = DNS block. "Connection reset" or endless loading = connection (SNI/IP) block. A foreign-language or government error page = confirmed national block. A site-owned message (age gate, region notice) = the operator restricts you, not the network.
- Check DNS resolution. Open https://dnschecker.org/#A/google.com and see whether google.com still resolves worldwide. If it resolves everywhere but will not open for you, your network or ISP is filtering - go to the DNS fixes.
- Compare with the measurement network. The OONI Explorer page for google.com shows real probe measurements from inside dozens of countries, updated daily: which countries see anomalies, and which show confirmed block pages.
The block, explained
News sites are blocked where reporting is unwelcome - DNS-level, throttled, or physically cut during sensitive periods.
Our OONI aggregation (last 90 days, raw data) shows the strongest signals in China (50 anomalies). "Confirmed" means the probe received a block page or a forced failure signature; anomalies alone can also come from outages, so both counts are shown.
Which block is it? Match the symptom to the fix
Match what you see to the fix:
| What you see | Likely block type | The fix |
|---|---|---|
| "Server not found" / NXDOMAIN | DNS block | Encrypted DNS (DoH) or resolver switch |
| Government or ISP error page | National block | Psiphon, Tor with bridges, or a vetted VPN |
| Nothing loads at all, anywhere | Site may be down | Check the archived copy and the diagnosis steps above |
| Site loads but content is missing or region-locked | Geo-restriction (operator) | Server in a supported region: VPN guide |
| Works on mobile data, fails on Wi-Fi | Network filter (school/office) | Network filter workarounds - or simply stay on mobile data |
| Connection resets, endless loading | SNI/IP block | ECH, WARP, Psiphon or Tor |
Free methods for Postini, in order
The ladder for google.com, cheapest first. Skip down when a tool does not fit your block layer - the table above shows which layers each rung fixes.
1. Encrypted DNS (DoH) (free)
DoH encrypts the lookup that normally travels in plain text across the network. If name is blocked at the name-resolution layer, switching it on takes about two minutes and changes nothing else about how you browse.
Do this: On a Mac: System Settings > Network, open the active connection, click DNS, and add 1.1.1.1 plus 8.8.8.8. DoH itself is easiest inside the browser (Firefox/Chrome have it under privacy settings).
Fixes name-lookup blocks in minutes, with no app to install.
Full Encrypted DNS (DoH) guide - Cloudflare 1.1.1.1 setup docs
2. ECH-capable browser + DoH (free)
Encrypted Client Hello (ECH) hides the site name inside the TLS handshake itself - the part many censors read to decide "block this connection". Firefox with DoH enabled negotiates ECH automatically when the destination supports it. Zero cost, no tunnel, native speed.
Do this: iOS browsers other than Firefox/Brave use the system network stack; use Firefox or set a DoH profile.
Works only where the destination supports ECH (Cloudflare-fronted sites usually do).
Full ECH-capable browser + DoH guide - Mozilla DoH support article
3. Cloudflare WARP (1.1.1.1 app) (free)
WARP replaces your path to the internet with an encrypted one that ends at Cloudflare. Name blocks, address-level blocks and many keyword filters on the path simply stop applying.
Do this: Cloudflare app on Android: enable the toggle, and if the network kills even that, switch the app's mode between WARP and "DNS only" and retry.
Fast, free, no account - but a few networks block Cloudflare's ranges themselves.
Full Cloudflare WARP (1.1.1.1 app) guide - 1.1.1.1 / WARP download
4. Psiphon (free)
Designed for national censorship, Psiphon hops protocols until one connects. No account, free client for Windows/Android/iOS.
Do this: macOS is not a supported Psiphon platform; pick Tor Browser or WARP from this list.
Good when plain tunnels (WARP, VPNs) are already filtered.
Full Psiphon guide - psiphon.ca - official site
5. Tor Browser (free)
The Tor Browser is the strongest free tool here: connection-level blocks, IP blocks and geo-filters all fail against it. Slower, and some sites challenge Tor visitors - but it always has one more move (bridges).
Do this: On a Mac install from torproject.org; the first launch needs a right-click > Open because it is not from the App Store.
The fallback that still works when every network-level trick is filtered.
Full Tor Browser guide - torproject.org - official download
6. GoodbyeDPI / zapret (DPI bypass) (free)
DPI-bypass tools work below the application layer: they reshape the connection start so the filtering box does not recognize it. No tunnel, no exit server - the site sees your real IP, and speed stays native.
Do this: There is no official GoodbyeDPI for Android; use WARP, Psiphon or Tor instead - they cover the same block types with less fiddling.
Advanced setup; wrong settings can break connectivity entirely.
Full GoodbyeDPI / zapret (DPI bypass) guide - GoodbyeDPI on GitHub
7. Read an archived copy (free)
The Internet Archive keeps snapshots of millions of pages. Reading google.com there sidesteps the block entirely - you are talking to archive.org, not to the blocked site. Limitation: it is a snapshot, not the live site; logins and search do not work.
Do this: Phone browser, https://web.archive.org/web/2026/google.com, done.
Works for reading; never for logging in.
Full Read an archived copy guide - Wayback Machine
The official routes in (apps, mirrors, onion)
App route: Google - installed from the store link on this page, it tends to survive DNS-level blocks.
Related domains on record: google.com.
The archive route needs no tools at all: open the history view for google.com and pick the newest snapshot.
The same fix, per device
DNS fixes live in browser or system settings everywhere; tunnels need an app. Managed devices (school/work) are the special case - browser-level settings usually survive where system settings are locked.
| Device | First try | If that fails |
|---|---|---|
| Windows | DoH in Firefox/Chrome | WARP or Psiphon |
| macOS | DoH | Tor Browser |
| Android | Private DNS | WARP app, then Psiphon |
| iPhone/iPad | DoH profile | Onion Browser or WARP |
| Managed Chromebook/laptop | Secure DNS in the browser | Tor portable or mobile data |
On a managed device
On a school laptop or a work PC, the cheapest fixes are exactly the ones a locked-down system cannot take away:
- Browser-level secure DNS. Firefox and Chrome set DoH inside the browser and ignore the system resolver - that clears name-level filters without admin rights. Steps: DoH setup.
- A portable tunnel. Tor Browser or the Psiphon portable build runs from a folder without installation; both are designed for filtered networks.
- Mobile data or a hotspot. A phone on its own carrier bypasses the school or office network completely - the most reliable route, at the cost of data.
Two warnings. Networks that inspect TLS (a proxy certificate on the device) can make every site throw a certificate warning - check that you are not handing credentials to a lookalike. And using a tunnel may break the network's terms of use; that is a policy question, not a technical one.
If free is not enough: the paid tier
The free ladder fails in two cases: heavy data caps and saturated free servers. Then one of these is the pragmatic answer:
Commercial VPN
A vetted commercial VPN moves you to a server in a country where google.com is reachable and encrypts the whole path, so no local filter sees destination or content. Our how to choose a VPN guide lists what to verify before paying (independent audits, jurisdiction, refund policy) - the box below shows vetted options with facts, not affiliate rankings.
Your own VPN on a rented server
The self-hosted VPN guide covers renting a small server abroad and installing WireGuard - an evening of work for a private exit nobody else uses and censor blocklists do not cover.
Mobile data / travel eSIM
If the block lives on the network itself (school, office, hotel), mobile data or a travel eSIM bypasses it completely - different carrier, different rules. Also the privacy-cleanest route on monitored hardware.
Where it is blocked, and what local law says
China: 50 anomalies failed measurements from probes inside the country. Only government-licensed VPNs are legal for commercial use; unauthorized VPN use by individuals is a legal grey zone that authorities have punished in practice. The GFW (Great Firewall) blocks most major Western platforms at connection level (SNI/IP), and escalates during political events. Check before relying on any tool there.
Safety checklist
One rule above all: a blocked site breeds fake mirrors. Anything that is not the exact address from google.com's own pages is a phishing risk. Bookmark the real one once you are in.
The legal part. Circumvention tools are legal almost everywhere; the exceptions are named per country above. What you do behind them remains your responsibility - information here, not legal advice.
Managed hardware. School and employer networks log connections and may flag circumvention attempts - know the policy before trying anything on such a device. Your own phone on mobile data sits outside that system.
Verdict
For google.com: run the four diagnosis steps, start with WARP or Psiphon, keep Tor as the escalation, and treat every non-official mirror as hostile. That combination covers this block in the vast majority of cases.
FAQ
- Why is Postini blocked? Mostly court-order DNS blocks and national censorship. The [block-type table](#which-block-is-it-match-the-symptom-to-the-fix) maps your symptom to the layer.
- What is the fastest free fix for Postini? For most people: DoH. For connection-level blocks, skip ahead to WARP or Psiphon.
- Does this work on a phone? Phones are actually the easy case: Private DNS (Android) or a DoH profile (iOS) fixes DNS blocks system-wide; the WARP and Psiphon apps handle the deeper layers.
- Does a VPN always unblock Postini? It covers every block type on this page except the operator's own account rules - and, of course, a site that no longer exists.
- Is it legal to unblock Postini? The tools are legal almost everywhere; exceptions appear in the country sections. What you do with access is a separate question. Not legal advice.
- Will encrypted DNS alone unblock Postini? It defeats resolver-level filtering only. The [symptom table](#which-block-is-it-match-the-symptom-to-the-fix) tells you whether yours is that kind.
- Is there an official Postini mirror or app? Yes: the official app, both verified in our data. No other mirror deserves trust.
- What if nothing in this guide works? Run the ladder to the end: Tor with bridges beats most national blocks, a self-hosted VPN beats VPN-list filtering, mobile data beats every network-side filter.
Comments (0)
No comments yet - did a method work for you? Say so below (it helps the next person).