Skip to main content
nihaovisit
China Internet Guide 2026: VPNs, eSIMs, WiFi & Staying Connected
Guide · Updated for 2026

China Internet Guide 2026: VPNs, eSIMs, WiFi & Staying Connected

To get online in China you need a VPN tested before arrival, an eSIM for data, and key Chinese apps installed in advance — the Great Firewall blocks Google, WhatsApp, and most Western services. This hub covers every connectivity choice for foreigners in 2026, from the VPNs that actually hold a connection to the eSIMs that route around the Firewall through Hong Kong, the Chinese apps you cannot arrive without, and what to do when your VPN drops mid-trip.

5 min read·By NihaoVisit Editorial Team·Updated
§ 01 · The key numbers

Memorize these before anything else.

Yes — to access Google, WhatsApp, Gmail, Instagram, YouTube, X
VPN needed?
Astrill ($15-30/mo), LetsVPN ($5-10/mo)
Best VPNs (2026)
85-95% — rotate between 2 VPNs for reliability
VPN uptime in China
Airalo, Holafly, Nomad — $5-30 for 7-30 days
Best eSIMs (2026)
Get the checklist →Jump to FAQ

Quick Answer

How do foreigners get internet access in China in 2026?

You need three layers: (1) a VPN installed and tested before arrival to access blocked Western services like Google, WhatsApp, and Instagram; (2) an eSIM or local SIM for mobile data so you are not dependent on WiFi; and (3) essential China apps (Alipay, DiDi, Trip.com) installed before departure since the Google Play Store is blocked. Astrill VPN and LetsVPN are the most reliable options in 2026 with 85-95% uptime. Install and test everything on your home WiFi before flying.

Source: South China Morning Post

VPN needed?Yes — to access Google, WhatsApp, Gmail, Instagram, YouTube, X
Best VPNs (2026)Astrill ($15-30/mo), LetsVPN ($5-10/mo)
VPN uptime in China85-95% — rotate between 2 VPNs for reliability
Best eSIMs (2026)Airalo, Holafly, Nomad — $5-30 for 7-30 days
eSIM data speed4G/5G — routes through Hong Kong for unfiltered access
Hotel/residence WiFiRequires VPN for Western sites; unblocked for Chinese sites
Google Play / App StoreBlocked — install all apps before arrival
Local SIM providersChina Mobile / Unicom / Telecom — RMB 50–100, passport registration required
Pocket WiFi rentalRMB 30–60/day; pickup at PVG, PEK, CAN arrivals desks
Public WiFi loginOften needs an SMS code — a Chinese number or eSIM helps
Daily data estimate~1–3 GB/day with maps, translate, photos, messaging
VPN speed in China5–20 Mbps on Astrill; slower 20:00–23:00 peak
China domain suffix.cn — sites using only this suffix often work without VPN
VPN window: TiananmenJune 1-5 uptime drops to 50-70% across all providers
VPN window: NPC & Oct 1Early March + Oct 1-7 expect 60-80% uptime, slower speeds
eSIM activation timeOn first network attach after landing, ~30 seconds
Astrill refund window7 days money-back — test within first 48 hours
Last updated2026-06-17
Last updated

What internet services are blocked in China and why do I need a VPN?

Which VPN actually works in China in 2026?

Astrill VPN and LetsVPN are the consensus frontrunners for reliability inside China as of 2026. Astrill ($15-30/month) offers the most consistent uptime (90-95%), a dedicated China-optimized protocol (StealthVPN, which disguises VPN traffic as ordinary HTTPS to pass the Firewall), and works on Windows, Mac, iOS, and Android. LetsVPN ($5-10/month) is lighter, cheaper, and easier to set up but has slightly lower uptime (85-90%) on some networks. Most experienced travelers install both and rotate between them — when one VPN slows down or disconnects, the other usually works. NordVPN, ExpressVPN, and Surfshark work inconsistently inside China and are not recommended as a primary VPN. One timing caveat: during politically sensitive windows — notably the National People’s Congress in early March and the October National Day week — the Firewall tightens and even Astrill can drop to 50-70% uptime for a few days, so plan important video calls outside those windows. Install, configure, and test your VPN on your home WiFi before departure — downloading or configuring a VPN inside China without an existing VPN connection is difficult because the providers’ own websites and payment pages are themselves blocked. Server choice also matters: Hong Kong and Tokyo endpoints are usually fastest from eastern China (Shanghai, Hangzhou, Beijing), Singapore helps from southern cities (Guangzhou, Shenzhen), and Los Angeles is the most reliable fallback for voice calls when nearby servers are congested.

Should I get an eSIM, a local SIM, or rely on WiFi in China?

An eSIM is the best option for most short-term travelers (1-4 weeks). Services like Airalo, Holafly, and Nomad sell China data plans that activate on arrival and route traffic through Hong Kong, providing unfiltered internet that does not require a VPN for Western apps — a significant convenience advantage over local SIMs and WiFi. eSIMs cost $5-30 for 7-30 day plans with 1-10 GB of data, and most deliver 4G speeds of 10-50 Mbps with occasional 5G in tier-1 cities. A local Chinese SIM (China Mobile, China Unicom, China Telecom) is cheaper for longer stays — RMB 50-100 for a starter pack with a few GB — but traffic is filtered so you still need a VPN, and you must register it in person at a branded store with your passport (not every kiosk can register foreigners), which takes 20-40 minutes. Hotel and cafe WiFi requires a VPN for blocked services; it is fine for Chinese apps but not a reliable primary internet source, and speeds often lag behind mobile data during peak hours. For the most robust setup, combine an eSIM for data with a VPN for WiFi-based access to Western services on your laptop, and keep your home SIM on a cheap roaming day-pass as a third fallback.

What apps should I install before traveling to China?

Install these apps on your home WiFi before departure since the Google Play Store and many app download sites are blocked inside China. Essential apps: Alipay (payment — set up Tour Card), WeChat (messaging + backup payment), a VPN (Astrill or LetsVPN), an eSIM app (Airalo or Holafly), DiDi (ride-hailing via the Alipay mini-program), Trip.com (hotel and HSR booking in English), Pleco or Baidu Translate (offline Chinese dictionary), Apple Maps or Baidu Maps (Google Maps is blocked and offset), and a QR scanner (built into Alipay and WeChat). Optional but useful: Meituan (food delivery, Chinese-only), Dianping (restaurant reviews, Chinese-only), and China Railway 12306 (the official HSR app now has an English version — search "China Railway 12306", not the Chinese-only "12306"). Download everything over home WiFi since most apps are 200-500 MB and the stores are blocked or region-locked after arrival. Complete account registration and run one test transaction in each payment app before your flight.

How do I install and test my VPN before I land in China?

Buy your VPN subscription and install the app on every device you will bring at least 48 hours before departure, while you are still on home WiFi. The provider’s own website and payment page are blocked inside China, so subscribing after arrival is a dead end. Follow the five steps below to confirm a working tunnel before you fly.

How to

  1. Subscribe on the provider website while still at home

    Complete payment for Astrill or LetsVPN on the provider’s site over home WiFi. Save the order confirmation email and your account credentials in a password manager plus an offline screenshot. The same site is blocked once you cross the border, so this step cannot be redone in China without an existing VPN.

  2. Download the apps from your home App Store or Google Play

    Install the desktop client from the provider’s site and the mobile app from your home-country App Store or Google Play. Google Play is fully blocked in China, and the Chinese iOS App Store shows region-locked app versions, so both stores behave differently after arrival. Install on your phone, tablet, and laptop now.

  3. Log in on every device and enable the China protocol

    Sign in on each device. In Astrill, open Settings and set the protocol to StealthVPN, which disguises VPN traffic as ordinary HTTPS to pass the Firewall. In LetsVPN, leave the mode on Auto. Pick a Hong Kong, Japan, or Singapore server as your default — these give the best balance of speed and reliability from mainland China.

  4. Run a speed test and load blocked sites

    Connect to the VPN and run fast.com or speedtest.net — expect 5-20 Mbps on a good Astrill connection. Then load gmail.com, open a WhatsApp Web session, and start a one-minute YouTube video to confirm the tunnel carries real traffic. If speeds are under 2 Mbps, switch server regions and retest.

  5. Save the manual server IP list offline

    When the automatic server list fails to refresh inside China, you type a manual server IP directly into the app to force a connection. Astrill and LetsVPN both publish these IPs in the app or a support page. Screenshot the list and store it in your photos and a cloud drive you can reach without a VPN. If anything fails at home, contact support by chat before you fly.

How do I log in to hotel, airport, and cafe WiFi in China?

Chinese public WiFi almost always requires authentication, and the login flow trips up foreigners who expect a simple password prompt. At hotels, the front desk gives you a WiFi name and password, but on first connect a captive portal usually opens asking for your room number and surname, or a phone number to receive an SMS code. If the portal demands a Chinese mobile number and your foreign number cannot receive the SMS, ask the front desk to enter their staff number or to issue a guest login — most large hotels have a workaround. At airports (PVG, PEK, CAN, and others), select the airport free WiFi network and open a browser; the portal offers a foreign-passport path where you scan your passport and receive an access code by email or SMS. Starbucks, Luckin, and mall cafes usually require you to connect through the WeChat or Alipay mini-program for that venue — open WeChat, scan the table QR, and the WiFi credential appears inside the mini-program. Whatever the method, your traffic on these networks is filtered by the Great Firewall, so connect your VPN immediately after the portal grants access. Never log into banking or email on public Chinese WiFi without an active VPN connection.

What is the difference between a travel eSIM, a local SIM, and pocket WiFi?

Three mobile-data options exist, each with a clear trade-off. A travel eSIM (Airalo, Holafly, Nomad) installs before you fly, activates on landing, and routes through Hong Kong — so Google, WhatsApp, and Instagram work with no VPN. It costs $5-30 for 1-10 GB over 7-30 days, tops up instantly in-app, and never needs a passport. The catch: it is data-only, so you cannot receive Chinese SMS verification codes, which some apps and WiFi portals require. A local SIM (China Mobile, China Unicom, China Telecom) gives you a real +86 number, cheaper per-GB rates (RMB 30 for 5-10 GB on a tourist plan), and 5G speeds in cities — but traffic is filtered, so you still need a VPN, and you must register it in person at a branded store with your passport, which takes 20-40 minutes. Pocket WiFi (a portable hotspot rented at airport arrivals or via Trip.com) costs RMB 30-60 per day, supports 5-10 devices, and also routes through Hong Kong on the better plans. It suits families or groups who want one bill, but the battery lasts 6-8 hours and a dead unit leaves everyone offline. Solo travelers should pick an eSIM; families of three or more often save with pocket WiFi; stays over a month justify a local SIM.

How do I set up Alipay, WeChat, and DiDi before arrival when the app stores are blocked?

Install and register all three on your home network before you fly — redoing this inside China is painful because Google Play is blocked and the Chinese iOS App Store shows region-locked versions. Alipay and WeChat both accept foreign passports and international Visa or Mastercard cards, and DiDi rides inside an Alipay mini-program so you need no separate app. Work through the steps below; if any step fails at home, fix it with your bank or the app’s support chat before landing.

How to

  1. Download Alipay and WeChat from your home App Store or Google Play

    Get both apps before departure. Google Play is blocked inside mainland China, and the Chinese iOS App Store shows different region-locked versions without international features. Each app is roughly 300-400 MB, so download over home WiFi. Open each app and confirm English appears as a language option on the login screen — that confirms you have the international build.

  2. Register Alipay with your international phone number

    Tap Sign Up, enter your home-country mobile number, and enter the SMS code. Set a 6-digit payment password and memorize it — you type it for nearly every transaction. Write it down and store it separately from your phone; resetting it while traveling can take days. Do not use your birth year or repeating digits.

  3. Verify your passport and link a foreign card in Alipay

    Under Me > Profile, complete real-name verification by photographing both pages of your passport — approval usually takes minutes to a few hours. Then go to Me > Bank Cards > Add Card, enter your Visa or Mastercard, and confirm the small test charge. The international card path activates the Tour Card for higher spending limits and an English interface.

  4. Enable WeChat Pay and link the same card

    Open WeChat, tap Me > Services > Wallet, and follow the prompts to add your foreign card. WeChat Pay verification for foreign cards can take 24-48 hours, so start it at least two days before departure. Send a contact RMB 1 on WeChat to confirm outbound payments work.

  5. Open DiDi inside Alipay and confirm it loads

    DiDi has an English interface inside the Alipay mini-program, so you do not need a separate DiDi app. In Alipay, search "DiDi", allow the mini-program to launch, and confirm your Alipay payment method is pre-selected. Enter your hotel address in English to verify geocoding before you need it at the airport.

What should I do the moment I land at PVG, PEK, or CAN to get online?

A five-minute arrival sequence gets you connected before you reach the taxi queue. The goal is to confirm three things before you leave the terminal: mobile data is attached, the VPN tunnel is up, and your key apps load. Follow the steps below in order.

How to

  1. Toggle airplane mode to force a network attach

    After the seatbelt sign turns off, switch your phone to airplane mode for five seconds, then back on. This forces the device to register with a local carrier (usually China Mobile or China Unicom) within 30 seconds. If you use an eSIM, confirm the eSIM profile is selected as the active data line.

  2. Connect your VPN before opening anything else

    Open Astrill or LetsVPN and connect to a Hong Kong or Japan server using StealthVPN. Wait for the connected indicator. Do not open WhatsApp, Gmail, or Google until the VPN shows connected, or the blocked request can hang the app.

  3. Confirm maps load your current location

    Open Apple Maps or Baidu Maps and check that your location pins correctly at the airport. If Google Maps is your habit, remember it is offset by several hundred meters in China and unreliable for turn-by-turn — switch to Apple Maps for navigation.

  4. Verify Alipay and the DiDi mini-program

    Open Alipay, confirm your Tour Card balance displays, and search "DiDi" to confirm the ride-hailing mini-program loads with your payment linked. This is how you will call a car from the arrivals curb.

  5. Send a test message on WhatsApp

    Open WhatsApp and send a short text to a contact. If it delivers, your VPN tunnel is carrying traffic end to end. If the VPN will not connect at the airport, switch to eSIM mobile data and retry, or wait until you reach your hotel — airport WiFi portals sometimes interfere with VPN handshakes.

How do I keep data costs down — a sample 2-week connectivity budget?

A realistic two-week trip with moderate use (maps, translate, messaging, photos, some streaming) runs about 15-25 GB of mobile data. Here is a sample 2026 budget. eSIM: Airalo’s "Asialink" or a China-specific plan at roughly $20-27 for 10 GB over 15 days covers most travelers; heavy streamers should buy the 20 GB plan near $40. VPN: Astrill at about $30 for one month (cancel after the trip) or LetsVPN at $10-12 for a month — pick one, add the second only if the first underperforms in your first 48 hours. Local SIM backup: a China Unicom tourist SIM at RMB 50 gives a Chinese number for SMS portals and a few GB of filtered data as a fallback. Pocket WiFi alternative for a family of four: about RMB 400-500 for two weeks, shared across devices. Total for a solo traveler on the eSIM-plus-single-VPN path: roughly $50-60 for two weeks of solid connectivity. Three cost traps to avoid: home-carrier roaming day-passes at $10-15/day add up to $140-210 over two weeks; topping up an eSIM mid-trip at airport rates is pricier than buying enough up front; and streaming Netflix over VPN on mobile data burns about 1 GB per hour, so download episodes on hotel WiFi instead. Hotel WiFi is free, so never pay separately for in-room internet. One refund tip: Astrill and LetsVPN both offer 7-30 day money-back windows — test the connection in your first 48 hours and claim a refund if uptime is poor, since you cannot get your money back once the window closes. Annual plans look cheaper per month but are a trap for one-off trips; buy a single month and cancel before it renews.

Frequently asked questions

Can I use WhatsApp in China without a VPN?
No — WhatsApp is blocked by the Great Firewall and will not send or receive messages without a VPN connection. Install and connect to your VPN before opening WhatsApp. Once connected, WhatsApp functions normally. Voice and video calls over WhatsApp also require a VPN.
Is using a VPN legal in China for foreigners?
Using a VPN for personal internet access as a foreign tourist is a legal gray area — it is widely tolerated and millions of foreign visitors and expats use VPNs daily without issue. The Chinese government has not prosecuted individual foreign tourists for personal VPN use. Use a reputable commercial VPN, do not use it for any illegal activity, and you will not encounter problems.
Does Google Maps work in China?
Google Maps loads with a VPN but its China map data is offset by several hundred meters due to Chinese geolocation regulations, making it unreliable for navigation. Use Apple Maps (which uses corrected China map data and works without a VPN) or Baidu Maps (Chinese-only but highly accurate). Download offline maps before arrival as a backup.
Should I buy a VPN before or after arriving in China?
Before — always. VPN websites are blocked inside China, so downloading, purchasing, or configuring a VPN after arrival is extremely difficult without an existing VPN connection. Buy your subscription, download the app, log in, and test the connection on your home WiFi at least 24 hours before your flight.
Is an eSIM enough to access Google and WhatsApp without a VPN?
Yes — most travel eSIMs (Airalo, Holafly, Nomad) route your data through Hong Kong servers, which bypasses the Great Firewall entirely. This means Western apps work on eSIM data without a VPN. However, eSIM data is limited, and when you switch to hotel WiFi you will need a VPN again. The most robust setup combines an eSIM for on-the-go data with a VPN for WiFi access.
Can I use my home country SIM card in China with roaming?
Yes — international roaming on your home SIM routes data through your home country’s servers, so Western apps work without a VPN. This is the easiest but most expensive option. Check your carrier’s roaming rates (typically $5-15/day). For trips longer than 3-4 days, an eSIM is significantly cheaper.
What happens if my VPN stops working mid-trip?
Switch to your backup VPN (this is why installing two is recommended), try a different server location within the same VPN app, or switch to eSIM data if you have it. VPN disconnections are common and usually resolve within minutes. If nothing works, Chinese apps (WeChat, Alipay, Apple Maps) continue functioning without a VPN so you are never completely cut off.
Will my VPN work on hotel WiFi that blocks VPN protocols?
Some hotel and corporate networks actively block common VPN ports. If your VPN will not connect on hotel WiFi, switch to mobile data (eSIM or local SIM), switch the VPN protocol to StealthVPN or an obfuscated mode, or try a different server region. As a last resort, tether your laptop to your phone’s eSIM data, which routes through Hong Kong and needs no VPN for Western apps. Business hotels in Shanghai and Beijing are usually VPN-friendly; smaller inland hotels are more likely to interfere.
Can I download apps from the App Store inside China without a VPN?
The Apple iOS App Store works in China if your Apple ID region is set to China, but that region shows Chinese-only versions of many apps without international features. If your Apple ID is set to your home country, the App Store loads slowly but usually works without a VPN. Google Play is fully blocked — Android users must install all apps before arrival or sideload APKs through a VPN. To avoid the whole problem, set up every app at home.
Does FaceTime, iMessage, or Apple Maps work in China without a VPN?
Apple Maps works without a VPN and uses corrected China map data, making it the best turn-by-turn option for foreigners. iMessage sends and receives normally without a VPN. FaceTime audio and video are blocked on mainland networks and require a VPN to connect. If you rely on Apple’s ecosystem, Maps and iMessage cover navigation and messaging, but you still need a VPN for FaceTime calls and for any non-Apple Western app.
How much mobile data do I actually need per day in China?
A typical traveler uses 1-3 GB per day: maps and navigation account for 200-400 MB, Pleco and Baidu Translate another 100-200 MB, photos and cloud backup 500 MB-1.5 GB, and messaging 100-300 MB. Streaming is the big variable — one hour of Netflix over VPN burns about 1 GB, and VPN overhead adds 10-20% on top. For a two-week trip, 15-25 GB total is a safe target. Buy more than you think you need; mid-trip top-ups cost more per GB.
Is it safe to log into my bank or email over Chinese hotel WiFi with a VPN?
With a reputable paid VPN (Astrill, LetsVPN) actively connected, logging into email is acceptably safe — your traffic is encrypted through the VPN tunnel, and TLS on top adds another layer. For banking, prefer your bank’s mobile app over the web, enable 2-factor authentication, and avoid logging in on networks where the VPN keeps dropping. If your VPN is unstable, switch to eSIM data before touching finances. Never enter banking credentials on WiFi with no VPN at all.
Can I use a free VPN in China?
No reliable free VPN works inside China as of 2026. Free services almost never maintain the obfuscation needed to bypass the Great Firewall, and the few that connect are slow (under 1 Mbps), unstable, and often log or sell your traffic. Some free VPN apps from unknown developers are outright malware. Pay for Astrill or LetsVPN — the $10-30 per month is the cheapest insurance against a week of being offline. If budget is tight, LetsVPN at roughly $10 is the floor; do not go below it.
Will my company or university VPN work in China?
Corporate and university VPNs that use standard protocols like IPSec, L2TP, or OpenVPN are usually blocked or throttled by the Great Firewall, because the Firewall fingerprints those protocols. If you need to reach a work network, install a consumer VPN (Astrill, LetsVPN) first, connect it, then launch your corporate VPN through the encrypted tunnel — this double-VPN setup works for most knowledge workers but slows the connection. Test it with your IT team before departure, since some corporate clients refuse to connect when they detect a consumer VPN underneath. For urgent access, tethering to a Hong Kong-routed eSIM also works because the traffic never touches the filtered mainland network.
Can I use AirDrop, Bluetooth, or my smartwatch in China?
AirDrop works between Apple devices in China, but Chinese iOS builds restrict AirDrop from "everyone" to contacts-only after 10 minutes, and the feature is occasionally disabled during sensitive periods. Bluetooth works normally for headphones, keyboards, and fitness trackers. An Apple Watch with cellular will not connect to a Chinese carrier unless you have a matching local plan, so treat it as GPS-only and tether it to your phone. Smart home and fitness devices pair and sync over Bluetooth without issue. None of these need a VPN, but any cloud sync (iCloud photos, Fitbit cloud) routes through blocked endpoints and needs a VPN or a Hong Kong eSIM to complete.
NihaoVisit Editorial Team headshot

Written by

NihaoVisit Editorial Team

In-house editorial team (not individual bylined experts) · Primary-source research: official government portals + on-site verification · Quarterly content audits for visa, transport, and price accuracy