eSIM, VPN and the Great Firewall: how to stay online in China (2026)
Updated Aug 26, 2026
On any Chinese network — a local SIM, hotel Wi-Fi, a café's router — Google, Gmail, Google Maps, YouTube, WhatsApp, Instagram, Facebook and X are blocked. That's the Great Firewall, and it hasn't loosened in 2026. The clean way around it for a 10-day trip isn't a VPN: it's a roaming eSIM from a foreign provider, which routes your data through gateways outside mainland China so your phone behaves as if it were abroad. Install it before you fly, keep a VPN as the backup, and treat hotel Wi-Fi as local-only. Here's the whole picture, checked 26 August 2026.
What's blocked, what isn't
- Blocked on Chinese connections: Google Search, Gmail, Google Maps, Drive and Photos, YouTube, WhatsApp, Instagram, Facebook and Messenger, X, and most of the Western news and streaming you'd expect.
- Works fine: WeChat, Alipay, Apple Maps (with Chinese map data), Didi, Trip.com, iMessage and FaceTime on most connections, Apple's App Store, and Chinese platforms like Bilibili and Weibo.
- Somewhere in between: Apple's iCloud services work, Microsoft's Outlook and Teams mostly work, and Signal and Telegram generally don't. If your job needs a specific tool, test it on the eSIM on day one rather than assuming.
Option 1: a roaming eSIM — the easy answer
Travel eSIMs sold for China by foreign providers (Airalo, Holafly, Nomad, the plans on Trip.com and others) work like international roaming: your data is handed off to a network outside the mainland, and the firewall sees a foreigner roaming, not a domestic user. Airalo's own help page says it plainly — a VPN is not required on its China eSIM because “your traffic is routed through secure gateways outside mainland China” — with one caveat worth repeating: it only applies while you're on the eSIM's data, not on hotel Wi-Fi. Other providers make the same promise, but it depends on the plan, not on the word eSIM, so read the plan page before you buy.
- Buy and install it at home, while the provider's website and app store still load. Activate it when you land.
- Your phone needs to be carrier-unlocked and eSIM-capable (most phones from the last five years are).
- Keep your home SIM active for two-factor SMS — bank logins, Alipay verification — and let the eSIM carry data.
- Prices vary by data allowance and change constantly; a 10-day plan with enough data for maps, translation and the group chat is a small line on the trip budget.
Option 2: a Chinese SIM — cheap data, no bypass
China Unicom and China Mobile sell tourist SIMs at the international-arrivals counters of the big airports (Beijing, Shanghai, Xi'an included). You'll need your passport, real-name registration and sometimes a face scan; budget 5–15 minutes. It gets you cheap local data and a Chinese number — useful for Didi and deliveries — but it is a domestic connection, so the firewall applies in full. Pair it with a VPN, or use it alongside a roaming eSIM.
Option 3: a VPN — the backup, not the plan
VPN use by tourists sits in a legal grey area: China restricts unlicensed VPN services and periodically blocks the providers themselves, and enforcement has been aimed at sellers and domestic providers rather than visitors reading Gmail. The practical problem is reliability, not police. 2026 test roundups consistently put ExpressVPN and Astrill at the top for connecting from inside China; Mullvad's results are mixed; LetsVPN, popular a year ago, is reported to have ended mainland service in 2026 and shouldn't be your only option. Whatever you pick: install it, log in and test it before you enter China — provider websites and app-store listings are among the first things blocked.
Hotel Wi-Fi
Hotel Wi-Fi is a Chinese network with a nicer login page. It's fine for WeChat, Alipay and downloading the next day's maps; it won't reach Instagram unless your VPN is on. Roaming eSIMs don't help here either — the bypass only works on the eSIM's own data. If you need to upload a day's photos, do it on cellular.
The setup we recommend
- 01Before you fly: install a roaming eSIM for China, plus one VPN you've tested at home. Two providers is cheap insurance.
- 02Download offline maps for Beijing, Xi'an and Shanghai and an offline Chinese pack for your translation app — they keep working when nothing else does.
- 03Set up WeChat and Alipay (see the payments guide) while you still have unfiltered internet; both need SMS verification.
- 04Tell people at home that WhatsApp may be patchy and WeChat or iMessage is the reliable channel. On our trips the crew chat is set up before departure precisely so nobody is hunting for a connection on landing day.
Read the sources
Related reading
The group chat opens weeks before departure and it's where the eSIM questions get answered — by people who've just done it.
