Apple iMessage, FaceTime (works reliably on all networks)
Most email providers (Gmail is blocked, but Outlook, ProtonMail work normally)
Microsoft 365 services (Teams, Word, Excel, OneDrive)
LinkedIn (intermittent restrictions, works most days)
International banking apps and 2FA services (unless they rely on Google)
2. Do I actually need a VPN?
Yes, if:
You use any Google service (Gmail, Maps, Photos) for work or personal use
You need WhatsApp, Instagram, Facebook to stay in touch with people back home
You rely on Western news sources or productivity tools like Slack/Discord
No, if:
You only use iMessage/regular email for communication
You are comfortable using Chinese app alternatives during your trip
You plan to use international roaming or a Hong Kong eSIM that bypasses the firewall
3. Which VPNs actually work in China in 2026?
Only services with obfuscated, China-specific protocols work reliably. The Great Firewall actively blocks standard VPN protocols (OpenVPN, IKEv2):
Provider
Price (monthly, 1yr plan)
Protocol for China
Notes
ExpressVPN
$8.32
Stealth Protocol
Most reliable for beginners, 30-day money-back
NordVPN
$3.99
Obfuscated Servers
Good value, toggle "Obfuscated Servers" in settings
Surfshark
$2.49
NoBorders Mode
Cheapest, unlimited devices
Astrill
$15.90
StealthVPN
Fastest speeds for streaming, popular with expats
Shadowrocket
$2.99 (one-time)
V2Ray/Shadowsocks
Technical: need your own server or Shadowsocks provider
Critical: Free VPNs almost never work in China. They are either blocked immediately, inject malware, or sell your data.
4. How do I set up a VPN BEFORE I fly?
You cannot download most VPN apps from inside China — the App Store (China region) and Google Play block VPN downloads, and VPN provider websites are blocked.
Sign up and pay for your chosen VPN provider(s) on your home network
Download the app to all your devices (phone, laptop, tablet) before you leave
Test the VPN connection to make sure it works
Enable "auto-connect" or "on-demand" in VPN settings
Save the provider's support contact (Telegram/WhatsApp/email) for troubleshooting
If you forgot to set up before arrival: buy a Hong Kong eSIM to access blocked websites to download the VPN, or ask your hotel front desk for help.
5. What if my VPN stops working mid-trip?
The Great Firewall updates its blocking rules regularly. Follow this backup plan:
Have 2–3 different VPNs installed before your trip. If one stops working, switch to another.
Switch servers and protocols: Try Hong Kong, Tokyo, and Seoul servers with the most obfuscated protocol.
Shadowsocks/V2Ray backup: Pre-configure a profile in Shadowrocket before your trip.
Hotel WiFi: Marriott, Hilton, Hyatt properties often have less aggressive blocking (ask for the international WiFi password).
Temporary roaming fallback: Turn on international roaming for 10–15 minutes to download VPN updates.
6. Can I use my phone's data/roaming instead of VPN?
International roaming: Routes traffic through your home country — all blocked services work. $10–$30/day from most US/EU carriers.
Hong Kong eSIM: Best value. Buy before your trip (Airalo HK, Holafly HK, or China Unicom HK) for $15–$25 for 10GB/30 days. Traffic routes through Hong Kong, bypassing the firewall.
Chinese mainland eSIM/SIM: Behind the firewall — you still need a VPN.
Pro tip: Use a dual-SIM setup: home SIM for 2FA and banking alerts, Hong Kong eSIM for data. No VPN needed, no high roaming fees.
7. Is using a VPN illegal?
Technically gray area: China bans the sale of VPN services without government approval, but no law explicitly bans individual personal use.
Tourist usage is fully tolerated: Zero documented cases of foreign tourists being fined, detained, or deported for personal VPN use.
What to avoid: Don't discuss VPN usage publicly with strangers, don't sell/share VPN access with Chinese citizens, don't use VPNs to access or share politically sensitive content.
8. What about hotel/cafe WiFi?
Budget/mid-range hotels: Fully blocked, you need a VPN.
International 5-star chains: Many offer a separate "international WiFi" network. Ask the front desk for the specific password — it's usually different from the regular guest WiFi.
Cafes (Starbucks, Luckin Coffee): All behind the firewall. VPN or Hong Kong eSIM required.
Public WiFi security: Avoid banking on public WiFi. Use mobile data or VPN for sensitive transactions.
9. Can I access my banking app?
Most international banking apps work normally without a VPN, with one exception: banks that rely on Google Services for 2FA (Google Authenticator, Gmail verification codes). Switch to SMS 2FA or a hardware authenticator (YubiKey) before your trip.
Pre-trip test: Log into all your banking apps and test 2FA before you leave to make sure you won't get locked out.
10. China alternatives to blocked apps
Messaging: WeChat (text, voice, video calls, payments — sign up with international number)
Navigation: Amap (高德地图) or Baidu Maps — far more accurate than Google Maps in China
Social media: Xiaohongshu (Little Red Book) — great for travel recommendations and restaurants
Video: Bilibili — Chinese equivalent of YouTube
Payments: Alipay or WeChat Pay — accepted everywhere, link international cards
This guide is maintained by Jing (living in China) and Kai (AI partner). If something changed since we wrote this, let us know: [email protected]
Free to share. No strings attached. We just want you to have a good trip.