You land in Shanghai. You open Google Maps to navigate to your hotel. It does not load. You try WhatsApp to message your family that you landed. It does not connect. You try to search for your hotel on Google. Blocked. Your entire phone, which was perfectly functional two hours ago, is now missing half its apps. This is China’s Great Firewall. It blocks most Western internet services at the network level. The solution is a VPN installed and tested at home before you fly. This guide tells you everything you need.
Key Takeaways
- Install and test your VPN before you board. Cannot be downloaded after landing. Best VPN guide.
- Google, WhatsApp, Instagram, Facebook, YouTube: all blocked. VPN restores them.
- Get a data SIM or eSIM for reliable connectivity everywhere. SIM guide.
- Hotel Wi-Fi is blocked too. VPN still required. Hotel Wi-Fi guide.
- Chinese alternatives exist: Amap (maps), WeChat (messaging), Baidu Translate (translation).
- Alipay requires internet to function. No connection = no payment. Alipay guide.
What the Great Firewall Actually Is
The Great Firewall (GFW) is China’s national internet censorship system, formally called the Golden Shield Project. It has been running since 1998 and filters all internet traffic entering and leaving mainland China. It does not apply to Hong Kong or Macau.
The Firewall works through a combination of IP blocking (known VPN server addresses and foreign platform servers are blacklisted), deep packet inspection (it can detect VPN-style encrypted traffic patterns), and DNS poisoning (requests for blocked domains are intercepted and returned as errors). It is maintained by a dedicated internet police force and updated constantly.
What the Great Firewall Actually Blocks
| Category | Blocked | Chinese Alternative |
| Navigation | Google Maps | Amap (best), Baidu Maps |
| Messaging | WhatsApp, Telegram (intermittent) | WeChat (essential to set up) |
| Social media | Instagram, Facebook, Twitter/X, Snapchat | Weibo, Xiaohongshu (Red) |
| Search | Google Search | Baidu (Chinese), Bing (not blocked) |
| Video | YouTube, Netflix | Youku, iQiyi, Bilibili |
| Gmail | Outlook and Yahoo work without VPN | |
| Maps and travel | Google Travel, Booking (sometimes) | Trip.com, Ctrip |
| News | BBC, NYT, Guardian, CNN | South China Morning Post (not blocked) |
| Cloud storage | Google Drive, Dropbox (intermittent) | Move files to local storage before arrival |
| Android services | Google Play Store, most Google-based apps | Download all needed apps before arrival |
The VPN: Set It Up Before You Fly
The critical rule: your VPN must be installed, paid for, and tested before you board the plane. VPN provider websites are blocked inside China. If you land without a VPN, you cannot access the download page. You are stuck. Do this at home.
What to look for in a China-compatible VPN
- Obfuscation technology. This disguises VPN traffic as regular HTTPS traffic. Essential for China. Not all VPNs have it.
- Dedicated China-optimized servers. Generic VPN servers often fail in China. Look for VPNs with servers specifically tested and maintained for Chinese connections.
- Proven track record in China. Check travel forums and recent reviews from travelers, not the VPN company’s own marketing.
- Kill switch. Automatically disconnects your internet if the VPN drops, preventing accidental exposure.
- No-logs policy. The VPN provider does not retain records of your activity.
The best performing VPNs for China in 2026
Based on consistent user reports from travelers in China: Astrill VPN has the best reliability and is the choice of professionals who need consistent access for work. ExpressVPN has good server availability and is the most widely used by tourists. NordVPN is the most affordable option with acceptable reliability. Full comparison with speed tests: Best VPN for China 2026.
Data: Your Connection Options
A VPN is useless without a working internet connection. You need data access to use it. Three options for data in China: local Chinese SIM, international roaming, or eSIM. Full comparison: China eSIM vs Physical SIM guide.
| Option | Pros | Cons | Cost |
| Local Chinese SIM (bought on arrival) | Cheapest data rates, 5G coverage everywhere | Takes 20-30 min at airport shop, need passport | ¥100 to ¥200 for 30 days unlimited data |
| eSIM (bought before departure) | Instant activation, keeps home number active, data usually bypasses firewall | More expensive, check China coverage per provider | $15 to $50 for 30 days depending on data amount |
| International roaming (home carrier) | Simple, no setup, keep your number | Expensive, often throttled, may not work well with VPN | $5 to $20 per day with most carriers |
Apps to Download Before Departure
Once inside China, you cannot access the Google Play Store without a VPN already running. Download all necessary apps before you board:
- Your VPN app (installed and tested)
- Amap (maps): Map guide
- Alipay (payment): Payment guide
- WeChat (messaging and WeChat Pay)
- DiDi (ride-hailing): DiDi guide
- Baidu Translate (translation): Translation guide
- Trip.com (booking trains and hotels)
- Your airline’s app (for boarding passes)
Hotel Wi-Fi and the VPN
Hotel Wi-Fi in China is subject to the same Great Firewall as mobile data. It does not matter whether you are staying at a Marriott or a local guesthouse. The Wi-Fi is on the Chinese internet. You need your VPN active on hotel Wi-Fi to access Google, WhatsApp, or any blocked service. There is also a separate security concern with hotel Wi-Fi that goes beyond the firewall. Full detail: China Hotel Wi-Fi Safety guide.
If Your VPN Gets Blocked
The Great Firewall periodically tightens its blocking of VPN protocols, especially around sensitive political dates. If your VPN stops working in China: switch to a different VPN protocol within the app settings (try StealthVPN, OpenVPN TCP, or Lightway). Connect to a different server in the app. If nothing works, contact your VPN’s customer support via their in-app chat or a non-Gmail email. Most VPNs with China experience can push a fix quickly.
What Does Not Need a VPN
Not everything in China requires a VPN. The Citizen Lab at University of Toronto maintains research on what is blocked in China. Bing search works without VPN. Outlook and Yahoo email work without VPN. Apple’s App Store and iCloud work without VPN. Spotify works without VPN (though some content may be restricted). Netflix does not work without VPN but even with one, Netflix blocks Chinese IPs. For Netflix access while in China, make sure your VPN connects to a non-Chinese server.
Frequently Asked Questions
For VPN comparison: Best VPN for China 2026. For data SIM options: China eSIM vs SIM guide. For hotel Wi-Fi safety: China Hotel Wi-Fi guide.