china: using the open internet on a month-long trip

China blocks most of the services Americans use every day — Google, Gmail, WhatsApp, Instagram, YouTube, ChatGPT — at the national network border, a system known as the Great Firewall. This page is a practical plan for a mainland trip: what to install before you fly, which options actually work in 2026, how to pay for things once you land, and how much confidence each claim deserves.

Nothing here is guaranteed. The firewall changes constantly, and a setup that works for one traveler can fail for another in a different city or a different week. The fix is redundancy: two independent ways online, both installed before departure.

the short version

Do these three things before boarding the plane, because VPN websites and many app listings are unreachable once you land:

1. Install a travel eSIM on each phone (Nomad, Airalo, or Holafly; roughly $12–40 for a month). Travel eSIMs route your data out through the provider's home carrier, so blocked services simply work on cellular data. No VPN needed.
2. Install one VPN app as a Wi-Fi backup. LetsVPN ($6–9/month) is the most-recommended pick in traveler communities right now; Astrill ($30/month, or $15/month annually) is the expensive long-time expat standard. Either way, buy and install it before arrival.
3. Plan on two independent paths: eSIM data as the primary connection, the VPN on hotel and café Wi-Fi as the backup. Neither works every day, but they fail differently.

Three more pre-flight items: make sure iMessage and FaceTime are on (they work natively in China), download offline maps, and set up both Alipay and WeChat Pay with a foreign card — the passport verification can take days, so do it at home, not at the airport. Cards alone are not enough to pay for daily life there.

what is blocked and what is not

Blocking status is stable enough to plan around, but not frozen. GreatFire (en.greatfire.org) tests domains live; community reports and vendor guides corroborate this list as of September 2026.

option 1: a travel eSIM, the main answer

This is the recommendation most traveler communities converge on for a short or medium trip, and it is the option to hand to non-technical family members.

Why it works. A travel eSIM connects to a mainland carrier's towers (usually China Mobile or China Unicom) but your traffic roams home through the eSIM provider's own carrier infrastructure, typically in Hong Kong or Singapore, before reaching the open internet. The Great Firewall inspects domestic exits, not that roaming path. Airalo describes this routing on its China help page, Nomad's China guide makes the same claim, and traveler reports consistently match: cellular data on a travel eSIM reaches Google, WhatsApp, and Instagram with no VPN at all.

What to buy (approximate prices, checked September 16, 2026):

Caveats that matter:

• Data only. These plans do not include a mainland Chinese phone number. It rarely matters — calls go over FaceTime/WhatsApp/iMessage through the data connection, and WeChat and Alipay accept foreign numbers.
• Your phone needs eSIM. US-model iPhones are eSIM-only, so they are fine. An iPhone purchased in mainland China has no eSIM slot at all — those phones need a physical Hong Kong SIM instead.
• It is a censorship bypass, not a privacy tool. A USENIX Security 2025 study of 25 travel eSIM providers found several route traffic through opaque third parties, including Chinese infrastructure — one Holafly route went through China Mobile International, per the study's press coverage. For ordinary travel use this is fine; for sensitive work, add the VPN on top of the eSIM connection.
• Install and activate it at home. Activation needs open internet access, and the install flow is a QR code plus a settings toggle.
• Keep your home SIM active for receiving SMS (bank 2FA texts still arrive on most US carriers abroad for free), but set cellular data to the eSIM.

Confidence: high that international-roaming egress bypasses filtering — the mechanism is documented by vendors, matches the firewall's known architecture, and is corroborated by recent community reports. Individual provider quality varies, but the mechanism is the same for all of them.

option 2: one VPN for Wi-Fi

The eSIM only covers cellular data. Hotel, café, and airport Wi-Fi is fully filtered, so the VPN is your second path — install it before arrival, because VPN sites and many app-store listings are unreachable inside China.

What traveler communities are actually using in late 2026, per an August 2025 Hacker News thread (732 comments), r/chinalife, and r/dumbclub reports. Treat each row as dated anecdote, not a guarantee:

The honest reality: every VPN on this list has both "worked all month" and "never connected" reports, sometimes in the same week. Blocking varies by city, ISP, hotel network, and the political calendar — expect everything to degrade around sensitive dates like early June. That is exactly why the eSIM stays primary: it fails on different days than the VPN does.

will my periscope home VPN work?

A note on Ben's own setup, answered honestly: probably not on its own — keep it installed, but do not count on it.

Periscope is a consumer home VPN: it runs on an Apple TV, Mac, or Windows machine at home and tunnels a traveler's traffic out through the residential connection. Underneath it is plain WireGuard. The Great Firewall recognizes the WireGuard handshake and blocks or degrades it, and Periscope does not advertise an obfuscation layer. Over hotel Wi-Fi, expect it to fail most of the time.

The nuance: over the travel eSIM's data connection, Periscope should work fine. The eSIM's roaming path already exits past the firewall, so the WireGuard tunnel is an ordinary connection at that point. The same is true for any VPN layered on eSIM data — including Tailscale exit nodes, which solve the same home-IP problem and no more of the firewall problem.

So the right framing for the trip: eSIM carries the bypass, Periscope carries the home IP. The full comparison is at periscope vs tailscale.

option 3: self-hosted, for the technical

For people who already run servers, the community's current answers:

• Xray with VLESS + Reality on a small VPS is the present gold standard for censorship resistance. It mimics ordinary TLS traffic and is the hardest mainstream option for the firewall to fingerprint. Cost is a few dollars a month plus an evening of setup; the communities maintaining it are r/dumbclub and the XTLS ecosystem.
• AmneziaWG is an obfuscated WireGuard variant with a friendlier app experience — promising, but younger.
• Shadowsocks and Outline on a big cloud provider are mostly behind us; they are detected reliably enough that they should not be the only plan.

Self-hosting gets you an IP the firewall has not catalogued, which is also its fragility: one block and you are provisioning a new server mid-trip. Treat it as a third path, not the only one.

paying for things: alipay and wechat pay

China's economy runs on QR codes. A foreign Visa or Mastercard swipes at almost nothing outside international hotels and the airport — and Apple Pay in China is UnionPay-only, so your US cards in the wallet are dead weight there. The fix is the two super-apps, and the setup is the part to do at home.

Alipay. Install it before you fly, then do real-name verification first — it is mandatory now: a passport photo upload that can clear in minutes but sometimes sits in manual review for up to 72 hours. Only then bind your card: Visa, Mastercard, Amex, JCB, Discover, Diners Club, or international UnionPay. The fee structure (checked September 16, 2026): transactions of ¥200 (about $28) or less are free; above ¥200, Alipay adds a 3% international service fee on the full amount — an international UnionPay card is exempt. Verified accounts can move $5,000 per transaction, $50,000 per year. Most daily spending — metro, taxis, casual meals — stays under ¥200 and pays no fee at all.

WeChat Pay lives inside WeChat, which you want anyway for talking to people and businesses there. Registration with your US number works, but new accounts sometimes demand that an existing WeChat user vouch for you — a real friction that is much easier to solve at home than at a border crossing. Then Me → Services → Wallet, verify your passport, and bind the same foreign cards; verified users get the same $5,000/$50,000 limits.

Do both. Street vendors and small restaurants frequently display only one QR. Link two different cards (one Visa, one Mastercard) and tell both banks you are traveling — a fraud-blocked card is the most common payment failure, not the app itself.

The remaining money realities:

• Cash is legal tender but fading. Bank of China and ICBC ATMs accept foreign cards; withdraw a few hundred RMB as backup and expect vendors to be short on change.
• Didi is the Uber equivalent. Install "DiDi Rider" — the international app with an English interface that takes foreign cards and your US number — or use the Didi mini-program inside Alipay, which needs no Chinese number at all. No tipping, anywhere.
• The metro needs no card. Each city's subway accepts Alipay or WeChat transport mini-program QR codes at the gate.
• Tax refunds: purchases over ¥500 at "Tax Free" stores qualify for a departure refund — keep receipts and get the forms stamped at customs on the way out.

the logistics that trip up foreigners

The non-connectivity gotchas, in rough order of how much pain they cause:

Your passport is your ID for everything — trains, hotels, attraction gates, SIM cards. Carry it, not a copy.

Trains. The official 12306 app and site have an English mode: register with your passport before the trip, because identity verification can take days. Tickets open exactly 15 days ahead; your passport is the ticket — scan it at the station gates, or use the staffed lane when the scanner does not read it. Foreign Visa/Mastercard/JCB/Diners work but decline often enough that Trip.com — same face fares, cleaner English checkout — is the standard fallback.

Hotels. Since May 2024 hotels officially cannot refuse foreigners for lacking "foreign-related qualifications" — but a May 2025 ABC investigation found small and budget properties still do. Book through Trip.com and filter for properties that accept foreigners, or confirm before you arrive. The hotel registers you with police automatically at check-in. If you sleep anywhere that is not a hotel — a friend's place, a private apartment — you must register yourself at the local police station within 24 hours (72 in rural areas). That is a legal obligation, not a formality.

Attractions. Headline sights require advance real-name booking, and the Forbidden City is the strictest: no same-day tickets, slots release at 20:00 Beijing time exactly 7 days out and vanish in minutes on peak dates, entry scans the exact passport you booked with, and it is closed Mondays. Klook is the English-language fallback when the official channel fights you. Many other museums and popular sites run the same advance-reservation pattern — book ahead wherever the option exists.

Maps. Google Maps fails twice in China: blocked without a workaround and wrong with one. China's licensed maps use the GCJ-02 coordinate system, so Google's street layer sits 100–700 meters away from your real GPS position — a VPN fixes access but not the offset, and transit data is missing regardless. Apple Maps switches to licensed AutoNavi data inside China and just works in English; Amap's app has an English mode and the best building-level detail. Either way, screenshot your hotel name and address in Chinese characters — taxi drivers and paper maps run on Chinese.

Power banks. Since June 28, 2025, China bans power banks without a visible CCC (3C) certification mark on domestic flights — confiscated at security or denied boarding. Most US-bought power banks, including Anker's, lack the mark. Leave it, buy a certified one locally, or plan around trains, which still allow them up to 100Wh.

Medications. China treats some ordinary US prescriptions as controlled substances with zero tourist slack. Amphetamine ADHD medication (Adderall, Vyvanse, Dexedrine) is banned outright — no personal-use exemption, regardless of your prescription. Pseudoephedrine cold medicine is restricted, benzodiazepines are capped around a 7-day supply, codeine is controlled, and CBD is banned entirely. Keep every medication in original pharmacy packaging with a doctor's letter stating the diagnosis and "for personal use," check each drug against the current restricted list weeks before travel, and declare anything controlled at the red customs channel.

A Chinese phone number is optional. Alipay, WeChat Pay, and Didi all work on your US number; a few services — food delivery like Meituan, some mini-programs — insist on +86. A tourist SIM at the airport (passport required, real-name registered) solves it in ten minutes if you hit that wall.

Working remotely? Two more free wins: hotspot your laptop off the eSIM phone — it inherits the same clean roaming path, no VPN needed — and your company's corporate VPN may already work inside China, since enterprise circuits are treated differently. Ask IT before the trip.

Small print. Outlets are 220V; US two-prong plugs fit, bring a small adapter for three-prong. Do not drink tap water. Squat toilets are common — carry tissues. Police are 110, ambulance 120. The whole country runs on Beijing time, which makes Xinjiang's solar day feel two hours late. Enroll in the State Department's STEP program, and near tourist landmarks decline friendly strangers inviting you to a tea ceremony or art show — the bill is the scam. And if you are bringing a drone, it needs registration; most travelers should leave it home.

city guides: chongqing, tianjin, guilin, shanghai

Transit payment works the same in all four. Set up the Alipay transport QR code (乘车码, "ride code") per city — Alipay → Transport tab → pick the city → activate. It is ride-first, pay-later: the gate scans your code and charges the linked card afterward. Activate each city's code before you arrive; the tab does not always appear outside China, and activation can ask for identity verification. Alipay's version works more reliably on foreign numbers than WeChat's.

The backups: a physical T-Union card (交通联合, about ¥20 deposit at metro service windows) works in 336+ cities — one card covers this whole trip, topped up with cash at station machines. Single-journey tokens at ticket machines always work. And in Shanghai only, of these four cities, your foreign Visa/Mastercard/Amex taps straight through the metro gates — no app at all. (Apple Wallet's China transit cards need a UnionPay card to top up — skip them.) Every metro entrance runs your bag through an X-ray; it is quick and universal.

chongqing

Getting in — Jiangbei (CKG). Since December 2025 every scheduled flight uses the T3 complex (T3A plus the T3B satellite, linked by a free people-mover; do not go to T2, it no longer handles scheduled passenger flights). The airport station is on Metro Line 10 (06:30–23:30): ride to Hongtudi and change to Line 6 for Xiaoshizi, the Jiefangbei and Hongya Cave side — about an hour, ¥6–9. The K01 airport express bus runs direct to Jiefangbei for around ¥15 until after the last flight; taxi or DiDi is ¥60–90 and worth it with luggage on a hilly arrival.

Getting around. The headline is the monorail — Lines 2 and 3 (Line 2's Liziba station is the train-through-the-residential-building), plus regular metro lines 1, 6, 10 and the Loop. Chongqing is the "8D city": stacked elevations mean a 500-meter walk can hide three staircases and a wrong floor. For anything uphill, luggage-heavy, or in the hills, take a DiDi — rides are cheap.

tianjin

Getting in — Binhai (TSN). Metro Line 2 boards in the Terminal 2 basement (B2): 36 minutes, ¥3, straight to Tianjin Railway Station in the center, running 06:00–22:55. From Beijing, the intercity C-trains run Beijing South to Tianjin in about 30 minutes with departures all day — you arrive at the same central station, on metro lines 2, 3, and 9.

Getting around. Thirteen metro lines, fares ¥2–5, QR code or T-Union at the gates and on buses. Line 2 strings together the airport, the railway station, the Drum Tower, and Heping Road; Line 9 runs out to Binhai. The visitor core — Five Great Avenues, the Italian Style Area, the Tianjin Eye on the Hai River — is compact and walkable once you are in it.

guilin

Getting in — Liangjiang (KWL). The odd one out: Guilin has no metro (the planned line was re-scoped, so every transfer is by road). The airport bus is the move — ¥20 flat from gate 6 in the arrivals hall, 40–60 minutes into the center past Elephant Trunk Hill. An unadvertised quirk: group fares are ¥25 for two people, ¥40 for three, ¥50 for four — buy together. A direct coach to Yangshuo runs about ¥50–60, 90 minutes, last departure around 20:00; after that it is a taxi or DiDi, around ¥100 to the city.

Around and onward. City buses take the same Alipay/WeChat QR; DiDi fills the gaps. For Yangshuo — where most trips actually point — three routes: the direct coach, the Li River cruise downstream (the scenic classic), or HSR. Guilin's stations reach Yangshuo station in 24–40 minutes for ¥24–50, but the station is in Xingping, 33 km from Yangshuo town — a ¥20 shuttle bus covers the last leg to the Fengming tourist center. The Longji rice terraces are a day-trip bus from Guilin city.

shanghai

Getting in — check the airport code first. Two airports, 40 km apart: Pudong (PVG) takes international arrivals; Hongqiao (SHA) is domestic and shares its complex with the Hongqiao HSR station.

• From PVG: the Maglev hits 431 km/h to Longyang Road in 8 minutes (¥50, or ¥40 with a same-day boarding pass; roughly 06:45–21:30), then metro Lines 2/7/16 onward. Metro Line 2 runs the whole way to People's Square in about 70 minutes for under ¥10 (roughly 06:00–22:30). The Airport Link Line (opened December 2024) connects PVG to Hongqiao and its rail station in about 40 minutes for ¥26 — the answer for a PVG-in, SHA-or-train-out itinerary. Night buses run after the metro stops; taxi/DiDi is ¥140–260. On departure, G/H gates board from the satellite concourse via a people-mover — allow an extra 30 minutes.
• From SHA: Metro Lines 2 and 10 run straight into the city, and the HSR station in the same complex is your launch point for Suzhou and Hangzhou day trips.

Getting around. The world's largest metro — around 20 lines — and the one city on this trip where a foreign Visa, Mastercard, Amex, or JCB taps straight through the metro gates (every line plus the Maglev since June 2025). QR codes work too; buses, trams, and ferries do not take bank-card taps — use the QR or the ¥30-deposit Shanghai transport card there. Hongqiao HSR puts Suzhou about 25 minutes and Hangzhou 45–60 minutes away.

the five-minute version for family

What to hand to less-technical travelers:

1. Two weeks before the flight, buy a travel eSIM (Nomad or Holafly are simplest) and install it — the app walks you through a QR scan while you are still at home. Also install LetsVPN ($6, one tap) on every phone and laptop.
2. The same week, set up Alipay and WeChat Pay and do the passport verification — it can sit in review for days. Link a card to each. These are how you pay for everything.
3. Still at home, activate the Alipay transport QR code for each city (Transport tab → pick the city) — that is the metro and bus pass everywhere on this list except Shanghai, where a foreign bank card taps straight through the gates. A ¥20 T-Union card bought at any metro service window covers every city if the codes fail.
4. When you land, turn cellular data on for the eSIM and off for your home SIM. Google, Gmail, WhatsApp, and Instagram will just work on cellular.
5. In hotels, join the Wi-Fi, open the VPN app, tap connect. If it refuses, put the phone back on cellular — the eSIM needs no VPN.
6. iMessage and FaceTime work everywhere with zero setup — that is the family channel.
7. Keep a screenshot of the hotel name and address in Chinese, and carry your passport — it is your ticket for trains and your ID everywhere.
8. Do not delete or reinstall anything during the trip. You may not be able to download it again until you leave.

rules of thumb on the ground

• Personal VPN use by foreign tourists is tolerated in practice; enforcement targets people who sell and operate circumvention inside China, not travelers' phones. Keep a low profile anyway — VPN use sits in a gray zone and discretion costs nothing.
• Device inspections have been reported at checkpoints in Xinjiang in past years; mainstream tourist areas do not check phones.
• Everything degrades around sensitive dates — early June and major party meetings especially. If a service drops for a day, it usually returns.
• Carry at least two independent paths at all times; three if you are working from there.
• Remote-desktop tools (Jump Desktop, Chrome Remote Desktop) ride the same paths: over eSIM data they work normally, over filtered Wi-Fi they need the VPN first.

how this guide was researched

This page was assembled September 16, 2026, prioritizing people sharing real experience over affiliate rankings, per the site's request. Each claim carries the confidence of its weakest link:

Two deliberate omissions: this guide does not repeat affiliate sites' exact "success rate" figures, because none publish a verifiable methodology, and it does not promise any single tool will work on a given day. Connectivity claims expire fast — re-check the community threads shortly before travel.

sources

• Periscope — product documentation for the home-VPN feature set; accessed September 16, 2026. Vendor source.
• Tailscale exit nodes and subnet routers — product documentation. Vendor source.
• Airalo: staying connected in China — vendor claim that international eSIM traffic bypasses filtering via roaming routes.
• Nomad: best eSIM for China — vendor claim, same mechanism.
• Ask HN: government censorship and VPN alternatives — August 2025, 732 comments; the largest recent firsthand discussion. Community anecdotes.
• HN thread on VPN reliability from China — 2019; useful for showing how quickly "worked for me" reports expire. Community anecdotes.
• "eSIMplicity or eSIMplification?" (USENIX Security 2025) — academic study finding opaque third-party and Chinese-infrastructure routing in several travel eSIMs.
• iTnews coverage of the eSIM study — secondary reporting, including the Holafly/China Mobile International route example.
• r/dumbclub — the main English-language VPN-in-China community; current consensus picks and protocol discussions.
• r/chinalife — expat community with recurring connectivity threads.
• GreatFire — live domain-level blocking tests.
• GFW Report — technical documentation of how the firewall detects VPN protocols.
• Astrill pricing — vendor page, checked September 16, 2026.
• LetsVPN pricing — third-party listing; confirm current prices with the vendor.
• Tencent: enhanced Weixin Pay for visitors — vendor statement on foreign-card support and verified limits ($5,000 per transaction, $50,000 per year).
• Alipay international card fees and limits and China for Travelers' Alipay guide — fee structure (free ≤¥200, 3% above, UnionPay exempt) and the real-name-first flow, cross-checked against Alipay's terms.
• 12306 English FAQ — official rail-booking rules for foreign passports; first-party source.
• Palace Museum ticket booking — official Forbidden City reservation rules; first-party source.
• CAAC power bank notice — the regulator's own announcement of the CCC-mark requirement on domestic flights; first-party source.
• Shanghai government: bringing psychotropic medications into China — official customs guidance on controlled medications; first-party source.
• China Daily: hotels told not to turn away foreigners (May 2024 rule) and ABC: hotels continue to knock back foreign tourists (May 2025 practice) — the rule versus the reality.
• Google Maps China offset explainer — GCJ-02 mechanism and the working alternatives. Practitioner source, corroborated by multiple China mapping guides.
• Trip.com — the English-friendly booking fallback for trains and foreigner-accepting hotels. Vendor source.
• Unlock China: metro payment for foreigners — ride-code mechanics, per-city activation, and which metros take foreign bank-card taps; community-report-based practitioner source.
• Express Transit: Shanghai — June 2025 foreign-card tap-to-ride rollout on the metro and Maglev, and the bus/tram/ferry gap; practitioner source.
• Roam China: public transport payment guide — T-Union coverage and deposits, city cards, and the QR-plus-card combination; practitioner source.
• China for Travelers: Guilin Liangjiang airport guide and PVG airport guide — no-metro Guilin transfers, group fares, Yangshuo coach; PVG terminals, Maglev, Airport Link Line; practitioner sources.
• Neon Chongqing airport guide — the December 2025 T3 consolidation and Line 10 routing; local practitioner source.
• China Airline Travel: Tianjin airport metro and Travel China Guide: Tianjin metro — Line 2 airport timing and network coverage; practitioner sources.