VPN & Internet Access in Shanghai: 2026 Travel Guide

Getting online in Shanghai works nothing like it does at home, and the gap trips up first-time visitors more than almost anything else. China’s nationwide filtering system, known to outsiders as the Great Firewall, blocks Google, Gmail, WhatsApp, Instagram, Facebook, X, most Western news sites, parts of Wikipedia, and even some iCloud features. Open your phone after landing at Pudong and the apps you rely on simply spin and time out. This guide to VPN and internet access in Shanghai covers what is blocked in 2026, what still works without any workaround, how an overseas eSIM differs from a VPN, what to set up before you fly, and what to do if your connection fails on day one. The short version: decide your approach and install everything before you board, because the tools that fix the problem are themselves blocked once you are in China.

None of this is a reason to skip the city — millions of foreign travelers stay perfectly well connected here every year. It just takes a little homework.

Table of Contents

• How the Great Firewall Works
• What’s Blocked in China in 2026
• What Still Works Without a Workaround
• Overseas eSIM: the Simplest 2026 Option
• China SIM Cards and International Roaming
• VPN Options for Internet in Shanghai
• Hotel and Public WiFi Reality Check
• Essential Apps to Install Before You Land
• Your Setup Checklist Before You Fly
• Troubleshooting When Things Stop Working
• Notes for Remote Workers
• Is Using a VPN Legal in China?
• Frequently Asked Questions

How the Great Firewall Works

The Great Firewall is a layered filtering system applied to traffic crossing China’s borders: it blocks IP ranges belonging to companies like Google and Meta, tampers with DNS lookups, scans for banned keywords, and increasingly detects the signatures of common VPN protocols. When several methods point at one service, it becomes effectively unreachable from a normal Chinese connection.

The most important consequence: whether you reach the open internet depends on where your traffic is routed, not which app you open. If your data passes through a mainland Chinese network first, it is filtered and the usual sites are blocked. If it leaves China through an international gateway first — typically Hong Kong, Singapore, or Japan — the filtering never sees it as domestic traffic and the usual sites load normally. This is why an overseas eSIM behaves so differently from a local SIM, and it underpins almost everything below.

The firewall is also a moving target. Censors update detection regularly and tighten controls around sensitive dates, so a tool that worked flawlessly last month can have a rough week, then recover.

What’s Blocked in China in 2026

The blocked list shifts at the margins but the core has been stable for years. On a normal Chinese connection in 2026, expect these to be unreachable:

• Google, everything — Search, Gmail, Drive, Maps, YouTube, Photos, Calendar, Translate, and the Play Store.
• Meta — Facebook, Instagram, WhatsApp, Threads, and Messenger.
• X (Twitter) — Blocked.
• News and reference — The New York Times, BBC News, The Guardian, Reuters at times, and parts of Wikipedia.
• Streaming and music — Netflix, Spotify, YouTube, Disney+, and HBO Max. Apple Music has generally kept working through 2026; YouTube Music has not.
• Cloud and productivity — Slack, Notion, and Dropbox are heavily slowed or blocked; OneDrive is reachable but sluggish; Teams is patchy.
• AI tools — ChatGPT is blocked (OpenAI blocks Chinese, Hong Kong, and Macau IPs); Claude and other Western AI services are also unavailable.
• Most VPN provider websites — The sites where you sign up for or download a VPN are themselves frequently blocked from inside China.

“Blocked” is not always total — services flicker, and a site that loads for a friend may stall for you. The app stores behave oddly too: the Apple App Store works locally but many apps are missing from the Chinese storefront, and Google Play is unreachable. So download every app you might want before you go.

What Still Works Without a Workaround

It is not all walls. A useful chunk of the Western internet runs fine on a plain Chinese connection, lowering the stakes if your eSIM or VPN has a bad moment.

• Apple services — iMessage and FaceTime mostly work, so iPhone users can message and call other Apple users with no workaround
• Outlook and Office 365 — Email through Outlook generally works; Teams is patchy and OneDrive slow, but email keeps flowing.
• WeChat — China’s do-everything app works flawlessly, because it is Chinese.
• Bing, DuckDuckGo, and Yahoo — Reachable, giving you a way to search when Google is gone.
• Apple Music — Has kept working through 2026.
• Airline, hotel, and Western banking sites — Checking a flight, managing a booking, or logging into your bank usually works without a VPN.
• Zoom — Generally accessible without a VPN,.

One fallback to remember: an iPhone with iMessage, FaceTime, Outlook, and Bing gives a workable, if limited, connected life with no eSIM and no VPN. Everyone else leans on WeChat.

Overseas eSIM: the Simplest 2026 Option

For most short-term visitors in 2026, an overseas travel eSIM is the easiest way to stay connected, and it has become the default recommendation across travel guides. A travel eSIM from an international provider routes your mobile data out of China through a gateway abroad, so your traffic is treated as international roaming and the domestic filtering never applies. Google, WhatsApp, Instagram, and the rest load the way they do at home — no VPN, nothing to switch on once active.

These eSIMs do not contain a “built-in VPN” — the bypass is a side effect of roaming routing, not an encryption tunnel. It is generally faster than a VPN and applies only to your phone’s eSIM data, not to a laptop unless you tether to the phone’s hotspot.

Commonly recommended providers (for orientation, not endorsement):

• Holafly — Unlimited-data China plans that route around the firewall; popular with travelers who would rather not watch a data meter, though unlimited plans often throttle speed after a daily threshold.
• Nomad — Pay-by-the-gigabyte plans, usually cheaper for light-to-moderate users, with top-ups as you go.
• Airalo — Among the cheapest, but reports on whether its China plans reliably bypass the firewall are mixed, so check very recent reviews for the specific plan before buying.
• Jetpac and Saily — Newer brands that several 2026 roundups rate well for China; worth comparing on price and allowance.
• Trip.com eSIM packages — Convenient if you already book through Trip.com; confirm the listing states it works in mainland China.

Reliability and prices shift, so verify any specific plan when you buy. The principle that holds: an eSIM from an international provider works; a data plan from a mainland Chinese carrier does not bypass the firewall.

How much data? Take what you use at home for the same number of days and add about half a gigabyte per day for the extra maps and searching you do as a tourist. Light users manage on 0.5 to 1 GB a day; stream video or scroll heavily and you will want 2 to 3 GB a day.

Setup: Confirm your phone supports eSIM and is carrier-unlocked — most iPhones from the XS on, recent Pixels, and recent Samsung Galaxy models do (dial *#06# for an EID). Install it before you fly, because activation needs a QR-code scan over a working connection you will not reliably have on arrival; have the QR code sent to an email you can open inside China (Outlook or iCloud, not Gmail). Set it as your data line, home SIM for calls and texts only, data roaming off. Travel eSIMs are data-only, but calls and messages run through WeChat or FaceTime over data.

China SIM Cards and International Roaming

The eSIM route suits most visitors, but two alternatives are worth understanding: a local Chinese SIM and international roaming on your home plan.

A local Chinese SIM gives you the best speeds, the best value for heavy data, and a real Chinese phone number, which smooths registration for a few local apps. The catch is the firewall: a SIM from China Mobile, China Unicom, or China Telecom routes data through the domestic network, so the usual sites are blocked and you will need a VPN on top. Buying one means presenting your original passport in person for real-name registration, often with a live facial-recognition check — you cannot do this reliably online, and pre-registered numbers sold online are frequently scams. The most convenient place is a carrier counter in the arrivals hall at Pudong or Hongqiao (10 to 15 minutes); official stores also operate on Nanjing Road and near major hotels. China Unicom is generally friendliest to foreign visitors; China Mobile has the broadest rural coverage; China Telecom is often competitive on tourist-package value. Tourist packages in 2026 commonly run a few tens of US dollars for tens of gigabytes over 7 to 30 days, with city stores often undercutting airport pricing. For how this fits the rest of your planning, see our Shanghai practical tips hub.

International roaming on your existing plan is the zero-effort option: you change nothing, and if your carrier routes roaming traffic through your home country, the open internet often works without a VPN. The downside is cost — day passes from carriers such as Verizon can run around 10 US dollars a day. Call your carrier first to confirm roaming is enabled for mainland China and whether their routing reaches services like Google. A sensible hybrid: keep the home SIM for your number and SMS codes, data roaming off, and add a travel eSIM for cheap, firewall-free data.

VPN Options for Internet in Shanghai

A VPN is the older, general-purpose tool, and it remains useful. It tunnels your traffic to a server outside China, so as long as that server’s address is not currently blocked, the firewall cannot filter you and blocked sites open. The key difference from an eSIM: a VPN works on any connection you are already using, including hotel WiFi and a local Chinese SIM, rather than replacing your data connection.

Set expectations honestly. The firewall in 2026 is more aggressive at detecting VPN traffic than a few years ago, and even the best-regarded services have rough patches — brief outages, slow speeds, or a server that stops connecting until you switch. Expert recommendations also diverge: some reviewers rate one provider highest while advising against another that a different reviewer swears by.

Providers that come up most often in China-focused testing and long-term expat use include ExpressVPN, NordVPN, Surfshark, and Astrill, with Mullvad favored by the privacy-conscious (mixed results in China) and China-aware services such as LetsVPN used by many residents. Rather than chase the single “best” name, use the approach experienced travelers describe:

• Choose two providers that each offer a 30-day money-back guarantee.
• Install, pay for, and test both before you leave home — most VPN websites and downloads are blocked from inside China.
• In Shanghai, use whichever connects best, and request a refund on the other if you do not need it.

That redundancy is the whole game: treat any single VPN as having occasional off days, and a bad connection becomes a minor annoyance rather than a trip-wrecker.

Hotel and Public WiFi Reality Check

Hotel WiFi in Shanghai is convenient and widely available, but it routes through Chinese providers, so it sits behind the firewall. Three ways to handle it:

• Run your VPN on top of the hotel WiFi. The most common solution, and what makes a VPN worth carrying even if your phone is on an eSIM — it lets your laptop and tablet, which have no eSIM, reach the open internet.
• Stay on your overseas eSIM’s mobile data. Simplest, since the eSIM already bypasses the firewall, but it uses your data allowance.
• Tether your laptop to your phone’s eSIM hotspot. Carries the firewall-free connection to other devices. Confirm your plan permits hotspot sharing, and note that continuous tethering drains a phone battery fast — a power bank earns its place in your bag.

Larger international hotels — Ritz-Carlton, Marriott, Hyatt, and similar — increasingly offer an “international internet” option; ask at check-in. Public WiFi in cafes, malls, and metro stations carries the same firewall limitation, so a VPN on top is wise there too.

Essential Apps to Install Before You Land

Connectivity is only half the picture. Daily life in Shanghai runs on a set of Chinese apps, and a few minutes of setup before departure saves friction later. The payment and travel apps below work on a normal Chinese connection — no VPN needed — but install them before arrival, since several are missing or awkward to get through the Chinese app stores.

• Alipay — One of the two payment apps that run almost everything in Shanghai. Its international edition lets you link a Visa, Mastercard, or Amex card directly and pay at most merchants, often within minutes, and bundles “mini programs” for ride-hailing and the metro. No Chinese number needed to register.
• WeChat — The other essential. Beyond messaging, WeChat Pay works like Alipay and supports international cards. Since so many people and small businesses communicate and take payment through it, having it set up lets you message, pay, and use mini programs even on a data-only eSIM with no local number.
• Didi — China’s ride-hailing app, the equivalent of Uber. It supports international numbers and foreign cards and is far easier than hailing a taxi without Mandarin; you can also reach it as a mini program inside Alipay or WeChat.
• A maps app that works — Google Maps is blocked. Download offline Google Maps areas for VPN use, or use Apple Maps, which works without one. The local heavyweights are Amap (Gaode) and Baidu Maps — most accurate for China, though largely in Chinese. See our guide to getting around Shanghai and the Shanghai metro guide.
• Trip.com — Books hotels, flights, and high-speed rail with an international account and card; works without a VPN.
• A translation app — Google Translate is blocked. Apple’s Translate with an offline Mandarin pack works without a VPN, and camera translation helps with menus and signs.

Install and log into all of these at home, while you can still verify codes and download freely.

Your Setup Checklist Before You Fly

Here is the whole thing distilled into a sequence to run the week before you travel, on your home internet where everything still works:

1. Confirm your phone is eSIM-capable and carrier-unlocked (dial *#06# to check for an EID).
2. Buy and install an overseas travel eSIM, with the QR code sent to a non-Gmail address you can open inside China.
3. Install two VPNs that offer money-back guarantees, and test both from home as your backup for laptops and hotel WiFi.
4. Download offline Google Maps areas for Shanghai and day trips (Hangzhou, Suzhou, the water towns) for VPN use, plus Apple Maps offline regions or Amap/Baidu as a no-VPN fallback, and an offline Mandarin translation pack.
5. Install and log into the Chinese essentials: Alipay and WeChat with an international card linked, plus Didi and Trip.com.
6. Back up important contacts to iCloud or your Google account so you are not relying on a blocked service to find a phone number.
7. Email yourself — to an account you can open in China — hotel addresses (in Chinese characters if possible), flight details, and confirmation numbers as an offline reference.
8. Set your eSIM as the data line and your home SIM to calls and texts only, with home-SIM data roaming off.

Run that list and you arrive with two independent ways online, every app working, and offline copies of what matters. For more on arrival, see our Shanghai visa and entry requirements guide and the Pudong airport to city center guide.

Troubleshooting When Things Stop Working

Even with good preparation, connections wobble.

Your VPN will not connect. Switch to a different server — a Tokyo or Singapore one often works when a US server stalls. If that fails, try a different VPN protocol where the app offers one, since the firewall blocks some signatures more readily, or switch to the second app you installed. Restarting the app or toggling airplane mode for a few seconds resolves many cases.

Your eSIM has no data. Check that the eSIM is your active data line and that data roaming is enabled for it (roaming is how it connects to the local network). A reboot after landing often nudges the phone to register.

A payment is declined. Turn your VPN off before paying. If your IP looks like San Francisco while your GPS says Shanghai, the fraud system may freeze the transaction. Payments work on the normal Chinese connection, so a VPN is not only unnecessary — it can cause failures.

You cannot receive a verification code. Keep your home SIM active (data roaming off, but able to receive texts) so SMS two-factor codes arrive. For Chinese apps that demand a local number, a WeChat or Alipay mini program is usually the workaround.

Everything is down at once. Fall back on what works without any workaround: Bing for search, iMessage and FaceTime for other Apple users, Outlook for email, and the Chinese apps that never needed one — WeChat, Alipay, Didi, Trip.com, Meituan, Dianping, and Baidu or Amap maps. As a last resort, buy a local SIM at an airport carrier counter with your passport — fast local data immediately, though you will still need a VPN on it for blocked Western sites.

Notes for Remote Workers

If you are working remotely rather than sightseeing, the stakes are higher. Run both an overseas eSIM for mobile data and a tested VPN for hotel and office WiFi, so one failing never leaves you offline. A few specifics:

• Keep work files off blocked services. Google Drive will not cooperate, so store what you need in OneDrive (slower but functional) or Box, and save mission-critical copies locally before you travel.
• Know your tools’ status. Slack, Notion, and Google Meet need a VPN; Zoom is generally reachable without one; Microsoft Teams is patchy — have a backup for any unmissable call.
• For stays beyond a month, a paid VPN makes more sense than repeatedly buying eSIM data, and a local SIM (with a VPN over it) becomes the cost-effective base.

Is Using a VPN Legal in China?

Using a VPN in China sits in a legal grey zone. The government requires VPN providers to be licensed and has cracked down on unauthorized commercial operations and on Chinese citizens who run or sell circumvention services. Enforcement targets providers and domestic distribution, not individual foreign visitors using a personal VPN to check email and message home. There are no publicly documented cases of a tourist being penalized for personal VPN use.

A few cautions keep you comfortably on the right side of the line:

• Use your VPN for ordinary personal and work purposes, not anything you would not do at home.
• Do not help Chinese citizens circumvent the firewall, sell access, or distribute circumvention tools — that is the activity that is actually enforced.
• Keep your App Store or Google Play region set to your home country; switching it to China can make Western apps, including some VPNs, disappear from your storefront.
• This reflects 2026; rules and enforcement can change, so check for recent developments close to your travel date.

The realistic risk to a tourist using a personal VPN is essentially nil; the practical risk is just an off day, which redundancy handles. Treat the legal question as settled-enough and focus on setting up before you fly.

Frequently Asked Questions

Do I need a VPN in Shanghai?

You need a way around the firewall for Google, WhatsApp, Instagram, Facebook, and other blocked services. A VPN is one way; in 2026 an overseas eSIM is another, bypassing the firewall on your phone’s data with no VPN at all — for many travelers the simpler choice. A VPN is still worth carrying as a backup and for laptops on hotel WiFi.

Which is better for China in 2026, a VPN or an eSIM?

For most short-term visitors, an overseas eSIM is the simpler default — faster and steadier than a VPN and needing nothing switched on once active, because roaming routing sidesteps the firewall. A VPN is the better tool for a laptop or tablet, for hotel WiFi, or as a fallback if your eSIM has signal trouble.

Is WhatsApp blocked in Shanghai? Can I use Google Maps?

WhatsApp is fully blocked; reach it through an overseas eSIM or VPN, or switch China-based contacts to WeChat. Google Maps is also blocked and likewise needs an eSIM or VPN. Apple Maps works without any workaround and is fine for navigation, while Amap (Gaode) and Baidu Maps are the most accurate local options, though mainly in Chinese.

Will my home SIM card work in China?

It will if your carrier has enabled international roaming for mainland China, and if it routes roaming traffic through your home country, the open internet often works without a VPN. The drawback is cost — day passes commonly run around 10 US dollars a day. An eSIM is far cheaper for data, so many keep the home SIM for their number and SMS codes and use an eSIM for data.

Does an eSIM work in China and get past the firewall?

Yes. A travel eSIM from an international provider routes your data out of China through an overseas gateway, so the firewall treats it as roaming and blocked sites load normally — no VPN needed. To extend it to a laptop, tether to your phone’s hotspot (confirm the plan allows it). Travel eSIMs are data-only — no Chinese number, SMS, or calls.

Can I buy a SIM card as a tourist, and how much data do I need?

Yes — present your original passport for real-name registration at an airport carrier counter or official store, usually with a facial-recognition check, and you will have a local number in 10 to 15 minutes. Avoid Chinese numbers sold online, as many are scams, and remember a local SIM still sits behind the firewall, so you will need a VPN on it for Western sites. For data, a week to ten days of typical tourist use needs about 5 to 10 GB; budget more if you stream video.

Can I download Western apps once I am in China?

It is unreliable, so do it before you go. The Apple App Store works locally but many apps are missing from the Chinese storefront, and Google Play is blocked. Keep your store region set to your home country and download everything — VPNs, messengers, maps, translation — before departure.

How do I make calls home from Shanghai?

The easiest options are FaceTime audio and WhatsApp calls (the latter via your eSIM or VPN), both over data, plus WeChat voice calls. If you only need SMS two-factor codes, keep your home SIM active with roaming for texts.

Plan the Rest of Your Shanghai Trip

Sorting out your connection is one of the smartest things you can do before a Shanghai trip. Start with our Shanghai practical tips hub for the full picture, then check Shanghai scams to avoid — useful for spotting dodgy SIM offers and fake-payment QR tricks — and is Shanghai safe for a realistic read on staying secure. First-timers should start with our first-time visiting Shanghai guide.

Further reading: the Great Firewall on Wikipedia.