Internet and the Great Firewall

What the Great Firewall is

The Golden Shield Project — known colloquially as the Great Firewall (GFW) — is China's national internet filtering and censorship infrastructure. It operates through deep packet inspection, DNS poisoning, and IP blocking, executed at the network backbone level. The practical result for travellers: a substantial portion of the global internet is unavailable in mainland China without a VPN, including most of the services that Western visitors consider basic utilities.

The GFW does not affect Hong Kong SAR, Macau SAR, or traffic on foreign roaming SIMs with overseas backhaul.

What is blocked in mainland China (current as of May 2026)

**Definitively blocked** (inaccessible without a VPN in normal conditions): - All Google services: Search, Gmail, Google Maps, YouTube, Drive, Meet, Chrome sync, Firebase, Google Play (in China the Play Store is replaced by Huawei AppGallery, Xiaomi Store, etc.) - Facebook, Instagram, WhatsApp, Messenger, Facebook Marketplace - X (Twitter) - YouTube - Wikipedia (Chinese-language entirely; English-language intermittently) - Telegram - Dropbox, Box - Notion - Discord - Twitch - The New York Times, Wall Street Journal, Bloomberg, Reuters (direct access), BBC, The Guardian (intermittent), Financial Times

**Often intermittent** (works sometimes, blocked at others): - GitHub (generally accessible; GitHub Pages sometimes blocked) - Microsoft Teams (generally works; occasional outages) - LinkedIn (accessible with some content filtering) - Slack (patchy; enterprise plans sometimes work better)

**Works without a VPN**: - Bing, DuckDuckGo - Microsoft 365: Outlook, Word/Excel/PowerPoint, Teams (mostly), OneDrive - Apple iCloud (mail, storage, sync) - Most banking apps from foreign banks - Booking.com, Expedia, Agoda, Hotels.com - Airbnb (app works; some pages may load slowly) - Netflix (not available in China regardless of VPN — regional licensing) - Spotify (not officially available; app may require a workaround) - Most payment apps from your home country

VPN: the honest picture

VPNs exist in a legal grey area in China. The state categorises VPN use by individuals as nominally illegal, but enforcement against foreign tourists and short-term visitors is essentially zero in practice. The real-world risk is the technical one: the GFW actively detects and blocks VPN protocols, and services become more or less functional on a week-by-week basis.

What works best for China: Commercial VPNs that maintain dedicated obfuscation infrastructure specifically for China connections — services that disguise VPN traffic as normal HTTPS rather than standard VPN handshakes. The GFW has gotten significantly better at blocking standard OpenVPN and WireGuard protocols; obfuscated protocols (Shadowsocks, V2Ray, VLESS-based services) have better track records in 2025–2026.

We do not name specific VPNs because the list of working services changes monthly and any specific name may be blocked by the time you read this. The practical approach: search for 'reliable VPN for China' in your home country two weeks before departure, read reviews from the previous month, and subscribe to two different services as redundancy.

Critical: Install and test your VPN before arrival. VPN provider websites are blocked in China, meaning you cannot download or activate a new VPN subscription once inside. Set everything up on your home network and confirm it connects correctly.

Step-by-step: preparing your device before departure

1. **VPN**: Install two different paid VPN services. Open each one, confirm connection on your home network. Check that they offer a server location that has had recent reported success in China (check provider's own China status page). 2. **Google Maps offline**: Download the map data for each city on your itinerary. In the Google Maps app: select the area, tap download. This gives you maps that work without internet, using your phone's GPS. 3. **Google Translate offline**: In the Translate app, download the Chinese (Simplified) language pack. This enables camera-mode translation of menus and signs without internet. 4. **Pleco**: The most complete Chinese-English dictionary app, with handwriting recognition, OCR for character lookup, and offline operation. Essential for any serious navigation of Chinese text. 5. **Backup communication**: Apple iMessage works via iCloud on Wi-Fi or roaming. WeChat is the essential contact app for communicating with anyone in China, and it works natively without a VPN. 6. **Amap / Baidu Maps**: Download one or both Chinese map apps. These work natively in China without a VPN and have more accurate Chinese address data than Google Maps.

Roaming SIM: the simplest GFW bypass

Roaming on your home-country SIM card while in China typically routes data through your home carrier's overseas network, bypassing the GFW entirely. Google, WhatsApp, Instagram — all work normally. This is the most reliable and zero-configuration workaround for short trips.

Caveats: Roaming charges. Check your carrier's rates before assuming this is affordable. The carriers with known reasonable China roaming arrangements include T-Mobile US (Magenta/Plus plan), Three UK (international roaming), Google Fi, and carriers in countries with EU-style roaming agreements that extend to some overseas partners.

Speeds: Roaming data is often throttled relative to local SIM speeds, particularly on video streaming.

eSIM: the dual-SIM approach

Modern iPhones (XS and later) and many Android flagships support eSIM. Strategy: keep your home SIM for roaming (GFW bypass for Google etc), and add a local Chinese eSIM (cheap data for everything else). The home roaming SIM handles Google Maps, WhatsApp, Gmail; the local eSIM handles Alipay, Didi, Amap, streaming local content. This approach works without a VPN for most traveller needs.

eSIM providers offering China eSIMs that route around the GFW: check availability in your home country's app stores. Some are offered by Hong Kong carriers with mainland data packages.

Hotel WiFi and GFW

Hotel WiFi in mainland China is subject to the same GFW filtering as everything else — you are on a Chinese internet connection. Most international-brand hotels (Marriott, Hilton, etc.) do not run separate unblocked guest networks; a few high-end properties at diplomatic/business hotels have historically offered unblocked connections as a business amenity, but this is increasingly rare and should not be relied upon.

What if your VPN stops working mid-trip?

A common experience. Options: 1. Try a different VPN protocol or server location within the same app. 2. Switch to your second VPN subscription (this is why having two matters). 3. Switch to your roaming SIM for the services you need most (Google Maps, Gmail). 4. Accept that some services are unavailable for a day or two — VPN reliability fluctuates.

Hong Kong: a different internet

Hong Kong operates on the open international internet. No GFW, no blocking. A Hong Kong SIM card purchased at Hong Kong airport gives you unrestricted access in HK; some Hong Kong carrier plans include mainland China data with GFW bypass routing.