Here is the distinction that most articles skip: a VPN encrypts and tunnels your traffic. A foreign-routed data connection already leaves China through a gateway outside the filter. If your data is on a travel eSIM, you are not fighting the firewall at all.
When you do not need one
- You bought a travel eSIM and confirmed it routes data internationally.
- You are on your home carrier’s roaming plan.
- Your trip is short and you can live without Google services on hotel Wi-Fi.
When you do
- You will work from hotel or apartment Wi-Fi.
- You bought a local China Unicom/Mobile SIM for a long stay.
- You need a specific corporate service that only works over your company VPN.
- You are staying somewhere with no mobile signal and need the fixed line.
Which VPNs survive
Consumer VPN apps with recognisable brand names are the ones most aggressively detected — their server ranges are known and blocked. What works in 2026 is: obfuscated protocols (WireGuard with obfuscation, Shadowsocks, VLESS), self-hosted endpoints, and commercial providers that explicitly sell “China-optimised” nodes at a premium.
Free VPNs
They do not work. Not “work poorly” — they are the first thing blocked, they sell your traffic, and they consume an evening. If cost is the constraint, a travel eSIM at $15–25 for two weeks is cheaper than the hours you will spend.
The setup that actually survives a two-week trip
- 1Primary: travel eSIM with international routing
Covers phone, maps, WhatsApp, Instagram, email. No configuration, works on landing.
- 2Secondary: one paid VPN installed at home
For hotel Wi-Fi and laptop work. Test it before departure.
- 3Tertiary: offline everything
Maps, translation packs, bookings, boarding passes. Offline cannot be blocked.
- 4Fourth: a phone call to your guide
They have a working local line, and local knowledge of what is currently reachable beats any blog post including this one.