This trips up almost every first-timer, so let's settle it before you buy anything. An eSIM and a VPN solve the same problem from opposite ends, and which one you need depends entirely on where your internet traffic enters China.
Quick version: a foreign eSIM with international roaming usually means you don't touch a VPN at all on your phone. A VPN matters most when you're on hotel or cafe WiFi. Many travelers carry both anyway, for reasons we'll get to.
What each one actually does
An eSIM (the roaming kind) routes you out of China
When you buy a travel eSIM from a provider based outside mainland China, the cellular data doesn't stay inside the Chinese network. It gets tunneled back to a gateway in the provider's home region — often Hong Kong, Singapore, or somewhere in Europe — before it reaches the open internet. Your phone is physically in Shanghai, but as far as Google's servers are concerned, your request is arriving from Hong Kong.
The practical result: the Great Firewall, which filters traffic crossing China's domestic network boundary, never sees your normal app traffic the way it would on a local SIM. So Gmail, Google Maps, Instagram, WhatsApp, Messenger, YouTube, and your bank app tend to just open. No extra app, no toggling a connection on and off.
International roaming has always worked this way — your data follows your home carrier's path, not the local one. There's no trick or workaround involved.
A VPN tunnels you out from inside China
A VPN does conceptually the same thing — sends your traffic to a server abroad — but it starts from inside the firewall. You're on a Chinese network (hotel WiFi, a friend's home broadband, a local SIM card), and the VPN app builds an encrypted tunnel out to a server in, say, Los Angeles. Blocked apps then work because your traffic exits through that overseas server.
The catch: the firewall can see that a VPN tunnel is being attempted, even if it can't read what's inside it. Some VPN protocols get throttled or blocked, and which ones work changes over time and even by city and time of day. This is the part nobody can promise you.
The decision: which do you need?
Map it to how you'll actually be online:
| Your situation | What works |
|---|---|
| Foreign eSIM data, out walking around | No VPN needed — blocked apps work over the eSIM |
| Hotel WiFi | VPN required for blocked apps (you're inside the firewall) |
| Cafe / mall / airport WiFi | VPN required, same reason |
| Local Chinese SIM card | VPN required — local SIMs route through the domestic network |
| eSIM data shared via personal hotspot to your laptop | No VPN needed — the laptop inherits the eSIM's overseas route |
That last row is the move most people miss. If your eSIM has enough data and decent allowance for hotspot use, you can tether your laptop to your phone and skip hotel WiFi entirely — which means you skip needing a VPN at all. Check your plan's hotspot/tethering allowance before you rely on this; some travel eSIMs cap or block it.
So do you need both?
- Phone-only traveler, light usage: A foreign eSIM alone usually covers you. Skip the VPN.
- Bringing a laptop, or burning lots of data: You'll probably touch hotel WiFi at some point. Install a VPN as a backup before you fly.
- Anyone who can't afford to be cut off (work email, two-factor codes from Google/Microsoft, family check-ins): carry both. eSIM as the daily driver, VPN as the fallback for WiFi.
Why install the VPN before you arrive
This is the single most common avoidable mistake. The websites and app-store listings for major VPNs are themselves frequently blocked inside China. If you wait until you land to download one, you may find you can't reach the download page — a catch-22, since the thing that would get you to the page is the app you can't download.
Do this from your home WiFi, days before departure:
- Pick a VPN that publicly markets itself as working in China (read recent reviews, not last year's).
- Install the app and sign in while you're still in the US.
- Download the config / log in so it's ready offline — don't rely on first-launch setup happening in China.
- Note the provider's manual server addresses or "obfuscated" mode, in case the default connection gets blocked.
For the wider list of what to set up before wheels-up, see our apps to download before China guide.
The honest caveat about VPNs
VPN reliability in China genuinely fluctuates. A protocol that works flawlessly one week can stall the next, and it varies by network and location. No guide — including this one — can tell you "X will definitely work on your trip." Treat any VPN as best-effort, not guaranteed.
This is exactly why the eSIM-first strategy is more robust: roaming data doesn't depend on defeating the firewall in real time, so there's far less to go wrong. The VPN is your contingency for the moments you're stuck on local WiFi.
A few practical notes
- Chinese apps don't need any of this. WeChat, Alipay, Didi, and Baidu Maps work on any connection in China. Sort out your Alipay and WeChat payment setup separately — that's a different problem from getting around blocks.
- Two-factor authentication is the silent trap. If your bank or email texts codes to a US number, confirm that number can still receive SMS while abroad — or set up an authenticator app beforehand. Plenty of travelers get locked out not by the firewall but by a 2FA code they can't receive.
- eSIM device support: Confirm your phone is eSIM-capable and carrier-unlocked. Most iPhones from the XS on and recent flagship Androids are fine, but a carrier-locked phone can't load a travel eSIM.
- Battery: eSIM roaming and an active VPN both eat battery faster. Pack a power bank.
Bottom line
Buy a foreign eSIM with a generous data allowance and treat it as your primary connection — it sidesteps the firewall by design. Install a reputable VPN before you leave as backup for the times you're on Chinese WiFi. With both in your pocket, you're covered either way, and you've spent maybe $30–40 total instead of stressing about connectivity for your whole trip.
Connectivity is just one box on the larger list. Run through the full China trip checklist for Americans so nothing else slips, and if you're still nailing down your entry route, our visa eligibility checker tells you in under a minute whether you need an L visa or can use visa-free transit.
A quick note on entry rules: nothing here changes your visa situation. As a US passport holder you'll generally either get a tourist (L) visa in advance — now simplified to just passport, the online COVA form, a photo, and proof of residence, with the $68 fee reduction currently running through Dec 31, 2026 — or qualify for 240-hour (10-day) visa-free transit if you're connecting onward to a third country. Those details shift, so always confirm against the Chinese Embassy and the National Immigration Administration before you travel.
Disclaimer: connectivity tools and their reliability in China change frequently, and we haven't personally tested every provider on the ground. Verify entry and visa requirements with the Chinese Embassy and the National Immigration Administration (NIA) official sites before you travel.