Before you fly

Set up your China connection before you get on the plane.

Google, WhatsApp, Instagram and most of your working tools stop at the border. So do the websites you would use to fix that once you land. Ten minutes at home, or three frustrated days in a hotel room.

5
Platforms
3
Devices per account
0
Activity logs kept

On a Chinese SIM

  • Google, Gmail, Maps Blocked Works
  • WhatsApp, Signal Blocked Works
  • Instagram, X, Facebook Blocked Works
  • ChatGPT, Claude Blocked Works
  • Your home bank app Extra checks Works
  • WeChat Pay, Alipay Works Works, untunnelled
  • Didi, Meituan, 12306 Works Works, untunnelled

Split tunnelling leaves the last two on the local route, so they stay fast.

Why it has to be now

The problem is not the firewall. It is the order you do things in.

Everybody knows China filters the internet. Almost nobody plans for the second-order problem, which is the one that actually ruins the first week.

The Great Firewall, or GFW, is the national filtering system that sits between China and the rest of the internet. It does not only block Google and Instagram. It also blocks most of the places you would go to download a way around it. VPN provider websites are blocked. Many VPN apps are pulled from the Chinese Apple App Store. The Google Play Store does not work on the mainland at all, so an Android phone with no sideloaded app store has nowhere to install from.

A virtual private network, or VPN, is an encrypted tunnel from your device to a server outside China. Traffic leaves the tunnel at that server, so the filtering in between does not see individual requests. That is all it is. It is a routing tool, not a disguise.

Steps 01 to 04, before departure

  1. Install the client on every device you are bringing, at home.
  2. Sign in, so your account is already active. Some login and payment flows are harder to complete from inside China.
  3. Connect once and confirm it works before you pack.
  4. Save an offline copy of your download links and your account credentials somewhere that does not depend on a blocked service.

If you land without doing this, your fallbacks are international roaming on your home SIM, which sometimes works because your traffic exits through your home carrier, or asking someone outside China to help. Both are worse than ten minutes of preparation.

What actually matters

Five things, in the order you meet them

Not a feature list. This is the sequence a first-time visitor runs into between the airport gate and their first day of work.

A covered night market in China, every stall sign a large board set in Chinese characters, shoppers walking between the counters.
CC BY 2.0

It works here, not in a lab

Nothing on the street is in English

Consumer VPN protocols are recognisable, and the ones that were reliable two years ago are mostly not reliable now. What survives is traffic that looks like ordinary encrypted browsing, on ports ordinary browsing uses, with server names that are not on a blocklist.

  • Modern obfuscated transports, not a protocol that was fine in 2023
  • Entry points rotate, because entry points do get burned
  • When one stops working, the client moves without you noticing
A high-speed train waiting at a Chinese station platform beneath the overhead departure signage.
CC BY 2.0

Speed

A tunnel for everything is a tunnel that crawls

Sending everything through a tunnel is the most common mistake and the biggest speed loss. Taobao, Bilibili, your Chinese bank, food delivery and local maps are hosted in China. Routing them through Hong Kong or Japan and back makes them slow for no benefit, and some of them will refuse to load from a foreign address entirely.

  • Chinese destinations go direct, at full local speed
  • Only what is actually blocked goes through the tunnel
  • Most people do not know this option exists

How split tunnelling works →

The dense balcony facade of an older Hong Kong tower block, hundreds of flats with window grilles and drying racks.
CC BY 2.0

Paperwork

A Hong Kong ISP line, for anything involving your home country

Banks, tax portals and identity checks score datacentre addresses as higher risk. That is why your bank login through an ordinary VPN triggers extra verification, or fails outright. Our Hong Kong exit is a physical machine on a Hong Kong broadband line, so the address belongs to an internet service provider rather than a hosting company. The client enters through Japan and egresses on the Hong Kong line.

  • Matters if you file tax, sign documents or manage a payment dashboard abroad
  • It does not make you anonymous
  • It is not a way around a service that has decided to block you

Read the detail →

A command line client

If you run AI coding agents such as Claude Code, or any tooling that calls foreign APIs, a graphical app on your laptop is not enough. Headless machines and terminal workflows need the tunnel brought up from a shell.

bimvpn connect

One account, every device

macOS, Windows, Linux, iOS and Android, on the same login, with a three device allowance. Your phone is what you need at immigration. Your laptop is what you need in the hotel. Set both up before you go.

3 devices, one login
A street produce market in China, vegetable stalls lining a narrow lane with stallholders and shoppers.

Paying for things

Cash is close to gone. Set up a payment app before you fly, because verification needs a working connection.

China guide, payments

What it costs

Two products, one account

Buying either one signs you into both. Adding the second later costs the second price and nothing else.

BIM VPN

Connectivity that survives the Great Firewall.

$6 per month, billed yearly

Cancel any time, 3 devices

  • Nodes in Hong Kong, Japan and Singapore
  • Hong Kong ISP broadband exit for home-country paperwork
  • Per-app split tunnelling on every platform
  • Command line client for headless machines
See BIM VPN pricing

Pay by cryptocurrency or PayPal

Questions

The ones people actually ask

Is using a VPN in China legal for me as a visitor?

The honest answer is that it is unsettled rather than simple. Chinese regulation requires VPN services sold inside China to be licensed, and enforcement actions have been taken against people operating or reselling unlicensed services domestically. Foreign visitors and foreign companies use VPNs in China constantly, hotels and international offices route traffic this way as a matter of course, and enforcement against an individual traveller reading their own email is not something we have seen. We are not going to tell you it is definitively legal, because that is not ours to certify. Those are the facts. Decide with them.

Does a VPN make me anonymous?

No. It moves where your traffic exits and encrypts the path to that exit. Your accounts still identify you, your device still identifies itself, and the services you log into still know exactly who you are. Anyone selling you anonymity is selling you something they cannot deliver.

Can I just install it when I arrive?

Usually not, and this is the single most common trip-up. VPN websites and app store listings are widely blocked from inside China. If your flight lands and your phone has nothing installed, you are relying on roaming or on someone abroad. Install and test before departure.

What about eSIM or international roaming instead?

It is a genuine alternative worth knowing about. Roaming on a foreign SIM often routes your data back through your home carrier, which means it exits outside China and is not filtered. It works, it needs no software, and it is the reason some travellers report that the internet was fine. It is also expensive at working volumes, varies by carrier and by which Chinese network you attach to, and can stop working mid-trip when the roaming agreement changes. Fine for a four day trip. Not something to build a working month on.

Is it fast enough for video calls?

Video calls to foreign servers are the hardest test of any China connection, because they are latency sensitive and run for a long time. Expect it to work and expect occasional bad evenings, particularly during peak hours and around sensitive dates when filtering is tightened. Choosing a nearby exit such as Hong Kong or Japan helps more than anything else you can change.

What happens when a server gets blocked?

It happens, especially around politically sensitive dates. The client holds several entry points and switches when one degrades. If a whole location is down, pick another location. This is the reason to have an account that gives you more than one option rather than a single hardcoded server.

Do I need this if I only use WeChat and Alipay?

No. If your entire trip runs on Chinese apps and a Chinese payment method, you do not need a tunnel. You need one the moment you want Gmail, Google Maps, WhatsApp, Instagram, your company's Slack or Notion, or any foreign service that your two-factor authentication depends on.

How many devices can I use?

Three, on one account, across any mix of macOS, Windows, Linux, iOS and Android.

How do I pay?

Cryptocurrency through our payment page, and PayPal. Note that if you are already in China, some foreign card and payment flows are themselves blocked, which is another argument for buying before you fly.

What if it does not work for me?

Refund terms are on the pricing page. Test it before you travel, which is the only test that means anything, and take the refund if it does not do what you need.

Download and test now Read the China guide