Start your 3-day free trial
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.


Free public Wi-Fi is common at Chinese airports and other venues, but the login page often sends an SMS code to a Chinese phone number. To use China public Wi-Fi without a local number, confirm the venue's official network name and follow only the login option shown by its current portal or staff. Shanghai Pudong and the Beijing airports, for example, let travelers without a Chinese SIM verify with a passport instead.[1][2] If your venue offers no suitable route, use your own roaming, eSIM, local SIM, or portable hotspot instead of bypassing the portal.
Key Takeaways
- Public Wi-Fi access in China follows the venue-specific portal and identity options shown at that location.
- Verify the SSID with staff, signage, an official page, or an information desk before joining.
- A passport-login example at a few named airports does not mean every café, station, mall, or hotel accepts passports.
- Finish the legitimate captive-portal step before enabling tools that may prevent the sign-in page from loading.
- Never upload a passport to an unverified page or install an unknown certificate, profile, or app for Wi-Fi access.
- Use HTTPS, current software, and strong account security even after the network connection succeeds.[4]
Ask staff or an information desk for the exact SSID and login method. Compare capitalization, punctuation, and any venue identifier rather than choosing the strongest open signal. A nearby hotspot can copy a plausible venue name, and a lock icon beside the SSID only describes the wireless join method, not who operates the network.
Use a sign, room card, receipt, official venue page, or staffed counter as a second reference. Do not trust a QR code pasted over another label or a search advertisement that claims to unlock the venue network. If the venue cannot identify its own network, use a connection you control.
| Evidence | What it can confirm | What it cannot confirm |
|---|---|---|
| Staff or information desk | Current SSID and supported login route | Security of every website you visit |
| Official venue signage | Network name and basic instructions | That an altered or covered sign is genuine |
| Room key sleeve or receipt | Guest or customer credential context | That the network is safe for sensitive work |
| Captive portal certificate and domain | Identity of the HTTPS portal owner | That all content behind the portal is trustworthy |
Read the current captive portal before entering personal data. Without assuming that any route is widely available, classify only what you actually see:
Shanghai Pudong Airport says travelers without a Chinese SIM can scan the photo page of their passport on the airport's Wi-Fi login page.[1] Treat that as a service of the named airport, not a national rule for China public Wi-Fi without a local number.
Beijing's official arrival guide says both Beijing airports have free Wi-Fi: a Chinese number receives an SMS code, while a passport scanned at an airport Wi-Fi dispenser prints login details valid for five hours.[2] That is an airport service in one city, not a nationwide authentication method, so follow only the option shown by the current venue or portal.
When a foreign-number option appears, verify the country code and number before requesting one code. If the code does not arrive, do not flood the service with repeated requests. Ask staff whether that carrier or country code is supported or choose another official route.
Use passport verification only when the venue itself clearly identifies the terminal, portal, or counter. Check that the page belongs to the venue or its named network provider, uses HTTPS, and requests only information needed for access. If you cannot establish who receives the data, stop and ask staff.
If the verified route uses a self-service terminal, keep the passport in your control and shield the photo page from bystanders. Collect any returned credential immediately and do not post it in a group chat. If staff request the document, ask whether it is inspected, scanned, or retained and whether a less data-intensive option is available.
Do not email a passport copy, send it to a personal messaging account, or upload it to a page reached through an unofficial QR code. Do not borrow another person's phone number or identity. If the only route requires data you do not wish to provide, decline the network and use an alternative connection.
Join the verified SSID, wait briefly, and open the sign-in notification if the device shows one. Apple describes selecting the network and following its captive-login screen; the device may stay associated with the Wi-Fi even before internet access is granted.[3] On other systems, the wording differs, but the same distinction between joining Wi-Fi and completing portal access still matters.
If the page does not appear, open an ordinary browser window and revisit a simple site you already know. Temporarily pause a VPN, private relay, custom DNS, or filtering app only long enough to determine whether it is preventing the local portal from opening. Restore your normal protections after authentication.
Do not bypass the portal with a copied device address, another guest's credential, an unofficial script, or repeated random URLs. Forgetting and rejoining the verified SSID is reasonable; changing device identities or defeating venue controls is not.
After the portal says access is complete, load a harmless HTTPS page and confirm that the browser is no longer being redirected to sign-in. Check whether ordinary web access, messaging, and the specific service you need work separately. A Wi-Fi icon proves only the local radio association, not internet access.
| Symptom | Likely layer | Next check |
|---|---|---|
| SSID is absent | Venue access point, location, schedule, or device radio | Confirm the network is operating and move nearer |
| SSID joins but portal never appears | Captive detection, DNS, filtering, or stale session | Use the official sign-in prompt, browser, or forget/rejoin |
| Portal rejects the phone number | Country code, carrier, format, rate limit, or unsupported route | Ask staff for another official method |
| Portal accepts details but web remains blocked | Session not completed, terms not accepted, or venue fault | Reopen the official portal and ask staff |
| Web works but one app fails | App, account, regional availability, or service policy | Troubleshoot that service separately |
Avoid entering payment, banking, passport, or primary email credentials merely to test the link. Use a low-risk page first. If access expires, return to the official portal rather than trusting a pop-up that appeared later.
Keep the operating system, browser, and security software current. The FTC notes that widespread HTTPS now encrypts connections to most websites and recommends checking for HTTPS, using strong passwords, and enabling two-factor authentication.[4] HTTPS protects data in transit to the site, but it does not make a fraudulent site honest.
Turn off automatic connection to open networks and disable file sharing or device discovery you do not need. Avoid approving unexpected login prompts, certificate warnings, configuration profiles, software downloads, or remote-support requests. Confirm the site address before entering any account password.
Ask staff whether the venue has an official visitor route that the current portal does not explain clearly. If the answer is no, accept that the network may require a local number or another credential you do not have. Do not pay an unknown intermediary to receive an SMS or share an account.
Use a connection you control: international roaming, a travel eSIM that works in your device and destination, a locally registered SIM, or a portable hotspot from a reputable provider. The SIM, eSIM, and roaming guide explains the trade-offs. Keep enough offline information—hotel address, booking references, emergency contacts, and a basic map—to reach a safer connection without depending on the failed hotspot.
For venue-specific help, use the airport and train-station Wi-Fi guide or the hotel Wi-Fi troubleshooting guide. Those articles cover operational details that should not be generalized to every public network. For the wider plan, including backup access when one connection fails, see the China internet access planning guide.
Until you sign in, the venue's network redirects your first web requests to its login page. An active VPN or custom DNS sends them along its own path instead, so the passport or foreign-number page may never load. Keep it paused until the portal confirms access and an ordinary HTTPS page opens. A VPN cannot supply a credential, validate a passport, or make the venue accept a foreign number. Once access works, and where local law and the venue's terms allow, you can reconnect AethoVPN to encrypt traffic on that shared hotspot, or, if you have not used it before, start the 3-day free trial once you are online.
No. Country-code support and authentication methods vary by venue and provider. Use only the options shown on the current official portal or confirmed by staff.
Shanghai Pudong Airport documents an official passport-based method for its airport Wi-Fi, and Beijing's airports offer passport scanning at Wi-Fi dispensers. That does not mean every hotel, café, mall, station, or other airport accepts a passport; confirm the venue-specific route.[1][2]
Only proceed when you have verified the venue, SSID, portal owner, HTTPS connection, and purpose. If those facts are unclear or the request is broader than necessary, ask staff or use another connection.
The phone may have joined the access point without completing the captive portal. Reopen the official sign-in page, accept the required terms, and confirm that a harmless HTTPS page loads.
If the portal does not load, briefly pause the VPN and other custom network filters, complete the official login, test ordinary HTTPS, and then reconnect. Do not leave protections disabled longer than needed.
Do not use another person's identity or credential to bypass the venue's process. Ask for a legitimate guest route or use your own mobile connection.
No. HTTPS encrypts the path to a site, but a scammer can also operate an encrypted site. Check the domain and the reason for every data request.
Save your accommodation address, booking references, emergency contacts, essential transport details, and a small offline map. That gives you a safe fallback when a venue offers no usable login route.
Disclaimer: This guide provides general network and privacy information. Public Wi-Fi authentication, identity requirements, availability, session limits, and data practices follow each venue's current rules and may change.
Sources checked 4 October 2026.
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.





