Free Wi-Fi in Beijing: What Actually Works for Foreign Visitors

Why the login wall exists

Under Article 24 of China's Cybersecurity Law, anyone providing network access must obtain the user's real identity information, and must not provide the service to a user who declines. A public Wi-Fi operator therefore has to tie your session to a real identity — and the identity almost everyone in China carries is their mobile number, which is itself registered to a passport or an ID card under the real-name SIM rules. So the captive portal you get after joining the network asks for a phone number and texts you a code. In practice, most Beijing portals are built for +86 numbers only: the country selector sometimes does not offer your country at all, and when it does the code often never arrives. None of this is a setting you can switch off, and a VPN does not help — a VPN encrypts your traffic after you are online; it cannot fill in a phone number or pass an SMS check.

• Cybersecurity Law, Article 24 — 网络运营者 must collect real identity information for network access; declining means no service. This is why the portal exists — it is not a house policy of the café.
• The +86 number is the identity key — Every Chinese SIM is registered to a passport or ID card, so a code texted to +86 is a working proof of identity. A foreign number proves nothing to the portal.
• A VPN will not open the door — A VPN works once you already have a connection. It cannot fill in a phone number or satisfy an SMS check. [verify]

Where it genuinely works: Capital and Daxing airports

Both Beijing airports are the exception to everything above, and they are the exception on purpose — the authorities need arriving foreign passengers to be able to fill in the arrival card online. Beijing's official guidance states that free Wi-Fi covers all areas of both airports, with two routes in: an SMS code if you have a Chinese number, and for travellers without one, a Wi-Fi dispenser (WiFi 取号机) that reads your passport or ID card and hands you a login. Capital Airport (PEK) offers four options: SMS, photographing your passport information page, the dispensers — around 46 of them across T2 and T3 — and one-tap login through the airport's WeChat mini-program. Reported per-passenger bandwidth is about 15 Mbps, enough for HD video, and the authentication is reported to stay valid for about three months, so a return visit auto-connects. Daxing (PKX) is simpler: join the network named BDIA-FREE-WIFI and photograph your passport photo page in the authentication page; kiosk login, WeChat login and phone-number login are offered alongside it.

• Capital (PEK) — look for the Wi-Fi dispensers — Around 46 machines across T2 and T3. Slide your passport where indicated, then type the printed account and password into the login page. [verify]
• Daxing (PKX) — SSID: BDIA-FREE-WIFI — Photographing your passport photo page in the portal completes verification. Kiosk, WeChat and phone-number login are also available.
• It lasts months, not hours — Capital's authentication is reported to remain valid for about three months, so a second visit connects without repeating the passport step. [verify]
• Use it for the arrival card — Since 20 November 2025 the National Immigration Administration has allowed foreign arrivals to fill in the entry card online. Do it on airport Wi-Fi, then scan the on-site QR code.

Getting through the airport portal in one attempt

The airport portal is the one public network in Beijing worth spending five minutes on, because it carries you through the first hour of the trip. Do it once, properly, and screenshot the result.

• Turn off auto-join first — With auto-join on, your phone hops between airport networks and reloads the portal each time. Pick one SSID manually and stay on it.
• Photograph the passport page flat and evenly lit — Passport authentication is photo-based OCR. A crumpled or angled shot is the usual reason it fails. The dispenser skips OCR entirely.
• If the page rejects you, go to the dispenser (取号机) — It reads the physical passport instead of a photo. Note down the account and password it prints — you will need them again for a laptop or a second phone.
• Do not walk while it authenticates — The airport's own advice: stay put until authentication finishes, and stand away from crowds — bodies block the signal.
• Ask a 服务大使 (service ambassador) — Staff in the terminal handle failed authentication, dropped connections and slow speeds all day. Faster than fighting the page alone.
• Screenshot the credentials — So the rest of your party, or your second device, can sign in without repeating the passport step.

Hotels: the network you will actually use every day

Hotel Wi-Fi is the one network in Beijing that reliably works for foreign guests, because the verification happens at check-in rather than on a portal — you already handed over your passport. Depending on the property you either connect openly, or enter your room number and the surname on the booking, or use a password printed on the key-card sleeve. Two practical notes. Signal is usually strongest in the lobby and in rooms near the lift lobby; if you are at the far end of a long corridor, ask to move or just work from the lobby. And if you need a video call, ask at reception which network name is the 5 GHz one, because the 2.4 GHz one is shared with every television and phone in the building. Bandwidth varies enormously between properties, so treat hotel Wi-Fi as enough for maps, messaging and video calls, and not as a guarantee.

Cafés, malls and restaurants: a bonus, not a plan

International chains with a counter — Starbucks, McDonald's, Costa, and the lobby cafés of the big hotels — usually have Wi-Fi, and the portal is typically a WeChat follow, a phone number, or a password printed on the receipt. Two habits make it work: buy something first, and simply ask. The network name and password are almost always printed at the till or on a card on the table. If not, hold up your phone and ask. Mall portals are the most likely to demand a +86 SMS code and the least likely to offer an alternative, so go to the concierge desk with your passport in hand — staff can often register you manually. Expect a time limit of an hour or two in cafés, and expect the network to drop when the shop closes.

• 有 WiFi 吗？ (yǒu WiFi ma?) — Is there Wi-Fi?
• 密码是多少？ (mìmǎ shì duōshǎo?) — What is the password?
• WiFi 怎么连？ (WiFi zěnme lián?) — How do I connect?
• Buy first, ask second — Staff hand the password to customers freely and much less readily to someone sitting with a laptop and a glass of tap water.

Metro and trains: plan for cellular only

Do not build a plan around Wi-Fi on the Beijing metro. Reports about passenger Wi-Fi on the network are inconsistent — some describe it as free and app-based, others as effectively unavailable — and where it exists it is generally gated behind a Chinese phone number [verify]. The good news is that you do not need it. China Tower reported in September 2026 that it had built mobile coverage across 313 km of tunnel on 20 newer Beijing metro line segments, using wide-band leaky feeder supporting 5G, and mobile signal now reaches platforms and trains across most of the network. High-speed trains are similar: onboard networks usually want you to log in through the railway's own app, which in turn wants a phone number, so download what you need before you board [verify].

• Tunnels: 4G and 5G, generally fine — The older eastern section of Line 1 is the classic dead spot [verify]. Assume brief dropouts anywhere and load your route before you go through the gates.
• Beijing's railway stations — Station Wi-Fi exists but is usually gated like every other public network — a phone number or an app login [verify].
• Download, do not stream — Offline maps, saved addresses and your e-ticket QR all work with no connection. Load them on hotel Wi-Fi.

Before you land: the 20-minute setup that removes the problem

Nearly every Wi-Fi problem in this guide disappears if your data is already working when the doors open. Do these at home, not in the arrivals hall.

• A travel eSIM, installed at home — Data-only China eSIMs start at roughly US$5-15 for a week [verify]. Install and activate before departure, because many need a non-mainland network to finish activation. It gives you no +86 number, but it also means you do not need one.
• Home-network roaming — Check the daily rate before you fly. Roaming has a useful side effect: traffic often exits outside the mainland, so Google, WhatsApp and Instagram keep working.
• A Chinese SIM if you are staying more than two weeks — Around ¥50-150 at airport counters with your passport, and about 20-30 minutes including face verification. A +86 number opens every portal, the delivery apps and the full 12306 booking system.
• Offline maps for Beijing, downloaded — Amap (高德) and Apple Maps both download offline city data. Do it on hotel Wi-Fi, not at the airport.
• Offline translation packs — Download the Chinese offline pack in your translation app. Offline camera and voice translation is genuinely useful at a table with no menu you can read.
• Your hotel's address in Chinese, screenshotted — Include the nearest metro station and the exit letter. It is the single most useful thing you can carry offline.

If you really have no data: the offline routine

It happens — the eSIM fails to activate, roaming was never switched on, and it is 11pm. The routine that gets you through a day: plan tomorrow's route on hotel Wi-Fi tonight and screenshot it; carry the hotel's card, because most front desks have one with the address printed in Chinese; agree a physical meeting point and time with your companions instead of relying on messaging; keep your passport and a paper or offline copy of your next ticket on you. Paying survives without your data better than you would expect — Alipay and WeChat Pay can both show a payment code that works for a short window without a live connection [verify]. Things that genuinely need a connection, like hailing a car or a metro QR pass, fall back to cash and to asking a member of staff.

Behaving on the networks you do join

• Watch for copycat network names — Airport_FreeWiFi_2 or Starbucks_Free with no login page at all are the classic traps. Ask staff which network name is theirs before you join.
• Never bank on an open network — Use cellular data for banking, payments and anything involving a password. If you must use Wi-Fi, the hotel network is the better of the available options.
• Assume the session is logged against a real identity — The operator has to tie your session to a verified identity, so activity on that network is attributable. Not a reason to panic — a reason not to do anything on it you would not do in public.
• Install any VPN before you arrive — VPN providers' own websites are frequently unreachable from mainland China, so set up and test at home. And remember it protects traffic; it does not unlock portals.
• Turn auto-join back off afterwards — Otherwise your phone keeps trying to rejoin a café network for the rest of the trip.