Iran has partially restored internet access to approximately 53% of normal traffic volumes, according to network measurement firm Kentik, after a series of blackouts imposed first in January 2026 in response to mass protests, and again when the US-Israeli military campaign against Iran began. WhatsApp, Instagram, and Facebook remain blocked or accessible only via VPN, and digital-rights group Filter Watch has confirmed that two-factor authentication has stopped functioning nationwide, effectively locking millions of Iranians out of platforms they can technically reach.
Analysts say the restoration carries the hallmarks of a diplomatic signal toward Washington rather than a genuine easing of controls. The Supreme Council of Cyberspace — not the elected government — holds decisive authority over what gets switched back on.
When Iranian President Masoud Pezeshkian ordered a partial restoration of internet access in late May 2026, the move was framed domestically as an economic necessity. The more consequential audience, analysts say, was sitting in Washington. With ceasefire negotiations between Tehran and the Trump administration at an uncertain stage, restoring connectivity to 53% of pre-shutdown levels — a figure measured by Kentik’s traffic monitoring infrastructure — offered the Iranian government something it rarely volunteers: a visible, reversible concession.
The concession is modest by design. WhatsApp and Instagram remain blocked without a VPN. Two-factor authentication has failed across the country, according to Filter Watch, the Iranian digital-rights NGO, meaning that even Iranians with restored data connections cannot safely log into the platforms they nominally have access to. One household may have mobile data; the next may not, depending entirely on which carrier their SIM card uses.
What has changed is the signal, not the architecture. Iran’s internet infrastructure remains what it has been since the government began building the National Information Network — a parallel domestic intranet that routes most traffic through state-controlled gateways and keeps the global internet available only on terms the security establishment approves.
How Iran controls the switch
The legal foundation for Iran’s internet controls is Iran’s 2009 Computer Crimes Law, supplemented by binding directives from the Supreme Council of Cyberspace, which authorise blocking or throttling any content deemed contrary to national security, public decency, or Islamic principles. There is no judicial review mechanism equivalent to those in EU or US frameworks. Shutdown orders can be executed within hours through the centralised international gateways that handle almost all of Iran’s outbound traffic.
Kentik Director of Internet Research Felicia Anthenien has noted that Iranian authorities have shifted away from blunt full blackouts toward more targeted throttling and platform-specific blocking — a tactic that limits economic damage while preserving information control. Doug Madory, Kentik’s Director of Internet Analysis, argues that Iran’s centralised gateway architecture is precisely what makes this calibration possible: authorities can dial connectivity up or down in response to political calculations rather than technical constraints. The firm’s data shows connectivity had collapsed below 20% of normal levels during the January 2026 shutdown before recovering to current levels.
The scale of what Iran can impose when it chooses to is not in dispute. During the November 2019 fuel-price protests, Oracle’s Internet Intelligence recorded a drop of approximately 95% in outbound traffic — a near-total severance from the global internet that lasted several days. Access Now has documented at least three nationwide disruptions since 2022, each causing severe disruption to messaging and cloud services.
Domestic homegrown apps — Bale and Rubika among the most widely used — operate freely on the National Information Network intranet and are almost certainly subject to government monitoring. Iranians deleting these apps in social media videos this week, celebrating the ability to use WhatsApp again, may be trading surveillance risk for connectivity without fully knowing which risk is greater.
Kentik’s full measurement analysis of Iran’s internet disruptions documents the pattern of restrictions in granular traffic data.| Date | Trigger | Connectivity impact | Duration |
|---|---|---|---|
| November 2019 | Fuel-price protests | ~95% outbound traffic drop (Oracle Internet Intelligence) | Several days |
| January 2026 | Mass protests; government crackdown | Below 20% of normal levels (Kentik) | Weeks; partial restoration in February 2026 |
| Early 2026 (war onset) | US-Israeli military campaign begins | Near-total shutdown reimposed | Until late May 2026 partial restoration |
| Late May 2026 | Ceasefire diplomacy; economic pressure | ~53% of normal traffic (Kentik) | Ongoing; status uncertain |
The diplomatic calculation behind a half-open door
The US State Department has repeatedly condemned Iran’s shutdowns as an attempt to “cut off the Iranian people from the world.” The EU has adopted targeted sanctions under its human-rights regime citing arbitrary communications disruption, and Western capitals have selectively eased export controls on secure communications tools to help Iranians circumvent blocks — without directly enabling state surveillance infrastructure. The Iran Freedom and Counter-Proliferation Act and the US Global Magnitsky sanctions framework both allow Washington to freeze assets and restrict financial system access for Iranian officials linked to digital repression.
That legal architecture gives Washington a lever Tehran understands. A partial internet restoration, visible in international traffic measurements and celebrated by the Iranian diaspora, costs the security establishment relatively little while generating diplomatic optics that a complete blackout cannot. It is the kind of move that looks like compromise without requiring structural change — which is, historically, how Tehran has managed pressure from outside its borders.
The forward signals worth watching are narrow but specific. If Iran’s Communications Ministry or independent observatories like NetBlocks report full-speed restoration of major Western platforms on mobile networks in the coming weeks, it would suggest Tehran is prioritising economic normalisation as a diplomatic asset. If that does not happen — and the tiered system consolidates instead — expect high-quality global internet access to remain restricted to state-approved institutions and those wealthy enough to afford business-grade VPNs or smuggled satellite terminals. The connection between Iran’s digital posture and its aviation reopening is worth noting: Tehran’s Imam Khomeini International Airport resumed limited domestic operations in late April 2026, but foreign carriers including Emirates and Lufthansa have not returned, reflecting the same calculus — partial normalisation signalled, structural isolation maintained.
Beyond the headline
The power behind it
Formal responsibility for Iran’s connectivity lies with ministries and regulators, but the decisive actor is the security establishment clustered around the Supreme Leader, which can order shutdowns regardless of economic fallout. That concentration of power turns internet access into a tactical lever, deployed or withdrawn to shape protests, negotiations, and elite signalling rather than as a neutral public utility.
What isn’t being said
Public messaging frames the restoration as a technical and economic necessity, yet officials rarely acknowledge that millions of Iranians have built livelihoods and civic networks entirely on blocked platforms. Leaving this out obscures how every new restriction or “partial” easing directly recalibrates who can speak, trade, and organise — and who is pushed back into state-approved information channels.
The reach
For European and North American universities and firms that quietly depend on Iranian students, researchers, and outsourced specialists, Tehran’s digital controls act as a gate on cross-border knowledge flows. When two-factor codes fail or platforms vanish behind filters, projects stall and collaborations wither, subtly shifting research and outsourcing away from Iran toward jurisdictions where connectivity is politically safer to rely on.
What Iran’s partial internet restoration means for you
With ceasefire talks between Tehran and Washington at a fragile and unresolved stage, the status of Iran’s internet access can reverse within hours — and the actors who control that switch are not the ones sitting at the negotiating table.
-
Diaspora families and dual nationals
The restoration to 53% of normal traffic has allowed some families to speak for the first time since the January 2026 blackout, but two-factor authentication failures mean accounts linked to Iranian phone numbers — including bank, email, and university logins — remain at risk of lockout. If you have accounts tied to an Iranian mobile number, consider migrating two-factor authentication to an authenticator app or a non-Iranian number now, before the next disruption. The US Treasury’s Iran sanctions programme page outlines what financial transfers remain permissible for family remittances.
-
Western businesses and remote teams
Firms using Iranian contractors for software development, design, or customer support should treat current connectivity as temporary and unguaranteed. Workflows dependent on GitHub, Slack, or WhatsApp are vulnerable to disruption at any point the Supreme Council of Cyberspace decides the political calculation has changed. Build redundancy now: document processes that can run asynchronously, and assess whether authentication flows tied to Iranian telecoms create indirect exposure for your own systems.
-
Policy and security analysts
The tiered internet architecture Iran is consolidating — a domestic intranet for the general population, premium global access for institutions and the wealthy — follows the Chinese Great Firewall model closely enough to be considered a deliberate policy export. Watch for US Treasury or State Department human-rights designation cycles later in 2026 targeting Iranian telecom or security entities involved in shutdowns: if Washington ties ceasefire progress explicitly to digital-rights behaviour, it changes the diplomatic cost calculus Tehran is currently running.





