As protests surged nationwide, Iran’s blackout cut people off from the world, disrupted daily life, and strengthened repression by blocking coordination, evidence, and outside contact.
The nationwide internet blackout began on January 8, 2026 (18 Dey 1404), on the eleventh day of the protests—at the moment the uprising reached a new peak. Demonstrations had expanded to more than 100 cities, with strikes in the bazaars, assemblies in universities, and nighttime protests intensifying to the point that, the same night, images circulated of cities such as Tehran—at least in some areas—effectively occupied by protesters while the regime appeared to lose control. In that context, authorities reportedly drove connectivity to below 2% of normal levels, cutting tens of millions off from the outside world.
Human rights groups warned the shutdown was designed to conceal lethal repression and prevent documentation; monitoring groups described it as a “digital war” waged by the state against society. The blackout also hit everyday life: when Iran’s international links are severed, many services break even for users inside the country because lots of “domestic” apps and sites still rely on foreign infrastructure. In past shutdowns—for instance after the Aban protests in November 2019, when people rose up against a sudden fuel-price hike and the crackdown was hidden behind a near-total cutoff—people inside Iran could sometimes open locally hosted sites, but crucial functions often failed, especially anything tied to secure connections: payment gateways, banking, maps, verification, and encrypted messaging.
What people saw when the blackout hit
The cutoff began late in the evening on January 8. Soon after, many Iran-based websites became unreachable from abroad. Inside the country, the picture was often chaos: some services partially worked, others didn’t, and even when a page loaded, key features could fail. The shutdown didn’t just block news and social media; it also jammed basic tools people use to live—money transfers, work systems, logistics, and medical coordination.
How the regime shuts the internet down
The term “kill switch” is widely used in English to describe a state’s ability to shut down or sharply restrict the internet nationwide. In practice, it is not a single button but a set of controls that can choke connectivity at a few key points.
At the center of this system are the main pathways that carry data between Iran and the global internet—especially international routing (often discussed in terms of BGP), along with choke points such as DNS disruption and direct orders to internet providers. In plain terms, the state does not need to monitor every individual connection if it can close a few major gates.
When those gates close, it is not only Instagram and WhatsApp that disappear. Many Iranian services depend on resources outside Iran—security certificates, cloud services, software updates, maps, and verification systems—so even the “internal internet” can become unstable quickly.
How the kill switch works in practice
In the simplest version: a state-controlled center can order providers to throttle or cut traffic, disrupt international routing, and interfere with key systems like DNS. The shutdown can be sudden or gradual, but the outcome is the same—connectivity collapses to a tiny fraction of normal and everything from communications to banking and essential services is affected.
In Iran, this control is described as centralized and operational—managed through cyber command structures. It does not stop at fiber and cell towers: reports also describe efforts to locate and disrupt satellite alternatives. One part of that involves tracking satellite “ground terminals” (like Starlink dishes) and attempting to interfere with them; another involves jamming and GPS interference that can make satellite links unstable or unusable in some areas.
NetBlocks’ CEO Alp Toker has described this as a war by the authorities against their own population using digital tools, and warned it could last days or weeks—especially if the goal is to hide crimes and keep the outside world blind.
Why this shutdown feels different
This time did not look like a single move. It looked like an escalation that used several older methods together: disruptions that hit hardest during the hours when people usually gather; worse connections in active protest areas; and then a plunge into a near-total nationwide blackout on January 8.
The point is not only to stop people from posting videos. It is to stop people from organizing in real time, and to slow the flow of evidence when the streets are most dangerous.
The long build-up: how Iran got here
Iran did not start with full shutdowns. First came filtering—blocking platforms and restricting access to news. Then came “slow internet” tactics: keeping services technically reachable but making them so weak that they become unusable. After that, the state leaned into targeted disruptions—especially mobile networks in specific neighborhoods—so protests could be cut off locally without declaring a national blackout. And once VPNs became widespread, the pressure shifted to secure traffic itself: making encrypted connections unreliable so people cannot easily bypass filters or share files safely.
A nationwide blackout is the last step in that ladder: a decision that the costs of shutting down the country are worth paying because the larger fear is losing control of the streets—and losing control of the story.
“National internet” and why it matters
The state has spent years building internal infrastructure so it can keep some services running while cutting people off from the world. This is often described as the National Information Network (NIN). The promise is “independence.” In crisis moments, the result is control—and a cheaper, easier shutdown.
Even with that system, a deep cut can still break local services, because modern networks are tangled together in ways ordinary users never see—until the day everything fails.
Who can actually press the button
A cloud or CDN company cannot usually shut down a whole country’s internet by itself. That kind of shutdown happens at the backbone level—through state-linked infrastructure bodies and major telecom operators.
Still, companies that help expand domestic hosting and routing can matter indirectly: the more daily life is pushed into a controlled domestic ecosystem, the easier it becomes to isolate the population during a crisis.
How people try to stay connected anyway
Even during a near-total blackout, people look for cracks in the wall. Satellite internet like Starlink is one of the biggest—because it connects through satellites rather than Iran’s fiber and towers—but it is illegal, expensive, often smuggled in, and authorities try to disrupt it through jamming and GPS interference.
Border-area connectivity can also happen in some places: people near borders sometimes catch signals from neighboring countries, though it is patchy and not available to most. Foreign eSIMs can offer short windows of access but are costly. And rare fixed-line workarounds come and go.
These are not just “tech tricks.” In moments like this, they can decide whether footage reaches the outside world, whether families can locate missing people, and whether the wounded can get help.
What the blackout is really for
A shutdown like this is not only about censorship. It is about isolating people at the exact moment they most need each other and the outside world. It is about buying time—time to repress without witnesses, time to control the story, time to break coordination.
That is why rights groups warn that intentional blackouts are not neutral “security measures.” They are part of the crackdown itself.
