Internet restrictions in Iran: what's blocked in 2026

Iran operates one of the heaviest internet censorship regimes in the world. It does two things at once: it blocks a long list of major platforms and news sources, and it actively targets the circumvention tools people use to get around those blocks — tightening the screws further during periods of unrest. Understanding both halves is the key to staying connected.

What’s blocked in Iran

The blocklist covers much of the mainstream social and messaging web. Major platforms — including popular social networks, video sites and messaging apps — are inaccessible on a normal connection, and a wide range of independent and international news is filtered. Many people rely on domestic services and circumvention tools for everyday communication.

What sets Iran apart is what happens during unrest. In periods of protest, authorities have imposed severe slowdowns, blocked additional platforms, and at times triggered near-total internet blackouts. Connectivity can become unpredictable with little warning. The table above summarizes the services that are most often affected.

There is also a structural dimension. Iran has invested in a national network layer designed to keep domestic services running even when access to the wider internet is curtailed. The practical effect for anyone trying to reach outside platforms is that filtering can be applied broadly and quickly, and that the baseline level of restriction is high even in ordinary times, before any protest-driven tightening. This is not a country where the open web is normally reachable with occasional exceptions; it is one where reaching much of the global internet depends on circumvention as a matter of course.

Crucially, the network also inspects the type of traffic leaving the country. Using deep packet inspection (DPI), it fingerprints the handshake patterns of common VPN protocols and blocks connections that match — which is why a VPN that works elsewhere can go dead the moment you connect from inside Iran. The filtering also grows more aggressive during sensitive periods, so a tool that held up last week may struggle this week.

How people stay connected

The reliable answer is a VPN with strong obfuscation. Obfuscation disguises your VPN traffic so it looks like the ordinary encrypted HTTPS traffic the modern web runs on. There is no obvious VPN signature for DPI to catch, so there is nothing to fingerprint and block. This is exactly what Veilock’s censorship-bypass technology is built for, paired with no-logs infrastructure so your activity is not recorded.

The technical stack behind it matters most in an environment this demanding. Veilock encrypts the tunnel with AES-256-GCM, resolves domains over DNS-over-HTTPS so lookups are not exposed to the local network, and keeps no activity logs. Encryption protects the contents of your traffic, obfuscation hides that a VPN is being used at all, and encrypted DNS prevents the network from seeing which sites you request. In a country that both blocks platforms and hunts the tools used to reach them, no single layer is sufficient on its own — it is the combination that keeps a connection standing.

Set up before you need it

This is the single most common mistake. VPN websites and app stores are frequently blocked inside Iran, so if you wait until you are there to install one, you may not be able to. Before you travel:

• Create your account and download the app while you still have open internet.
• Install it on every device you’ll bring.
• Confirm you can connect using the obfuscated TCP option, which is hardest to detect.
• Save your login details offline.

Troubleshooting inside Iran

If your connection drops or won’t establish:

1. Switch to obfuscated TCP if you were on UDP — TCP is more resilient against DPI.
2. Change server location — filtering sometimes targets specific endpoints; another country often restores access.
3. Reconnect at a different time — blocking intensity varies, especially during periods of unrest.
4. Update the app before you travel — obfuscation techniques evolve, and the latest build matters most here.

The TCP-versus-UDP choice deserves emphasis in an environment this aggressive. UDP is faster and often the default, but its traffic pattern is easier for deep packet inspection to single out. TCP carries a little more overhead, yet it blends in more convincingly with ordinary web traffic and tends to survive filtering that a UDP connection does not. When access is tightening, the obfuscated TCP option is the setting most likely to keep you online, and for browsing and messaging the speed difference is rarely noticeable. Because conditions here can change from one day to the next, expect to try more than one server and to reconnect, rather than relying on a single fixed configuration.

The legal picture

VPN use in Iran sits under heavy restriction. Only state-sanctioned services are treated as lawful, and unauthorized VPNs operate outside official approval. Rules and enforcement can shift quickly, particularly during periods of unrest when filtering tightens. This makes the risk assessment more serious than in many other countries: you are responsible for understanding and accepting that risk before using any tool.

Because the stakes here are higher than in a country that merely filters some content, it is worth being deliberate. The environment can change with little warning, official positions and enforcement are not static, and what is tolerated at one moment may not be at another. This page cannot substitute for current, qualified guidance on your specific situation, and nothing here should be read as encouraging any particular course of action.

Treat this page as general information rather than legal advice, and verify the current situation before you rely on anything. Responsibility for compliance and for your own safety rests with you.

The bottom line

Iran blocks much of the mainstream internet and layers on protest-related slowdowns and shutdowns, while actively hunting the tools people use to get around it. The only dependable path through is a strongly obfuscated, censorship-resistant VPN installed and tested before you need it. Veilock was built for exactly this kind of challenge — see our VPN guide and guide to bypassing censorship for setup details and current server status, and take the legal and safety considerations seriously.