Iran’s Internet Went Dark After U.S.–Israel Strikes—Here’s What That Blackout Signals About What Comes Next
After reported joint U.S.–Israeli strikes, Iran’s connectivity reportedly plunged to ~4%. Whether deliberate or damage, the blackout reshapes what can be known, shared, and contested—right now.
By TheMurrow Editorial
February 28, 2026
Key Points
- 1Iran’s connectivity reportedly plunged to about 4% after February 28 U.S.–Israel strikes, reshaping what Iranians and outsiders can verify in real time.
- 2Track the mechanism: blackout effects are measurable, but attribution is harder—patterns resemble prior state shutdown tactics and routing-based disconnection playbooks.
- 3Watch for phased restoration (often SMS first), whitelisted “trickle” access, and escalated cyber-psychological operations that can prolong clampdowns.
The first sign of war in the modern Middle East is often not smoke on the horizon, but silence on a screen.
On Saturday, February 28, 2026, major news organizations reported joint U.S.–Israeli strikes across Iran, a sharp escalation with consequences that extended far beyond military targets. Within hours, internet monitors and reporters observed something almost as dramatic as the explosions: Iran’s national connectivity plunged to roughly 4% of normal levels, a collapse described as a near-total blackout.
A country of more than 80 million people does not simply “lose the internet” by accident. Yet early coverage also reflects a careful uncertainty: observers can measure the drop, but public reporting has not produced a single definitive technical proof—a decree, a routing map, a smoking-gun order—that explains precisely how, or by whom, the shutdown was executed.
When connectivity falls to 4%, the story isn’t just disruption—it’s control.
— — TheMurrow
The blackout matters because it shapes what the world can know. It also shapes what Iranians can do: communicate, document, organize, and, just as importantly, work. The strike-crisis has a military front and a communications front, and Iran’s internet is where the two now meet.
The night Iran went quiet: what we know from February 28
Reports on February 28 described widespread strikes and explosions heard in Tehran, with outlets including The Guardian framing the operation as a significant escalation. Almost immediately, digital monitoring and on-the-ground reporting began documenting a second event: the disappearance of Iran’s internet from the global network.
The Washington Post reported that Iran’s connectivity dropped to about 4% of normal, a figure that serves as more than a dramatic statistic. It implies that most ordinary paths to the outside world—messaging apps, global news sites, email, cloud services, international banking connections—either failed outright or became unusable at scale.
The Washington Post reported that Iran’s connectivity dropped to about 4% of normal, a figure that serves as more than a dramatic statistic. It implies that most ordinary paths to the outside world—messaging apps, global news sites, email, cloud services, international banking connections—either failed outright or became unusable at scale.
4%
The Washington Post reported Iran’s connectivity fell to about 4% of normal—a near-total national blackout affecting most ordinary access paths to the outside world.
What “4% connectivity” actually signifies
A national internet “blackout” rarely means every packet stops moving. Network analysts have long cautioned that a near-total outage can still include a residual trickle: limited services for certain institutions, carefully selected users, or whitelisted channels.
That nuance is crucial for readers trying to interpret real-time reports. A blackout can be designed to look absolute to the public while leaving behind just enough access to keep state functions, security services, and favored institutions operating.
That nuance is crucial for readers trying to interpret real-time reports. A blackout can be designed to look absolute to the public while leaving behind just enough access to keep state functions, security services, and favored institutions operating.
What remains uncertain—and why it matters
Early reporting also underscores a point that should anchor any serious discussion: measurement is not the same as attribution. Monitoring tools can show a collapse in connectivity. Inferring intent—deliberate shutdown versus infrastructure damage—requires more evidence than a chart alone can provide.
Still, the pattern fits a known playbook. The Washington Post noted the blackout appears consistent with prior Iranian state shutdown tactics during crises, suggesting deliberate restriction rather than purely physical damage. That is a strong inference, but not yet a settled technical case in public view.
Still, the pattern fits a known playbook. The Washington Post noted the blackout appears consistent with prior Iranian state shutdown tactics during crises, suggesting deliberate restriction rather than purely physical damage. That is a strong inference, but not yet a settled technical case in public view.
You can measure the outage in minutes. Proving who pulled the switch takes longer—and often never becomes public.
— — TheMurrow
How a country “turns off” the internet without turning off every wire
Iran’s internet does not float in the air; it runs through fiber, routers, and commercial providers. Yet modern shutdowns are often less about destroying equipment and more about controlling routes—deciding which networks can talk to the wider world.
Kentik, a network intelligence firm, analyzed a separate major disruption on January 8, 2026, describing Iran “going dark” as authorities effectively disconnecting the country from the global internet. Traffic volumes fell sharply after a sequence of network changes, including routing withdrawals.
Kentik, a network intelligence firm, analyzed a separate major disruption on January 8, 2026, describing Iran “going dark” as authorities effectively disconnecting the country from the global internet. Traffic volumes fell sharply after a sequence of network changes, including routing withdrawals.
The simplest lever: removing routes to the outside world
One widely discussed mechanism is BGP route withdrawals, a technical term for announcing that certain pathways to reach Iranian networks no longer exist. Kentik’s January reporting highlighted IPv6 route withdrawals that preceded broader collapse—signals consistent with a coordinated, top-down action rather than random failure.
Readers don’t need to master the acronym to understand the implication: if key routes vanish, the outside world cannot reliably reach Iranian networks, and Iranian users cannot reliably reach the outside world. The internet becomes an island, even if internal wiring remains intact.
Readers don’t need to master the acronym to understand the implication: if key routes vanish, the outside world cannot reliably reach Iranian networks, and Iranian users cannot reliably reach the outside world. The internet becomes an island, even if internal wiring remains intact.
Selective access: the “blackout” that isn’t total
Kentik’s work also described “whitelisting” and tiered access, where some connectivity survives for limited users or services. That matters because it suggests that even during a near-total shutdown, parts of the state and economy can remain connected—while ordinary citizens experience a wall.
A blackout, then, is not only a technical event. It is a political design choice: who gets to speak, who gets to hear, and who is forced into digital isolation.
A blackout, then, is not only a technical event. It is a political design choice: who gets to speak, who gets to hear, and who is forced into digital isolation.
Key Takeaway
A near-total blackout doesn’t have to be absolute to be effective. Residual access can preserve state functions while isolating most citizens from global networks.
Why Iran shuts down the internet: crisis control, narrative control
Iran’s shutdowns are widely described as tactical responses to crisis. The Washington Post framed the February 28 collapse as consistent with past moments when Iranian authorities restricted communications during unrest or instability.
The logic is blunt. Limiting internet access can:
- Slow organization and mobilization, especially in fast-moving situations
- Reduce real-time documentation of events, including potential abuses
- Manage the public narrative by restricting external media and social platforms
These goals overlap in practice. When citizens cannot share videos, coordinate safe routes, or confirm rumors, the state gains time and ambiguity—two powerful tools in a volatile moment.
The logic is blunt. Limiting internet access can:
- Slow organization and mobilization, especially in fast-moving situations
- Reduce real-time documentation of events, including potential abuses
- Manage the public narrative by restricting external media and social platforms
These goals overlap in practice. When citizens cannot share videos, coordinate safe routes, or confirm rumors, the state gains time and ambiguity—two powerful tools in a volatile moment.
What limiting internet access can do in a crisis
- ✓Slow organization and mobilization, especially in fast-moving situations
- ✓Reduce real-time documentation of events, including potential abuses
- ✓Manage the public narrative by restricting external media and social platforms
Digital isolationism as strategy, not just emergency
Chatham House has argued that Iran’s shutdown posture signals movement toward “total digital isolationism”—a broader political project to expand state control over communications. That project is often linked to Iran’s National Information Network, a domestic infrastructure that can serve as an intranet-like substitute when the global internet is restricted.
The existence of a domestic network changes the calculus. A state that can keep internal services running—some banking functions, some government portals, some local messaging—can impose deeper cuts to the global internet while reducing immediate internal backlash. That does not eliminate economic pain, but it can delay it.
The existence of a domestic network changes the calculus. A state that can keep internal services running—some banking functions, some government portals, some local messaging—can impose deeper cuts to the global internet while reducing immediate internal backlash. That does not eliminate economic pain, but it can delay it.
Shutting down the internet isn’t only about stopping information; it’s about deciding whose information counts.
— — TheMurrow
The January 2026 precedent: what restoration can look like after a blackout
February 28 did not occur in a vacuum. Iran experienced another major shutdown earlier this year, offering clues—without guarantees—about what might follow.
Kentik described January 8, 2026 as a moment when Iran “goes dark,” with disruptions extending beyond casual browsing into broader communications and connectivity. That earlier event became a case study in how shutdowns are implemented and how they unwind.
Kentik described January 8, 2026 as a moment when Iran “goes dark,” with disruptions extending beyond casual browsing into broader communications and connectivity. That earlier event became a case study in how shutdowns are implemented and how they unwind.
Phased reconnection: SMS first, then more
Al Jazeera reported that during the January episode, Iran began a phased rollback in which SMS service returned first. That detail can sound mundane until you consider what SMS represents: a low-bandwidth, tightly controllable channel that can restore a limited baseline of communication without reopening the full firehose of social media and international platforms.
A staged restoration also offers authorities a dial, not a switch. Each incremental reconnection can be tested, monitored, and—if the state perceives risk—reversed.
A staged restoration also offers authorities a dial, not a switch. Each incremental reconnection can be tested, monitored, and—if the state perceives risk—reversed.
January 8, 2026
Kentik described a major disruption on January 8, 2026 as Iran “going dark,” with traffic collapsing after routing changes including withdrawals.
Economic gravity pulls against prolonged shutdowns
Al Jazeera’s early February reporting emphasized the shutdown’s severe impact on people and businesses, quoting the communications minister criticizing the feasibility of a fully domestic-only internet approach. That criticism suggests internal recognition of a hard constraint: the economy depends on global connectivity, even in a system built to resist it.
For readers outside Iran, the practical takeaway is straightforward: prolonged blackouts are rarely cost-free to the government imposing them. The longer the outage, the more pressure accumulates—from commerce, from diaspora networks, from ordinary life that now runs through apps and cloud services.
For readers outside Iran, the practical takeaway is straightforward: prolonged blackouts are rarely cost-free to the government imposing them. The longer the outage, the more pressure accumulates—from commerce, from diaspora networks, from ordinary life that now runs through apps and cloud services.
A cyber-psychological overlay: the hacked prayer app and the logic of clampdowns
War today travels through phones as readily as it travels through airspace. Alongside the February 28 strikes, WIRED reported a striking example of a digital operation: a widely downloaded Iranian prayer-timing app, “BadeSaba Calendar,” reported as having more than 5 million downloads, was used to send push notifications urging surrender or defection.
That report matters for two reasons. First, it illustrates how digital channels can become psychological tools, delivering messages that feel intimate precisely because they arrive through trusted daily routines.
Second, it helps explain why a state might see internet restriction as a security measure, not merely a political one. If a widely used app can be co-opted to broadcast destabilizing messages, authorities may interpret the broader connected ecosystem as a vulnerability.
That report matters for two reasons. First, it illustrates how digital channels can become psychological tools, delivering messages that feel intimate precisely because they arrive through trusted daily routines.
Second, it helps explain why a state might see internet restriction as a security measure, not merely a political one. If a widely used app can be co-opted to broadcast destabilizing messages, authorities may interpret the broader connected ecosystem as a vulnerability.
5M+
WIRED reported the “BadeSaba Calendar” prayer-timing app—more than 5 million downloads—was used to push messages urging surrender or defection.
The uneasy line between protection and suppression
A government can plausibly argue that reducing connectivity limits hostile cyber operations. A government can also exploit that argument to justify suppressing domestic dissent and limiting independent reporting. Those motives are not mutually exclusive; in many crises, they reinforce each other.
The February 28 blackout sits squarely in that ambiguity. The timing—strikes, then silence—makes the communications clampdown feel like an extension of the battlefield, even if the immediate trigger is contested.
The February 28 blackout sits squarely in that ambiguity. The timing—strikes, then silence—makes the communications clampdown feel like an extension of the battlefield, even if the immediate trigger is contested.
What a blackout does to a society: the human and economic costs
Statistics like “4% of normal connectivity” can blur into abstraction. For Iranians, the reality is far more concrete: stalled livelihoods, broken family contact, and a widening fog around events that may be unfolding rapidly.
A near-total cutoff affects far more than social media. It can disrupt:
- Small businesses that rely on online payments, orders, and customer contact
- Remote work and international contracting, often paid through global platforms
- Education and university access to global resources
- Health and safety, including emergency communication and coordination
Al Jazeera’s reporting on the economic toll of earlier shutdowns emphasized how quickly daily life becomes brittle when the network goes dark. Even domestic alternatives cannot fully replace global systems when supply chains, clients, or family are outside the country.
A near-total cutoff affects far more than social media. It can disrupt:
- Small businesses that rely on online payments, orders, and customer contact
- Remote work and international contracting, often paid through global platforms
- Education and university access to global resources
- Health and safety, including emergency communication and coordination
Al Jazeera’s reporting on the economic toll of earlier shutdowns emphasized how quickly daily life becomes brittle when the network goes dark. Even domestic alternatives cannot fully replace global systems when supply chains, clients, or family are outside the country.
What a near-total cutoff can disrupt
- ✓Small businesses that rely on online payments, orders, and customer contact
- ✓Remote work and international contracting, often paid through global platforms
- ✓Education and university access to global resources
- ✓Health and safety, including emergency communication and coordination
The blackout as an information asymmetry machine
Internet restrictions also produce a political effect that is easy to miss: they create asymmetry. Authorities and connected elites may retain privileged channels through whitelisting. Ordinary citizens often do not.
That gap shapes power. When only some people can verify claims, see footage, or speak to international outlets, the public narrative narrows. Rumors fill the void, and rumors are easier to weaponize than facts.
That gap shapes power. When only some people can verify claims, see footage, or speak to international outlets, the public narrative narrows. Rumors fill the void, and rumors are easier to weaponize than facts.
What to watch next: signals of intent, capacity, and duration
Predicting the duration of a shutdown from outside Iran is notoriously difficult. Still, the research suggests several practical indicators that readers can watch for—without pretending they offer certainty.
Signal 1: staged restoration patterns
Al Jazeera’s January example—SMS returning first—offers a template. If limited services reappear in steps, that often implies the shutdown is being managed administratively, not simply repaired after physical damage. Phased reconnection also suggests the state is balancing stability, security, and economic pressure.
Signal 2: selective “trickle” access
Kentik’s reporting on whitelisting and tiered access implies that even during “near-total” outages, certain networks can remain reachable. If government services, banks, or state-linked media function while the public remains cut off from global platforms, that pattern points toward deliberate restriction.
Signal 3: the information war intensifies
The WIRED-reported prayer-app push notifications illustrate how cyber and psychological operations can accompany kinetic strikes. If similar incidents proliferate, authorities may view broad connectivity as an active threat vector—raising incentives to keep restrictions in place.
Practical takeaways for readers outside Iran
For journalists, policymakers, and citizens trying to track events, the blackout implies several realities:
- Early information will be incomplete. The outage constrains independent verification.
- Diaspora networks will matter more. External family channels and out-of-country contacts become key conduits.
- Technical monitoring is necessary but insufficient. Connectivity graphs show effects; they rarely prove intent on their own.
The deeper implication is sobering: modern conflict can be fought not only over territory, but over who gets to witness reality as it happens.
- Early information will be incomplete. The outage constrains independent verification.
- Diaspora networks will matter more. External family channels and out-of-country contacts become key conduits.
- Technical monitoring is necessary but insufficient. Connectivity graphs show effects; they rarely prove intent on their own.
The deeper implication is sobering: modern conflict can be fought not only over territory, but over who gets to witness reality as it happens.
The communications front is now a central front
The February 28 strikes may be remembered for their immediate military consequences. The internet collapse that followed may prove just as consequential for how the episode is recorded, understood, and contested.
A shutdown of this scale reshapes the information environment at the very moment when transparency matters most. It may protect against certain cyber threats. It may also erase evidence, silence dissent, and delay the world’s ability to understand what is unfolding.
Iran has demonstrated, through repeated episodes, that the internet can be treated as infrastructure—and as a switchboard for power. Outside observers can document the drop to 4%. Inside Iran, people must live with what that number means: messages that never arrive, businesses that cannot function, and a public sphere reduced to whatever channels remain.
The question now is not only when Iran’s internet will return, but what form it will return in—open, partial, tiered, or transformed by yet another step toward digital isolation.
A shutdown of this scale reshapes the information environment at the very moment when transparency matters most. It may protect against certain cyber threats. It may also erase evidence, silence dissent, and delay the world’s ability to understand what is unfolding.
Iran has demonstrated, through repeated episodes, that the internet can be treated as infrastructure—and as a switchboard for power. Outside observers can document the drop to 4%. Inside Iran, people must live with what that number means: messages that never arrive, businesses that cannot function, and a public sphere reduced to whatever channels remain.
The question now is not only when Iran’s internet will return, but what form it will return in—open, partial, tiered, or transformed by yet another step toward digital isolation.
T
About the Author
TheMurrow Editorial is a writer for TheMurrow covering world news.
Frequently Asked Questions
Did Iran’s internet really drop to 4% after the February 28, 2026 strikes?
Yes. The Washington Post reported that monitoring showed Iran’s connectivity falling to around 4% of normal, widely described as a near-total national blackout. That figure captures a collapse in ordinary access for most users, even if some limited connectivity may persist for select services or networks.
Was the blackout caused by bomb damage or by government action?
Public reporting strongly suggests a pattern consistent with prior Iranian state shutdown tactics, but early coverage also cautions that definitive technical proof is not yet publicly established. Monitoring can measure the drop; determining whether the cause was deliberate restriction, infrastructure damage, or both requires more evidence than is typically available immediately.
How does a government “turn off” the internet technically?
Network analysts often point to mechanisms like BGP route withdrawals and disconnections at key transit points that sever pathways to the global internet. Kentik’s January 2026 analysis of Iran described routing changes—such as IPv6 route withdrawals—followed by broader traffic collapse, consistent with centralized control.
Does “blackout” mean Iran has zero internet at all?
Not necessarily. Kentik has described shutdowns where a residual trickle remains through whitelisting or tiered access. A near-total blackout can still allow privileged connectivity for certain institutions, services, or users, while the general public experiences severe restriction.
Why would Iran impose an internet shutdown during a military crisis?
Reporting and expert commentary commonly cite crisis control objectives: limiting mobilization, reducing real-time documentation, and shaping the public narrative. Chatham House has also argued Iran is moving toward deeper digital isolationism, supported by domestic infrastructure that can substitute for parts of the global internet.
How long could the blackout last, and what signs suggest it’s ending?
Duration is hard to predict from outside, but past episodes offer clues. Al Jazeera reported that during January 2026 disruptions, SMS returned first as part of a phased restoration. Signs of easing often include staged returns of basic services, growing “trickle” connectivity, and selective access patterns consistent with managed reconnection rather than random repair.
