In Iran, VPNs—commonly known as circumvention tools—have evolved from niche software into essential tools for daily internet access. Once used primarily for reaching restricted or politically sensitive content, VPNs are now deeply integrated into daily life. According to the third report by the Tehran E-Commerce Association, more than 80% of Iranians rely on VPNs for everyday internet activities.
The prominence of VPNs has even become a key issue in Iran’s 2024 presidential elections. Candidates have debated everything from banning VPNs, the so-called “VPN mafia,” and the idea of taxing VPN usage, to proposing government-controlled VPN services under a framework dubbed “tiered internet access.”
During the first round of the 2024 presidential debates, candidates made numerous promises regarding improving internet speed, lifting restrictions, and increasing access to international platforms. The scale of these promises prompted a response from then-Minister of Communications Isa Zarepour, who criticized them as unrealistic. In an interview, he stressed that such decisions are made in sessions where the government doesn’t always hold the majority, urging candidates to consider their post-election accountability.
Earlier, Amir Nazemi, the former head of Iran’s Information Technology Organization under Hassan Rouhani’s presidency, explained in a note how the decision-making process for filtering works. He highlighted that despite the government having six members on the “Criminal Content Determination Committee,” a 2011 agreement under President Mahmoud Ahmadinejad transferred decision-making power to a smaller subcommittee where the government has minimal influence. This shift significantly weakened the government’s role in managing internet censorship.
As a result, decisions about internet filtering are largely made by appointed bodies, such as the Supreme Council of Cyberspace, or in certain cases, the Supreme National Security Council and other committees where most members are government appointees.
Meanwhile, as internet censorship has expanded, so too has the lucrative “VPN mafia” that operates within Iran’s black market, generating massive financial gains.
But how did VPNs, originally designed to combat government censorship, become widespread tools developed and distributed by the IT community?
In episode nine of the “Seventh Layer” podcast, we explore how the tech community, both inside and outside Iran, has taken an active role in developing and providing VPNs to users. We also introduce a few VPN options and share tips on how users can verify their security.
The IT Community’s Fight Against Censorship
Following the November 2019 protests and the 10-day internet shutdown, a group of IT activists started developing methods to fight censorship. Building on that experience, the IT community became more coordinated during the “Woman, Life, Freedom” movement, offering technical support to help Iranians bypass digital barriers and access free information.
Computer and IT specialists, both inside and outside Iran, formed networks to design secure and free VPNs. Between October 2022 and January 2023, they introduced several new tools, including the “Mahsa” project, which drew inspiration from anti-censorship movements in China and was later adapted for use in Iran.
Other tools include the “Hidify” app, which allows users to install the software on their own servers, creating personal VPNs. Another app, “Oblivion,” offers a simple, one-click solution for bypassing filtering.
Beyond these organized efforts, many individuals outside of Iran have personally funded VPN servers, making them available to users back home. Given the economic challenges in Iran and the high cost of VPNs, this has enabled more people to access secure, free tools.
The Role of Civil Activists in Distributing Tools
While the IT community quickly developed reliable VPNs, it became evident that they needed intermediaries to introduce and promote these tools to the public. During the “Woman, Life, Freedom” movement, many VPN developers were targeted by cyberattacks from government forces. Since many of these developers were unknown to the Iranian public, they required support from civil activists and well-known figures to gain trust.
There was also a significant gap in the methods available for promoting and educating people about secure VPNs. The IT community needed to find ways to reach users in Iran who weren’t familiar with advanced technology but were eager to safely regain access to uncensored information.
This is where the presence of civil activists and public figures became crucial—they acted as intermediaries, helping to raise awareness about these tools and guide users on how to use them.
How to Ensure a VPN is Secure
One of the biggest challenges for users is assessing the security of the VPNs they use to bypass censorship.
IT experts stress that one indicator of a secure VPN is its “open-source code,” which allows transparency in how the tool was built. This transparency enables experts to review the code and ensure the product is safe.
The privacy policy of these tools is also critical. Users should review how the developers handle their data and whether the privacy policies clearly explain how user data is processed.
Another important factor is the regular updating of these tools. Frequent updates ensure that security vulnerabilities are fixed as soon as they are identified.
Additionally, media outlets and organizations capable of producing and distributing multimedia content can play a vital role by creating simple instructional videos or guides to help users understand how to use these tools securely.
