How Capable Is Iran of Striking the U.S. Homeland?

Iran is now locked in open conflict with the United States and Israel, and questions about how far Tehran can reach are no longer theoretical. The most alarming scenario is a direct strike on American soil, yet the picture that emerges from current intelligence is more complex and layered than a simple yes or no. Iran appears limited in its ability to hit the continental United States with missiles, while retaining serious options in cyberspace, through terror proxies, and against American forces abroad.

Assessing how capable Iran is of striking the U.S. homeland requires separating fear from physics, and rhetoric from documented capability. Missile range, nuclear timelines, cyber tradecraft, covert networks, and foreign support all shape the real risk to Americans at home.

Missile Range: How Far Iran Can Physically Reach

Iran has spent decades building one of the largest missile arsenals in the Middle East, but range still matters. Open assessments describe an arsenal that consists primarily of short- and medium-range ballistic missiles with ranges of up to roughly 2,000 kilometers, which is about 1,240 miles. That distance allows Iran to threaten U.S. bases and partners across the Persian Gulf and into parts of Europe, but it falls far short of the continental United States.

Earlier intelligence reviews of Iran’s missile testing concluded that its ballistic missile arsenal includes medium-range systems that can travel 1,000 to 3,000 kilometers, or 621 to 1,864 miles. Even at the upper end of that range, those missiles cannot reach the East Coast of the United States from Iranian territory.

Independent missile threat reviews echo that judgment. One assessment by Defense Intelligence Agency concluded that missiles capable of reaching the United States are still many years away if Iran chooses to pursue them. Another missile and nuclear review stated that Iran did not have ballistic missiles capable of hitting the United States and that it might take until 2035 or longer for it to have that capability if it decided to try to do so, according to United States intelligence.

In other words, Iran can credibly threaten American forces and allies in the region with missiles, but it lacks an operational intercontinental ballistic missile that could strike New York, Washington, or Los Angeles. That technical gap is central to any honest answer about the risk of a direct missile hit on the U.S. homeland.

Nuclear Program: Power, Leverage, and Limits

The nuclear question adds another layer of anxiety. Iran significantly expanded its stockpile of highly enriched uranium, including material enriched to 60% purity, far beyond the levels used for civilian power reactors. That stockpile gives Iran a shorter technical path to weapons-grade material if it chooses to sprint for a bomb.

Yet nuclear material is not the same as a deliverable nuclear weapon. The Defense Intelligence Agency concluded that it would be a decade before Iran would be able to gain the technical skill to produce a reliable nuclear weapon, according to an assessment cited in the 2026 Iran war reporting. That timeline reflects the complex engineering needed to design, miniaturize, and mount a nuclear device on a missile that can survive launch and reentry.

Strikes on Iranian nuclear sites in June 2025 also set back the program. Analysts estimated that Iran’s nuclear program had been delayed by two years following those attacks, according to the same Iran war overview. That delay matters because it widens the window for diplomacy or further disruption before Iran can pair fissile material with a long-range delivery system.

For the U.S. homeland, the bottom line is stark. Iran’s nuclear advances increase leverage and raise the stakes of any confrontation, but current intelligence does not support the idea of an imminent nuclear missile strike on American cities.

Cyber Power: The Most Direct Path Into U.S. Homes

Where Iran does have reach into the United States is in cyberspace. Security officials describe Iran as a “multi-dimensional threat to the homeland” that seeks to inflict damage in physical spaces and in cyberspace, and that has already targeted Iranian dissidents in the United States, according to a homeland threat assessment.

Iran has historically targeted financial services, water utilities, and transportation infrastructure, many of which are in the United States, as part of its cyber operations. Analysts note that Iran has historically these sectors for disruption, which makes them likely candidates for retaliation as the conflict escalates.

Recent reporting on U.S. cyber defenses describes an already strained federal cybersecurity agency facing increased pressure, as Iran has proved it can break through against U.S. targets and in 2024 claimed responsibility for hacking the emails of several state officials, according to an analysis of the Iran cyber threat. CrowdStrike’s counter adversary operations have tracked Iranian actors that follow a familiar pattern of probing and exploiting weak points in U.S. networks.

Experts expect a wave of “low level cyber activity” against all levels of United States government, from state agencies to local utilities, as Iran looks for ways to impose costs without triggering a direct conventional exchange. An intelligence group has warned that All levels of government should prepare for this kind of persistent digital harassment.

Iranian-linked hackers have also shown a willingness to target their own citizens’ digital tools, which illustrates the broader playbook. One investigation into how the Badesaba prayer app was hacked in Iran detailed how attackers compromised user data and pushed malicious updates, according to a report on how the Badesaba was exploited. That kind of tradecraft could be repurposed against diaspora communities or religious organizations in the United States.

Industrial systems are another area of concern. A pro-Iranian group has compromised more than 400 operational technology devices via IOControl malware and manipulated Unitronics programmable logic controllers, according to a detailed review of Unitronics exploitation. Those controllers are used in water systems and other critical infrastructure, which raises the possibility of Iranian actors trying to disrupt water treatment plants or pump stations in North America.

Covert Networks and Terror Proxies

Missiles and malware are not the only vectors. Iran’s network of agents and proxies gives it options that are harder to detect and deter. Analysts describe the current moment as an “all hands on deck” period for U.S. security services, in part because of the risk that Iranian operatives or aligned groups could attempt attacks on U.S. soil.

Planning for this approach is challenging because it requires Iranian agents or terror proxies to have established deep cover for years, according to an analysis of how Planning for Iranian-sponsored attacks might unfold. The most unlikely scenario is a spectacular, mass-casualty strike comparable to past large-scale terror attacks, yet smaller operations that target individuals or soft sites are harder to rule out.

One policy review notes that Iranian-aligned networks can strike American and Israeli targets using whatever sleeper networks they might have in place, and they can hit soft targets that are difficult to defend, according to an assessment that stated can strike American targets. That could include attacks on diplomatic facilities, religious centers, or high-profile individuals linked to foreign policy.

Threat intelligence tracking Iran nexus groups has identified high-profile U.S., Israeli, and Western foreign policy and security figures as likely targets. Analysts argue that, based on prior targeting by Based on prior nexus groups, the most likely physical threats in North America involve individuals and symbolic locations rather than large infrastructure.

There is also the ongoing campaign against Iranian dissidents. Security briefings have pointed to plots against activists and journalists who criticize Tehran, some of whom live in the United States. Those operations may not resemble traditional terrorism in scale, but they still represent Iranian power projected into American communities.

Russia’s Role and the Regional Battlefield

Even if Iran cannot yet hit the continental United States with missiles, it can threaten American forces and assets abroad, which raises the risk of escalation. Russia has provided Iran with information that could help Tehran strike American warships, aircraft, and other assets in the region and in the Persian Gulf, according to sources who described how Russia gave Iran that can help Tehran hit U.S. military targets.

Such targeting data can sharpen Iranian missile and drone strikes on American ships or bases, even if the missiles themselves cannot reach the U.S. mainland. It also ties the Iran conflict more closely to the broader strategic competition with Russia, since any Iranian attack that uses Russian intelligence blurs the line between regional war and great-power confrontation.

On the ground, a combined force of U.S. and partner militaries has continued to degrade Iran’s ballistic missile and drone capabilities to disrupt Iran’s ability to launch retaliatory attacks against Israel, according to a detailed Iran update. Those strikes reduce Iran’s capacity to hit regional targets, but they may also push Tehran to look for asymmetric ways to respond, including cyber operations and proxy attacks that reach into the United States indirectly.

How U.S. Intelligence Sizes the Threat

Behind the scenes, American intelligence agencies have spent years modeling how Iran might try to reach the U.S. homeland. The Defense Intelligence Agency released a missile threat assessment that concluded Iran could develop a long-range missile by 2035 if it chooses to do so, according to a review of that assessment. That timeline aligns with broader U.S. intelligence views that missiles that could reach the United States are still many years away.

At the same time, threat briefings emphasize that Iran represents a multi-dimensional threat. They highlight the combination of missile forces, expanding nuclear potential, cyber capabilities, and covert networks. Officials warn that Iran seeks to inflict damage in physical spaces and in cyberspace, and that the spectrum of possible actions ranges from harassment of shipping to targeted killings to disruptive hacking of critical infrastructure.

Public-facing intelligence summaries also stress that Iran’s nuclear and missile programs did not pose an imminent threat to the U.S. homeland before the current war, and that even now the most immediate risks are regional or cyber rather than intercontinental. That does not eliminate the danger, but it does narrow the scenarios that Americans should worry about most.

Domestic Resilience and the Realistic Risk to Americans

For Americans trying to gauge personal risk, the picture that emerges is sobering but not apocalyptic. Iran cannot at present fire a ballistic missile from its territory and hit the continental United States, and U.S. intelligence does not expect that capability for roughly a decade if Iran chooses to pursue it. Its nuclear program is advanced in terms of enrichment but still faces significant technical and operational hurdles before it can produce and deliver a reliable nuclear weapon.

The nearer-term concerns center on cyber disruption, targeted violence, and attacks on U.S. forces and assets abroad. Financial services, water utilities, and transportation systems are attractive digital targets for Iranian operators who want to send a message to Washington without crossing the threshold into open war with the U.S. homeland. State and local governments across the United States have been warned to brace for low-level cyber activity that could lock up services, leak data, or temporarily disrupt operations.