Cybersecurity experts warn that the advent of powerful quantum computers in the next 10-20 years will render current cryptography techniques obsolete, rendering them vulnerable to decryption. This threat is known as "Q-Day." Post-quantum encryption, also known as PQE, is a solution that uses complex mathematical puzzles resistant to quantum computers.
While Q-Day is still a future event, PQE is a feature available to VPN providers today, enabling users to protect their data against hackers who may hoard encrypted data until quantum computers can decrypt it. Popular VPNs like NordVPN, ExpressVPN, and Mullvad offer PQE as an opt-in feature on various plans.
The PQE feature scrambles traffic data into unreadable code that can only be unlocked with a cipher key. This key is then transmitted securely to the user's device using a VPN handshake. However, hackers using quantum computers will be able to decipher the encrypted data without access to the key, compromising user data.
Researchers estimate that quantum computers will be powerful enough to decrypt current security protocols like RSA and ECC in the next 10-20 years. Attackers are already using "harvest now, decrypt later" (HNDL) attacks to hoard user data, which will become accessible as soon as quantum computers gain enough processing power.
The National Institute of Standards and Technology (NIST) standardized new encryption algorithms in August 2024, which are resistant to quantum computer attacks. These algorithms, including ML-KEM, ML-DSA, and SLH-DSA, are being implemented by VPN providers to ensure user data protection.
Businesses and professionals handling sensitive data, high-value transactions, or regulated industries with compliance requirements may find PQE useful. While its availability is limited to specific VPN providers and pricing tiers, security-conscious individuals can take advantage of this feature to protect their data.
NordVPN, ExpressVPN, and Mullvad are among the mainstream providers offering PQE as an opt-in feature on certain plans. NordVPN rolled out PQE in its Linux VPN app in 2024, while ExpressVPN has enabled it by default on its Lightway protocol. Mullvad also offers PQE on its WireGuard servers, accessible by default on desktop but requiring a manual opt-in on smartphone apps.
Enabling PQE does not significantly impact speed or latency, making it a worthwhile feature for users handling sensitive data. While regular browsing workflows may not require PQE, individuals dealing with financial information, accessing healthcare portals, or sending confidential data benefit from additional peace of mind provided by quantum protection.
