Surfshark now supports post-quantum encryption – here's what we know

Surfshark encryption graphic showing hand holding a key. There is a globe with a keyhole
(Image credit: Surfshark)

Surfshark has become the latest VPN to implement post-quantum encryption (PQE) into its apps, joining many of the best VPNs in adopting the new industry standard of encryption.

PQE is being implemented in the WireGuard protocol, with Android, Mac, and Linux receiving support first. Surfshark said iOS and Windows will see support come "in the near future."

Surfshark Starter | 2 years + 3 months FREE | $1.99 per month

Surfshark Starter | 2 years + 3 months FREE | $1.99 per month

Surfshark is the best cheap VPN out there. Alongside some great and unique features, it now supports post-quantum encryption.

What you'll get...

🔑 PQE for Android, Mac, & Linux
🚀 1,600+ Mbps speeds
✨ Unique features inc. Alt ID

A 27 month plan works out as $1.99 per month ($53.73 upfront pre-tax) and includes a 30-day money-back guarantee.

Staggered release

Surfshark is first bringing PQE to its Linux, Mac, and Android VPN apps. Support for its iOS and Windows VPN apps will come "in the near future."

Donatas Budvytis, Chief Technology Officer at Surfshark, commented on the need for PQE. He said: "Quantum computing is advancing rapidly, and it poses a threat to current encryption methods used to secure data online.

"Although nowadays it is used in very limited capabilities, soon it could become powerful enough to compromise today’s encryption systems, leading to significant digital security threats. Therefore, creating cryptographic methods that can withstand quantum computing is essential for any business, especially a cybersecurity company."

WireGuard is Surfshark's primary protocol, and this is what's being quantum-proofed. WireGuard doesn't support PQE by default, so VPNs have to make additions and upgrades to the code to ensure WireGuard meets the necessary PQE standards.

Budvytis confirmed that Surfshark made WireGuard quantum secure by using it together with a Pre-Shared Key (PSK).

Encryption graphic

(Image credit: Olemedia / Getty Images)

In August, ExpressVPN announced its support for post-quantum WireGuard. Its move was described as a "call to action" for the VPN industry and it urged other VPNs to adopt PQE sooner rather than later. To support this call, ExpressVPN released a white paper detailing how it made WireGuard quantum secure.

Surfshark isn't alone in rolling PQE out in stages. NordVPN launched it on its Linux VPN apps first, with all platforms supported by May 2025. NordVPN supports PQE on its WireGuard-based NordLynx protocol.

ExpressVPN became quantum secure in January 2025, and supported all platforms at release. Its Lightway protocol was made quantum secure first, followed by WireGuard.

Mullvad and Windscribe are two other leading VPNs that support PQE. However, Proton VPN, Private Internet Access, CyberGhost, and IPVanish aren't yet quantum secure – although the latter is working on implementing protections.

Why is post-quantum encryption important?

Quantum computers are incredibly powerful and the day they can break current encryption standards is known as Q-Day. While we're some time away from quantum computers being available to consumers, experts disagree over the timing of Q-Day. Some believe it's only a few years away, others believe it could be decades.

"Harvest-now, decrypt later" attacks are what is feared. Your encrypted data is stolen now, ready to be decrypted when quantum computers are advanced and more readily available. This is why many argue the need for PQE as soon as possible.

Budvytis said as quantum computing develops and becomes more accessible, "sensitive information like passwords, financial data, private conversations, and other encrypted data will become much easier to decrypt quickly."

He added that "if businesses, governments, and institutions do not take precautionary measures to implement post-quantum cryptography, it will pose significant privacy challenges for everyone."

Surfshark analyzed 40 popular apps and found only 8% used PQE. No banking apps had implemented PQE and only 20% had taken proactive steps. 18% of messaging apps were already quantum-resistant, with 27% currently undertaking research. 55% had no plans.

Disclaimer

We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

George Phillips
Staff Writer

George is a Staff Writer at Tom's Guide, covering VPN, privacy, and cybersecurity news. He is especially interested in digital rights and censorship, and its interplay with politics. Outside of work, George is passionate about music, Star Wars, and Karate.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.