"Post-quantum encryption is not the end" – NordVPN aims for world-first security milestones in 2026
After adding post-quantum encryption (PQE) to all its apps in May, NordVPN now strives for cryptographic agility. Here's why it matters.
(Image credit: NordVPN)
August 2024 marked the beginning of a new era for VPN security as the National Institute of Standards and Technology (NIST) released the first three quantum-resistant encryption standards. NordVPN was among the companies jumping on the bandwagon when it joined the post-quantum revolution in October that year on Linux devices.
Throughout 2025, TechRadar's top-rated VPN has continued to build resilience against threats posed by the next generation of computers, which experts warn will eventually break current encryption standards. In May, NordVPN reached a major milestone by extending post-quantum encryption (PQE) protection across all its applications.
Where are we now?
(Image credit: Getty Images)
The NordVPN team built its PQE framework on NIST standards, adding the ML-KEM algorithm (formerly CRYSTALS-Kyber) to the NordLynx protocol. This algorithm serves as the primary standard for the cryptographic key exchanges required to secure data across networks.
Similar to other VPN providers, NordVPN adopted a hybrid approach to quantum-resistant encryption. This means that PQE algorithms work alongside classic encryption methods.
To benefit from this protection, users must manually enable the feature within the app's Settings under the Connections tab. PQE automatically activates whenever a connection is established via the NordLynx protocol.
In a bid to go beyond industry standards even further, NordVPN's PQE changes encryption keys every 90 seconds for extra security. It's an approach that the team has copyrighted with an official patent.
What's coming next?
With the VPN tunnel now secured against quantum threats, the NordVPN team is shifting its focus to a stage that is often overlooked: the login phase.
"The authentication phase is not covered yet, but we want to cover the whole spectrum. So, that's what we are looking for right now," Briedis told TechRadar.