Microsoft accelerates quantum security plans as computing risks move closer

Quantum computing has long been viewed as a future challenge for the cybersecurity industry. However, growing advances in research and development are prompting technology companies to reassess how quickly they need to prepare for the arrival of quantum-powered threats.

Microsoft has announced that it is accelerating its Quantum Safe Program, arguing that organisations should begin preparing for the transition to post-quantum cryptography now rather than waiting for practical quantum computers to emerge. The company believes that upgrading security systems across large and complex infrastructures will take several years, making early planning essential.

The move reflects a wider shift across the technology sector, where organisations are increasingly treating quantum readiness as a long-term security project instead of a distant technical concern. While experts continue to debate when quantum computers capable of breaking current encryption standards will become available, Microsoft says businesses should focus on reducing future risk by modernising their security foundations today.

Microsoft expands its long-term quantum security strategy

Microsoft plans to complete the migration of its critical products and services to post-quantum cryptography before the end of 2029. As part of this effort, the company will also integrate quantum readiness measurements into its broader Secure Future Initiative, ensuring that preparations for the quantum era become part of its overall cybersecurity strategy.

Rather than focusing only on replacing existing encryption algorithms, Microsoft believes organisations should improve the flexibility of their technology infrastructure. According to the company, systems designed with greater adaptability will make future cryptographic upgrades far less disruptive and reduce the need for extensive redevelopment when new standards become necessary.

One area receiving particular attention is network security. Microsoft intends to encourage the wider adoption of modern technologies, such as TLS 1.3, alongside hybrid key exchange methods that combine traditional and post-quantum cryptographic techniques. These approaches are designed to strengthen communications while maintaining compatibility with current systems during the transition period.

The company is also investing in what it describes as crypto agility. This approach allows organisations to replace or update cryptographic methods without redesigning entire applications or services. Microsoft argues that building this flexibility into software today will simplify future migrations as quantum-resistant standards continue to evolve.

In addition, Microsoft plans to modernise trust chains that support essential security functions, including certificate issuance, software updates, code signing and hardware-backed protections. These components play a critical role in maintaining the integrity of digital systems and will need to support new cryptographic standards in the years ahead.

Microsoft says waiting could increase future security risks

Despite its increased focus on quantum security, Microsoft has not linked its decision to any single scientific breakthrough. Instead, company executives describe the programme as a precautionary measure based on evolving risk assessments, rather than a response to a specific technological milestone.

“Shifting to quantum-resistant security takes years. This is a proactive, risk-informed decision to help customers stay ahead of potential future threats,” Microsoft Azure Chief Technology Officer Mark Russinovich said.

Russinovich added that the initiative extends across Microsoft’s entire product portfolio rather than targeting only selected enterprise services. This broad approach reflects the company’s view that quantum security should become a standard part of technology planning rather than a specialised project for a limited number of customers.

One concern highlighted by Microsoft is the possibility of so-called “harvest now, decrypt later” attacks. In this scenario, cybercriminals could steal encrypted information today and store it until sufficiently powerful quantum computers become available. Although the data would remain unreadable for now, future quantum systems could eventually decrypt archived information if organisations continue relying on current encryption methods.

Because of this possibility, Microsoft believes businesses handling sensitive information should begin preparing well before quantum computers become capable of breaking existing cryptographic standards. The company argues that delaying the transition could leave organisations facing a lengthy and complex migration while simultaneously increasing the risk to long-term data protection.

The technology industry prepares for a post-quantum future

Microsoft is not alone in strengthening its quantum security efforts. Several major technology companies, including Apple, Google and Signal, have already introduced elements of post-quantum cryptography into some of their products and services. These developments indicate that preparation for the post-quantum era is becoming an industry-wide priority rather than an isolated initiative.

Even so, Microsoft believes significant work remains before quantum-resistant security can be deployed at a global scale. Large organisations often operate thousands of interconnected systems, many of which depend on encryption technologies that were never designed with quantum threats in mind. Updating these environments will require careful planning, testing and coordination over several years.

The company says advances in quantum research and development have changed previous assumptions about how much time organisations have to prepare. For many years, post-quantum cryptography was regarded as an important but distant objective, allowing businesses to postpone investment while focusing on more immediate cybersecurity challenges.

Microsoft now argues that this perspective is becoming outdated. As research progresses and quantum computing continues to advance, the company believes the arrival of cryptographically relevant quantum computers may occur sooner than many earlier forecasts suggested. Although there is still uncertainty about the exact timeline, Microsoft maintains that organisations should not assume that such systems remain decades away.

Instead, the company is encouraging customers to begin modernising their security infrastructure today so that they can respond more efficiently as post-quantum standards mature. By investing in flexible systems and adopting quantum-resistant technologies early, Microsoft believes organisations will be better positioned to protect sensitive information against future advances in computing, regardless of when practical quantum computers ultimately arrive.