Here is a question almost nobody asks about their home network: what happens to your Wi-Fi encryption the day someone switches on a working quantum computer? The honest answer is that most of it holds up better than the headlines suggest, and one part of it does not. The trick is knowing which is which.
Let me walk you through what is actually at risk, what is fine, and what you should do about it today. Spoiler: you do not need to panic, but you do need to stop using WPA2.
Why Quantum Computers Scare Cryptographers
Regular computers crack encryption by guessing. A strong key has so many possible combinations that guessing would take billions of years, so the math wins. Quantum computers do not guess the same way. Two algorithms change the game.
Shor’s algorithm shreds the math behind public-key crypto: RSA, Diffie-Hellman, and the elliptic curve stuff that secures your bank, your messages, and the key exchange in modern Wi-Fi. A big enough quantum machine running Shor’s would crack those in hours, not eons.
Grover’s algorithm attacks symmetric encryption like AES, which is what actually scrambles the data flying across your network. Grover’s is far less devastating. It roughly halves the effective strength of a key. AES-128 starts to look shaky in that world. AES-256 drops to the equivalent of 128-bit security, which is still completely out of reach.
That split matters, so keep it in your head: the part of Wi-Fi that locks your data is mostly fine. The part that sets up the connection is the soft spot.
So is your Wi-Fi encryption safe or not?
Depends entirely on what you are running. Here is the rough state of play.
| Security | Data encryption | Quantum outlook |
|---|---|---|
| WEP / WPA | Broken already | Irrelevant, replace it yesterday |
| WPA2 (AES) | AES-128 | Weakened by Grover’s, and the handshake is exposed |
| WPA3 | AES-128 / 256 | Better handshake, but still uses quantum-vulnerable key exchange |
WPA3 introduced a handshake called SAE (sometimes branded Dragonfly) that fixed a pile of WPA2 problems, including the offline password-guessing attacks that tools have abused for years. The catch is that SAE still leans on elliptic curve cryptography to agree on a key. That is exactly the math Shor’s algorithm eats for breakfast.
So even on WPA3, the moment when your laptop and router agree on an encryption key is the weak link, not the encryption itself.
The “Harvest Now, Decrypt Later” problem
This is the part worth caring about, and it is happening right now, not in some sci-fi future.
A capable attacker does not need a quantum computer today. They need a hard drive. The play is simple: record encrypted traffic now, sit on it, and decrypt it in a few years once the hardware exists. Intelligence agencies are widely believed to be doing this already with high-value targets. Your Netflix habit is not on that list. But anything with a long shelf life, like medical records, legal documents, or login credentials you reuse for a decade, has a real lifespan problem.
For your home Wi-Fi specifically, the risk is low and local. Someone has to be parked within range of your network to capture the traffic in the first place. That is a much smaller threat than the same problem on the wider internet. Still worth understanding, because it shapes what comes next.
What the Industry is Actually Doing About It
In 2024, the US standards body NIST finalised its first batch of post-quantum cryptography standards. The headline names are ML-KEM (for key exchange) and ML-DSA (for signatures), both built on lattice math that neither Shor’s nor Grover’s can shortcut. These are the replacements that will eventually slot into the protocols you use every day.
Browsers and messaging apps moved first. Chrome and Signal already use post-quantum key exchange. Wi-Fi is slower, because the standards have to be baked into the protocol and then shipped in router firmware and device chipsets. Expect the Wi-Fi Alliance to fold post-quantum key exchange into a future certification, and expect it to arrive on your hardware quietly through a firmware update rather than as a product you buy.
What To Do Today (no quantum degree required)
- Switch to WPA3 if your gear supports it. If your router only offers WPA2, use WPA2-AES, never the older TKIP option. A WPA2/WPA3 mixed mode is fine while you upgrade.
- Use a long, random Wi-Fi password. A 20-character passphrase defends against the password-guessing attacks that are a problem today, quantum or not. This is the single highest-value thing you can do.
- Turn on firmware auto-updates. Post-quantum support is going to land as an update. If your router is three updates behind, you will be the last to get it.
- Lean on the layer above Wi-Fi. HTTPS and a decent VPN protect your traffic even if the Wi-Fi layer is weak, and those layers are adopting post-quantum crypto faster than your router will.
- Replace anything older than WPA2. If you are still running WEP or original WPA, the quantum question is the least of your worries. That network is open today.
The Honest Bottom Line
Your home Wi-Fi is not about to fall over. The encryption that scrambles your actual data, AES, survives the quantum era in decent shape, especially at 256-bit. The real weak point is the key exchange, and the people who fix that are the chipset makers and firmware engineers, not you.
Your job is smaller and more boring. Run WPA3, use a long password, keep your firmware current, and let the post-quantum upgrades reach you the same way every other security fix does. Do that and you are already ahead of almost everyone on your street.
