Quantum-resistant or not: how secure are your favorite apps?

The growing threat of quantum computing puts data security at risk, as it could eventually break today’s encryption methods, exposing sensitive information and compromising secure communications. To better understand readiness for the post-quantum era, we selected the most popular apps in social media, messaging, banking, and shopping categories to assess their adoption of post-quantum cryptography (PQC).

Key insights

• We selected and analyzed the most popular 40 apps in total across social media (9), messaging(11), banking(10), and shopping(10) categories. The data reveals that PQC implementation is still in its early stages, with only 8% of analyzed apps currently utilizing PQC. Meanwhile, 30% of the analyzed app developers are researching or have prepared plans to become quantum-resistant, showing a forward-thinking approach in the face of emerging threats from quantum computing. The remaining 63% of analyzed apps have no public information available regarding PQC adoption plans.
• Among the most popular banking apps, none have yet implemented post-quantum cryptography (PQC). Only 20% have taken proactive steps to become quantum-resistant, while the remaining 80% have not taken any action yet. JPMorgan Chase¹, one of the app owners researching quantum resistance, has previously collaborated with Toshiba and Ciena to demonstrate a first of its kind Quantum Key Distribution network, which is resistant to quantum attacks and supports high data rates. Meanwhile, Wells Fargo² is also taking proactive measures, focusing on developing PQC to protect customer data, with plans to fully adapt its systems to quantum computing within the next decade.
• Similar to banks, analyzed shopping apps are not yet ready for quantum computing threats, as none of them are quantum-resistant and only 20% are researching PQC. Amazon³ is the most proactive among these apps, as it has detailed plans for post-quantum cryptography. Meanwhile, Walmart⁴ only made a brief comment that it is aware of potential threats and is working to become quantum-resistant.
• Messaging apps already feature post-quantum cryptography (PQC), with 18% being quantum-resistant, 27% researching quantum resistance, and 55% having no plans regarding PQC. Last year, Surfshark⁵ highlighted iMessage from Apple and Signal as apps that have implemented quantum resistance. Since then, no new messaging apps have adopted PQC. However, both Google⁶, which owns Google Messages, and Meta⁷, which owns WhatsApp and Messenger, have acknowledged potential threats from quantum computers and have taken proactive measures to protect against their future decryption capabilities.
• In the social media apps category, TikTok is the only one that is quantum-resistant. Meanwhile, the parent companies of YouTube, Facebook, Instagram, Theads, and LinkedIn have already made plans to implement PQC. However, X (formerly Twitter), TikTok, Reddit, and Quora have made no specific mention of plans for quantum-resistant cryptography.

Methodology and sources

The study evaluates the adoption of post-quantum cryptography (PQC) in popular apps across messaging⁵, banking⁸, shopping⁹, and social media¹⁰ categories. Data was collected from publicly available sources, such as company announcements or media coverage, to identify mentions of quantum-resistant cryptography. We grouped these apps into the following categories: ‘Not quantum-resistant’ if the developers have made no mention of plans to add PQC; ‘Quantum-resistant’ if PQC already exists in the app; and ‘Researching post-quantum cryptography’ if the company has made statements or provided plans regarding PQC. We analyzed 40 apps in total across social media (9), messaging (11), banking (10), and shopping (10) categories.

References: