Microsoft Quantum Safe Roadmap Targets Post-Quantum Security by 2029

Microsoft has accelerated its Microsoft quantum safe roadmap, warning that advances in quantum computing are bringing the transition to post-quantum cryptography closer than previously expected. The company now plans to migrate critical products and services to quantum-resistant encryption by 2029 while encouraging organizations to begin preparing immediately.

The updated strategy reflects growing concerns that attackers could steal encrypted information today and decrypt it in the future once quantum computers become powerful enough to break current encryption standards.

Microsoft Accelerates Its Quantum Safe Roadmap

Microsoft announced that it is speeding up its Microsoft Quantum Safe Program (QSP) and integrating quantum-safe security requirements into its broader Secure Future Initiative.

For years, the company described post-quantum cryptography as a long-term challenge. However, Microsoft now believes organizations can no longer afford to delay planning for the transition.

According to the company, recent advances in quantum computing research have shortened the expected timeline for cryptographically relevant quantum computers, making preparation more urgent than before.

Although today’s quantum systems cannot break modern encryption, Microsoft says the work required to replace existing cryptographic infrastructure is substantial and should begin now.

Harvest Now, Decrypt Later Remains a Growing Threat

One of Microsoft’s biggest concerns involves so-called “harvest now, decrypt later” attacks.

In these attacks, cybercriminals steal encrypted information today without immediately attempting to decrypt it. Instead, they store the stolen data until future quantum computers become capable of breaking the public-key encryption algorithms that currently protect sensitive information.

Once that technology becomes available, attackers could recover confidential business records, financial information, government communications, healthcare data, intellectual property, and other sensitive material that organizations assumed would remain secure.

This long-term risk has already prompted several technology companies, including Apple, Google, and Signal, to begin adopting post-quantum cryptography to replace traditional public-key encryption with quantum-resistant algorithms.

Microsoft Plans to Complete the Transition by 2029

Microsoft says its accelerated Quantum Safe Program aims to transition critical products and services to post-quantum cryptography by 2029.

Rather than focusing only on deploying new cryptographic algorithms, the company believes organizations should first modernize their infrastructure to simplify future upgrades.

Microsoft identified three priorities that will guide its quantum-safe transition:

• Upgrade network cryptography by adopting modern protocols such as TLS 1.3, which support future hybrid and post-quantum key exchange.
• Build crypto-agility, allowing organizations to replace cryptographic algorithms without redesigning applications or infrastructure.
• Modernize cryptographic trust chains used for code signing, certificate issuance, software updates, and hardware-backed key protection.

The company says these steps will help organizations transition more smoothly as post-quantum cryptography becomes the industry standard.

Microsoft Calls on Organizations to Start Preparing Now

Microsoft believes integrating its quantum-safe strategy into the Secure Future Initiative will allow organizations to track post-quantum readiness alongside their broader cybersecurity goals.

Despite accelerating its roadmap, the company has not disclosed the specific technological breakthroughs that prompted the change or explained why it believes cryptographically relevant quantum computers could arrive sooner than earlier forecasts suggested.

Even so, Microsoft argues that organizations should not wait for definitive timelines. Preparing enterprise infrastructure for post-quantum cryptography will likely take years, making early planning essential for protecting long-lived sensitive data against future quantum-enabled attacks.