Some of the world's leading democracies are pushing governments and companies to start preparing for post-quantum cryptography before quantum computers become powerful enough to break the encryption systems that protect global digital infrastructure today.

In a joint advisory released Thursday, the G7 Cybersecurity Working Group and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) said organizations should begin their transition to post-quantum cryptography now, rather than waiting until cryptographically relevant quantum computers (CRQCs) are available to threat actors.

Why the Post-Quantum Cryptography Shift Cannot Wait

The publication, titled "Preparing for the Post-Quantum Era: A Call to Action," warns that the quantum computing threat is no longer a distant concern. While the exact timeline for CRQC development remains uncertain, the working group said recent technological advances suggest such machines could emerge sooner than expected, putting widely used public-key cryptography mechanisms at risk.

One of the most immediate dangers is a tactic known as "harvest now, decrypt later," where malicious actors intercept and store encrypted data today with the intention of decrypting it once a CRQC becomes available. This poses a serious risk to governmental records, sensitive personal data, and trade or business secrets that require long-term confidentiality.

The advisory also cautions that CRQCs could eventually be used to target authentication mechanisms, allowing bad actors to impersonate trusted entities, forge data, or compromise equipment. Because supply chain vulnerabilities can cascade, a single organization's delay in adopting post-quantum cryptography could expose entire sectors to compromise.

According to the report, organizations that fail to act may also face business consequences beyond security risk, including exclusion from public procurement contracts and loss of competitive advantage.

Five Priorities for the PQC Transition

The G7 Cybersecurity Working Group outlined five priority areas to guide the global shift toward post-quantum cryptography:

1. Raising awareness — Many organizations still view the quantum threat as a distant or purely technical issue. The group called for awareness campaigns, technical guidance, and workforce upskilling to reframe it as an economic and business risk.
2. Developing national strategies — Countries are encouraged to build strategies that ensure an adequate supply of quantum-safe hardware and software while encouraging adoption, integrating the effort into broader digital privacy and security policies.
3. Advancing research and development — Governments should fund research programs and support pilot projects and testbeds to help organizations test and refine their transition to post-quantum cryptography.
4. Building public-private partnerships — Collaboration between government, industry, and academia is seen as key to developing domestic expertise, lowering transition costs, and sharing playbooks and case studies across sectors.
5. Integrating PQC into cybersecurity requirements — The group recommends treating post-quantum cryptography adoption as a natural evolution of cryptographic best practice, and embedding requirements into public procurement to push both vendors and organizations toward quantum-safe systems.

The advisory emphasizes that the shift to post-quantum cryptography cannot be solved by individual organizations in isolation. Instead, it calls for early engagement, coordinated planning, and informed decision-making across public and private sectors worldwide.

Tackling the risks that the impending quantum computing era poses to current cryptographic systems... requires a coordinated global effort to transition to PQC," the report states, adding that public and private organizations must act now to safeguard confidential data, supply chains, and critical systems.

The document was jointly published by cybersecurity authorities from Canada, Germany, Italy, Japan, the United Kingdom, the United States, and France's ANSSI, with participation from the European Commission and support from the EU Agency for Cybersecurity (ENISA).

For decades, cybersecurity researchers and computer scientists have warned about a future moment known as “Q-Day” — the point at which quantum computing becomes powerful enough to break the encryption systems that currently protect the world’s digital infrastructure. What once sounded like a distant theoretical concern is now being treated as an increasingly urgent reality. According to recent projections from Google, Q-Day could arrive as early as 2029, significantly earlier than many experts had previously estimated.  The accelerated timeline has intensified concerns across governments, technology companies, and cybersecurity agencies, all of which now face mounting pressure to prepare for the disruptive impact quantum computing could have on global data security. 

What Is Q-Day in Quantum Computing? 

Q-Day refers to the hypothetical moment when quantum computers gain enough computational power, resources, and stability to crack modern cryptographic systems. Most online security today relies on encryption methods that are considered practically impossible for classical computers to break within a reasonable timeframe. However, advances in quantum computing could change that equation entirely.  Unlike traditional computers, which process information in binary bits represented as zeros and ones, quantum computing systems use quantum-mechanical properties to process information in fundamentally different ways. This allows quantum computers to solve highly complex calculations far more efficiently than even today’s most advanced supercomputers.  One of the biggest concerns surrounding Q-Day involves RSA cryptography, a widely used encryption method based on the mathematical difficulty of factoring large prime numbers. RSA encryption currently protects everything from online banking and email communication to medical records and cryptocurrency wallets. Experts fear that sufficiently advanced quantum computing systems could eventually crack RSA encryption not over billions of years, but potentially within hours or days. If Q-Day arrives before organizations transition to safer encryption standards, the consequences could be severe. Financial transactions, personal emails, medical data, location histories, and sensitive government information protected by today’s cryptographic algorithms could become vulnerable to exposure. 

Why the Timeline for Q-Day Has Shifted 

For many years, the consensus within the cybersecurity community was that Q-Day remained decades away. That assumption gave governments and private companies time to develop and implement stronger protections before quantum computing capabilities matured. However, Google’s recent assessment suggesting Q-Day may emerge by 2029 has significantly altered that outlook. The revised estimate has prompted warnings that organizations may have far less time than expected to prepare for the transition to quantum-resistant cybersecurity systems. The growing concern has drawn comparisons to Y2K, also known as the millennium bug, when programmers feared that computer systems worldwide could malfunction after Dec. 31, 1999. While Y2K ultimately caused limited disruption due to extensive preparation efforts, cybersecurity experts believe Q-Day could pose a far more complex and enduring challenge because it directly threatens the encryption systems underpinning modern digital communication. Some researchers are also worried about a strategy known as “harvest now, decrypt later.” Under this scenario, malicious actors may already be collecting encrypted information today with the intention of decrypting it once quantum computing becomes sufficiently advanced. Even if current encryption cannot yet be broken, sensitive information stolen now could become readable in the future after Q-Day arrives.

The Push Toward Post-Quantum Cryptography 

As fears surrounding quantum computing grow, cybersecurity experts are urging organizations to begin transitioning toward post-quantum cryptography. These newer encryption methods are specifically designed to resist attacks from quantum computers. Google has been advocating for broader adoption of quantum-resistant algorithms and has introduced guidelines intended to accelerate digital security upgrades across the technology industry. The goal is to help companies prepare their infrastructure before Q-Day becomes reality. At the same time, cryptographers have been developing alternative encryption algorithms based on mathematical problems that quantum computers are not believed to solve efficiently. Several of these proposed standards have already advanced through evaluation processes conducted by the National Institute of Standards and Technology (NIST), which has identified multiple algorithms currently considered secure against quantum computing threats. Despite these efforts, experts caution that no encryption system can be viewed as permanently secure. As one assessment noted, encryption functions more like a “time-locked safe” than an impenetrable barrier — secure only until someone eventually discovers the combination.

Governments Are Accelerating Quantum Readiness Plans 

Government agencies have also begun preparing for the possibility of Q-Day. In 2022, the National Security Agency (NSA) announced plans aimed at improving national quantum readiness throughout the 2030s. More recently, both the Biden and Trump administrations issued executive orders emphasizing the importance of preparing U.S. infrastructure for quantum computing risks. The NSA is currently working toward a 2031 deadline for strengthening systems against potential quantum-based cybersecurity threats. However, officials acknowledge that the timeline remains fluid as advancements in quantum computing continue to evolve rapidly. Whether those estimates ultimately prove accurate or not, the growing momentum behind quantum computing research has made one thing increasingly clear: Q-Day is no longer viewed as a distant science-fiction scenario. Instead, it is becoming a serious cybersecurity challenge that governments, corporations, and researchers are racing to address before current encryption systems become obsolete.