Skip to content
Kioskbase

Post-quantum security · browsers

Which browsers protect you

Post-quantum protection of a connection is not switched on by the website alone — your browser negotiates it with the site. Our websites offer it to everyone. Whether you actually get it depends on which browser you use and how up to date it is.

Overview

Since which version browsers do it on their own

The browsers in the table use the hybrid X25519MLKEM768 key exchange (classic X25519 + post-quantum ML-KEM-768) by default — nothing to switch on. We list only what an official source confirms; each row links to it.

BrowserDevicePost-quantum by default sinceSource
Google Chrome Windows, Mac, Linux, ChromeOS version 131 (November 2024)From version 124 a preliminary version (Kyber), replaced by the ML-KEM standard in 131. Google Security Blog · Chrome Platform Status
Google Chrome Android version 133 at the latest (February 2025)Google did not announce it separately for Android; the figure comes from the Chromium source code. Chromium net/base/features.cc (133)
Microsoft Edge Windows, Mac, Linux version 131 (November 2024) Microsoft Learn — Edge 131.0.2903.48
Mozilla Firefox Windows, Mac, Linux version 132 (October 2024)For HTTP/3 connections from version 136. Firefox 132 Release Notes · Bugzilla 1941041
Mozilla Firefox Android version 145 (November 2025) Firefox for Android 145 Release Notes
Apple Safari Mac, iPhone, iPad macOS Tahoe 26, iOS and iPadOS 26 (September 2025)What counts is the system version, not the app — Safari is updated with the system. Apple Support 122756 · Apple Platform Security

Not verified: We found no official statement for these browsers, so they are not in the table: Brave and Opera (built on Chromium, which has it, but they do not state it themselves), Samsung Internet, Vivaldi, DuckDuckGo, Edge on Android, Chrome, Firefox and other browsers on iPhone and iPad (pages are loaded by Apple’s system, so likely from iOS 26 — but nobody confirms it explicitly). The badge at the top of this page shows whether they protect you.

What it means for you

Benefits you do not see, but get

Protection against “harvest now, decrypt later”

What someone records on the way today, they may want to read later — once they have a quantum computer. A post-quantum key exchange is designed so that such a recording stays unreadable even then.

Nothing to set up

An up-to-date browser is enough. The browser and the website agree on post-quantum encryption on their own, on every connection.

A double safeguard

The hybrid combines a classic and a post-quantum method. An attacker would have to break both; if one turned out weak, the other still protects.

An older browser breaks nothing

It connects encrypted as before, just without the post-quantum part. Such a connection is secure today — it only lacks protection for the future.

Why update

The cheapest security investment

Updating your browser costs nothing, and besides post-quantum encryption it brings fixes for flaws that attackers exploit today.

Most browsers update themselves — often it is enough to close the browser and open it again. For Safari on iPhone, iPad and Mac, the new encryption arrives with the system update (iOS, iPadOS and macOS 26), not with the browser itself.

How to check your version

Where to find which version you have

Chrome

Menu ⋮ → Help → About Google Chrome, or type chrome://settings/help in the address bar. Chrome also checks for updates.

Edge

Menu … → Help and feedback → About Microsoft Edge, or edge://settings/help.

Firefox

Menu ☰ → Help → About Firefox (on a Mac: Firefox menu → About Firefox).

Safari on a Mac

Safari menu → About Safari. The system version is under Apple menu → About This Mac.

iPhone and iPad

Settings → General → About. To update: Settings → General → Software Update.

Android

In Chrome: ⋮ → Settings → About Chrome. Updates come through Google Play.

Vendor guides: Google Chrome · Microsoft Edge · Mozilla Firefox · iPhone, iPad · Safari

Verified from official sources as of 24 September 2026. Browsers move fast — when something changes, we will add it here.

← Post-quantum security