Protection against “harvest now, decrypt later”
What someone records on the way today, they may want to read later — once they have a quantum computer. A post-quantum key exchange is designed so that such a recording stays unreadable even then.
Post-quantum security · browsers
Post-quantum protection of a connection is not switched on by the website alone — your browser negotiates it with the site. Our websites offer it to everyone. Whether you actually get it depends on which browser you use and how up to date it is.
Overview
The browsers in the table use the hybrid X25519MLKEM768 key exchange (classic X25519 + post-quantum ML-KEM-768) by default — nothing to switch on. We list only what an official source confirms; each row links to it.
| Browser | Device | Post-quantum by default since | Source |
|---|---|---|---|
| Google Chrome | Windows, Mac, Linux, ChromeOS | version 131 (November 2024)From version 124 a preliminary version (Kyber), replaced by the ML-KEM standard in 131. | Google Security Blog · Chrome Platform Status |
| Google Chrome | Android | version 133 at the latest (February 2025)Google did not announce it separately for Android; the figure comes from the Chromium source code. | Chromium net/base/features.cc (133) |
| Microsoft Edge | Windows, Mac, Linux | version 131 (November 2024) | Microsoft Learn — Edge 131.0.2903.48 |
| Mozilla Firefox | Windows, Mac, Linux | version 132 (October 2024)For HTTP/3 connections from version 136. | Firefox 132 Release Notes · Bugzilla 1941041 |
| Mozilla Firefox | Android | version 145 (November 2025) | Firefox for Android 145 Release Notes |
| Apple Safari | Mac, iPhone, iPad | macOS Tahoe 26, iOS and iPadOS 26 (September 2025)What counts is the system version, not the app — Safari is updated with the system. | Apple Support 122756 · Apple Platform Security |
Not verified: We found no official statement for these browsers, so they are not in the table: Brave and Opera (built on Chromium, which has it, but they do not state it themselves), Samsung Internet, Vivaldi, DuckDuckGo, Edge on Android, Chrome, Firefox and other browsers on iPhone and iPad (pages are loaded by Apple’s system, so likely from iOS 26 — but nobody confirms it explicitly). The badge at the top of this page shows whether they protect you.
What it means for you
What someone records on the way today, they may want to read later — once they have a quantum computer. A post-quantum key exchange is designed so that such a recording stays unreadable even then.
An up-to-date browser is enough. The browser and the website agree on post-quantum encryption on their own, on every connection.
The hybrid combines a classic and a post-quantum method. An attacker would have to break both; if one turned out weak, the other still protects.
It connects encrypted as before, just without the post-quantum part. Such a connection is secure today — it only lacks protection for the future.
Why update
Updating your browser costs nothing, and besides post-quantum encryption it brings fixes for flaws that attackers exploit today.
Most browsers update themselves — often it is enough to close the browser and open it again. For Safari on iPhone, iPad and Mac, the new encryption arrives with the system update (iOS, iPadOS and macOS 26), not with the browser itself.
How to check your version
Menu ⋮ → Help → About Google Chrome, or type chrome://settings/help in the address bar. Chrome also checks for updates.
Menu … → Help and feedback → About Microsoft Edge, or edge://settings/help.
Menu ☰ → Help → About Firefox (on a Mac: Firefox menu → About Firefox).
Safari menu → About Safari. The system version is under Apple menu → About This Mac.
Settings → General → About. To update: Settings → General → Software Update.
In Chrome: ⋮ → Settings → About Chrome. Updates come through Google Play.
Vendor guides: Google Chrome · Microsoft Edge · Mozilla Firefox · iPhone, iPad · Safari
Verified from official sources as of 24 September 2026. Browsers move fast — when something changes, we will add it here.