up:: 00 Start Here
What To Do
The honest answer is that there’s very little for you to do personally, and that’s genuinely good news rather than a brush-off.
Almost all of the repair happens above your head, by the companies and institutions running the systems you use. A lot of it has already happened. What’s left for you is short, free, and mostly about not making the permanent problems worse.
Anybody telling you otherwise is usually selling something.
5 things you must understand about Q-Day
- The repair is happening above your head. Almost all of it belongs to the companies and institutions running the systems you use, which is why the personal list is short.
- Part of it already happened on your devices without any announcement. Signal deployed it in 2023, Apple in February 2024, Chrome and Edge in November 2024, and Firefox in February 2025.
- No consumer product fixes this. Anything marketed to individuals as quantum protection is charging for a problem it doesn’t address.
- What’s genuinely yours is small. Keep devices updated, be careful about what you hand over permanently, and delete what you’re finished with.
- It only matters for information still sensitive years from now, which means the honest answer for most of your daily activity is that nothing changes.
Source: Signal, “PQXDH,” signal.org; Apple Security Research, “iMessage with PQ3,” February 2024, security.apple.com; Google Security Blog, “A new path for Kyber on the web,” September 2024, security.googleblog.com; Mozilla, Firefox 135 release notes, mozilla.org.
The short version:
- Keep your devices and apps updated. That’s the whole consumer action item that matters, and it’s why Signal and iMessage users already have the protection without asking for it.
- Use a messaging app that’s already been upgraded for anything that has to stay private for years.
- Delete what you’re finished with. Data you’ve already deleted can’t be copied from you later.
- Think hard before another DNA test or biometric enrollment, because neither can be withdrawn and a DNA test enrolls your relatives too.
- Ask your doctor, bank, and insurer what their timeline is. They hold the categories that actually matter.
- Buy nothing. No consumer product fixes this, and the ones being marketed are charging for a problem they don’t address.
What lives here
- What should I actually do? The full list, in order, with the reasoning behind each one.
- Did my phone already fix this? Signal, Apple, and the browsers changed their encryption and never told anyone.
- What should my doctor and my bank be doing? The standard to hold an organization to, and the one question that exposes whether they’ve started.
- Is anyone selling me something I don’t need? Yes, and here’s how to recognize it.
- How do I ask a company what their quantum plan is? A copy-and-paste template for your bank, your doctor, or anyone else holding your records, with the sourced urgency paragraph and how to tell a real answer from a brush-off.
Where to go next
-
If you read one thing is the 3-minute version of everything here.
-
What’s at risk covers which of your information this actually applies to.
-
Start here covers the basics if you skipped them.
Go deeper into the technical detail
The arguments cover the two traps that catch teams in motion: Deprecation, Not Deployment on why adding the new algorithm is not the same as being protected, and Can AI Build Your Cryptographic Inventory on what AI can and cannot do for the inventory. The technical version of the organizational work lives at Start a Migration and Doing the Work MOC.
These open the Post-Quantum Field Guide, a separate site written for security professionals.
Last verified 2026-08-02 · Maintained by Addie LaMarr, LaMarr Labs.