Surfshark Added Post-Quantum Security to WireGuard
The VPN provider has implemented ML-DSA certificates to defend against potential quantum-enabled server impersonation.
Updated on Oct. 7, 2026 in Quantum Computing
Live Poll
Do you prioritize quantum-resistant security features when choosing your daily internet software?
Surfshark has integrated ML-DSA certificates into the WireGuard protocol to secure its VPN service against future quantum computer threats. The security update is now available for users on iOS, macOS, and Windows platforms.
Why it matters
This implementation addresses the risk of attackers impersonating VPN servers, an essential pillar of maintaining secure connections in a post-quantum computing era. It marks a transition for consumer privacy tools toward adopting advanced post-quantum standards.
Surfshark is the first consumer VPN to implement full post-quantum WireGuard security by integrating ML-DSA (Module-Lattice-Based Digital Signature Algorithm) certificates. This follows the company's prior rollout of ML-KEM for encryption and key exchanges.
The players
Surfshark
A consumer VPN service provider focused on privacy tools and the integration of post-quantum cryptographic protocols.
The details
Surfshark has integrated ML-DSA, a standard for digital signatures designed to be resistant to quantum computer attacks, directly into the WireGuard tunnel protocol. By upgrading the authentication layer, the system prevents unauthorized parties from intercepting or impersonating server identities. This effort builds upon the company's existing proprietary Dausos protocol and completes a full post-quantum security stack for the supported operating systems.
Timeline
October 7, 2026: Surfshark announced the WireGuard post-quantum security update.
The Tech Race
This implementation follows the broader industry move toward post-quantum standards, reflecting a shift in how consumer-facing services prepare for quantum-capable adversaries. Among 15 major tech platforms evaluated, only Surfshark, AWS, and Google Cloud have currently deployed ML-DSA.
Users on iOS, macOS, and Windows gain increased protection against quantum-based session takeovers immediately through this update. Future releases are planned to expand this post-quantum security layer to additional platforms.
The takeaway
Surfshark has moved to secure its VPN infrastructure against future quantum threats by deploying advanced signature standards. Users should monitor future service announcements for the rollout of this security feature to non-supported operating systems.
Further reading
For more on the evolution of secure protocols, see our latest coverage in Quantum Computing.
Live Poll
Do you prioritize quantum-resistant security features when choosing your daily internet software?
