HK Regulator Launches Post-Quantum Toolkit for Banks
The framework starts banks from a sector score of 2.3 out of 10, with a 2030 target of 10 on the Quantum Preparedness Index.
Updated on Nov. 3, 2026 in Quantum Computing
The Hong Kong Monetary Authority and the Hong Kong University of Science and Technology launched a Post-Quantum Cryptography Toolkit for banks on November 2, 2026. The toolkit sets out a structured framework for banks' transition to post-quantum cryptography, including tools for taking stock of cryptographic assets and dependencies and for defining transition priorities and timelines. The toolkit is announced and available to banks as a framework rather than a shipped security product.
Why it matters
The HKMA launched its Quantum Preparedness Index in July 2026 in response to potential cybersecurity risks from future advances in quantum computing, and the toolkit is the operational follow-on to that assessment. It shows regulators moving from diagnosing quantum risk toward prescribing a concrete migration process for financial institutions.
The initial banking sector score on the Quantum Preparedness Index was 2.3 out of 10, with the regulator targeting a score of 10 by 2030. The toolkit does not report measured migration progress, and the extraction gives no interim benchmarks against which to track it.
The players
Hong Kong Monetary Authority (HKMA)
Hong Kong's central banking and financial regulator, which oversees the city's banking sector and issued the Quantum Preparedness Index.
Hong Kong University of Science and Technology (HKUST)
A Hong Kong research university whose multidisciplinary work spans cybersecurity, cryptography, finance and technology applications, and which co-developed the toolkit.
The details
Post-quantum cryptography refers to encryption methods designed to resist attacks from future quantum computers, which could break many current public-key schemes. The toolkit helps banks inventory their cryptographic assets and the systems that depend on them, then set transition priorities and build timelines for replacing vulnerable algorithms. It was co-developed by the HKMA and HKUST with industry support and will be updated as standards and implementation experience evolve.
Timeline
July 2026: The HKMA launched the Quantum Preparedness Index, scoring the banking sector 2.3 out of 10.
November 2, 2026: The HKMA and HKUST launched the Post-Quantum Cryptography Toolkit.
2030: The regulator's target year for a banking sector score of 10 on the index.
The Tech Race
The HKMA's index and toolkit position Hong Kong's banking regulator among early public efforts to turn post-quantum cryptography from a research topic into a supervisory migration task. The extraction does not name competing national programs, so this comparison remains limited to the regulator's own published framework.
Banks in Hong Kong now have a structured framework for inventorying cryptographic assets and sequencing their post-quantum transition. The extraction does not give a timeline for when customers would see changes to banking services or security.
The takeaway
Banks and their vendors should expect post-quantum migration to move from voluntary planning toward regulator-defined targets. Watch for the first updated version of the toolkit and any published interim Quantum Preparedness Index scores on the road to the 2030 target.
Further reading
For background on the encryption shift at the center of this toolkit, see the Quantum Computing section.
