Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Short answer: There is no official evidence that AI has broadly defeated sound, mainstream encryption. AI can help analyze code, find implementation mistakes and automate cryptanalysis, but that is different from efficiently breaking a properly designed modern cipher. The more established long-term concern is a sufficiently powerful quantum computer: it could threaten some public-key systems, although current quantum computers are too small and unstable to do so and nobody knows when a cryptographically relevant machine will exist.

For ordinary users, the practical response is not to buy a “quantum protection” gadget or change algorithms manually. Keep operating systems, browsers, apps and devices updated, enable automatic updates, use supported products and ask service providers whether they are preparing post-quantum cryptography (PQC). Those actions let vendors deliver the cryptographic changes users generally cannot implement safely themselves.

What people mean by “cracking encryption”

Encryption converts readable data into ciphertext that should be unusable without the right key. “Cracking” can mean several different things:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Recovering the plaintext from ciphertext without the key.
  • Stealing or guessing a key.
  • Finding a flaw in an implementation, protocol or random-number generator.
  • Compromising an endpoint before data is encrypted or after it is decrypted.

These are not equivalent. A model that discovers a coding error may compromise a product without defeating the underlying mathematical design. Likewise, a stolen password can expose an account without anyone breaking the encryption protecting a server or a message.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

What AI can do today

AI systems can search code, propose test cases, identify suspicious patterns and automate parts of vulnerability research. Those abilities can make attacks faster, especially when a developer has made a mistake. They do not demonstrate that an AI system can efficiently defeat a sound, widely deployed encryption algorithm by itself.

The official evidence available for this question does not establish a general AI capability to crack mainstream encryption. It focuses mainly on the separate risk from future quantum computing, so claims that “AI has broken encryption” are broader than the evidence supports.

A 2026 example: the HAWK candidate

NIST’s current post-quantum-cryptography information notes that on July 28, 2026, Anthropic announced a model-assisted discovery of a vulnerability in HAWK, a lattice-based digital-signature algorithm that was being considered for standardization. HAWK’s developers withdrew the candidate. NIST says the finding does not affect its finalized post-quantum standards, including ML-KEM and ML-DSA.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

This episode shows how model assistance can matter during cryptographic analysis of a candidate algorithm. It is not evidence that AI has cracked deployed mainstream encryption, nor that every lattice-based design is unsafe.

Why quantum computing is a different threat

NIST says current quantum computers are much too small and unstable to threaten cryptography. They have not made today’s encrypted web traffic generally readable, and there is no evidence-based countdown to a machine capable of doing that.

Rank #2
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

The risk is prospective. A sufficiently powerful quantum computer could break some present public-key cryptography, particularly systems whose security depends on mathematical problems such as factoring large numbers. Public-key methods are used for tasks such as establishing keys and creating digital signatures. That possibility is not the same as saying that all encryption will fail or that a quantum computer can break it now.

Question What the evidence supports What it does not support
Can an AI system broadly crack modern encryption today? No general capability has been established in the official material reviewed. A claim that AI has already defeated mainstream encryption at scale.
Can a quantum computer break some current public-key systems? A sufficiently powerful future machine could threaten some systems based on problems such as factoring. That current quantum devices can decrypt ordinary internet traffic.
When will such a quantum computer arrive? The date is unknown; major engineering obstacles remain. A reliable year, countdown or guarantee.
Will every kind of encryption fail? The concern is concentrated on particular public-key constructions. The statement that all encryption is already, or inevitably soon will be, broken.

“Harvest now, decrypt later”: why preparation starts before a quantum computer exists

Harvest now, decrypt later (HNDL) describes an attack against information whose confidentiality must survive for years. An adversary can copy encrypted traffic or stored files today, retain the ciphertext and attempt decryption later if a future capability makes the relevant public-key protection breakable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Who has the greatest exposure

  • Organizations holding medical, financial, legal, government or research records that must remain confidential for many years.
  • Businesses with trade secrets, source code, designs or strategic plans whose value outlasts the current encryption session.
  • People whose archived communications, identity records or family documents would still be sensitive in the future.

HNDL does not mean every web session will certainly be exposed. It means that the required confidentiality lifetime matters. A document that must remain secret for decades deserves earlier migration planning than information that loses value quickly.

What HNDL changes for a home user

You usually cannot retrofit a different key-exchange algorithm into a messaging app, browser or cloud service. The useful question is whether the provider has a plan to deploy post-quantum protection and whether your device remains supported long enough to receive it. Keep important data in services that continue to receive security updates, and avoid treating an unsupported device as a safe archive for long-lived secrets.

Where post-quantum standards stand

NIST’s finalized standards

NIST released its first three finalized post-quantum cryptography standards in 2024 and describes them as ready for implementation. The program page and explainer identify ML-KEM and ML-DSA among the finalized standards. ML-KEM is the recommended general-purpose choice for encryption in NIST’s guidance; ML-DSA is a digital-signature standard.

Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

These are standards for operating-system vendors, browser developers, cloud providers, device manufacturers and system operators. A consumer should not download an unfamiliar “PQC” utility and replace cryptographic settings by hand.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

HQC’s status in the March 2025 update

In a March 11, 2025 article, NIST selected HQC as a backup algorithm based on different mathematics from ML-KEM. That article said NIST planned a draft standard in about a year and a finalized standard in 2027. Because that status was explicitly a dated plan, HQC should not be described as a finalized standard solely on the basis of that update. Check a newer official NIST standard page for its current status.

Migration is measured in years, not a consumer deadline

NIST’s 2024 explainer says an algorithm-standardization process can take 10 to 20 years. That is a transition-duration statement, not a prediction that a quantum computer will break encryption within that period. NIST also says nobody knows when a cryptographically relevant quantum computer will appear.

Dustin Moody, who leads NIST’s Post-Quantum Cryptography project, put the implementation priority plainly: “We encourage organizations to begin their transition to these standards immediately to ensure their data remains secure in the quantum era.” For individuals, the corresponding action is to use products whose suppliers are doing that transition work.

Actions ordinary users can take now

1. Turn on automatic updates

Andrew Regenscheid, a NIST mathematician and cryptographic expert, said: “The most effective thing you can do as a user is to ensure that your systems are updated.” Updates can carry security fixes and, over time, new cryptographic support.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Menu names vary by version, but the common paths are:

  • Windows: Settings > Windows Update. Turn on automatic updates and install offered updates, including optional firmware updates when your manufacturer recommends them.
  • macOS: Apple menu > System Settings > General > Software Update > Automatic Updates. Keep macOS and installed browser software current.
  • iPhone or iPad: Settings > General > Software Update > Automatic Updates. Install iOS or iPadOS updates while the device remains supported.
  • Android: Settings > System > Software update, or the manufacturer’s equivalent. Also check Google Play system updates and the device maker’s security-update setting.
  • Browsers and apps: Leave their built-in automatic-update option enabled and restart when an update requires it.

If a device no longer receives updates, replacing it with a supported model is more defensible than installing an unverified cryptography add-on.

2. Prefer supported products and services

When choosing a browser, operating system, phone, computer, cloud service or business application, check whether the supplier publishes a post-quantum-cryptography transition plan. “Quantum-safe” marketing without technical documentation is not proof of anything. Look for a clear statement about standards, deployment and update support rather than a special badge or accessory.

3. Ask providers a precise question

Customer support may not recognize the phrase “quantum-safe.” Ask: Which post-quantum standards are you implementing, where will they be used, and will my current account, app or device receive the change through a normal update? A useful answer identifies the affected protocol or product and the supplier’s update process. A vague promise to “use AI security” does not answer the question.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

4. Keep long-lived sensitive data in maintained systems

If a file or conversation must remain confidential for many years, store it in a service that receives ongoing security updates and has a documented migration plan. Keep backups protected with the same care as the primary copy. Do not assume that copying old ciphertext to a new drive changes the encryption used to create it.

Best Value
Yubico - YubiKey 5C - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB, FIDO Certified - Protect Your Online Accounts (5C)
  • POWERFUL SECURITY KEY: The YubiKey 5 is a versatile physical passkey that protects your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 secures 100+ of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 via USB and tap it to authenticate. No batteries, no internet connection, and no extra fees required.
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

5. Do not manually install unvetted cryptography

Cryptographic software can fail because of key management, authentication, random-number generation or protocol integration even when its algorithm name sounds advanced. A consumer-facing tool that promises instant quantum protection may create new risks. Let established vendors integrate and update algorithms through their normal security channels.

6. Treat general security hygiene as separate, useful protection

Strong unique passwords, multi-factor authentication, current malware protection and careful handling of phishing messages reduce ordinary account and endpoint compromises. They do not turn an existing public-key algorithm into a post-quantum one, but they address attacks that do not require breaking encryption at all.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

User actions versus vendor responsibilities

Area You can do now The provider must do
Operating system and apps Enable automatic updates, install patches and replace unsupported devices. Implement vetted algorithms, test them and distribute them safely.
Browsers and web services Use current versions and ask about the supplier’s PQC plan. Update protocols, certificates, key exchange and server infrastructure.
Cloud storage and messaging Choose maintained services and protect account access. Protect stored data and communications with updated, interoperable cryptography.
Hardware and firmware Apply manufacturer updates and follow support notices. Provide firmware, drivers and hardware-backed implementations that support the migration.

This division of responsibility is important: users should not be expected to select mathematical parameters or edit protocol configurations. The safest consumer choice is usually a maintained product with a credible update channel.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Common mistakes and how to avoid them

  • Assuming “AI” means instant decryption: Ask whether the claim concerns the cipher, a software flaw, stolen credentials or a candidate algorithm. Those are different failure modes.
  • Waiting for a public quantum computer announcement: HNDL makes long-lived information worth protecting before that announcement.
  • Using “quantum-safe” as a product guarantee: Require a supplier’s explanation of the standards and update mechanism.
  • Believing every encrypted file is equally exposed: Risk depends on the cryptographic system, the attacker’s access and how long confidentiality must last.
  • Ignoring device support dates: A product that cannot receive updates cannot reliably receive a future cryptographic migration.
  • Confusing a backup algorithm with a finalized standard: HQC was selected as a backup in NIST’s March 2025 announcement, with finalization then planned for 2027; verify newer status before relying on that description.

How to make a sensible decision today

  1. List the devices and services that hold information you would still want private years from now.
  2. Confirm that each is receiving operating-system, application or firmware updates.
  3. Enable automatic updates and install pending security fixes.
  4. Read the provider’s security or PQC documentation, or ask the precise migration question above.
  5. Replace unsupported devices and move long-lived sensitive data away from services with no maintenance plan.
  6. Ignore products that sell a quantum label without explaining which standard they implement and how updates work.

Bottom line

AI-assisted security research can uncover weaknesses, but the available official evidence does not show AI broadly cracking modern mainstream encryption. Current quantum computers are not capable of breaking cryptography; the concern is a future machine that could threaten some public-key systems, plus the possibility that encrypted data collected today will be targeted later. Ordinary users reduce risk by keeping every supported system updated, enabling automatic updates, choosing maintained services and asking providers about post-quantum migration. No specific consumer gadget or manually installed “quantum protection” product is established as necessary.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.