# How long does a post-quantum migration take?

Years for most organisations, which is why starting early matters more than the exact deadline. The change touches every place that agrees keys or signs data: websites, VPNs, SSH, e-mail, internal applications, certificates, hardware security modules, smart cards, machines and their firmware. Much of it depends on suppliers shipping post-quantum support, and on your own replacement cycles: a firewall bought this year may still be running in the next decade, and an industrial controller far longer. Past changes give a sense of scale: retiring SHA-1 and the old TLS versions took the industry many years from the first warnings to the final switch-off. A small company that runs mostly cloud services and up-to-date software may get much of the way through ordinary updates, inside a normal refresh cycle. A company with in-house software, long-lived devices or its own certificate authority should expect a programme spread over several years. The Y in Mosca's inequality is your own estimate, so write it down with its reasons.

FAQ: [Post-quantum cryptography](https://netsenx.com/en/faq/pqc) · https://netsenx.com/en/faq/how-long-does-a-post-quantum-migration-take

## Read next

- https://netsenx.com/en/encrypted-traffic-analysis
- https://netsenx.com/en/features
- https://netsenx.com/en/blog/2026-10-27_harvest-now-decrypt-later

## Related questions

- [What do we gain by migrating to post-quantum cryptography?](https://netsenx.com/en/faq/what-do-we-gain-by-migrating-to-post-quantum-cryptography)
- [What can go wrong in a post-quantum migration?](https://netsenx.com/en/faq/what-can-go-wrong-in-a-post-quantum-migration)
- [What is crypto-agility?](https://netsenx.com/en/faq/what-is-crypto-agility)
- [Do SSH and VPNs support post-quantum key exchange?](https://netsenx.com/en/faq/do-ssh-and-vpns-support-post-quantum-key-exchange)
- [How can we find where we use quantum-vulnerable cryptography?](https://netsenx.com/en/faq/how-to-find-quantum-vulnerable-cryptography)