Quantum computers once seemed a distant threat. No longer. As these machines edge closer to breaking classical encryption, VPN providers race to adapt. Surfshark now claims a significant advance. The company says it has delivered the first full post-quantum implementation of WireGuard by adding ML-DSA certificates for server authentication.

This move closes a gap that many in the industry overlooked. Earlier efforts focused on key exchange and encryption. Authentication lagged behind. But Surfshark integrated the NIST-standardized ML-DSA algorithm directly into its certificate system. The result protects every stage of the connection against future quantum attacks.

“A truly full post-quantum secure VPN rests on three pillars: encryption, key exchange, and authentication,” said Karolis Kaciulis, Leading System Engineer at Surfshark. “While the industry has widely adopted quantum-safe encryption and key exchange (like ML-KEM), authentication remains the ‘forgotten’ step.”

And the stakes run high. Adversaries could collect encrypted traffic today. They store it. Years later, a sufficiently powerful quantum computer cracks the keys. This harvest-now-decrypt-later tactic threatens data with long confidentiality needs. Government secrets. Health records. Corporate strategy. All sit at risk.

Surfshark first rolled out post-quantum protection on WireGuard in January 2026. That initial version added quantum-resistant key exchange using ML-KEM on top of the protocol’s existing Curve25519 handshake. It appeared automatically when users selected WireGuard in the app settings. Support started with Android, Mac, and Linux. iOS and Windows followed later.

Donatas Budvytis, then Chief Technology Officer at Surfshark, explained the approach in an earlier TechRadar interview. The system runs a two-step process. First comes the classical handshake. Then an additional layer using lattice-based ML-KEM. The final encryption key combines secrets from both. Nothing replaces WireGuard’s core. It augments it.

Yet that left one pillar incomplete. Server authentication still relied on classical methods. An attacker with a quantum computer might forge certificates or impersonate servers in the future. Surfshark’s latest update fixes exactly that. By embedding ML-DSA signatures into the certificates, the entire authentication flow becomes quantum-resistant.

“At Surfshark, we took the ML-DSA standards and integrated them with our certificates into a protocol to make the authorization fully quantum-resistant,” Kaciulis continued in the October 7 announcement. “By using the ML-DSA certificates, we have completed the final pillar, achieving the first full post-quantum WireGuard implementation.”

The feature is now live for users on iOS, macOS, and Windows. No extra toggles required. Select WireGuard. The protection activates. This simplicity matters for mass adoption. Most users won’t read white papers or tweak configs. They expect security without friction.

Other providers have moved on post-quantum too. NordVPN, Mullvad, ExpressVPN, and Windscribe offer versions of quantum-resistant key exchange. Some use pre-shared keys injected into WireGuard’s slot. Others built hybrid handshakes. Few, however, publicly emphasize full authentication via post-quantum signatures like ML-DSA.

Open-source projects such as Rosenpass pair a separate ML-KEM process with WireGuard’s PSK mechanism. That delivers strong protection without rewriting the protocol. Governments explore similar paths. Germany’s federal IT provider examined Rosenpass for public-sector use. Yet commercial VPNs must balance security gains against speed, compatibility, and user experience.

Surfshark itself faced early hurdles. Its proprietary Dausos protocol, also built with post-quantum elements, initially struggled on some residential fiber connections. Packet overhead caused connectivity problems for unencrypted HTTP pages and certain apps. After TechRadar’s testing and feedback in April 2026, the company shipped a fix in version 4.27.1. The updated protocol then outperformed standard WireGuard in some speed tests despite the heavier cryptography.

Performance remains a legitimate concern. Post-quantum algorithms demand larger keys and more computation. ML-KEM public keys dwarf Curve25519. Handshakes take longer. Packet sizes grow. Yet real-world data from multiple providers shows the hit often stays manageable. Mullvad made quantum-resistant tunnels default on desktop. Users barely noticed.

Surfshark’s analysis from earlier this year found only 8 percent of popular apps had adopted any post-quantum measures. Messaging services lagged badly. Signal and Apple’s iMessage stood out as exceptions. The rest leave users exposed. A VPN cannot protect everything. It can, however, secure the tunnel that carries the traffic.

NIST finalized the core post-quantum standards in 2024. ML-KEM for key encapsulation. ML-DSA for signatures. These algorithms rest on lattice problems believed hard for both classical and quantum computers. Adoption has accelerated since. Enterprises, cloud providers, and browser makers integrate them. VPNs sit on the front lines of consumer exposure.

But full post-quantum security brings trade-offs. Larger certificates mean higher bandwidth during handshakes. Some older devices or networks may face MTU issues. And quantum computers powerful enough to break current systems don’t exist yet. Estimates vary. Five years. Ten. Longer. The prudent view treats the threat as real and acts now.

Surfshark positions its achievement as an industry first for complete WireGuard coverage. Independent verification will matter. Cryptography claims require careful review. Audits by firms like Cure53, which examined other Surfshark components, build confidence. The company says its implementation follows the published NIST standards without shortcuts.

For IT leaders and security teams, the message is clear. Evaluate your VPN roadmap against quantum risks. Data captured today might matter in 2035. Choose providers that treat all three pillars seriously. Encryption alone is not enough. Key exchange alone falls short. Authentication completes the picture.

So the race continues. More providers will follow Surfshark’s lead on ML-DSA or equivalent signatures. Standards will evolve. Hardware acceleration for these algorithms will arrive. What feels heavy today will feel normal tomorrow. In the meantime, Surfshark’s latest step offers a concrete way for millions of users to raise their defenses without changing habits.

They simply pick WireGuard. The quantum resistance follows. That quiet integration might prove the most important part.