IPVanish Adds Post-Quantum Encryption to WireGuard
The iOS app update version 4.33.2 brings quantum-resistant protection to the WireGuard protocol, with the algorithm undisclosed.
Updated on Nov. 10, 2026 in Quantum Computing
Live Poll
Do you trust VPN apps to keep your data private over the long term?
VPN provider IPVanish released iOS app version 4.33.2 on the App Store, adding post-quantum encryption to its WireGuard protocol. The release notes confirm the change in a single line but do not disclose the algorithm used or whether the setup is hybrid or fully post-quantum.
Why it matters
Post-quantum encryption is designed to protect data against harvest now, decrypt later attacks, in which encrypted traffic is stored today and decrypted once quantum computers mature. Because WireGuard's key exchange relies on elliptic-curve cryptography, the addition addresses a known long-term weakness in the protocol.
The release notes confirm post-quantum encryption was added to WireGuard in a single line without mentioning OpenVPN or IKEv2. IPVanish has not disclosed the algorithm or whether the setup is hybrid, and its September 2025 executive statement described only custom implementations under development.
The players
IPVanish
A consumer VPN provider that has recently passed its third independent no-logs audit and is known for its WireGuard-based apps.
Surfshark
A VPN provider that added ML-DSA authentication to WireGuard in October 2026, a comparable post-quantum step.
NordVPN
A VPN provider that takes a hybrid approach, layering post-quantum protection over classical encryption.
The details
The update landed on the App Store on Monday. Providers typically run a separate post-quantum handshake, usually with the NIST-standardized ML-KEM algorithm, and feed the result into WireGuard's pre-shared key slot, though IPVanish has not confirmed it follows this approach.
Timeline
September 2025: An IPVanish executive told TechNadu the team was building custom post-quantum implementations.
November 2026 (Monday): Version 4.33.2 of the iOS app was released on the App Store.
October 2026: Surfshark added ML-DSA authentication to WireGuard, a rival provider's comparable move.
The Tech Race
VPN providers are racing to retrofit WireGuard, whose elliptic-curve key exchange is vulnerable to future quantum attacks, with post-quantum handshakes built on NIST's ML-KEM standard. IPVanish's update follows Surfshark's October 2026 ML-DSA authentication work, while NordVPN has taken a hybrid route layering post-quantum protection over classical encryption.
Users of the IPVanish iOS app receive post-quantum protection on WireGuard connections, but the update does not change what the app costs or which features are available. Because the algorithm is undisclosed, users cannot yet verify how strong the protection is against future quantum attacks.
The takeaway
Post-quantum protection in a VPN only helps if the provider discloses which algorithm it uses, so check a provider's release notes and security documentation before assuming your traffic is safe from future decryption.
Further reading
Explore more on Quantum Computing to see how post-quantum security is being built into everyday tools.
Source note: This article includes information reported by TechRadar.
Live Poll
Do you trust VPN apps to keep your data private over the long term?
