Quantum-resistant tunnels are now the default on desktop

The 2025.2 desktop release enables quantum-resistant WireGuard tunnels by default on Windows. This means that it’s now enabled by default on all desktop platforms.

You should now see the “Quantum resistance” feature indicator while connected, unless you have explicitly disabled Quantum-resistant tunnels.

If it is not already enabled, you can navigate to Settings → VPN settings → WireGuard settings → Quantum-resistant tunnel. The setting should be set to either Automatic or On.

Mobile platforms

We hope to enable this by default on iOS and Android in the future, once we are sure that it works well.

Quantum-resistant tunnels

A regular WireGuard VPN tunnel has no known weaknesses today, but an attacker could potentially record encrypted traffic and in the future use a stronger quantum computer to decrypt it.

The feature prevents such a future attack using post-quantum secure key encapsulation mechanisms for exchanging a pre-shared key for WireGuard. The algorithms currently used are Classic McEliece and ML-KEM.

With this new app release we switched to the NIST standard ML-KEM from the earlier Kyber standard, but this is essentially a minor revision of that standard.