Google Cloud Unveils Roadmap for Full Post-Quantum Cryptography Migration by 2029, Mitigating “Store Now, Decrypt Later” Risks

August 17, 2026

Google Cloud Blog USA

Overview

Google Cloud has released an updated roadmap committing to migrate its entire infrastructure and customer-facing services to post-quantum cryptography (PQC) by 2029. The strategic imperatives for this transition include mitigating the threat of “Store Now, Decrypt Later” attacks, ensuring integrity against future cryptographic forgery, and enhancing overall cryptographic agility. Google has already begun deploying initial PQC protections in 2026 and is aggressively transitioning its internal systems and customer-facing services well ahead of anticipated regulatory mandates.

In Depth

Key Findings

Google Cloud has released a comprehensive roadmap detailing its plan to migrate all its infrastructure and customer-facing services to post-quantum cryptography (PQC) by 2029, addressing the impending threat of quantum computer-driven cryptographic attacks. This aggressive strategy primarily focuses on mitigating the critical “Store Now, Decrypt Later” risk, demonstrating a leading industry commitment to ensuring the long-term security and confidentiality of customer data.

Technical Details

Google Cloud’s PQC migration plan is structured around three core pillars. First, it strengthens measures to protect the confidentiality of stored data, countering threats where encrypted information collected today could be decrypted by future quantum computers. Second, the initiative aims to enhance the infrastructure’s resilience against digital signature forgery, thereby ensuring system integrity. Third, it seeks to improve “cryptographic agility,” enabling rapid and efficient adaptation to future standardization efforts and emerging threats.

The migration process is multi-phased, with initial PQC protections already deployed in some customer-facing services in 2026. This includes PQC-enabling internal Certificate Authorities (CAs) and transitioning TLS/SSL certificates to PQC algorithms. Google plans to extend PQC deployment not only across its cloud infrastructure but also into services like Google Workspace, ensuring a broad user base benefits from enhanced security.

Background and Context

The National Security Agency (NSA) and the U.S. National Institute of Standards and Technology (NIST) have already warned that classical cryptographic techniques are vulnerable to future quantum computers and strongly recommend transitioning to PQC. While many nations and industries are developing PQC standardization and adoption roadmaps, a major cloud provider like Google Cloud setting a concrete deadline provides a strong signal to the entire industry. This clearly indicates that PQC is moving from theoretical to practical deployment, urging other organizations to implement similar protective measures.

Strategic Significance and Outlook

Google Cloud’s PQC roadmap will play a crucial role in shaping the future of cybersecurity. The ambitious goal of complete migration by 2029 will provide Google Cloud customers with a more secure digital environment, protected from the cryptographic risks posed by the advent of quantum computers. This initiative is expected to establish new benchmarks for security in cloud services and act as a powerful catalyst for accelerating the global transition of data security infrastructure to quantum resistance.

Source: https://cloud.google.com/blog/products/identity-security/pqc-in-plaintext-google-clouds-post-quantum-cryptography-roadmap

Get our weekly technology intelligence — free

Receive an infographic that lets you judge at a glance whether each field’s analysis report is worth reading.

Subscribe Free — Weekly Tech Intelligence

By subscribing, you’ll receive Troy-Technical’s weekly technology intelligence newsletter.