Quantum computing is moving from laboratory demonstrations toward engineered, error‑corrected machines, but its business impact is arriving in an unexpected order. The first thing most companies must act on is not a new capability but a security deadline: the encryption that protects today’s data will eventually need to be replaced. Here is what quantum computing is, where the hardware stands, which industries are likely to benefit first and how to prepare.
What is quantum computing?
Classical computers process information as bits, each either 0 or 1. Quantum computers use qubits, which can hold a weighted combination of 0 and 1 (superposition) and can be entangled so that their states are linked. Quantum algorithms use interference to amplify the outcomes that lead to an answer and cancel the rest, as IBM’s explainer describes.
That does not make them faster at everything; IBM notes that quantum computing is not suited to most problems. An analysis by Hoefler, Häner and Troyer concluded that practical advantage requires small‑data problems and algorithms with better‑than‑quadratic speedups, and that chemistry and materials science are the most promising early areas.
Where does quantum hardware stand in 2026?
The central problem is error. Qubits are fragile, so useful machines need error correction, which combines many physical qubits into more reliable “logical” qubits.
- Google. In December 2024 Google’s 105‑qubit Willow chip showed that error rates fell as encoded qubit arrays grew from 3×3 to 5×5 to 7×7, known as operating “below threshold.” In October 2025 its Quantum Echoes algorithm ran 13,000 times faster on Willow than the best classical method, with a result that can be checked on other hardware.
- IBM. IBM plans to deliver Starling, a fault‑tolerant system designed to run 100 million operations on 200 logical qubits, by 2029 in Poughkeepsie, New York. It expected the first verified cases of quantum advantage by the end of 2026, and in July 2026 it and the University of Chicago reported one on 70 logical qubits; it is a sampling benchmark, not a business application, posted to an open tracker for others to check.
- Quantinuum. Its 98‑qubit Helios system launched in November 2025 with 48 error‑corrected logical qubits; the fault‑tolerant Apollo system is expected by 2029.
- Microsoft. Microsoft’s February 2025 Majorana 1 announcement claimed eight topological qubits on a chip designed to scale to a million. Nature’s editors noted that the accompanying paper’s results “do not represent evidence” of the Majorana zero modes the approach depends on, Physics World reported, and in June 2026 Nature published a critique of the analysis alongside a Microsoft rebuttal, The Register reported. Topological qubits remain unproven.
Which industries are likely to benefit first?
Most early value will come from specialized problems, not general workloads:
- Pharmaceuticals, chemicals and materials: Molecular and materials simulation is the strongest near‑term case; Google’s Quantum Echoes work included a molecular‑structure experiment with UC Berkeley.
- Energy: Battery, catalyst and solar materials research falls under the same simulation category; grid optimization gains are less certain.
- Finance: Portfolio optimization, risk modeling and pricing are being studied, but practical speedups have not yet been shown.
- Logistics and supply chain: Routing and scheduling are natural candidates, but many quantum optimization methods offer at most quadratic speedups, which the Hoefler analysis found are unlikely to be enough.
- Cybersecurity: The most immediate impact, because a large enough quantum computer would break the public‑key encryption nearly every organization relies on.
What could quantum computing do for business?
1. Simulation and modeling
Simulating molecules could speed research into drugs, chemicals, batteries and materials, where classical computers rely on approximations. Contrary to some early claims, quantum computers are poorly suited to crunching large datasets; their strength is hard calculations on small inputs.
2. Optimization in operations and supply chains
Quantum algorithms may eventually improve some routing, inventory and scheduling decisions. For now, classical optimization software remains the practical tool, and any quantum speedup claim should be tested against strong classical baselines.
3. Cybersecurity: the threat arrives before the benefit
No quantum computer can yet break widely used encryption. But estimates of what it would take keep falling: in May 2025 Google researchers estimated that 2048‑bit RSA could theoretically be broken by a quantum computer with about one million noisy qubits running for a week, a twentyfold reduction from a 2019 estimate. Today’s machines have roughly 100 to 1,000 qubits at the relevant error rates. Federal guidance warns that encrypted data can be recorded now and decrypted later, so long‑lived secrets are already exposed.
The practical defense is post‑quantum cryptography (PQC): new algorithms that run on ordinary computers but are designed to resist quantum attack. U.S. federal migration guidance, including OMB’s 2026 migration memo, is built on NIST’s PQC algorithms rather than on quantum key distribution hardware.
4. Artificial intelligence
Researchers are testing whether quantum computers can speed up parts of machine learning, but no practical advantage for mainstream AI workloads such as recommendations or chatbots has been shown, and the data‑loading limits above apply. Treat quantum AI as research, not a roadmap item.
What has NIST standardized?
In August 2024 NIST finalized its first three post‑quantum standards: FIPS 203 (ML‑KEM) for general encryption and key establishment, and FIPS 204 (ML‑DSA) and FIPS 205 (SLH‑DSA) for digital signatures. A fourth, FN‑DSA (FIPS 206), based on the FALCON algorithm, was announced to follow. NIST urged organizations to start integrating the finalized standards immediately rather than wait.
In March 2025 NIST selected HQC as a backup to ML‑KEM, based on different mathematics, and said it expected a final standard in 2027. NIST’s draft transition plan, IR 8547, proposes deprecating RSA and elliptic‑curve algorithms at the 112‑bit security level (such as RSA‑2048) after 2030 and disallowing quantum‑vulnerable public‑key algorithms after 2035.
What are the U.S. federal deadlines?
Federal deadlines bind agencies and, increasingly, their suppliers, and set the timetable vendors build to.
| Policy | What it requires |
|---|---|
| National Security Memorandum 10 (May 2022) | Goal of mitigating as much quantum risk as feasible by 2035 |
| OMB M‑23‑02 (Nov. 2022) | Annual agency inventories of quantum‑vulnerable cryptographic systems, starting May 2023 |
| Executive Order 14306 (June 2025) | Agencies must support TLS 1.3 or a successor by January 2, 2030; CISA to list product categories where PQC is widely available |
| Executive Order 14412 (June 2026) | High‑value and high‑impact agency systems use PQC key establishment by Dec. 31, 2030 and PQC signatures by Dec. 31, 2031; a proposed FAR rule would require covered contractors to use PQC algorithms by Dec. 31, 2030 |
| OMB M‑26‑15 (June 2026) | Agency migration plans due within 120 days, in five phases: discovery (2026–27), pilots (2027–28), prioritized key‑establishment migration (2028–30), signatures (2031), full migration (2035) |
| NSA CNSA 2.0 (national security systems) | Exclusive use of quantum‑resistant algorithms for software signing and networking gear by 2030 and for browsers, servers and cloud by 2033; completion by 2035 |
How should a business prepare?
Business use of quantum computers is years away, but the security work cannot wait. OMB’s agency guidance doubles as a checklist for companies:
- Name an owner. Make PQC migration a funded program with an accountable lead, involving procurement, application owners and finance.
- Inventory your cryptography. For each system, record algorithms and key lengths, what they protect (key exchange, connections or signatures), the vendor or library, hosting and how long the data must stay confidential. Automate discovery with SBOM analysis, code scanning and network scans of cipher suites, and keep results in a cryptographic bill of materials (CBOM).
- Prioritize by risk and data lifetime. Start with data that must remain secret into the 2030s, internet‑facing systems, VPNs and public‑key infrastructure. Encryption and key exchange come first because of the record‑now, decrypt‑later risk; signatures follow.
- Use what is already available. Move to TLS 1.3 and enable hybrid key exchange (a classical algorithm combined with ML‑KEM) where browsers, servers, cloud platforms and gateways support it.
- Build crypto‑agility. Select algorithms in configuration rather than code, use libraries that can swap algorithms, and confirm that key‑management systems and hardware security modules support PQC keys.
- Put PQC in contracts. Ask vendors for PQC roadmaps and dates. CISA’s January 2026 list says cloud platforms, browsers, web servers, collaboration software and disk encryption are widely PQC‑capable, so buy only PQC‑capable products there. Fold upgrades into planned refreshes; federal contractors should track the FAR rulemaking.
- Build quantum literacy and partnerships. In chemistry, materials, pharmaceuticals or finance, a small quantum‑literate team can test problems through cloud access and research partnerships without a large in‑house investment.
When will quantum computing disrupt modern business?
In two stages. The security disruption is already underway: standards are final, federal deadlines run from 2030 to 2035, and OMB’s 2026 memo states that a cryptographically relevant quantum computer is not yet known to exist but may arrive in the coming decade. The computing benefits will come later. IBM and Quantinuum both target fault‑tolerant machines by 2029, and the first verified‑advantage claims in 2025 and 2026 involve scientific benchmarks rather than commercial workloads.
Most businesses do not need quantum computing time today. Every business that relies on encryption does need a migration plan.
Frequently asked questions
A quantum computer uses qubits, which can hold a combination of 0 and 1 and can be entangled with one another. This lets certain algorithms tackle specific problems, such as molecular simulation, that are impractical for classical computers, though classical machines remain better for most tasks.
IBM and Quantinuum both target fault-tolerant quantum computers by 2029. The first verified-advantage claims so far involve scientific benchmarks rather than commercial workloads, so broad business use is still years away.
No. A 2025 Google estimate put the requirement for breaking 2048-bit RSA at about one million noisy qubits running for a week, while today’s machines have roughly 100 to 1,000 qubits at the relevant error rates. Data recorded now could still be decrypted later, which is why migration is starting now.
Post-quantum cryptography uses new algorithms that run on ordinary computers but are designed to resist quantum attacks. NIST finalized the first three standards, FIPS 203, 204 and 205, in August 2024.
National Security Memorandum 10 sets 2035 as the goal for federal migration. A June 2026 executive order requires agencies’ high-value and high-impact systems to use PQC key establishment by the end of 2030 and PQC signatures by the end of 2031, and calls for a proposed rule requiring covered contractors to use PQC algorithms by the end of 2030.
Name an owner and build an inventory of where and how cryptography is used, including algorithms, key lengths, vendors and how long data must stay confidential. Then prioritize long-lived sensitive data and internet-facing systems, and ask vendors for their PQC roadmaps.
Sources
- IBM, What is quantum computing?
- Hoefler, Häner and Troyer, Disentangling Hype from Practicality: On Realistically Achieving Quantum Advantage, Communications of the ACM (2023)
- Google, Willow quantum chip announcement (2024)
- Google, Quantum Echoes and verifiable quantum advantage on Willow (2025)
- IBM, IBM Sets the Course to Build World’s First Large-Scale, Fault-Tolerant Quantum Computer (2025)
- IBM, IBM Delivers New Quantum Processors, Software, and Algorithm Breakthroughs on Path to Advantage and Fault Tolerance (2025)
- IBM, IBM and The University of Chicago Demonstrate Quantum Advantage (2026)
- Quantinuum, Quantinuum Announces Commercial Launch of New Helios Quantum Computer (2025)
- Microsoft, Microsoft’s Majorana 1 chip carves new path for quantum computing (2025)
- Physics World, Experts weigh in on Microsoft’s topological qubit claim (2025)
- The Register, Boffin claims Microsoft’s supposed quantum leap does not compute (2026)
- Google, Tracking the cost of quantum factoring (2025)
- NIST, NIST Releases First 3 Finalized Post-Quantum Encryption Standards (2024)
- NIST, NIST Selects HQC as Fifth Algorithm for Post-Quantum Encryption (2025)
- NIST, IR 8547 (Initial Public Draft): Transition to Post-Quantum Cryptography Standards (2024)
- The White House, National Security Memorandum 10 (2022)
- OMB, M-23-02: Migrating to Post-Quantum Cryptography (2022)
- The White House, Executive Order 14306 (2025)
- CISA, Product Categories for Technologies That Use Post-Quantum Cryptography Standards (2026)
- The White House, Executive Order 14412: Securing the Nation Against Advanced Cryptographic Attacks (2026)
- OMB, M-26-15: Execution of the Migration to Post-Quantum Cryptography (2026)
- Utimaco, Discussing NSA’s Commercial National Security Algorithm Suite 2.0




