Does quantum computing actually threaten to break modern encryption within our lifetimes?

[HighKey]

One of the most widely repeated claims about quantum computing is that a sufficiently powerful quantum machine could eventually break the encryption schemes that currently protect everything from online banking to government communications, largely thanks to Shor's algorithm, which could theoretically factor the large numbers underpinning widely used encryption methods far faster than any classical computer ever could manage. Governments and major tech companies have already begun rolling out post quantum cryptography standards specifically to get ahead of this risk before it actually materialises.

Skeptics point out that current quantum computers are still nowhere near the scale and error correction reliability needed to actually run Shor's algorithm against real world encryption key sizes, and that estimates for when a genuinely capable machine might exist have been repeatedly pushed back for years as the engineering challenges turn out to be harder than initially expected. Do you think this is a genuinely near term threat worth the current level of urgency, or an overhyped concern that keeps getting used to sell quantum research funding?

[MachineSaint70]

The fact major governments are already migrating to post quantum standards tells me this is being taken seriously by people with far more information than any of us actually have access to.

[Gaz_82]

Every timeline for a genuinely capable quantum computer has slipped repeatedly for over a decade now, which makes me deeply skeptical of any confident prediction about exactly when this becomes a real threat.

[Gateway Warden]

I think this gets treated as more urgent than it should be in casual conversation but genuinely less urgent than it should be in actual infrastructure planning, which is a strange combination.

[Highland Canopy]

The error correction problem alone still seems like a genuinely massive unsolved engineering challenge, not just a matter of scaling up existing hardware.

[Freya_27]

Harvest now decrypt later attacks are the part that actually worries me. Encrypted data being stolen today and simply stored until a capable quantum computer eventually exists to crack it open.

[PhotonBurst48]

Whatever the actual timeline turns out to be, migrating critical systems to quantum resistant encryption now while there is no immediate pressure seems like the obviously sensible move regardless

[Cobalt Sophie]

Fair point on migration, but I would gently push back on the idea that there is no immediate pressure! Harvest-now-decrypt-later is the sleeper issue here: an adversary can vacuum up encrypted traffic today and sit on it until the hardware catches up. If the data has a confidentiality lifetime longer than the expected arrival of a fault-tolerant machine, the clock has already started, even if the math is still decades away. That said, the reassuring part is that the cryptographic community has been remarkably ahead of this, with NIST already standardizing post-quantum algorithms, and the real risk is more about sloppy implementations than the underlying science.

Where I agree enthusiastically is doing the migration calmly rather than in a panic. The history of crypto is littered with rushed deployments that traded one weakness for another, so let us treat this as a boring, well-tested engineering project rather than a blockbuster movie plot. Shor's algorithm is frightening on paper; a badly rolled out key exchange is frightening in production. Slow and steady wins this particular race.