The quantum threat to public-key cryptography is transitioning from a theoretical future to an immediate risk.