Quantum computing in mid-2026 is a field defined by a specific tension: the underlying physics is mature, the engineering is accelerating, and the gap between what has been demonstrated and what is commercially useful remains stubbornly wide. The field is not stagnating — the rate of hardware improvement over the past three years has exceeded most roadmaps — but neither is it delivering on the applications that drove the investment wave of 2020–2023. Understanding the current state requires separating three distinct questions that are often conflated: what has been achieved, what is achievable in principle, and when the engineering will close the gap.
The answer to the first question is clearer than it has ever been. The answer to the third is more honest — and more cautious — than the optimism of 2018 would have predicted.
What Changed in the Past Three Years
Error Correction Crossed the Threshold
Google's Willow processor (Dec 2024) and QuEra's 48-logical-qubit demonstration (2023) both showed logical error rates decreasing as code distance increases — the qualitative sign that error correction is working. This was the field's most important milestone since Shor's algorithm.
Post-Quantum Cryptography Is Deployed
NIST finalised ML-KEM, ML-DSA, SLH-DSA, and FN-DSA in August 2024. Apple, Google, Cloudflare, and all major browsers now deploy ML-KEM hybrid key exchange in production TLS. The cryptographic migration is underway — not theoretical.
Topological Qubits Got a First Foothold
Microsoft's February 2025 Nature paper demonstrated parity readout of a Majorana-based topological qubit with lifetime exceeding 1 ms. Gate operations and entanglement remain undemonstrated, but the qubit exists — a milestone that was far from certain two years ago.
Classical Algorithms Competed Back
Improved tensor network methods, GPU-accelerated simulation, and better approximate algorithms have repeatedly matched or exceeded NISQ quantum advantage claims. The classical simulation boundary is not static — it has moved substantially, narrowing the NISQ advantage window.
The Hardware Scorecard: Five Platforms in Mid-2026
The Error Correction Inflection Point
The most consequential development in quantum computing since the NISQ era began is the empirical confirmation that error correction works as predicted. Until 2023, below-threshold operation — where adding more physical qubits actively reduces logical error rates — had never been demonstrated.
It has now been demonstrated on three separate hardware platforms.
Google Willow (December 2024): a 105-qubit superconducting processor demonstrated that the logical error rate of a surface code decreased from distance d=3 to d=5 to d=7, with an error suppression factor of approximately 2.1× per unit of code distance. More dramatically, Willow solved a random circuit sampling task that Google estimated would require 10 septillion years of classical computation — a number large enough to be philosophically interesting even if the task itself is not practically useful. The combination — below-threshold QEC plus a meaningful quantum advantage claim — made Willow the most significant quantum hardware result since Shor’s algorithm.
QuEra / Harvard (2023): a 280-atom neutral atom array demonstrated 48 logical qubits with transversal logical gates — the largest number of logical qubits demonstrated on any platform. The result was achieved by exploiting the reconfigurable geometry of optical tweezer arrays, which allowed atom sorting into the exact spatial patterns required for transversal gate operations in specific error correcting codes. This is the record as of mid-2026.
IBM (2024–2025): a series of demonstrations using IBM’s Eagle and Heron processors showed logical circuits below the surface code threshold using bivariate bicycle LDPC codes, with encoding efficiency approximately 10× better than surface codes for the same logical error rate. IBM’s LDPC work is particularly significant because it suggests a more resource-efficient path to fault tolerance than the standard surface code.
Together these results establish that fault-tolerant quantum computing is not just theoretically guaranteed by the threshold theorem — it is physically achievable with hardware available today. The remaining question is not whether error correction works, but whether it can be scaled to the millions of physical qubits required for practically useful computation.
The Algorithm Landscape: What Is Actually Running
The variational algorithms — VQE, QAOA, quantum kernel SVMs — that defined the NISQ era’s application ambitions have not delivered the practical advantages their proponents hoped for. On every standard benchmark where classical methods are well-optimised, quantum variational algorithms perform comparably or worse, at substantially higher cost. The barren plateau problem imposes a training depth ceiling; circuit noise imposes a fidelity depth ceiling; and the intersection of “trainable,” “runnable,” and “classically hard” is narrow.
This is not a statement that these algorithms are unimportant — they drove the hardware benchmarking and calibration work that enabled the error correction demonstrations. But the honest assessment is that NISQ-era quantum machine learning and optimisation remain in the “interesting research direction” category, not the “practical advantage” category.
Where quantum computers are genuinely useful today is narrower: quantum simulation of specific physical systems on hardware that naturally implements the target Hamiltonian dynamics, and quantum cryptography experiments (QKD) for specialised use cases requiring information-theoretic security. These are real utilities, but they serve niche markets, not the enterprise software market that attracted the investment wave.
The Cryptographic Transition: Already Happening
The most consequential near-term quantum impact is happening not on quantum computers but because of them.
NIST’s August 2024 finalisation of ML-KEM (FIPS 203), ML-DSA (FIPS 204), SLH-DSA (FIPS 205), and the draft FN-DSA (FIPS 206) triggered an industry-wide migration. By mid-2026, ML-KEM hybrid key exchange is deployed in:
- TLS 1.3 via X25519+ML-KEM-768 hybrid in Chrome, Safari, Firefox, and all major CDNs
- Apple iMessage and iCloud: end-to-end encryption updated to ML-KEM
- Signal Protocol: PQXDH upgrade deployed in Signal and WhatsApp
- SSH: OpenSSH 9.x with ML-KEM support widely deployed
Certificate signature migration (replacing ECDSA with ML-DSA in X.509 certificates) is substantially more complex due to PKI chain sizes and is progressing more slowly. The NSA’s CNSA Suite 2.0 deadline of 2030 for national security systems is driving government migration; enterprise migration is at varying stages.
The SIKE collapse of 2022 — an isogeny-based NIST finalist broken in 62 minutes on a laptop — remains a cautionary reference for cryptographers evaluating the resilience of lattice-based standards to future mathematical attacks. No comparable attack on ML-KEM or ML-DSA has appeared, but the Hilbert space of possible cryptanalytic techniques is not fully explored.
The harvest-now-decrypt-later threat makes the migration timeline a present-day security concern, not a speculative future one. Any organisation with data that must remain confidential for more than ten years and that currently uses RSA or ECC key exchange is already accumulating risk.
The Timeline: A Calibrated Projection
The most honest projections in mid-2026 suggest the following milestones, in rough probability-weighted order:
2027–2028 (high confidence): First demonstrations of early fault-tolerant quantum circuits — logical operations on 5–20 logical qubits with below-threshold error rates, performing computations that cannot be fully simulated classically. These will be scientifically significant but not commercially useful. IBM, Google, Quantinuum, and QuEra all have hardware that can reach this milestone on current trajectories.
2028–2030 (moderate confidence): Quantum simulation of specific physical systems — condensed matter models, quantum chemistry near phase transitions — where quantum processors provide results that classical methods cannot match at any practical computing time. The problem must be carefully chosen: quantum simulation advantage is not universal, but specific regimes (strongly correlated systems with high entanglement) are genuine targets.
2030 (high certainty — not a prediction, a deadline): NSA’s CNSA Suite 2.0 requires all national security systems to have migrated to PQC algorithms. This deadline will be met with varying degrees of completeness across government agencies.
2031–2035 (plausible, uncertain): Fault-tolerant quantum computing at scales useful for drug discovery, materials science, and financial modelling. IBM’s roadmap targets 100,000 qubit systems by 2033; achieving the logical qubit fidelities and gate throughput needed for useful chemistry at this scale is the major uncertainty. The encoding efficiency of LDPC codes could dramatically reduce the physical-to-logical qubit ratio and accelerate this timeline.
2035–2045 (wide uncertainty): A cryptographically relevant quantum computer (CRQC) capable of breaking RSA-2048 or 256-bit ECC. The physical qubit requirements (2–4 million), the logical gate counts (~10¹¹), and the T-factory overhead are all understood — the uncertainty is in the engineering timeline. Most serious researchers place this between 2035 and 2050; the harvest-now-decrypt-later threat makes the lower end of this range the relevant planning horizon for organisations with long-lived sensitive data.
The Competitive Landscape
The quantum computing industry has consolidated significantly since 2023. Several well-funded startups have pivoted, merged, or quietly reduced hardware ambitions. The companies with the clearest hardware progress and most credible near-term roadmaps as of mid-2026 are:
IBM remains the most comprehensive quantum platform, with the largest installed base of cloud-accessible quantum hardware, the deepest software ecosystem (Qiskit), and an aggressive roadmap toward modular multi-chip systems. Their LDPC code work is theoretically the most important step toward efficient fault tolerance.
Google Quantum AI has the most dramatic headline results (Sycamore supremacy, Willow below-threshold QEC) and the deepest fundamental research investment. Their focus on superconducting systems with surface codes provides a clear, if resource-intensive, path to fault tolerance.
Quantinuum (formed by the merger of Cambridge Quantum and Honeywell Quantum Solutions) has the highest demonstrated gate fidelities on any commercial platform and a credible path to 100+ qubit trapped-ion systems with continued fidelity improvements. Their H-series systems are the current benchmark for gate quality.
QuEra has the most impressive error correction demonstration (48 logical qubits), enabled by neutral atom platform advantages that are increasingly clear. Their partnership with Amazon Braket provides cloud access; their roadmap targets thousands of logical qubits by 2026–2027.
PsiQuantum remains the most opaque and the most ambitious bet: wafer-scale silicon photonic manufacturing via GlobalFoundries, targeting fault-tolerant quantum computing through fusion-based quantum computation. As of mid-2026, no quantum computing results have been published; the company’s value proposition rests entirely on manufacturing scale arguments.
Microsoft has the most distinctive technical bet and the most complicated credibility situation — the 2021 retraction of prior Majorana results cast a long shadow, which the 2025 Nature paper has partially lifted. If topological qubits scale as their theory predicts, Microsoft would have a 10–100× qubit overhead advantage over every competing platform. If they do not, the approach has consumed decades of R&D with limited transferable results.
What the Series Has Covered — and What It Means
This series has traced the full stack of quantum computing: from the physics of individual qubit platforms (superconducting, trapped ion, neutral atom, photonic, topological), through the error correction infrastructure that bridges noisy hardware to reliable computation (surface codes), to the algorithms that run on top (Shor’s, Grover’s, QAOA and VQE, quantum kernels), the cryptographic implications (BB84, E91, post-quantum cryptography), and the honest accounting of current limitations (barren plateaus, NISQ limitations).
The central through-line is a distinction that is easy to state and surprisingly hard to maintain in the face of press releases and investment pitches: the difference between what quantum computers can compute in principle and what current quantum hardware can compute in practice. Both matter, but they matter differently. The algorithmic results — Shor’s exponential speedup, Grover’s provable quadratic speedup, the no-cloning theorem that makes QKD possible, the threshold theorem that guarantees fault tolerance is achievable — are mathematically settled. They do not depend on engineering progress.
The engineering results are where the field actually lives, and where the honest scorecard matters most. Below-threshold error correction is demonstrated. Practical fault-tolerant computation is not. Post-quantum cryptography is deployed and effective. Quantum machine learning advantage on real datasets is not demonstrated. The quantum simulation of small molecules is possible on NISQ hardware. The quantum simulation of the molecules that would transform drug discovery is not.
The gap between these two columns is closing. The rate at which it closes — the next five to ten years — will determine whether quantum computing transforms multiple industries or remains a specialised scientific instrument for another generation. The physics says it will close. The timeline is what no one knows with confidence.
That uncertainty is itself information. It means the organisations best positioned for quantum’s impact are not those betting on a specific arrival date, but those building infrastructure that works regardless: migrating cryptography now, developing quantum literacy across technical teams, and monitoring hardware progress at the level of actual gate fidelity and logical qubit demonstrations rather than headline qubit counts. The field rewards the technically informed and penalises the credulous in both directions — the dismissers who assume nothing will change, and the advocates who assume everything will change on schedule.
The physics is settled. The engineering is in progress. The applications are mostly ahead. That is the honest state of quantum computing in mid-2026.
Sources & Further Reading
- Quantum Error Correction Below the Surface Code Threshold (Willow). Nature 638, 920; arXiv:2408.13687 (2024)
- Logical Quantum Processor Based on Reconfigurable Atom Arrays. Nature 626, 58; arXiv:2312.03982 (2024)
- Interferometric Single-Shot Parity Measurement in InAs–Al Hybrid Devices. Nature 638, 651; arXiv:2401.09549 (2025)
- Post-Quantum Cryptography Standards (FIPS 203, 204, 205). NIST Post-Quantum Cryptography Project (2024)
- Quantum Computing in the NISQ Era and Beyond. Quantum 2, 79; arXiv:1801.00862 (2018)
Discussion