Is Bank of America quantum-safe?

Partly. 64 of 177 public servers under bankofamerica.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade C. Scanned October 18, 2026.

Grade

Quantum-safe

36%

Servers reached

177

Fix first

Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.

app-ex-lt.cashpro.bankofamerica.com
app-gn-lt.cashpro.bankofamerica.com
app-lt.cashpro.bankofamerica.com
app-st-lta.cashpro.bankofamerica.com
app-st-ltb.cashpro.bankofamerica.com
auth-az1.privatebank.bankofamerica.com
auth-az2.privatebank.bankofamerica.com
auth-tx1.privatebank.bankofamerica.com
auth-tx2.privatebank.bankofamerica.com
auth-va1.privatebank.bankofamerica.com
auth-va2.privatebank.bankofamerica.com
auth.privatebank.bankofamerica.com
auth.privatebankfsdev.bankofamerica.com
auth.privatebankfspreview1.bankofamerica.com
auth.privatebankfspt1.bankofamerica.com
auth.privatebankfsreview1.bankofamerica.com
auth.privatebankfssit1.bankofamerica.com
auth.privatebankfssit2.bankofamerica.com
developer-ex-lt.bankofamerica.com
developer-ex-lta-vip.bankofamerica.com
developer-ex-ltb-vip.bankofamerica.com
developer-ex-splash1-prod.bankofamerica.com
developer-ex-static-lta.bankofamerica.com
developer-ex-static-ltb.bankofamerica.com
developer-lt.bankofamerica.com
developer-lta-vip.bankofamerica.com
developer-ltb-vip.bankofamerica.com
developer-proda.bankofamerica.com
developer-prodb.bankofamerica.com
developer-static-lta.bankofamerica.com
developer-static-ltb.bankofamerica.com
login-proda-healthcarepaymentshub.bankofamerica.com
login-prodb-healthcarepaymentshub.bankofamerica.com
portal-emea-cay.bankofamerica.com
portal-emea-lon.bankofamerica.com
portal-emea-wip.bankofamerica.com
portal-emea.bankofamerica.com
portal-india-gur.bankofamerica.com
portal-india.bankofamerica.com
portal-us-az.bankofamerica.com
portal-us-az2.bankofamerica.com
portal-us-sa.bankofamerica.com
portal-us-sa2.bankofamerica.com
portal-us.bankofamerica.com
portal.bankofamerica.com
remote.artifactory.bankofamerica.com
secure-darkpod.bankofamerica.com
secure-devflex1-helix.ecnp.bankofamerica.com
secure-devflex1.ecnp.bankofamerica.com
secure-preview.ecnp.bankofamerica.com
secure-preview1-helix.ecnp.bankofamerica.com
secure-preview2-helix.ecnp.bankofamerica.com
secure-pssit-helix.ecnp.bankofamerica.com
secure-pssit.ecnp.bankofamerica.com
secure-pt1-helix.ecnp.bankofamerica.com
secure-pt2-helix.ecnp.bankofamerica.com
secure-review.ecnp.bankofamerica.com
secure-review1-helix.ecnp.bankofamerica.com
secure-review2-helix.ecnp.bankofamerica.com
secure-sitbc-helix.ecnp.bankofamerica.com
secure-sitbc.ecnp.bankofamerica.com
secure.alumni.bankofamerica.com
secure.privatebankfsdev.bankofamerica.com
secure.privatebankfspt1.bankofamerica.com
secure.privatebankfspt2.bankofamerica.com
secure.privatebankfssit2.bankofamerica.com
sso-ficert.bankofamerica.com

46 other servers without post-quantum key exchange

abl-tmp.bankofamerica.com
abl.bankofamerica.com
acq-qa2.bankofamerica.com
adocs.bankofamerica.com
aero.bankofamerica.com
askhr.bankofamerica.com
atp-uat.bankofamerica.com
atp.bankofamerica.com
b2b03u.bankofamerica.com
b2b05u.bankofamerica.com
b2b06u.bankofamerica.com
b2b13.bankofamerica.com
b2b15.bankofamerica.com
b2b23.bankofamerica.com
b2b25.bankofamerica.com
b2b26.bankofamerica.com
b2b33.bankofamerica.com
b2b35.bankofamerica.com
b2b36.bankofamerica.com
boss.bankofamerica.com
ccpcpo.bankofamerica.com
ccpsbob.bankofamerica.com
chat.bankofamerica.com
cio1-s.bankofamerica.com
cio1.bankofamerica.com
cmbsi.bankofamerica.com
consent.bankofamerica.com
cporms.bankofamerica.com
dull.bankofamerica.com
ebics.bankofamerica.com
eva.dev.bankofamerica.com
eva.uat.bankofamerica.com
fedsso.bankofamerica.com
fepweb.bankofamerica.com
fsmgw.bankofamerica.com
gfxsso.bankofamerica.com
hhcb.bankofamerica.com
hr.bankofamerica.com
ibp-tt.bankofamerica.com
images.bankofamerica.com
latam.bankofamerica.com
rail.bankofamerica.com
smfa.bankofamerica.com
thehub.bankofamerica.com
vam.bankofamerica.com
vtm.bankofamerica.com

64 servers already protected

about.bankofamerica.com
advisor.bankofamerica.com
alumni.bankofamerica.com
api.bankofamerica.com
assets.bankofamerica.com
baml.bankofamerica.com
bankofamerica.com
blog.bankofamerica.com
bup-llt.bankofamerica.com
bup.bankofamerica.com
campus.bankofamerica.com
careers.bankofamerica.com
cpchat.bankofamerica.com
cpo-acp.bankofamerica.com
developer-prod1.merchant-services.bankofamerica.com
developer-static-proda.bankofamerica.com
developer-static-prodb.bankofamerica.com
developer.bankofamerica.com
developer.cas.merchant.services.bankofamerica.com
developer.merchant-services.bankofamerica.com
developer.merchant.services.bankofamerica.com
ees-dev.bankofamerica.com
ees-stg.bankofamerica.com
ees.bankofamerica.com
info.bankofamerica.com
loans.bankofamerica.com
login.paymentsinvoicing.bankofamerica.com
maps.bankofamerica.com
mobile-lt.cashpro.bankofamerica.com
mobile-lta.cashpro.bankofamerica.com
mobile-ltb.cashpro.bankofamerica.com
mobile-ltc.cashpro.bankofamerica.com
mobile-stx-lt.cashpro.bankofamerica.com
mobile-stx.cashpro.bankofamerica.com
mobile.bankofamerica.com
mobile.cashpro.bankofamerica.com
mobile1-stx.cashpro.bankofamerica.com
mobile1.cashpro.bankofamerica.com
mobile2-stx.cashpro.bankofamerica.com
mobile2.cashpro.bankofamerica.com
mobile3-stx.cashpro.bankofamerica.com
mobile3.cashpro.bankofamerica.com
online.bankofamerica.com
promo.bankofamerica.com
rcr.bankofamerica.com
red.bankofamerica.com
secure-realestatecenter.bankofamerica.com
secure.bankofamerica.com
secure.privatebank.bankofamerica.com
secure.privatebankfssit1.bankofamerica.com
signin-lt.cashpro.bankofamerica.com
signin-lta.cashpro.bankofamerica.com
signin-ltb.cashpro.bankofamerica.com
signin-ltc.cashpro.bankofamerica.com
signin.cashpro.bankofamerica.com
signin1.cashpro.bankofamerica.com
signin2.cashpro.bankofamerica.com
signin3.cashpro.bankofamerica.com
ux-dev.bankofamerica.com
ux-stg.bankofamerica.com
ux.bankofamerica.com
w3f6gq.bankofamerica.com
web.bankofamerica.com
www.bankofamerica.com

What this means

NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.

Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.

Follow Bank of America

One email when the grade changes. Re-scanned every week.

Follow the grade

Work at Bank of America?

Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.

Scan your own domain

Badge

Shows the current grade and updates itself. Anyone may embed it.

<a href="https://latticescan.com/readiness/bankofamerica.com"><img src="https://latticescan.com/badge/readiness/bankofamerica.com" alt="quantum readiness"></a>