Is Lloyds quantum-safe?
Partly. 123 of 147 public servers under lloydsbank.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Grade
B
Quantum-safe
84%
Servers reached
147
Fix first
2
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- secure-api-eidas.lloydsbank.com
- secure-api.lloydsbank.com
22 other servers without post-quantum key exchange
- carfinanceplusquote.lloydsbank.com
- channel-api.lloydsbank.com
- link.commercialemails.lloydsbank.com
- link.lloydsbank.com
- links.commercialemails.lloydsbank.com
- links.emails.international.lloydsbank.com
- links.insurance.lloydsbank.com
- lloydsbank.com
- luat01-secure-api-eidas.lloydsbank.com
- luat01-secure-api.lloydsbank.com
- luat02-secure-api-eidas.lloydsbank.com
- luat02-secure-api.lloydsbank.com
- nft01-channel-api.lloydsbank.com
- nft01-secure-api-eidas.lloydsbank.com
- oauth-businessfinanceassistant.lloydsbank.com
- payandcollectonline.lloydsbank.com
- sandbox.secure-api.lloydsbank.com
- sit01-channel-api.lloydsbank.com
- sit01-secure-api-eidas.lloydsbank.com
- sit02-channel-api.lloydsbank.com
- sit02-secure-api-eidas.lloydsbank.com
- sit03-secure-api-eidas.lloydsbank.com
123 servers already protected
- api.businessfinanceassistant.lloydsbank.com
- api.int.test.lloydsbank.com
- api.lloydsbank.com
- api.pre.test.lloydsbank.com
- api.tr1prd.test.lloydsbank.com
- api.tr1pre.test.lloydsbank.com
- aws-prod-www.lloydsbank.com
- business.lloydsbank.com
- businessfinanceassistant.lloydsbank.com
- businessinsurance.lloydsbank.com
- cbonline-lp.lloydsbank.com
- cbonline-nfta.lloydsbank.com
- cbonline-nftb.lloydsbank.com
- cbonline-oata.lloydsbank.com
- cbonline-sit1.lloydsbank.com
- cbonline-sit1a.lloydsbank.com
- cbonline-sit2.lloydsbank.com
- cbonline-sit2a.lloydsbank.com
- cbonline-sit3.lloydsbank.com
- cbonline-sit3a.lloydsbank.com
- cbonline-sit4.lloydsbank.com
- cbonline-sit4a.lloydsbank.com
- cbonline-sit6.lloydsbank.com
- cbonline-sit6a.lloydsbank.com
- cbonline-sit7.lloydsbank.com
- cbonline-sit7a.lloydsbank.com
- cbonline.lloydsbank.com
- cbsecure-lp.lloydsbank.com
- cbsecure-nfta.lloydsbank.com
- cbsecure-nftb.lloydsbank.com
- cbsecure-oata.lloydsbank.com
- cbsecure-sit1.lloydsbank.com
- cbsecure-sit1a.lloydsbank.com
- cbsecure-sit2.lloydsbank.com
- cbsecure-sit2a.lloydsbank.com
- cbsecure-sit3.lloydsbank.com
- cbsecure-sit3a.lloydsbank.com
- cbsecure-sit4.lloydsbank.com
- cbsecure-sit4a.lloydsbank.com
- cbsecure-sit6.lloydsbank.com
- cbsecure-sit6a.lloydsbank.com
- cbsecure-sit7.lloydsbank.com
- cbsecure-sit7a.lloydsbank.com
- cbsecure.lloydsbank.com
- connected-preprod.lloydsbank.com
- connected.lloydsbank.com
- home-quote-l.lloydsbank.com
- home-quote-s.lloydsbank.com
- home-quote.lloydsbank.com
- homeclaims.lloydsbank.com
- homeinsuranceclaims.lloydsbank.com
- login.connected-preprod.lloydsbank.com
- login.connected.lloydsbank.com
- luat01-sca-mock-luat-cbonline-cbo.lloydsbank.com
- luat01-sca-mock-luat-cbonline.lloydsbank.com
- luat01-sca-mock-luat-cbsecure-cbo.lloydsbank.com
- luat01-sca-mock-luat-cbsecure.lloydsbank.com
- luat02-sca-mock-luat-cbonline-cbo.lloydsbank.com
- luat02-sca-mock-luat-cbonline.lloydsbank.com
- luat02-sca-mock-luat-cbsecure-cbo.lloydsbank.com
- luat02-sca-mock-luat-cbsecure.lloydsbank.com
- mobile.lloydsbank.com
- mycarfinance.lloydsbank.com
- nft-br-sca-fov-g-mock-nft-cbonline-cbo.test.lloydsbank.com
- nft-br-sca-fov-g-mock-nft-cbsecure-cbo.test.lloydsbank.com
- nft-br-sca-fov-r-mock-nft-cbonline-cbo.test.lloydsbank.com
- nft-br-sca-fov-r-mock-nft-cbsecure-cbo.test.lloydsbank.com
- nft-br-sca-mock-nft-cbonline-cbo.test.lloydsbank.com
- nft-br-sca-mock-nft-cbsecure-cbo.test.lloydsbank.com
- nft-prebr-sca-fov-g-mock-nft-cbonline-cbo.test.lloydsbank.com
- nft-prebr-sca-fov-g-mock-nft-cbsecure-cbo.test.lloydsbank.com
- nft-prebr-sca-fov-r-mock-nft-cbonline-cbo.test.lloydsbank.com
- nft-prebr-sca-fov-r-mock-nft-cbsecure-cbo.test.lloydsbank.com
- nft-prebr-sca-mock-nft-cbonline-cbo.test.lloydsbank.com
- nft-prebr-sca-mock-nft-cbsecure-cbo.test.lloydsbank.com
- o4bsupportpanel.lloydsbank.com
- o4bsupportpanelstage.lloydsbank.com
- pre-homeinsurance.lloydsbank.com
- prehome-insurance.lloydsbank.com
- receivablepurchasepp.lloydsbank.com
- rewards-test.lloydsbank.com
- sca-fov-g-mock-prod-cbonline-cbo.lloydsbank.com
- sca-fov-g-mock-prod-cbonline.lloydsbank.com
- sca-fov-g-mock-prod-cbsecure-cbo.lloydsbank.com
- sca-fov-g-mock-prod-cbsecure.lloydsbank.com
- sca-fov-g-pb2-mock-prod-cbonline.lloydsbank.com
- sca-fov-g-pb2-mock-prod-cbsecure.lloydsbank.com
- sca-fov-g-rk4-mock-prod-cbonline.lloydsbank.com
- sca-fov-g-rk4-mock-prod-cbsecure.lloydsbank.com
- sca-fov-r-mock-prod-cbonline-cbo.lloydsbank.com
- sca-fov-r-mock-prod-cbonline.lloydsbank.com
- sca-fov-r-mock-prod-cbsecure-cbo.lloydsbank.com
- sca-fov-r-mock-prod-cbsecure.lloydsbank.com
- sca-fov-r-pb2-mock-prod-cbonline.lloydsbank.com
- sca-fov-r-pb2-mock-prod-cbsecure.lloydsbank.com
- sca-fov-r-rk4-mock-prod-cbonline.lloydsbank.com
- sca-fov-r-rk4-mock-prod-cbsecure.lloydsbank.com
- sca-mock-prod-cbonline-cbo.lloydsbank.com
- sca-mock-prod-cbonline.lloydsbank.com
- sca-mock-prod-cbsecure-cbo.lloydsbank.com
- sca-mock-prod-cbsecure.lloydsbank.com
- secure.api.int.test.lloydsbank.com
- secure.api.pre.test.lloydsbank.com
- secure.api.tr1prd.test.lloydsbank.com
- secure.api.tr1pre.test.lloydsbank.com
- secure.currency.lloydsbank.com
- secure.funds.lloydsbank.com
- secure.privatebanking.lloydsbank.com
- sit01-sca-mock-br-cbonline-cbo.test.lloydsbank.com
- sit01-sca-mock-br-cbsecure-cbo.test.lloydsbank.com
- sit02-sca-mock-prebr-cbonline-cbo.test.lloydsbank.com
- sit02-sca-mock-prebr-cbsecure-cbo.test.lloydsbank.com
- sit03-sca-mock-br-cbonline-cbo.test.lloydsbank.com
- sit03-sca-mock-br-cbsecure-cbo.test.lloydsbank.com
- sit08-sca-mock-rc-cbonline-cbo.test.lloydsbank.com
- sit08-sca-mock-rc-cbsecure-cbo.test.lloydsbank.com
- sit10-sca-mock-br-cbonline-cbo.test.lloydsbank.com
- sit10-sca-mock-br-cbsecure-cbo.test.lloydsbank.com
- supplierfinancepp.lloydsbank.com
- test.mycarfinance.lloydsbank.com
- toaplatformservicepp.lloydsbank.com
- www.lloydsbank.com
- www.mycarfinance.lloydsbank.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Lloyds?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/lloydsbank.com"><img src="https://latticescan.com/badge/readiness/lloydsbank.com" alt="quantum readiness"></a>