Is TD Bank (US) quantum-safe?
Partly. 153 of 168 public servers under td.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- api.pat.hnwplanning.td.com
14 other servers without post-quantum key exchange
- economics.td.com
- go.td.com
- jobs.td.com
- metrics.td.com
- socialcentre.td.com
- tdbankcmg.td.com
- tdbankcmg2.td.com
- tdbankcmgdev.td.com
- tdbankcmgdev2.td.com
- tdbankcmgpat.td.com
- tdbankcmgpat2.td.com
- technicals.pat.td.com
- technicals.test.td.com
- www.economics.td.com
153 servers already protected
- activatetoken.td.com
- advanceddashboard.pat.td.com
- advanceddashboard1.pat.td.com
- advanceddashboard13.pat.td.com
- advanceddashboard2.pat.td.com
- advanceddashboard3.pat.td.com
- apply.pat.td.com
- apply2.pat.td.com
- apply3.pat.td.com
- apps.td.com
- authentication.pat.td.com
- authentication2.pat.td.com
- authentication3.pat.td.com
- authmaint.pat.td.com
- authmaint2.pat.td.com
- authorization.azure.pat.td.com
- authorization.azure.td.com
- authorization.pat.td.com
- businessbanking.pat.td.com
- businesscentral.pat1.azure.td.com
- businesscentral.pat2.azure.td.com
- businesscentral.pat3.azure.td.com
- businesscentral.pat4.azure.td.com
- businesscentral.td.com
- careers.td.com
- centrepourentreprises.pat1.azure.td.com
- centrepourentreprises.pat2.azure.td.com
- centrepourentreprises.pat3.azure.td.com
- centrepourentreprises.pat4.azure.td.com
- centrepourentreprises.td.com
- chat.prd.td.com
- chatservices.prd01.td.com
- chatservices.prd02.td.com
- chatservices.td.com
- contactme.pat.td.com
- courtierweb1.pat.td.com
- courtierweb13.pat.td.com
- courtierweb2.pat.td.com
- courtierweb3.pat.td.com
- courtierweb4.pat.td.com
- creditcardawards.pat.td.com
- cssp.pat.td.com
- cssp.td.com
- cssp2.pat.td.com
- customercollaboration.td.com
- customerhelp.td.com
- customerhelp1.pat.nordstromcard.td.com
- customerhelp2.pat.nordstromcard.td.com
- customerhelp3.pat.nordstromcard.td.com
- customerhelp3.pat.td.com
- demande.pat.td.com
- demande2.pat.td.com
- demande3.pat.td.com
- discovery10.pat.az.td.com
- discovery10.pat.td.com
- discovery20.pat.az.td.com
- discovery20.pat.td.com
- esign-ca.dev.td.com
- esign-ca.pat.td.com
- esign-ca.sit.td.com
- esign-us.dev.td.com
- esign-us.pat.td.com
- esign-us.sit.td.com
- etreasury.td.com
- goal.courtierweb1.pat.td.com
- goal.courtierweb13.pat.td.com
- goal.courtierweb2.pat.td.com
- goal.courtierweb3.pat.td.com
- goal.courtierweb4.pat.td.com
- goal.webbroker1.pat.td.com
- goal.webbroker13.pat.td.com
- goal.webbroker2.pat.td.com
- goal.webbroker3.pat.td.com
- goal.webbroker4.pat.td.com
- homelending.td.com
- homeready.pat.td.com
- homeready.sit.td.com
- identity.pat.td.com
- identity2.pat.td.com
- identity4.us.pat.td.com
- identity4.us.pat2.td.com
- identityus.pat.td.com
- identityus2.pat.td.com
- integrations.pat.external.td.com
- integrations.pat2.external.td.com
- login.pat.hnwplanning.td.com
- mobile.authentication.pat.td.com
- mobile.tdactivetrader.pat.td.com
- mobile.tdactivetrader.pat2.td.com
- mobile.tdactivetrader.pat4.td.com
- mobile.tdactivetraderdemo.pat.td.com
- mobile.tdactivetraderdemo.pat4.td.com
- mobile2.authentication.pat.td.com
- mobile3.authentication.pat.td.com
- monassurance.td.com
- mtpxy-ext.pat.td.com
- myinsurance.td.com
- pat.hnwplanning.td.com
- pitd.pat.td.com
- pitd.td.com
- postauth.azure.pat.td.com
- postauth.pat.td.com
- pretsaetreproprios.sit.td.com
- privacyportal.td.com
- rcp-proxy-upload.pat.td.com
- rdc.tdbusinessbanking.td.com
- rdc.tdservicesbancairesauxenterprises.td.com
- register.pat.td.com
- register2.pat.td.com
- selfservicetoken.td.com
- smetrics.td.com
- stage.td.com
- stat.td.com
- td.com
- tdactivetrader.pat.td.com
- tdactivetrader.pat2.td.com
- tdactivetrader.pat4.td.com
- tdactivetrader.pat5.td.com
- tdactivetraderdemo.pat.td.com
- tdactivetraderdemo.pat4.td.com
- tdip.pat.td.com
- tdip.td.com
- tdousmobile1.pat.td.com
- tdousmobile2.pat.td.com
- tdousmobile3.pat.td.com
- tdsecure.pat.td.com
- tdvousditmerci.pat.td.com
- transportservice.pat1.td.com
- transportservice.pat12.td.com
- transportservice.pat2.td.com
- transportservice1.pat.td.com
- transportservice2.pat.td.com
- travelinsurance.td.com
- upload.pat.td.com
- upload2.pat.td.com
- wb.authentication.pat.td.com
- wb2.authentication.pat.td.com
- wb3.authentication.pat.td.com
- webbroker1.pat.td.com
- webbroker13.pat.td.com
- webbroker2.pat.td.com
- webbroker3.pat.td.com
- webbroker4.pat.td.com
- www.formssearch.pat.az.td.com
- www.pitd.pat.td.com
- www.pitd.td.com
- www.td.com
- www.tdip.pat.td.com
- www.tdip.td.com
- www.tdmerchantinsight.td.com
- www.tdvousditmerci.pat.td.com
- www1.tdmerchantinsight.pat.azure.td.com
- www1.tdmerchantinsight.pat.td.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at TD Bank (US)?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/td.com"><img src="https://latticescan.com/badge/readiness/td.com" alt="quantum readiness"></a>