Is U.S. Bank quantum-safe?
Partly. 106 of 206 public servers under usbank.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- admin-payeechoice2.usbank.com
- api-ist.usbank.com
- api-wm-ms.usbank.com
- api2-wm-ms.usbank.com
- developer-alliance.usbank.com
- secure-docexchange.usbank.com
- secure-exchange02.usbank.com
- secure-exchange03.usbank.com
92 other servers without post-quantum key exchange
- access.usbank.com
- apistatus.usbank.com
- apsecure.usbank.com
- ascent.usbank.com
- assist.usbank.com
- bcm.usbank.com
- billpay.usbank.com
- cashplus.usbank.com
- cdo.usbank.com
- clarity.usbank.com
- clm-uat.usbank.com
- clm.usbank.com
- cmcmg.usbank.com
- commons.usbank.com
- dev-dpg.usbank.com
- dev-jira.usbank.com
- dev-npb.usbank.com
- dev1-pfs.usbank.com
- dev2-npb.usbank.com
- dev2-pfs.usbank.com
- dev3-pfs.usbank.com
- dev4-pfs.usbank.com
- dev5-pfs.usbank.com
- dev6-pfs.usbank.com
- dmrint.usbank.com
- docs-dev.usbank.com
- docs-it.usbank.com
- docs-uat.usbank.com
- docs-uat2.usbank.com
- docs.usbank.com
- efts-dr.usbank.com
- efts-uat.usbank.com
- efts.usbank.com
- ens.usbank.com
- eps.usbank.com
- events.usbank.com
- expert.usbank.com
- financing.usbank.com
- freight.usbank.com
- ir-link.usbank.com
- it-dpg.usbank.com
- it-jira.usbank.com
- it-npb.usbank.com
- it-shield.usbank.com
- it.access.usbank.com
- it02.usbank.com
- it03.usbank.com
- it1-oreo.usbank.com
- it1-pfs.usbank.com
- it1.usbank.com
- it2-npb.usbank.com
- it2-pfs.usbank.com
- it2.usbank.com
- it3-oreo.usbank.com
- it3-pfs.usbank.com
- it3.usbank.com
- it4-pfs.usbank.com
- it5-pfs.usbank.com
- it6-pfs.usbank.com
- itcmcmg.usbank.com
- m.em.usbank.com
- mail.usbank.com
- media.usbank.com
- metrics.usbank.com
- moogp1.usbank.com
- moogp2.usbank.com
- moogsoft.usbank.com
- moogu1.usbank.com
- moogu2.usbank.com
- mrbp.usbank.com
- mwportal.usbank.com
- mycard.usbank.com
- mygoals.usbank.com
- oreo.usbank.com
- pages.usbank.com
- rewards.usbank.com
- sdweb.usbank.com
- seclend.usbank.com
- sep.usbank.com
- shop.usbank.com
- smetrics.usbank.com
- spend.usbank.com
- t.em.usbank.com
- trending.usbank.com
- uat-oreo.usbank.com
- uat02.usbank.com
- uat2.usbank.com
- usbank.com
- www.cdo.usbank.com
- www.mrbp.usbank.com
- www.oreo.usbank.com
- xd.usbank.com
106 servers already protected
- admin.onlineinvesting.usbank.com
- alliance.usbank.com
- alpha-api.usbank.com
- api-edwardjoneseveryday.spend.usbank.com
- api-ist-az.usbank.com
- api.spend.usbank.com
- api.usbank.com
- api2-ist-az.usbank.com
- api2-ist.usbank.com
- api2.usbank.com
- apip.usbank.com
- apip2.usbank.com
- app.spend.usbank.com
- apps.usbank.com
- aps1.elan.usbank.com
- auth.usbank.com
- avvance.usbank.com
- benefits.usbank.com
- caihss.usbank.com
- cardapply.usbank.com
- careers.usbank.com
- cashmgmt.usbank.com
- cert-api.usbank.com
- cert-api2.usbank.com
- clm-eu.usbank.com
- clm-us.usbank.com
- connect.usbank.com
- content.usbank.com
- corpcre.usbank.com
- dashboard.usbank.com
- ddq.usbank.com
- dev-api.usbank.com
- dev-api1.usbank.com
- dev-api2.usbank.com
- dev-token.usbank.com
- developer.usbank.com
- dpg.usbank.com
- dr-api.usbank.com
- dr-api2.usbank.com
- dr-apip.usbank.com
- dr-apip2.usbank.com
- edm-prod.usbank.com
- edm-uat.usbank.com
- edm.usbank.com
- eml.usbank.com
- engage.usbank.com
- hpm.usbank.com
- ir.usbank.com
- it-api.usbank.com
- it-api1.usbank.com
- it-api2.usbank.com
- it-auth.usbank.com
- it1-auth.usbank.com
- it2-auth.usbank.com
- it3-auth.usbank.com
- it4-auth.usbank.com
- it5-auth.usbank.com
- it5.usbank.com
- it6-auth.usbank.com
- it7-auth.usbank.com
- itcportal.usbank.com
- ksl-uat.usbank.com
- ksl.usbank.com
- links.usbank.com
- m.tmupit.usbank.com
- markets.usbank.com
- mortgage.usbank.com
- npb.usbank.com
- pay.usbank.com
- pivot.usbank.com
- res.em.usbank.com
- sales.usbank.com
- sandbox.usbank.com
- sc-idg.usbank.com
- secure-exchange.usbank.com
- sft-test.usbank.com
- sft.usbank.com
- spansgdm.usbank.com
- stage.usbank.com
- stage5.usbank.com
- tir-uat.usbank.com
- tir-uat2.usbank.com
- tiruat.usbank.com
- tmupit.usbank.com
- tmupperf.usbank.com
- tmupuat.usbank.com
- token.usbank.com
- transec.usbank.com
- uat-api1.usbank.com
- uat-auth.usbank.com
- uat-dpg.usbank.com
- uat-npb.usbank.com
- uat-vcom.usbank.com
- uat-wlp.usbank.com
- uat1-edm.usbank.com
- uat2-npb.usbank.com
- uat3.www.usbank.com
- uat4.www.usbank.com
- uat5.usbank.com
- uat5.www.usbank.com
- vcom.usbank.com
- voyager.usbank.com
- wlp.usbank.com
- wm-api.usbank.com
- wm-api2.usbank.com
- www.usbank.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at U.S. Bank?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/usbank.com"><img src="https://latticescan.com/badge/readiness/usbank.com" alt="quantum readiness"></a>