Is Wells Fargo quantum-safe?
Partly. 152 of 161 public servers under wellsfargo.com use post-quantum key exchange, the protection against traffic recorded today being decrypted once a large quantum computer exists. Grade B. Scanned October 18, 2026.
Fix first
Production login, API, VPN, payment and developer servers that still rely on key exchange scheduled for retirement.
- portal-cas-prod.wellsfargo.com
- portal-ist-extranet-prod.wellsfargo.com
- portal-ist-prod.wellsfargo.com
- portal-ist-support.wellsfargo.com
- portal-mas-prod.wellsfargo.com
- portal-rrx-prod.wellsfargo.com
- portal-vera-prod.wellsfargo.com
2 other servers without post-quantum key exchange
- axst-cat.wellsfargo.com
- ras.wellsfargo.com
152 servers already protected
- aiops-test.wellsfargo.com
- api-certification.wellsfargo.com
- api-enterprise-1-certification.wellsfargo.com
- api-enterprise-1.wellsfargo.com
- api-enterprise-certification.wellsfargo.com
- api-enterprise1-certification.wellsfargo.com
- api-enterprise1.wellsfargo.com
- api-gw-certification.wellsfargo.com
- api-gw.wellsfargo.com
- api-sandbox.wellsfargo.com
- api.wellsfargo.com
- apimpbuat.wellsfargo.com
- axst-dev-mo.wellsfargo.com
- bte-m.sac.wellsfargo.com
- bte-obo.wellsfargo.com
- bte-sac.wellsfargo.com
- carco-test.wellsfargo.com
- cashops-uat.wellsfargo.com
- cashops.wellsfargo.com
- ccasgateway.wellsfargo.com
- cdfconnect.wellsfargo.com
- cdmcust.ceo.wellsfargo.com
- ceo-stp-pw.wellsfargo.com
- ceoadmin.wellsfargo.com
- ceoadminfix.wellsfargo.com
- ceoadminuat.wellsfargo.com
- ceomobile.wellsfargo.com
- ceosv.ceo.wellsfargo.com
- ceosv.wellsfargo.com
- ceosvfix.wellsfargo.com
- ceosvuat.wellsfargo.com
- ceotrade.wellsfargo.com
- chsec.wellsfargo.com
- ciamfix.ceo.wellsfargo.com
- ciamfix.sec.wellsfargo.com
- ciamfix.wellsfargo.com
- ciamuat.ceo.wellsfargo.com
- ciamuat.wellsfargo.com
- cms.ceo.wellsfargo.com
- cmsuat-new.wellsfargo.com
- cmsuat.ceo.wellsfargo.com
- cmsuat.wellsfargo.com
- cmsview.wellsfargo.com
- compassapi.wellsfargo.com
- cp.ceo.wellsfargo.com
- cpuat.ceo.wellsfargo.com
- cpuat2.ceo.wellsfargo.com
- dev-m-sac.wellsfargo.com
- dev-sac.wellsfargo.com
- developer.sec.wellsfargo.com
- developer.wellsfargo.com
- ebdsit.ceo.wellsfargo.com
- efqv.sec.wellsfargo.com
- efqv.wellsfargo.com
- elink.wellsfargo.com
- elinktmp.wellsfargo.com
- ent-stp-pe.wellsfargo.com
- financial.wellsfargo.com
- fx-uat.ceo.wellsfargo.com
- fx.ceo.wellsfargo.com
- gateway-pfix-sfdc.wellsfargo.com
- gateway-sfdc.wellsfargo.com
- gpow.ceo.wellsfargo.com
- gpow.wellsfargo.com
- gpowpfix.wellsfargo.com
- gpowrpt.wellsfargo.com
- gpowrptuat.wellsfargo.com
- gpowuat.wellsfargo.com
- icomplete.wellsfargo.com
- incuapi.wellsfargo.com
- iso-qa.wellsfargo.com
- iso-sit.wellsfargo.com
- lqpfix.ceo.wellsfargo.com
- lqpte.ceo.wellsfargo.com
- lquat.ceo.wellsfargo.com
- m2mhub.wellsfargo.com
- m2mhubuat.wellsfargo.com
- mdes.wellsfargo.com
- mim-test.wellsfargo.com
- mim.wellsfargo.com
- mortgage.wellsfargo.com
- mtc.ceo.wellsfargo.com
- mtcfix.ceo.wellsfargo.com
- mtcqah.ceo.wellsfargo.com
- mtcuat.ceo.wellsfargo.com
- myaccounts.wellsfargo.com
- networth.wellsfargo.com
- online.wellsfargo.com
- ort.wellsfargo.com
- pcl.wellsfargo.com
- pmfvt.ceo.wellsfargo.com
- pmfvt.wellsfargo.com
- prime.ceo.wellsfargo.com
- process.wellsfargo.com
- pstp-rqa.wellsfargo.com
- pte-admin.wellsfargo.com
- quotecalc.wellsfargo.com
- rfi.ceo.wellsfargo.com
- rmol.ceo.wellsfargo.com
- rmol.wellsfargo.com
- rmolfix.wellsfargo.com
- rmoluat.wellsfargo.com
- rrcmx.sec.wellsfargo.com
- rubicon.wellsfargo.com
- safetceo.wellsfargo.com
- securities.wellsfargo.com
- sms-uat.wellsfargo.com
- sms.wellsfargo.com
- snq-test.wellsfargo.com
- snq.wellsfargo.com
- st-adhoc.wellsfargo.com
- staging.wellsfargo.com
- static.wellsfargo.com
- stg-obo.wellsfargo.com
- teamworks.wellsfargo.com
- tems.wellsfargo.com
- valuations.wellsfargo.com
- wca.sec.wellsfargo.com
- wca.wellsfargo.com
- wcafix.sec.wellsfargo.com
- wcafix.wellsfargo.com
- wcafs.sec.wellsfargo.com
- wcafs.wellsfargo.com
- wcafsfix.wellsfargo.com
- wcafsuat.wellsfargo.com
- wcauat.sec.wellsfargo.com
- wcauat.wellsfargo.com
- wellsdocx.wellsfargo.com
- wellsfargo.com
- wellsfs.wellsfargo.com
- wellsimage.wellsfargo.com
- wellsitem.wellsfargo.com
- wellspa.wellsfargo.com
- wellspafix.wellsfargo.com
- wellssuite.wellsfargo.com
- wellstrade.wellsfargo.com
- wellstrust.wellsfargo.com
- wffretail.wellsfargo.com
- wfgaccess.wellsfargo.com
- wibsso.ceo.wellsfargo.com
- wifpt-fix.wellsfargo.com
- wifpuat.wellsfargo.com
- wimnav.wellsfargo.com
- www.ceo.wellsfargo.com
- www.sec.wellsfargo.com
- www.wellsfargo.com
- wwwfix.ceo.wellsfargo.com
- wwwfix.sec.wellsfargo.com
- wwwuat.ceo.wellsfargo.com
- wwwuat.sec.wellsfargo.com
- xgi.wellsfargo.com
- xgiuat.wellsfargo.com
What this means
NIST has scheduled the key exchange most servers still use for retirement: deprecated after 2030, disallowed after 2035 (NIST IR 8547). Traffic recorded today can be decrypted once a large quantum computer exists. A server that offers hybrid ML-KEM key exchange closes that today; a server that does not is still open to harvest now, decrypt later.
Hostnames come from public certificate logs plus common service names, kept where the name resolves to a public address, and each is tested from the outside with post-quantum-only TLS 1.3 handshakes. A hostname shows what a server is called, not what traffic it carries; internal systems are out of scope. Method.
Work at Wells Fargo?
Fleet Watch gives you this scan privately every week, with your suppliers and a report your auditor can verify. The first scan is free.
Scan your own domainBadge
Shows the current grade and updates itself. Anyone may embed it.
<a href="https://latticescan.com/readiness/wellsfargo.com"><img src="https://latticescan.com/badge/readiness/wellsfargo.com" alt="quantum readiness"></a>