Key Takeaways
- The PSTI Act sets new security standards for connected devices
- Quantum resistance is becoming essential for long-term device security
- Manufacturers must prioritise transparency, updates, and secure design
- Regulation is driving a shift toward future-proof cryptographic approaches
- PQShield supports quantum-resistant solutions for connected ecosystems
New legislation for connected devices
On April 29th, the UK’s new Product Security and Telecommunications Infrastructure (PSTI) Act was passed into law.
The legislation focuses on how devices are connected and aims to safeguard consumers from growing cybersecurity risks. Increasingly, this also connects to the need for quantum resistance, as future threats begin to shape today’s security requirements.
What the PSTI Act means for connected devices
As defined by the Act, the new legislation applies to ‘all Internet-connectable products’ and ‘network connectable products’. This creates a clear focus for manufacturers, distributors, and importers of devices within the United Kingdom.
From Smart TVs and WiFi routers to IoT devices and industrial controls, the impact is wide-reaching. In reality, most of the technology supply chain will be affected.
As organisations adapt to these requirements, there is a growing opportunity to embed quantum-resistant security into device lifecycles from the outset.
Key requirements under the PSTI Act
The legislation outlines several important areas that manufacturers must address:
- A ban on universal passwords
- Transparency in disclosure of vulnerabilities
- Timely software updates
- Security by design and default
These requirements represent a shift towards stronger baseline security, while also laying the groundwork for more advanced protections such as quantum resistance.
Eliminating universal passwords
Devices built or distributed in the UK are now required to use unique passwords or require users to create them during setup. This helps defend against unauthorised access and reduces reliance on easily guessable credentials.
While this is a fundamental step, it also reflects a broader move towards strengthening device-level security in preparation for more advanced threats.
Manufacturers are now required to provide clear processes for reporting vulnerabilities. This includes a public point of contact and defined mechanisms for identifying and addressing security flaws quickly.
This level of transparency is critical not only for current threats but also for future-proofing systems as quantum-era risks emerge. Embedding quantum resistance into long-term security strategies will depend on this kind of visibility and responsiveness.
Security updates and long-term protection
The PSTI Act requires manufacturers to state the minimum period during which devices will receive security updates. This is particularly significant in the context of future threats. Update cycles will directly influence how effectively devices can adopt new cryptographic standards, including those designed for quantum resistance.
As timelines for quantum disruption accelerate, the ability to update and adapt systems becomes a strategic advantage. PQShield helps organizations plan for this transition with flexible, forward-compatible cryptographic solutions.
Security by design and default
The PSTI Act represents more than just compliance. It signals a broader cultural shift towards prioritising security across the technology supply chain.
As post-quantum cryptography becomes more widely adopted, quantum resistance will play a critical role in protecting connected devices against emerging threats. Whether deployed alongside classical cryptography or as a replacement, these technologies will define the next generation of secure systems.
PQShield is committed to helping organisations navigate this transition, ensuring devices remain secure not just today, but in the quantum era ahead.
The impact of non-compliance
Failure to comply with the PSTI Act can result in serious consequences for manufacturers. However, beyond penalties, the legislation encourages a proactive approach to security.
By aligning with these requirements and investing in quantum resistance, organisations can strengthen trust, improve resilience, and remain competitive in an evolving regulatory landscape.
Read More on the Gov.UK website.
How does PQShield help with quantum resistance?
PQShield provides advanced cryptographic solutions that enable organisations to implement quantum-resistant security in devices and infrastructure.
Looking to build secure, future-ready devices?
Contact PQShield today and start your journey towards quantum resistance today.
Frequently asked questions
What is the PSTI Act?
The PSTI Act is UK legislation designed to improve the security of connected devices by enforcing baseline cybersecurity requirements.
What is quantum resistance in cybersecurity?
Quantum resistance refers to cryptographic methods designed to remain secure against the potential capabilities of quantum computers.
Why is quantum resistance relevant to connected devices?
Connected devices often have long lifecycles, meaning they must be protected against future threats, including those posed by quantum computing.
How does the PSTI Act support future-proof security?
By enforcing updates, transparency, and secure design, the Act creates a foundation that supports the adoption of advanced protections like quantum-resistant cryptography.
How does PQShield help with quantum resistance?
PQShield provides advanced cryptographic solutions that enable organisations to implement quantum-resistant security in devices and infrastructure.