Policy

Executive Order 14412 Directs Post-Quantum Contractor Rules Under the FAR by 2030

Executive Order 14412 directs a Federal Acquisition Regulation proposal within 180 days, requiring covered contractors to meet post-quantum obligations by the end of 2030.

ArcQubit Team··2 min read·Updated September 22, 2026
  • EO 14412
  • federal compliance
  • supply chain
  • 2030 deadline
  • for government

Executive Order 14412 directs post-quantum contractor rules under the FAR by 2030

22 JUNE 2026, WASHINGTON

Executive Order 14412 directs a proposed Federal Acquisition Regulation rule within 180 days of the order, which points to roughly 19 December 2026. The proposal opens the rulemaking that converts the order's post-quantum requirements into contract terms, so federal buyers can require quantum-resistant cryptography through the contracts they sign.

Covered contractors must comply by 31 December 2030, matching the federal key-establishment deadline the order sets elsewhere. The requirements flow down to subcontractors, so a prime contractor must pass the obligations to the suppliers it depends on. That flow-down means the deadline reaches well beyond the companies that hold federal contracts directly.

The 180-day proposal is the start of a public process, not the final rule. Contractors can read the proposed text when it appears, comment during the rulemaking, and plan against the end-2030 compliance date. The order gives them roughly four years from the proposal to migrate the products and services they sell to the government.

Why it matters. The FAR route gives the executive order teeth in the private sector. Once post-quantum requirements sit in contract clauses, winning or keeping federal work depends on meeting them, and the flow-down pulls subcontractors into the same timeline. Contractors that inventory their cryptography and plan replacements now will avoid a scramble as the proposed rule firms up and the end-2030 deadline approaches.

Frequently asked questions

Executive Order 14412 directs a proposed Federal Acquisition Regulation rule within 180 days of the order, which points to roughly 19 December 2026. The proposal starts the public rulemaking process that turns the order's requirements into contract terms.

The rulemaking defines the exact scope, but the order aims the obligations at contractors whose products or services touch federal systems. Covered contractors must comply by 31 December 2030 and flow the requirements down to their subcontractors.

Contractors can start a cryptographic inventory of the products and services they sell to the government, identify quantum-vulnerable components, and plan replacements. Early discovery gives the most time to migrate before the end-2030 deadline arrives.

Sources

  1. The White House, "Executive Order 14412," Federal Register, vol. 91, p. 38483, Jun. 22, 2026.

Turn the headline into a plan.

Wherever you are on the 2030 to 2035 timeline, QuTrust builds you a migration roadmap.