Hetzner Cloud has quietly shipped a meaningful security upgrade: its load balancers now support post-quantum hybrid ECDHE-MLKEM key agreement for TLS 1.3. The change applies immediately to newly created load balancers and is rolling out to existing ones over the coming weeks. Post-quantum hybrid key exchange combines classical elliptic-curve cryptography with the MLKEM lattice-based algorithm, ensuring that traffic encrypted today cannot be decrypted later by a sufficiently powerful quantum computer. For organisations in regulated industries or handling sensitive data, this is a worthwhile addition that requires no configuration changes on existing setups.

On the infrastructure side, Hetzner also introduced an optional name property for Storage Box Subaccounts, a small but useful change for teams managing large storage deployments that need to label and identify subaccounts programmatically. There are also breaking changes in the cloud API: from May 1, attempts to delete a Primary or Floating IP that is still assigned to a resource will now return the error must_be_unassigned. Teams using the Terraform provider or Ansible collection for Hetzner should verify they are on a compatible version to avoid pipeline failures.

The backdrop to these updates is a broad price revision that took effect on 1 April 2026. Hetzner cited sharply rising hardware and infrastructure costs across the IT sector as the driver, with increases of up to 37% on selected dedicated and cloud products. Hetzner remains one of the most cost-competitive European cloud providers, but the revision is a reminder that the period of flat or declining cloud pricing is over.

If you are running workloads on Hetzner and want to review your infrastructure sizing, TLS configuration, or cost optimisation options following the price changes, get in touch with Excello Digital.