end-of-life.org

PCI-DSS 3.2.1 End of Life

Support dates and upgrade guidance — rebuilt from live data.

End of Life

PCI-DSS 3.2.1 reached end of life on 31 Mar 2024. It no longer receives security fixes.

861 days without security patches
Recommended action: upgrade to PCI-DSS 4.0.1.

Support timeline

Official dates from the PCI-DSS release process.

MilestoneDateStatus
Initial release1 May 2018
End of life 31 Mar 2024 2.4 years ago
Latest release final

Where to go from 3.2.1

Recommended target: PCI-DSS 4.0.1.

The newest actively supported branch is PCI-DSS 4.0.1 (latest release ).

Frequently asked questions

Is PCI-DSS 3.2.1 still safe to use?

PCI-DSS 3.2.1 reached end of life on 31 Mar 2024, 861 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.

Can I still download PCI-DSS 3.2.1?

Yes — the final release (3.2.1) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.

What should I upgrade PCI-DSS 3.2.1 to?

Upgrade to PCI-DSS 4.0.1, the newest actively supported branch.

All PCI-DSS versions