Post-quantum security in a crypto wallet: what it does and does not cover
What quantum computing actually threatens in a crypto wallet, what no wallet can fix alone, and what can genuinely be protected today.
The right question is not "is my crypto safe from quantum computers"
It is: which part is at risk, when, and who can do something about it. Without separating those, the topic becomes either panic or marketing — and both get in the way.
This is the direct version, for people who use a wallet. If you want the architecture underneath, it is in what can and cannot be protected.
What is actually at risk
The cryptography protecting crypto comes in two families, and they do not carry the same risk.
Signatures — the proof that you authorized a transaction — use asymmetric cryptography (ECDSA on Bitcoin and Ethereum, EdDSA on Solana). That is the family vulnerable to a sufficiently large quantum computer, because of Shor's algorithm. An adversary with that capability could, in theory, derive your private key from your public key.
Cryptographic hashes hold up far better. The quantum threat there is much smaller, and addresses that have never spent expose only a hash, not the public key.
So the risk is not uniform, and it is not about "the blockchain breaking". It is about exposed public keys.
The point almost nobody makes
No wallet can change a blockchain's signature scheme.
What decides that Bitcoin validates ECDSA is Bitcoin's protocol. What decides that Solana validates EdDSA is Solana. A wallet claiming to offer "post-quantum on-chain signatures" would be claiming something technically impossible without a consensus change in the network itself.
That transition will happen at the network level, and it will be long. NIST's post-quantum cryptography project published the standards that will underpin it — FIPS 204 for signatures and FIPS 203 for key encapsulation. But putting that into a production network depends on the network.
So be skeptical of any wallet promising to protect you from this today. It is not what it can deliver.
What a wallet can genuinely protect
What is in the wallet's hands is its own layer — and there post-quantum protection means something concrete:
- Your key's backup. If an encrypted backup made today can be stored by an adversary and opened ten years from now, it needs to be encrypted with something that survives that wait. That attack has a name — "harvest now, decrypt later" — and it is the one quantum scenario that already matters today.
- The proof that the device is yours. The binding between your account and your device is signed by the wallet, with whatever scheme it chooses — no external protocol dictates it.
- Communication with its own services. Same logic.
In VKX Wallet that layer uses ML-DSA-65, the signature scheme standardized in FIPS 204 (previously known as CRYSTALS-Dilithium), through the noble-post-quantum library. The backup encrypted with that protection is part of the Quantum Shield plan, a paid feature — it is not on by default.
What your real risk actually is today
Some perspective: in 2026, your chance of losing crypto to a quantum computer is close to zero. Your chance of losing it to phishing, a malicious contract approval, or a badly stored recovery phrase is high.
Self-custody does not eliminate risk — it transfers responsibility for the key to you. The three measures that protect most are still the same:
- Never share your recovery phrase, with anyone, under any circumstances. Legitimate support never asks.
- Review and revoke approvals for contracts you no longer use.
- Keep large holdings separate from what you use day to day.
There is more on that in how to protect your digital assets.
FAQ
Can my crypto be stolen by a quantum computer today? There is no public evidence of a machine with that capability. The risk that matters today is different: encrypted data collected now and opened later.
Does VKX Wallet have post-quantum on-chain signatures? No, and no wallet does. Each blockchain decides its signature scheme. What exists is post-quantum protection in the wallet's own layer.
Which algorithm is used? ML-DSA-65, standardized in NIST's FIPS 204.
Is it on by default? The backup encrypted with post-quantum protection is part of the Quantum Shield plan, which is paid.
Do I need to change addresses because of this? Not today. When networks migrate, each will define a path.
What should I actually do now? Look after your recovery phrase, revoke old approvals and separate large holdings. That is what genuinely reduces risk today.
Next step
If you want the mechanism — Shor, Grover, and why the network's signature is not in the wallet's hands — see what can and cannot be protected. To try the app, the home page has the download links.
Disclaimer: this content is informational and educational and does not constitute investment advice.