What is an MPC wallet?
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 6 min
In short
An MPC wallet splits a private key into shares held in different places and produces signatures without ever reassembling it. Compromising one device is not enough to sign. The technique underpins institutional custody and consumer wallets that do away with seed phrases.
Key points
- Key shares never come together in one place
- Compromising a single device does not enable signing
- On-chain it looks like an ordinary address and signature
- Refreshing shares gives an effective key rotation
Definition
A wallet that uses multi-party computation so that several parties holding key shares can jointly produce a signature without any of them learning the full key.
The full private key never exists, not even at generation time. Each party holds only a share, and signing is an interactive cryptographic protocol between shares. A common layout puts one share on the user's device, one on the provider's server and one in backup.
The difference from multisig is what the chain records. Multisig publishes several public keys and signatures; MPC produces one address and one signature. That means lower fees and no public disclosure of the arrangement — but also that no one can verify on-chain who holds authority. It also works on chains without script-level multisig support, which is a practical advantage.
Operationally, share refresh is the notable strength: shares can be regenerated without changing the overall key or address, so an attacker holding an old share is left with nothing. The counterweight is that implementations are often proprietary, so whether you could recover funds without the provider is a question to settle before depositing.
Watch out for
- · Confirm in advance how you would recover funds if the provider ceased operating
- · When the provider holds a share, their internal controls become part of your risk
- · With nothing recorded on-chain, proving authority for inheritance or audit is harder