Skip to content

One seed. Two signatures.

A post-quantum wallet for Ethereum, right in your browser.

How it works

Two signatures, one account

Qrypto is a smart account, an Ethereum contract that checks both signatures. Every transfer needs ECDSA and hash-based SPHINCS-C13 signatures over the same transaction. Breaking the standard key alone cannot authorize it.

Standard key

ECDSA

Post-quantum key

SPHINCS-C13

Why the second signature matters

A sufficiently capable quantum computer could recover an Ethereum private key from its public key by breaking ECDSA, the standard signature scheme.

Hardware wallets protect where a key is stored. ECDSA-only multisig adds more keys. Neither changes the signature mathematics.

One phrase restores both keys

Your 24-word recovery phrase derives both keys separately and restores the same wallet address. Save and confirm it before receiving funds. The password only encrypts this device's wallet.

What this protects

Protection applies to the account's authorization, not Ethereum's consensus or token contracts. Anyone with the recovery phrase controls the wallet. Signing happens in your browser, so a compromised device or malicious site code can expose both keys.

Qrypto is experimental and unaudited. Its SPHINCS-C13 variant differs from NIST-standard SLH-DSA. These references explain the design; they are not an audit or endorsement of Qrypto.

Research and source code

A second key.
A different kind of protection.

Your account requires both ECDSA and hash-based SPHINCS-C13 signatures. Recovering the standard key alone cannot authorize a transfer.

Post-quantum signatureSPHINCS-C13
Standard signatureECDSA

One authorized
transfer

Both keys sign the same operation. Your account checks each signature independently.

Familiar assets.
Your own address.

Send and receive ETH and ERC-20 tokens on Ethereum mainnet. Pick a detected asset or add a token by its contract address.

Example wallet

Your wallet

Ethereum mainnet

  • ETH

    Ethereum

    0.48

  • USDC

    USD Coin

    250

  • USDT

    Tether

    120

Review transfer

25 USDC

Network
Ethereum mainnet
Recipient address
Your chosen recipient
Network fee
Shown before signing

Your receive address belongs to the smart account. It stays the same when you activate the wallet.

Your recovery phrase
Device password

Encrypts your local wallet

One phrase to keep.
Two keys to recover.

Your recovery phrase
The 24 words derive both keys separately and restore your Qrypto wallet address. Save them somewhere only you can access.
Your device password
It encrypts the wallet on this device. It is not part of your keys, and you can choose a new password when restoring.

Make it yours.

  1. Save your phrase

    Create the wallet, save and confirm your 24 words, then set a password for this device.

  2. Receive ETH

    Send ETH on Ethereum mainnet to your wallet address. You'll use it for activation and network fees.

  3. Activate your account

    Review the fee and activate. This deploys the smart account at the address you already funded.

Research you can inspect.

Qrypto is experimental and unaudited. Its SPHINCS-C13 variant differs from the SLH-DSA scheme standardized by NIST.

Protection applies to account authorization. It does not cover Ethereum's consensus, token contracts or a compromised device.

Before you begin.

Can I import a phrase from another wallet?

Import restores an existing Qrypto wallet from its 24-word recovery phrase. It does not recreate another wallet's address or move its funds. To move assets to Qrypto, send them to your Qrypto address on Ethereum mainnet.

Do I need ETH to send tokens?

Yes. Activation and network fees are paid in ETH, including when you send ERC-20 tokens. Qrypto's relay submits your signed operation and your wallet pays the displayed network fee. Sending requires the relay to be available.

Can I use Qrypto on my phone?

Qrypto runs in your browser without an extension. You can also install it to your home screen. In Safari, open Share and choose Add to Home Screen. In a supported browser, use the Install option when it appears.

What if I forget my device password?

Restore with your 24-word Qrypto recovery phrase and choose a new password. Your previous password is not needed. Recovery also requires access to Qrypto's authenticated signature history service. If you lose the phrase and cannot unlock an existing device, Qrypto cannot recover your keys.