← Back to Advanced Topics & Techniques

Quantum Computing and Your Crypto Wallet

A beginner's tutorial: what the threat is, which blockchains are most exposed, when it may arrive, and how to protect yourself.

Who this is for: Adults who own (or are curious about) cryptocurrency and have no technical background. No math or programming knowledge required.

Why now: In March 2026, Google Quantum AI published research showing that future quantum computers may need roughly twenty times fewer resources than previously estimated to break the encryption protecting Bitcoin, Ethereum, and most other cryptocurrencies. Nothing is broken today — but the window to prepare is narrowing.

Part A — The Threat to Cryptocurrency Public Addresses

First, the basics: two keys and an address

Every crypto wallet is built on a pair of mathematically linked numbers:

Your private key — a secret number only you should know. It is the master password that spends your money.
Your public key — derived from the private key. The network uses it to verify that you, and only you, authorized a transaction.
Your public address — a shortened, scrambled (hashed) version of the public key. This is what you share with others to receive funds, like an account number.

The whole system rests on one assumption: nobody can work backward from your public key to discover your private key. With today's computers, that reverse calculation — solving the "elliptic curve discrete logarithm problem" — would take longer than the age of the universe.

What quantum computers change

A sufficiently powerful quantum computer running Shor's algorithm could solve that "impossible" math problem quickly. In one scenario Google's researchers modeled, an advanced quantum machine could derive a private key from an exposed public key in a matter of minutes.

Here is the critical detail for wallet holders: your public key is normally hidden behind the address's hash. It becomes visible the moment you spend from an address. Once exposed on the blockchain, it stays visible forever — blockchains never forget.

The "harvest now, decrypt later" problem

Attackers do not need a quantum computer today to start the attack. They can record exposed public keys from public blockchains right now, then compute the matching private keys years later when the hardware arrives. Any address whose public key is already visible is, in effect, already in the queue.

Bottom Line

The threat is not to the blockchain's mining or record-keeping — it is to the digital signatures that prove ownership. An attacker who derives your private key doesn't hack your wallet; they simply become you and spend your funds legitimately, as far as the network can tell.

Part B — The Most Vulnerable Blockchains

Nearly all major cryptocurrencies use elliptic curve cryptography, so none are immune. But exposure varies widely depending on how and when public keys become visible.

Exposure Level	What's at Risk	Why
Highest — Early Bitcoin (P2PK)	Satoshi-era coins, roughly 2009–2011, including an estimated 1M+ BTC believed mined by Bitcoin's creator	The oldest "pay-to-public-key" format published the full public key directly on-chain. These keys have been exposed for 15+ years, and many owners are gone — the coins can never be moved to safety.
High — Reused Bitcoin addresses	Any address spent from once and still holding funds	The first outgoing transaction reveals the public key. Analysts estimate 25–40% of all Bitcoin (roughly 6.9 million BTC) sits in addresses with exposed public keys.
High — Ethereum accounts	Most active Ethereum accounts	Ethereum uses one permanent account per user rather than fresh addresses, so a single outgoing transaction exposes the public key for the life of the account. Google's research specifically flagged parts of Ethereum's signature architecture.
Moderate — Modern unused addresses	Fresh, never-spent-from addresses on Bitcoin and similar chains	The public key stays hidden behind a hash until you spend. The residual risk is the short window while a transaction waits to be confirmed.
Lower — Chains planning PQC upgrades	Networks actively building quantum-resistant signatures	Some newer chains and upgrade proposals are designed around post-quantum cryptography, though most are still in development.

Key Takeaway

Age and habits matter more than which coin you hold. Old address formats and address reuse are the biggest risk factors. Mining (proof-of-work) is not the primary vulnerability — ownership signatures are.

Part C — When Could the Threat Become Real?

Not today. No quantum computer currently exists that can break Bitcoin or Ethereum. Today's machines are too small and too error-prone by a wide margin.

What changed in 2026 is the trajectory. Google's research cut the estimated hardware requirement from millions of physical qubits to fewer than 500,000 in certain modeled scenarios — a roughly twenty-fold improvement driven by better math, not better machines. The catch: those qubits must be woven together with sophisticated error correction, which remains one of quantum computing's hardest unsolved engineering problems.

What experts and institutions are signaling

Timeframe	Signal
2026 (now)	Google publishes its revised estimates and urges the crypto industry to begin migrating. The post-quantum transition is already underway at large institutions.
2029	Google's own accelerated internal deadline for migrating to quantum-resistant cryptography — a strong hint about how seriously insiders take the timeline.
2030–2035	The range where most credible expert projections place a cryptographically relevant quantum computer. U.S. federal mandates require government systems to complete post-quantum migration in this window (encryption by ~2030, signatures by ~2031, fully by 2035).

How to read this: Nobody knows the exact date, and it could slip later — or arrive sooner. But remember "harvest now, decrypt later": for any address with an exposed public key, the practical deadline is now, because the data enabling a future attack is being collected today. Expect a gradual transition, not a single dramatic collapse.

Part D — How to Defend Yourself: Practical Steps

You cannot build a quantum computer defense yourself — but you can make your funds a much harder target. These steps cost little or nothing.

Do these now

Never reuse addresses. Each time you receive crypto, use a fresh address. Every modern Bitcoin wallet generates new addresses automatically — let it. This is the single most effective habit, and it's free.
Move funds off old and exposed addresses. If you hold coins on an address created years ago, in a legacy format, or one you have already spent from, transfer the full balance to a brand-new address in a modern format (for Bitcoin, a native SegWit "bc1..." address). This re-hides your public key behind a fresh hash.
Empty addresses completely when you spend. A partial spend exposes the public key while leaving funds behind on it. Good wallets sweep leftover "change" to a new address automatically — confirm yours does.
Use a hardware wallet. A hardware wallet keeps your private key offline, protecting you from today's ordinary hacks and positioning you to adopt future post-quantum firmware upgrades from the manufacturer. See our hardware wallet guides to get started.
Keep wallet software updated. Post-quantum protections will arrive as ordinary software updates. Running outdated wallet software means missing them.

Do these on an ongoing basis

Watch for post-quantum upgrade announcements. Bitcoin, Ethereum, and other major networks are developing quantum-resistant signature schemes. When your blockchain offers a migration path, act early rather than joining a last-minute rush.
Prefer exchanges and custodians with a PQC plan. If a third party holds your crypto, their preparedness is your security. Favor providers that publish post-quantum migration plans.
Beware of quantum-themed scams. See the warning below.
Stay informed, don't panic. The honest expert consensus: the threat is real but not imminent, and preparation — not fear — is the correct response. Check reputable sources a few times a year.

⚠️ Watch Out for Quantum-Themed Scams

Expect fraudsters to exploit quantum headlines: fake "quantum-proof wallets," urgent "migrate now" phishing emails, and bogus token swaps.

No legitimate upgrade will ever ask for your private key or seed phrase — anyone who asks for either is stealing from you.

Quick self-assessment

Your Situation	Your Priority
Coins on an address you've already spent from	High — move funds to a fresh, modern address soon
Coins on a legacy/very old address format	High — migrate to a modern address format
Active Ethereum account holding significant value	Medium — consider a fresh account for long-term holdings; follow Ethereum's PQC roadmap
Coins on a fresh, never-spent-from modern address	Low — maintain good habits; stay updated
Crypto held on an exchange	Medium — verify the exchange's post-quantum plans

📹 Video Tutorial:

Watch · Your Keys Were Harvested in 2026 — Prepare Now

Glossary

Term	Plain-English Meaning
Private key	The secret number that controls your crypto. Whoever has it can spend the funds. Never share it.
Public key	A number mathematically derived from your private key. It lets the network verify your signature. Today it cannot be reversed into your private key — a quantum computer could change that.
Public address	A shortened, hashed version of your public key — the "account number" you share to receive funds.
Address reuse	Receiving funds more than once at the same address. After your first spend, the public key behind that address is exposed forever.
ECC / ECDSA	Elliptic curve cryptography — the math protecting Bitcoin, Ethereum, and most other coins today.
Qubit	The basic building block of a quantum computer. Millions of physical qubits may be needed to form enough stable "logical" qubits for an attack.
Shor's algorithm	The quantum method that could derive a private key from an exposed public key.
Harvest now, decrypt later	Attackers record exposed public keys today, planning to crack them once quantum hardware matures.
Post-quantum cryptography (PQC)	New encryption designed to resist both classical and quantum computers.
CRQC	Cryptographically relevant quantum computer — one powerful enough to actually break today's encryption.

Sources & Further Reading

This tutorial is based on the article "Google's Quantum Warning: Why the Foundations of Digital Trust May Be Entering a Quiet Transition", supplemented by: