What is an MPC wallet? Key sharding, explained plainly
Multi-party computation lets several parties compute a result together without any of them revealing their input. Applied to a crypto wallet, it means a private key can be split into pieces that sign transactions jointly and never exist as a whole. That is the entire trick, and everything else follows from it.
The problem MPC is solving
A normal crypto wallet has one private key. Whoever holds it controls the funds, permanently and irrevocably. Every security practice in the category, hardware devices, metal backup plates, air-gapped machines, is an elaborate defence of one string of characters.
The trouble is that a single secret has no middle ground. It is either safe or it is catastrophically not, and ordinary people are asked to guarantee the former for decades.
How the split actually works
Instead of generating one key, an MPC wallet generates several shares through a distributed protocol. No share is a fragment of the key in the sense of being part of the text; each is an independent mathematical object, and any single one reveals nothing about the key.
When you sign a transaction, the shares run a joint computation that produces a valid signature. At no point does a complete private key exist in memory, on disk, or in transit. There is no moment where a compromised machine could grab it.
- Key generation is distributed; a whole key is never created in one place
- Each share individually reveals nothing about the key
- Signing is a joint computation, not a reassembly
- Compromising one location does not compromise the wallet
Where ZenWallet keeps the shares
ZenWallet distributes shares across your device, its own infrastructure, and a separate backup recovery service. Moving funds requires a valid joint signature, so no single party, including ZenWallet, can transact on your behalf.
This is what makes the wallet self-custody despite there being no phrase in your possession. Custody is about who can authorise movement, not about who holds a piece of paper.
What MPC does not fix
MPC does not stop you approving a bad transaction. If you sign a malicious contract interaction, the maths dutifully produces a valid signature for it. Transaction awareness still matters.
It also introduces provider dependency: recovery leans on infrastructure being available, which a self-managed seed phrase does not. Multiple independent recovery factors are the mitigation, and you should check how many a wallet offers before trusting it.
Common questions
What does MPC stand for in crypto wallets?
Multi-party computation. Several parties jointly compute a signature without any of them holding or revealing the complete private key.
Is an MPC wallet self-custody?
Yes, when no single party can produce a valid signature alone. Custody is determined by who can authorise a transaction, not by who stores a recovery phrase.
Can the wallet provider steal my funds in an MPC setup?
Not with a correctly designed scheme. A single share is mathematically useless; a valid signature requires the joint computation across separate locations.
How is MPC different from a multisig contract?
Multisig is enforced on-chain by a smart contract and produces multiple signatures. MPC happens off-chain and produces one ordinary signature, so it works on chains without smart contracts, including Bitcoin.