Monad proposes splitting wallet addresses from security keys to survive lost credentials

Monad researchers Kushal Babel and Jan Camenisch proposed separating a blockchain account’s permanent address from the credentials used to control it, in a Monad Improvement Proposal published August 24, 2026, that could let users adopt passkeys, multisignature setups or post-quantum cryptography without abandoning their existing wallet address.

Upgradeable account authentication targets the biggest wallet weakness

The appeal of Upgradeable Account Authentication is simple: the address could remain stable while the security mechanism evolves.

A user whose private key is lost could potentially install a replacement credential through a recovery mechanism.

Someone worried about a compromised key could rotate it without moving funds. Users could also potentially introduce passkeys or multiple authorization methods while retaining the same address.

That matters because changing blockchain addresses can create operational headaches. Funds, decentralized-finance positions, contracts, allowlists and services may all be connected to an existing address.

Monad’s design aims to make security upgrades possible without forcing users to rebuild that digital footprint.

Monad co-founder and general manager Keone Hon described the broader direction as the first major step toward the network’s post-quantum roadmap, saying users should eventually be able to switch to quantum-resistant schemes “without disrupting address books, DeFi positions, etc.”

Upgradeable account authentication brings passkeys to the wallet layer

Upgradeable Account Authentication could also make crypto wallets easier for mainstream users.

Passkeys are designed to provide authentication through devices and security mechanisms already familiar to consumers, including biometric verification and hardware-backed credentials.

Rather than relying exclusively on a manually stored seed phrase, a wallet could eventually use a passkey as one of its authorized authentication methods.

Social recovery offers another potential advantage. Instead of making one private key the single point of failure, users could establish recovery conditions involving multiple trusted parties or credentials.

Ethereum’s broader account-abstraction research is moving in a similar direction, with proposals exploring alternative authenticators including P-256, WebAuthn/passkeys and delegation mechanisms.

Upgradeable account authentication could prepare manad for quantum attacks

Upgradeable Account Authentication is also designed with a longer-term threat in mind: quantum computing.

A sufficiently powerful quantum computer could eventually undermine some cryptographic systems currently used to secure blockchain accounts.

That threat is not an immediate indication that existing wallets are unsafe today, but it has pushed developers to investigate post-quantum alternatives.

Monad’s approach would allow an account to adopt a different authorization scheme without first transferring its assets to a completely new address. That could make future cryptographic migrations less disruptive.

Upgradeable account authentication faces major implementation risks

Despite the bullish security implications, Upgradeable Account Authentication remains a proposal rather than a finished wallet feature.

Monad’s own improvement process requires proposals to progress through technical review, implementation and community consensus before becoming part of the protocol.

That means Upgradeable Account Authentication must still answer difficult questions around recovery authorization, key rotation, malicious guardians and compatibility with wallets and applications.

Security flexibility can also introduce new attack surfaces. A recovery mechanism that is poorly configured could become a vulnerability rather than a safeguard.

The timing is nevertheless notable. A recent phishing attack linked to the Inferno Drainer ecosystem reportedly caused a Hyperliquid user to lose about 550,000 USDC after clicking a fake Google advertisement, highlighting the continuing danger surrounding wallet authorization and transaction signing.

Upgradeable Account Authentication does not directly prevent phishing attacks such as that incident, but its broader goal is highly relevant: making blockchain accounts less dependent on a single, permanent authentication credential.

For Monad, Upgradeable Account Authentication could ultimately become a powerful bridge between self-custody and modern digital security.

The proposal is still early, but if developers can turn the architecture into a secure, practical implementation, the ability to upgrade wallet authentication without abandoning an address could become one of the blockchain industry’s most important security improvements