QShield

Public beta on devnet

A Solana vault locked with a post-quantum key.

QShield keeps your SOL and tokens in a vault that only an ML-DSA signature can move. That is the NIST standard built to hold up against quantum computers. Add a guardian, and even a stolen key can only take your daily limit.

Open the devnet beta How it works

Free test SOL only. Unaudited research preview.

What it protects, and what it doesn't

Protected

Assets you deposit into your QShield vault. Every withdrawal, key change and freeze needs a signature from your ML-DSA-44 key.

Unchanged

Solana itself, its consensus, and every account outside your vault. QShield does not make the blockchain quantum-resistant. It adds a stronger lock to one safe.

How a send works

  1. You sign

    Your browser builds a short note: amount, recipient, this vault, this network, a one-time number and an expiry. Your post-quantum key signs it. The key never leaves your device.

  2. A relayer delivers

    It pays the network fee and submits your note. It holds no key of yours and cannot change a single byte: any edit breaks the signature.

  3. The program checks

    On chain, QShield verifies the ML-DSA signature in about 828k compute units, inside one transaction. Then it checks network, vault, expiry and the one-time number, and only then moves the funds.

Your normal Solana wallet only pays for setup and deposits. It can never withdraw. Stealing it gets an attacker nothing from the vault.

A guardian caps what a thief can take

A guardian is a second key, kept as 24 words on paper or on your phone. Everyday sends stay instant. Everything else waits for a tap.

If malware steals your everyday key, it can take at most your limit. Freeze in one tap, and your guardian swaps the key from a clean device.

Lose your computer, keep your vault

Key file

An encrypted backup that the app makes you test before you continue.

24 recovery words

Your key on paper. Restores it on any computer, no file needed.

Guardian

Lost both? Your guardian switches the vault to a new key, and the old one stops working.

Nobody else holds a copy of your key. That keeps the vault safe, and it is why the app insists on a backup.

Try the beta in five minutes

  1. Install Phantom or Solflare and switch it to Devnet (Settings, then Developer settings).
  2. Get free test SOL for that wallet at faucet.solana.com.
  3. Open the app, create your vault key and back it up.
  4. Connect your wallet and create a vault. It uses about 0.16 test SOL.
  5. Deposit, send, then try adding a guardian on your phone.
Open the devnet beta

Where QShield stands

The program can still be upgraded. Whoever holds the upgrade authority above can replace it and take all funds in it, which is fine for test SOL and why there is no mainnet yet. The path to mainnet is an external audit, a multisig with a public timelock, then an immutable program.