1Connect your wallet
MetaMask, or any wallet in your browser, on Sepolia.
Keep MetaMask · Live on Sepolia
Protect what's in your wallet before Q-Day.
Your MetaMask address is guarded by one ECDSA key, and a large quantum computer can derive it. You don't have to switch wallets. Put ETH or tokens in the Q-Day vault: your ECDSA key can put money in, but only your post-quantum FORS+C key can take it out. Whoever breaks the ECDSA key finds nothing to move.
2Your post-quantum guard key
A FORS+C key from 12 new words. It is its own secret: nothing about your ECDSA key or a MetaMask signature can rebuild it, so a cracked ECDSA key can't either. Write the words down: they are the only way to open the vault.
- Guard key
- In the registry
- Signatures left
3Put money in
An ordinary transaction from your wallet. What's in the vault is yours, held for your address.
—ETH in the vault
—tUSDC in the vault
4Take money out, post-quantum
This page signs the withdrawal with your guard key: the owner, the token, the exact amount, where it goes and a deadline. Your wallet only submits it. Any wallet can submit it, so you can still withdraw if your ECDSA key is ever lost or broken.
!Try it as a thief
Pretend Q-Day came and someone cracked your ECDSA key. They can sign anything MetaMask can. Here they ask the vault for everything, with a FORS+C signature from a key of their own. The chain answers.
Testnet: Sepolia ETH and tUSDC have no value. The vault, its tests and the on-chain proofs are in Opaque's repository (contracts/src/ethereum/vault/PQVault.sol). Your 12 words stay in this browser only if you leave them here: back them up.