Ripple has published a four-phase roadmap to make the XRP Ledger post-quantum ready, targeting full readiness by 2028. The plan starts with a contingency that works even if quantum computing arrives early, then moves through testing NIST-recommended signature schemes to native post-quantum signatures on the ledger itself.
The reason this belongs on a wealth-planning site rather than only a developer blog is simple. A quantum computer capable of deriving a private key from a public one does not threaten a protocol in the abstract. It threatens the specific keys your assets sit behind, including the ones written into an estate plan that assumes those keys stay valid for decades.
What Q-Day actually means for key holders
The threat model is narrow and worth stating precisely. Today’s digital signatures rest on elliptic-curve cryptography, where deriving the private key from the public key is computationally infeasible. A sufficiently capable quantum computer changes that calculation. The moment it becomes practical is what the industry calls Q-Day.
The exposure is not uniform. It concentrates in accounts whose public key has already been revealed on-chain, which on most ledgers means any account that has ever sent a transaction, and in long-dormant accounts that nobody is watching. An estate plan that parks assets in a single address for twenty years is precisely the profile most exposed.
This is a planning problem before it is a cryptography problem. The people who will struggle are not the ones running validators. They are the ones whose private key succession plan names a key rather than a process, with no mechanism for rotating it.
The four phases Ripple has described
Phase one is post-quantum recovery, described as Q-Day readiness. It is an emergency path: if classical cryptography breaks sooner than expected, there is a defined way to protect exposed public keys and long-held accounts rather than an improvised response. Phase two, running through the first half of 2026, is assessment and experimentation, including work on ML-DSA on a test network.
The later phases move toward running candidate post-quantum signatures alongside existing elliptic-curve signatures, a hybrid arrangement, before native post-quantum signatures arrive across the ledger. Ripple has said it is working with Project Eleven on validator testing and early custody prototypes. Full readiness is targeted for 2028.
Any change to signature schemes would require an amendment, which means the same 80 percent validator threshold and two-week hold that governs every other protocol change. Nothing here happens by announcement.
The XRPL design feature that helps here
One structural detail makes this migration less painful on the XRP Ledger than it would be elsewhere. An XRPL account can change the keys that control it without changing the account itself. Key rotation is a native operation, not a workaround.
The practical consequence is that a future migration can rotate accounts to quantum-safe keys while addresses, trust lines, and the records pointing at them stay intact. Compare that with an architecture where hardening means moving every user to a new address: every downstream reference breaks, and in a wealth context those references are custody agreements, trust schedules, and letters of instruction.
That is a genuine advantage and it is worth naming as one. It is also not a guarantee. A capability that exists in the protocol still has to be exercised by every account holder, and the accounts least likely to act are the dormant ones that need it most.
What to do about it now, and what not to
There is no action to take today that involves post-quantum cryptography, because there is nothing deployed to migrate to. What there is to do is remove the assumptions that would make a future migration hard.
Write key rotation into the plan as a process rather than treating any key as permanent. A succession document that says “the key is held here” ages badly. One that says who is responsible for rotating keys, on what schedule, and how the change is recorded survives a cryptographic transition without being rewritten.
Know which of your holdings sit in accounts that have never moved. Dormancy is the risk factor that compounds, and it is the one nobody audits. The crypto estate data room checklist covers the inventory work that makes this answerable.
And treat 2028 as a roadmap target rather than a deadline you can plan around. Published timelines for protocol work move. The useful posture is a plan that does not care exactly when the transition lands, which is the same posture that handles custodian changes and crypto estate planning generally.
Common questions
Can quantum computers break XRP today? No. No existing quantum computer can derive private keys from public keys at the scale required. The work described here is preparation for a future capability, not a response to a current one.
Is the XRP Ledger quantum-resistant now? No. Ripple has published a roadmap targeting readiness by 2028. Native post-quantum signatures would require a protocol amendment, and no such amendment is enabled today.
What is Q-Day? The point at which a quantum computer can reconstruct private keys from public data, breaking the assumption underneath current digital signatures.
Which accounts are most exposed? Accounts whose public key is already visible on-chain, and long-dormant accounts nobody is monitoring. Both describe a lot of long-term holdings.
Educational only, not tax, legal, or investment advice. Roadmap targets are not commitments and timelines change. Nothing here is a recommendation to buy, sell, or hold any digital asset.
Sources
Part of our guide: XRP Explained.
