
Updated on
July 24, 2026
An MPC wallet is a digital asset wallet that uses multi-party computation (MPC) to split a private key into multiple shares held by different parties or systems, so that no single location ever holds a complete key. Transactions are signed collaboratively by a threshold of shareholders without the full key ever being reconstructed in one place.
MPC wallets are widely used in institutional custody and self-custody because they remove the single-device or single-person key as a target while still producing standard on-chain signatures.
A private key is generated and mathematically divided into shares (sometimes called key shares or shards). Each share is held separately, for example across different servers, devices, or organizations. To sign a transaction, a defined threshold of those shareholders runs a joint computation that produces a valid signature. The complete private key is never assembled at any single point during signing, which is what distinguishes MPC from simply storing one key. This differs from multisig, where multiple distinct keys each sign on-chain; MPC produces a single signature off-chain from distributed shares.
MPC is a prevention and access-control technology. It reduces the risk that any one compromised device, server, or individual can move funds, and it removes the single point of key theft. That is a meaningful security gain.
MPC does not, by itself, solve recovery. If shares are lost beyond the recoverable threshold, if a required signer is unavailable when a transaction must be authorized, or if the signing infrastructure is down, the assets remain intact on-chain but cannot be moved. MPC protects the ability to sign; it does not provide a path to move assets when that ability is gone. This is the gap where keyless recovery applies: a pre-positioned recovery path that does not depend on assembling the shares at the moment of need.
Institutions often treat MPC as a complete solution because it addresses the most visible risk, key theft. Understanding MPC as access control rather than recovery clarifies where a distinct recovery layer is still needed. Circuit Security operates alongside MPC custody stacks rather than replacing them. Circuit is not a custodian and never holds private keys or key shares.
It is a wallet where the private key is split into shares held by different parties, and transactions are signed jointly without ever rebuilding the whole key in one place. No single holder can move funds alone.
No. Multisig uses several separate keys that each sign on-chain, visible in the transaction. MPC splits one key into shares and produces a single signature off-chain. Both distribute authority, but the mechanism and on-chain footprint differ.
Not on its own. MPC is an access-control and prevention technology. If shares are lost beyond the recoverable threshold or a required signer is unavailable, the assets cannot be moved. A separate keyless recovery capability addresses that scenario.
No. Circuit is not a custodian and never holds private keys or shares. It operates alongside an existing MPC stack as a keyless recovery layer for the moments MPC cannot cover.
Want to keep up to date with Circuit? Sign up below
Discover more key terms relevant to Circuit
In digital asset operations, RTO is how fast you must regain control after a failure and RPO is how much recoverable state you can afford to lose.
A pre-signed transaction is a blockchain transaction authorized in advance and held until a trigger broadcasts it, the mechanism behind keyless asset recovery.
Keyless recovery is the ability to move or reclaim digital assets without access to their private keys or seed phrases, using recovery paths established in advance.

We believe asset recoverability is table stakes for the next era of digital assets.