Wallet Architecture (MPC)

View as Markdown

IDA’s MPC wallet uses a 2-of-3 threshold signature scheme:

ShareHeld byPurpose
Share 1User device (encrypted in OS keystore)Online signing
Share 2IDA backend (HSM-backed enclave)Online signing
Share 3Recovery custodian (escrow)Reserved for recovery

Any signature requires cooperation between Share 1 and Share 2. Share 3 is only used during device-loss recovery — paired with re-authentication, it lets the user rebuild Share 1 on a new device.