XRP Ledger Sets a 2028 Quantum-Security Target—The Migration Is the Hard Part

Ripple has put a date on one of crypto’s least comfortable engineering problems: the XRP Ledger is targeting full post-quantum readiness no later than 2028.

That does not mean a quantum computer can empty XRP wallets today. It means Ripple’s engineers believe waiting for the threat to become immediate would leave too little time to migrate a live financial network safely.

The roadmap is less about one new algorithm than a controlled escape route.

In its post-quantum readiness roadmap, Ripple describes four stages: an emergency recovery plan for a sudden “Q-Day,” risk assessment and testing, a hybrid period where current and quantum-resistant signatures run together, and a proposed network amendment for full post-quantum signatures.

The first stage is the most revealing. If classical signatures were suddenly compromised, XRPL would need to stop accepting them and give legitimate account owners a safe way to prove control and move funds into quantum-secure accounts.

Ripple says one path under study would use post-quantum zero-knowledge proofs to establish ownership without exposing the old private key.

That is a contingency, not a claim that the network is under active quantum attack. Ripple’s own roadmap says the immediate work is testing NIST-recommended signature schemes against real ledger constraints such as key size, verification cost, storage, bandwidth and transaction throughput.

CoinDesk summarized the four-stage plan after speaking with Ripple engineering leadership:

NEW: @Ripple is preparing the XRP Ledger for a future where quantum computers could break today's cryptography, rolling out a four-stage plan to shield the network before that threat arrives. pic.twitter.com/qiAQTLCqW1

— CoinDesk (@CoinDesk) August 29, 2026

XRPL has one useful advantage, but it does not remove the coordination problem.

An XRP Ledger account can change the keys that control it without changing the account itself. That could make a future migration cleaner than moving every user to a completely new address system.

Still, a quantum-resistant scheme has to fit a network that settles transactions continuously. Larger signatures can raise storage and bandwidth costs, while slower verification can reduce throughput.

Wallets, exchanges, custodians, validators and applications all need compatible upgrade paths. Independent validators ultimately have to coordinate around any protocol amendment.

Ripple says the current phase includes experimentation with post-quantum signatures and work with Project Eleven on validator testing, Devnet benchmarks and a custody-wallet prototype. The second half of 2026 is assigned to hybrid testing, where candidate signatures can run alongside the elliptic-curve systems used today.

The official RippleX roadmap places post-quantum work alongside the ledger’s broader 2026 release and feature program. Its schedule tracks active server releases, amendment development and infrastructure work rather than treating cryptography as a separate laboratory project.

That operating context is important because a signature migration touches every layer that creates, relays, validates and stores a transaction. Candidate schemes must be benchmarked against the same reliability and performance expectations as other XRPL changes before validators can consider activating them.

The roadmap also shows why the 2028 target is not a single launch date. Devnet testing, application support, custody tooling, validator readiness and an eventual amendment vote are separate checkpoints, and a failure at any one of them can delay a safe network-wide transition.

Choosing quantum-resistant mathematics is only the first step. The replacement still has to move through XRPL’s normal governance and deployment process without breaking wallets, exchanges or the ledger’s existing transaction flow.

For XRP holders, the near-term risk is still much more ordinary.

Quantum readiness is long-horizon infrastructure work. Today’s users are far more likely to lose funds through phishing, fake support messages, malicious signing requests, deepfakes or exposed seed phrases. Trezor’s security chief made that distinction in a current warning about increasingly sophisticated AI-assisted scams:

🔥 INSIGHT: @Trezor's Head of Security Jan Komarek says the biggest threat to crypto users remains phishing, with increasingly sophisticated scams, deepfakes and AI-powered attacks making security harder than ever.

He tells @itsciaranlyons his golden rule: never type your seed… pic.twitter.com/lKD2gkt6wn

— Cointelegraph (@Cointelegraph) August 30, 2026

That does not make the quantum work premature. Networks that secure long-lived assets cannot begin redesigning signatures after the old ones fail.

The migration has to be tested while the current system is still safe enough to change deliberately.

The real test for XRPL will not be whether Ripple can publish a convincing roadmap. It will be whether the network can turn research into a validator-approved, wallet-ready migration without sacrificing the speed and reliability that give the ledger its value in the first place.

Join the conversation!

We have no tolerance for comments containing violence, racism, profanity, vulgarity, doxing, or discourteous behavior. If a comment is spam, instead of replying to it please click the icon below and to the right of that comment. Thank you for partnering with us to maintain fruitful conversation.