XRP Ledger Quantum Roadmap: What Ripple's 2028 Target Means for You

For years, the standard answer to the quantum question was the same: in theory, a large enough quantum computer could break the cryptography behind Bitcoin and XRP, but nobody was anywhere close to building one. The video argues that answer is changing, and that the XRP Ledger now has a dated plan in public documents.

Ripple has published a post-quantum roadmap with a target year. But according to the video, the line that decides whether a given XRP account is carried across has nothing to do with Ripple. It depends on who holds the keys.

How close are quantum computers to breaking crypto?

Closer than the old estimates suggested, according to research cited in the video. The video opens with Google’s Willow chip, which Google says completed a benchmark calculation in under five minutes that would take the fastest supercomputer about 10 septillion years. That benchmark has little to do with cryptography on its own.

The more relevant change came in March 2026. For years, breaking elliptic-curve cryptography was thought to need around 20 million qubits. Google Quantum AI research put the requirement at roughly 500,000 physical qubits. Once such a machine exists, the estimate for extracting a private key from a public key is about nine minutes per key. According to the video, the research places a machine like that around 2032, about six years away.

The video is careful here: these are estimates about hardware that does not yet exist, and such estimates can move in either direction. What matters is the direction this one moved.

Is the XRP Ledger exposed?

In principle, yes. The XRP Ledger documentation says the ledger supports two signing algorithms:

• secp256k1, the same elliptic curve Bitcoin uses.
• Ed25519, a newer scheme.

Both are elliptic-curve cryptography, the family of math the Google research addresses.

The documentation also notes that your public key is revealed when you make a transaction, because the network needs it to check your signature. That is how verification works, not a flaw. But once an account has sent anything, its public key sits on the public ledger permanently. On the Bitcoin side, the video cites Decrypt’s estimate that about 6.9 million Bitcoin, roughly a third of the supply, sits in addresses with already-exposed public keys.

Nobody can do anything with a public key today. The question is whether someone could later, and whether the network is preparing.

What is Ripple’s post-quantum roadmap?

On April 20, 2026, Ripple published a page titled “Post-quantum readiness on the XRP Ledger.” It sets out four phases:

Phase	Timing	What it covers
1. Post-quantum recovery and Q-Day readiness	Contingency	An emergency plan in case classical cryptography fails before migration is finished
2. Proactive planning and experimentation	First half of 2026	A full quantum risk assessment and testing of NIST-recommended algorithms
3. Devnet testing	Second half of 2026	Candidate post-quantum signature schemes deployed on Devnet
4. Full transition	Target: 2028	Moving to post-quantum signatures

Ripple names the algorithm it is testing, ML-DSA, and its partner, a company called Project 11. The design goal is “cryptographic agility,” meaning the network supports more than one algorithm rather than betting everything on a single standard.

The video points to the order of the phases: the emergency plan comes first, before the testing. Engineers tend to do that when they are not certain the schedule will hold.

Who is really setting the deadline?

Not Ripple, according to the video, but the US National Institute of Standards and Technology. In November 2024, NIST published a draft, Internal Report 8547, “Transition to Post-Quantum Cryptography Standards.” It names RSA, ECDSA, ECDH and finite-field Diffie-Hellman and sets two dates:

1. Deprecated after 2030: no longer acceptable for new deployments on US federal systems.
2. Disallowed after 2035: signatures made with these algorithms treated as forgeable.

ECDSA is the signature scheme used with secp256k1.

The video is clear that IR 8547 is an initial public draft: directional guidance, not binding law, and the dates could change. But custodians, banks and exchanges that want federal customers tend to build to the draft years before it becomes a rule. Ripple’s 2028 target leaves a two-year buffer before NIST’s 2030 date.

Didn’t David Schwartz say quantum was decades away?

He did, and the video says he was right at the time. In January 2025, Ripple’s David Schwartz said Bitcoin is not quantum-proof, but compared quantum computing to cold fusion: always about 30 years away. He added that quantum computing had been “8 years away” for more than a decade.

Fifteen months later, Ripple published a four-phase roadmap with a target year. The video does not see a contradiction: a senior technologist telling the public not to panic while an engineering team quietly puts a date on the calendar is what serious companies look like.

Why key rotation gives XRP holders an advantage

The XRP Ledger lets an account authorize a second key pair, called a regular key pair. It was built years ago so users could keep their master key offline and sign day-to-day transactions with something else. The documentation says you can change the regular key pair regularly, and if it is compromised, you can use the master key to take back control without abandoning the account.

Ripple’s roadmap leans on this by name, citing native key rotation and deterministic key generation. That means an account could move to a post-quantum signing scheme without moving any coins to a new address. By contrast, the video notes, Bitcoin in exposed addresses has to be physically moved to be protected. On paper, that puts XRP holders in a strong position.

The line that decides your account

A key rotation is a transaction, not an update the network pushes to you. Someone has to sign it with the key that controls your account. On the day the migration runs, the video says, there will be two kinds of XRP holders:

• Those who hold their own keys, who sign the rotation themselves, when they choose.
• Those whose XRP sits on an exchange or with a custodian, where someone else signs for the accounts that someone else decides to prioritize.

For the second group, 2028 is the provider’s deadline, not theirs. The video compares it to FTX, Celsius and every withdrawal window closed for maintenance: none were quantum problems, but all came down to someone else holding the key. And because of NIST’s timeline, the migration is likely to happen whether or not a capable quantum computer arrives on schedule.

A 30-second custody test

The video’s test is simple: open the app or wallet where most of your XRP lives and ask whether you have ever been shown a seed phrase or secret key for it. If you have not, you do not hold the keys.

What to watch next

Follow Ripple’s roadmap for the phase three Devnet tests of post-quantum signatures, and watch whether NIST finalizes IR 8547 with the same dates. If your XRP is held by an exchange or custodian, look for any public statement on how and when it plans to rotate keys for customer accounts.