Separating Authentication from Address Derivation A draft proposal circulated by @monad would fundamentally change how accounts work on the native Monad blockchain. Rather than tying a wallet
Separating Authentication from Address Derivation
A draft proposal circulated by @monad would fundamentally change how accounts work on the native Monad blockchain. Rather than tying a wallet address to a single private key, the design would separate account authentication from address derivation entirely, allowing users to add, rotate, or retire cryptographic keys while keeping the same address for life.
The proposal was authored by researchers Kushal Babel, who is affiliated with Monad Labs, and Jan Camenisch. Babel is associated with both Cornell Tech and Monad Labs, lending the work a strong cryptographic research pedigree. @monad shared the proposal on Monday, noting the specification remains an early draft open for community feedback.
Practical Benefits: Passkeys, Recovery, and Quantum Readiness
The researchers outline three concrete use cases enabled by the design. First, it would natively support passkey-based logins, bringing a more user-friendly authentication experience to on-chain accounts. Passkeys, based on the FIDO2/WebAuthn standard, solve the fundamental authentication problem by eliminating the need for a shared secret, meaning there is nothing to phish, nothing to steal, and nothing to leak.
Second, the proposal would allow recovery of lost keys without requiring users to move their assets to a new address. Under current blockchain account models, a user who believes their private key has been compromised faces the burden of migrating an entire blockchain account. The Monad proposal would remove that friction by letting a user simply retire a compromised key and register a new one, all while retaining the same on-chain identity.
Third, the design is built to accommodate upgrades to quantum-resistant signature schemes. Quantum computers, though still developing, could break widely used encryption algorithms such as RSA and ECC using Shor's algorithm, posing a major risk to traditional public-key cryptography. By decoupling authentication from address derivation, the Monad proposal would let accounts migrate to post-quantum signature schemes without disrupting on-chain state or asset ownership.
The spec is positioned as an early-stage discussion document, and the team is inviting community input before the design is formalised. If adopted, the mechanism would represent a meaningful departure from the account model inherited by most EVM-compatible chains, where an address is derived directly from a public key and changing that key means changing your address.
Sources:Monad Documentation: MonadBFTEverstake: Monad's Road to MainnetWultra: Passkeys and FIDO2 Quantum Safety