Algorand sets a post-quantum account roadmap

The Algorand Foundation published a post-quantum roadmap on June 18, 2026, with one concrete protocol milestone: native support for post-quantum accounts is planned for a Q3 2026 protocol release. Those accounts will use Falcon-1024, a lattice-based signature scheme designed to withstand attacks that future quantum computers could make practical against parts of today’s cryptography.

The important shift is from demonstration to protocol integration. Algorand had already enabled Falcon accounts through LogicSig programs executed by the Algorand Virtual Machine, but that mechanism sat around the core account model. It did not give post-quantum accounts native support in the ledger, developer tooling, or consensus rules. The new design keeps the existing 32-byte address format by deriving the address from a domain separator, the signature scheme, a salt, and the public key, instead of storing large public keys directly on chain. The Foundation says SDKs, AlgoKit, and Pera Wallet are expected to support Falcon account derivation from Algorand’s 25-word seed phrase in the same release window.

A second piece is cryptographic agility, meaning the network can support several signature schemes at the same time. Algorand says the Q3 release will keep traditional Ed25519 accounts while adding room for additional signature families without another structural redesign. That matters because a real migration cannot simply flip every user and application to new keys overnight. The roadmap points to hybrid accounts that combine classical and post-quantum keys, and to native post-quantum multisig by the end of 2026 for institutional operations, treasury management, and high-value workflows. For exchanges, custodians, and wallet makers, that sequencing is as important as the cryptography itself, because support has to land in software, recovery flows, and operational controls before users can rely on it.

The harder work is still ahead. Algorand’s consensus messages and voter signatures still use Ed25519, and the Foundation says it is evaluating post-quantum signature schemes for that layer, with Falcon described as a strong candidate after vote-compression work. It is also researching a post-quantum replacement for the verifiable random function used in committee selection, with a paper expected by early 2027 if the analysis is positive. The caution is practical: post-quantum signatures often carry larger keys and signatures, which can affect wallets, nodes, bandwidth, and fees. The takeaway is not instant quantum resistance. It is a staged migration plan for a live blockchain, starting with user accounts and moving toward multisig, consensus, and randomness.