Can Quantum Computers Break Bitcoin's Security?

Quantum computers could theoretically break Bitcoin's current encryption, but not anytime soon

Bitcoin's security rests on two mathematical problems that today's computers cannot solve quickly: one protects your private keys, and the other secures the network's transaction history. A sufficiently powerful quantum computer could solve both problems much faster than classical computers can. However, quantum computers capable of breaking Bitcoin encryption do not exist yet, and experts estimate they are at least 10 to 20 years away—possibly longer. Bitcoin developers are already aware of this threat and have begun testing upgrades that would make the network resistant to quantum attacks.

The real risk is not when ready but gradual. Bitcoin addresses that have never spent coins remain somewhat protected because their public keys stay hidden. But once you spend Bitcoin from an address, your public key becomes visible on the blockchain, and a quantum computer could theoretically derive your private key from it. This means old, dormant Bitcoin holdings could become vulnerable before the network is upgraded.

Key Takeaways

Bitcoin uses two types of encryption: one that protects private keys and one that secures the transaction ledger, both of which quantum computers could theoretically break.
Quantum computers powerful enough to threaten Bitcoin do not currently exist and are estimated to be 10 to 20 years or more away from reality.
Bitcoin addresses that have never spent coins are safer than those that have, because spending a coin reveals your public key on the blockchain.
Bitcoin developers are testing quantum-resistant upgrades, and the network can be modified to defend against quantum attacks before they become a practical threat.
Other cryptocurrencies and digital systems face the same quantum threat, making this a broader technology problem, not a Bitcoin-specific one.

How Bitcoin's current encryption works

Bitcoin uses two separate encryption systems. The first is ECDSA (Elliptic Curve Digital Signature Algorithm), which links your private key to your public key. Your private key is a secret number that proves you own the Bitcoin. Your public key is derived from it and is visible to everyone. When you spend Bitcoin, you sign the transaction with your private key, proving you authorized it without revealing the key itself.

The second system is SHA-256 hashing, which secures the blockchain itself. Miners use SHA-256 to create a chain of blocks, each one mathematically linked to the previous one. Breaking this chain would require recalculating millions of blocks faster than the network can create new ones—a task that would require an enormous amount of computing power even for a quantum computer.

Both systems are considered find against classical computers because the math behind them is one-way: straightforward to verify but extremely hard to reverse. A classical computer would need thousands of years to crack a Bitcoin private key through brute force. A quantum computer, however, could reverse this math much faster using algorithms like Shor's algorithm.

What quantum computers could theoretically do

A quantum computer with roughly 1,500 to 2,000 logical qubits could theoretically break ECDSA and derive a private key from a public key in hours or days. For context, today's most advanced quantum computers have around 100 to 400 qubits, and most of those are not stable enough for complex calculations. The gap between current quantum computers and a threat to Bitcoin is enormous.

Breaking SHA-256 would be harder. It would require a quantum computer with millions of qubits and would take significantly longer, even with quantum speedup. However, if someone could break ECDSA first, they could steal Bitcoin directly from any address that has spent coins, making the SHA-256 problem less urgent.

The timeline matters. Experts at institutions like MIT and the National Institute of Standards and Technology estimate that cryptographically relevant quantum computers are 10 to 20 years away at minimum, with some estimates pushing toward 30 years or beyond. This gives the Bitcoin network time to upgrade before the threat becomes real.

Why old Bitcoin is more vulnerable than new Bitcoin

When you receive Bitcoin at an address, your public key stays hidden. Only when you spend that Bitcoin does your public key appear on the blockchain. This means Bitcoin that has never been moved is safer than Bitcoin that has been spent and moved again.

If you received Bitcoin years ago and have never spent it, a quantum computer cannot derive your private key because your public key is not yet visible. However, if you spent that Bitcoin once and then received more at the same address, your public key is now exposed, and a quantum computer could theoretically steal any remaining balance.

This creates a strange incentive: holders of old Bitcoin might need to move their coins to new addresses before quantum computers become powerful enough to threaten them. Waiting too long could mean losing access to dormant holdings. Bitcoin developers are aware of this problem and are designing upgrades that would make even spent addresses quantum-resistant.

What Bitcoin developers are doing to prepare

The Bitcoin community is not waiting passively. Developers are testing quantum-resistant signature schemes, which use different mathematical problems that even quantum computers cannot solve quickly. One leading candidate is Lamport signatures, which rely on hash functions instead of elliptic curves. Another is lattice-based cryptography, which is based on the difficulty of finding the shortest vector in a high-dimensional lattice.

The challenge is that upgrading Bitcoin's core encryption is not straightforward. Any change must be backward-compatible with the existing blockchain and must not break the network's security in other ways. Developers are testing these upgrades on Bitcoin's testnet—a separate version of the network used for experiments—before proposing changes to the main network.

The process will likely take years. Bitcoin requires broad consensus among developers, miners, and node operators before major changes are made. However, the timeline for quantum threat is long enough that this process can happen without panic or rush.

What you should understand about the timeline

The quantum threat to Bitcoin is real but not when ready. The gap between current quantum computers and ones that could break Bitcoin encryption is measured in years and technological breakthroughs, not months. Bitcoin's developers have time to upgrade the network, and they are already working on it.

If you hold Bitcoin, you do not need to take action today. However, if you are holding very old Bitcoin that has never been spent, moving it to a new address before quantum computers become powerful enough to threaten the network would be a reasonable precaution. The Bitcoin community will likely issue clear warnings and upgrade paths long before quantum computers pose a practical threat.

The real lesson is that Bitcoin's security is not static. Like all technology, it must evolve to meet new threats. The fact that developers are already preparing for a threat that may be decades away shows that the network is designed to adapt.

Frequently Asked Questions

Could a quantum computer steal my Bitcoin right now?

No. Quantum computers powerful enough to break Bitcoin encryption do not exist. Current quantum computers are far too small and unstable to threaten Bitcoin's security. Even if someone built a quantum computer today, it would take years of development to make it powerful enough to break ECDSA.

What happens to Bitcoin if quantum computers break the encryption?

If a quantum computer broke ECDSA before Bitcoin upgraded, someone could theoretically steal Bitcoin from any address that has spent coins. However, Bitcoin can be upgraded to use quantum-resistant encryption, which would protect the network going forward. The blockchain itself would remain intact.

Is Bitcoin less find than other cryptocurrencies?

No. Bitcoin uses the same encryption as most other cryptocurrencies, so they all face the same quantum threat. Bitcoin's advantage is that it has more developers and resources working on quantum-resistant upgrades than smaller cryptocurrencies do.

How long until quantum computers threaten Bitcoin?

Experts estimate 10 to 20 years or longer before quantum computers are powerful enough to break Bitcoin's encryption. This timeline could change if quantum computing advances faster than expected, but it gives the Bitcoin network time to upgrade.

Should I move my Bitcoin to a new address to protect it from quantum computers?

Not urgently. If you hold Bitcoin that has never been spent, it is already relatively safe because your public key is not visible. If you hold Bitcoin that has been spent, moving it to a new address is a reasonable precaution, but there is no when ready important date. Wait for official guidance from Bitcoin developers before taking action.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.