> ## Documentation Index
> Fetch the complete documentation index at: https://manuals.cobo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# MPC wallet key share enhancements

> Summary of the October 2025 enhancements to key share management and security in MPC Wallets.

To enhance the usability and security of MPC Wallets, the configuration, interface, and security mechanisms for key shares were optimized in October 2025. The updates are described below.

Across all modes, Cobo does not control or use client key shares. Any key share stored within Cobo's multi-cloud infrastructure is encrypted and stored on the client's behalf, and remains under the client's control.

## 1. Optimization of key share concepts and configuration

### Standard mode

#### Naming optimization

The concept of **key share holder groups** has been simplified to **keys**, and all groups have been renamed as follows:

| Original Name  | New Name     |
| -------------- | ------------ |
| Main Group     | Main Key     |
| Signing Group  | Signing Key  |
| Recovery Group | Recovery Key |

The structure and meaning of the keys remain unchanged. For example, the process of creating a Main Key is the same as the previous process of creating a Main Group: the client generates one key share, and the other key share is generated within and stored encrypted in Cobo's multi-cloud infrastructure on the client's behalf. Together, the two key shares form a complete private key.

#### UI/UX optimization

Previous interface:
Required viewing each holder group under different tabs.

<img src="https://mintcdn.com/cobo-6/FK48YblhfUWSefHC/en/images/mpc-wallet/old-ui.png?fit=max&auto=format&n=FK48YblhfUWSefHC&q=85&s=760c3da09e325acd3df4be1972c12b00" className="screenshot_modal" alt="Previous Interface" width="3068" height="1000" data-path="en/images/mpc-wallet/old-ui.png" />

New interface:
All key shares are displayed together, with labels indicating Main Key holders. Recovery Keys can be managed through the upper-right entry.

<img src="https://mintcdn.com/cobo-6/FK48YblhfUWSefHC/en/images/mpc-wallet/new-ui.png?fit=max&auto=format&n=FK48YblhfUWSefHC&q=85&s=80054a85ab6c1c0548e35e8f8a0cdff4" className="screenshot_modal" alt="New Interface" width="2280" height="746" data-path="en/images/mpc-wallet/new-ui.png" />

#### Recovery key configuration

Users can choose between Self Recovery and Third-Party Recovery. In both modes, the key share stored within Cobo's multi-cloud infrastructure participates in recovery. Recovery without this stored key share is no longer available.

<img src="https://mintcdn.com/cobo-6/FK48YblhfUWSefHC/en/images/mpc-wallet/recoverymode.png?fit=max&auto=format&n=FK48YblhfUWSefHC&q=85&s=93351d5efacea42876ad40f07853aec7" className="screenshot_modal" alt="Recovery Key" width="1266" height="830" data-path="en/images/mpc-wallet/recoverymode.png" />

### For advanced MPC vaults

<Note>For advanced MPC vaults, users can customize the signing threshold (m/n). This feature requires activation and is designed for clients who need custom signing structures.</Note>

#### Naming optimization

For advanced vaults, keys are referred to as **MPC Keys**, categorized as **Signing Keys** and **Standby Keys**, with no longer separate designations for Main, Signing, or Recovery Keys.

Key share holders (signers) are categorized as **Regular Signers** and **Standby Signers**. Transactions are sent to Regular Signers.

#### Support for self-service configuration

Once enabled, clients can configure keys directly through the user interface on a self-service basis.

Previous interface:

<img src="https://mintcdn.com/cobo-6/FK48YblhfUWSefHC/en/images/mpc-wallet/old-ui-advanced.png?fit=max&auto=format&n=FK48YblhfUWSefHC&q=85&s=b7ff10ede4c5ec99563602fffc29bf27" className="screenshot_modal" alt="Old Advanced UI" width="2714" height="1487" data-path="en/images/mpc-wallet/old-ui-advanced.png" />

New interface:

<img src="https://mintcdn.com/cobo-6/FK48YblhfUWSefHC/en/images/mpc-wallet/new-ui-advanced.png?fit=max&auto=format&n=FK48YblhfUWSefHC&q=85&s=43e66850e5f4b7c8a0af0edb67be64fe" className="screenshot_modal" alt="New Advanced UI" width="2258" height="1076" data-path="en/images/mpc-wallet/new-ui-advanced.png" />

## 2. Security mechanism optimization

### Integration with governance policies

Critical operations related to keys (such as creating Signing Keys and Recovery Keys, or re-creating a Main Key) are now integrated with [Governance Policies](/en/portal/risk-controls/governance-policies). These operations trigger security verifications to ensure that all critical steps are secure and controllable.

### Key share holder configuration constraints

The system now prohibits the same node from acting as a key share holder for multiple keys within the same vault, to prevent cross-use risks and strengthen overall security.

## 3. Summary of optimizations and impact

### Summary of optimizations

#### Standard mode

| Item                       | Before                                                                                                  | After                                                                                                                | Purpose                                                                   |
| -------------------------- | ------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------- |
| Naming                     | • Key share holder groups<br />• Main Group<br />• Signing Group<br />• Recovery Group                  | • Key<br />• Main Key<br />• Signing Key<br />• Recovery Key                                                         | Clearer and more intuitive concepts                                       |
| UI/UX                      | Key management spread across multiple tab pages                                                         | Main and Signing Key information displayed clearly with labels;<br />Recovery Key accessible from upper-right corner | Centralized information, easier operation                                 |
| Recovery key configuration | Allowed recovery without participation by the key share stored within Cobo's multi-cloud infrastructure | No longer supports recovery without participation by that stored key share                                           | Simplifies configuration and ensures a secure, controllable recovery path |

#### For advanced MPC vaults

| Item   | Before                                                          | After                                                                  | Purpose                                    |
| ------ | --------------------------------------------------------------- | ---------------------------------------------------------------------- | ------------------------------------------ |
| Naming | • Main Group, Signing Group, Recovery Group<br />• Signers      | • MPC Keys<br />• Regular Signers, Standby Signers                     | More intuitive structure and terminology   |
| UI/UX  | No interface support; required manual configuration via scripts | Clients can self-configure through the UI after enabling advanced mode | Reduces ambiguity and ensures key security |

#### General security mechanism enhancements

| Item                                 | Before                                                         | After                                                             | Purpose                                   |
| ------------------------------------ | -------------------------------------------------------------- | ----------------------------------------------------------------- | ----------------------------------------- |
| Integration with governance policies | None                                                           | Critical key operations integrated with governance policies       | Enhances operational security and control |
| Key share holder configuration       | Allowed the same node to hold multiple key shares in one vault | Prohibits duplicate participation of nodes in multiple key shares | Prevents potential security risks         |

### Impact on existing keys

This optimization does not affect existing keys. Keys created before the optimization will retain their original structure and functions, and remain fully usable. The interface will present the existing key information in the new format.