bcTanji said 20% of Bitcoin supply is lost due to seed phrase failures, passkey wallets aim to fix this

Outdated Recovery Phrases: The Hidden Threat

The report stresses that expecting everyday internet users to write down a random list of words and keep it securely stored for a lifetime is a method better suited to cryptography textbooks, not modern consumer software.

Citing Chainalysis data, bcTanji notes that around 20% of the world’s Bitcoin supply is permanently inaccessible because owners lost their private keys or backups. Additionally, Oobit’s 2026 research referenced in the report finds that 35% of crypto holders have lost access to their wallets at least once, and 31% of those were never able to recover their funds.

bcTanji’s research points to a silent revolution: the crypto sector is ready to consign traditional seed phrases to history, ushered by technologies like WebAuthn and passkeys that promise to overhaul digital wallet security and usability.

Biometrics, Not Passwords: How WebAuthn Transforms Security

WebAuthn, a protocol standardized by the W3C, underpins the passkey revolution. The report details how WebAuthn relies on asymmetric cryptography—using a pair of public and private keys—to verify users without ever sharing a password. When you create an account, your device’s secure chip (such as Apple’s Secure Enclave, Android’s Titan M, or Windows’ TPM 2.0) generates a unique key pair, with the private key never leaving the device.

Passkeys also offer inherent resistance to phishing, the most common method for crypto theft. As explained in the report, authentication is cryptographically locked to the wallet’s real domain name. Fake phishing sites can’t trigger the authentication process on your device because they operate on different domains.

Technical Hurdles: Why Bitcoin Wallets Lag Behind

bcTanji highlights a core technical mismatch preventing the integration of passkeys directly into Bitcoin wallets. WebAuthn relies on the NIST P-256 (secp256r1) elliptic curve, whereas the Bitcoin blockchain uses a different curve—secp256k1.

As a result, a passkey created on a device cannot directly generate a valid Bitcoin digital signature. The report outlines four architectural models developers are using to bridge this gap:

• TEE-Based Signing:
  Passkeys authenticate users biometrically, granting access to a remote Trusted Execution Environment where the Bitcoin signature is generated.

• MPC (Multi-Party Computation):
  The private key is divided into pieces; one is protected by the user’s device passkey, other pieces are stored on servers.

• PRF-Based Derivation:
  The WebAuthn PRF extension enables passkeys to locally generate a deterministic secret that unlocks the Bitcoin key, removing server reliance for each transaction.

• On-chain Verification:
  Smart contract networks like Ethereum can verify P-256 signatures directly on-chain, but Bitcoin’s current setup does not natively support this method.

Layer-2 Wallet Solutions: Where Change Happens Fastest

The report notes that the fastest adoption of this revolution will happen in Bitcoin Layer-2 wallets, which cater to less technical users and facilitate frequent transactions. Platforms like Spark stand out for offering a software development kit (SDK) that lets wallet developers integrate passkey-based onboarding with minimal friction.

Spark uses the FROST threshold signature model. Rather than exposing the user’s key share as a plain “word list,” it is secured directly with the device’s passkey. Authentication happens via biometrics, activating the key share on-device and enabling secure signature protocols. The report highlights platforms like General Bread as real-world examples of seamless, seedless, passkey-protected Layer-2 wallets enabled by Spark.

Editor’s Perspective: What’s Next for Crypto Users?

Based on bcTanji’s insights and sector forecasts, the report draws several conclusions on how the passkey revolution could transform the crypto experience:

Previously, setting up a secure wallet required a burdensome backup process. With cloud-synced passkeys, like those in Apple iCloud or Google Password Manager, losing your device no longer means total disaster. Users can instantly regain wallet access from a new phone, eliminating the catastrophic risk of lost seed phrases.

A critical warning is the unavoidable dependency on major platforms. If your iCloud or Google account is locked for suspicious activity or you lose all your trusted devices, your synced passkeys—and therefore your wallet funds—could become inaccessible, posing a security trade-off for those who value decentralization and true financial sovereignty.

For security, the passkey specification generally demands live biometric verification for each transaction. This complicates automated trading bots and AI-driven wallets, which may need to adapt their models to remain functional in a passkey-first world.

As bcTanji’s research notes, the seed phrase model secured true self-custody in Bitcoin’s first decade. But bringing Bitcoin to mass adoption and the next billion users will not rely on pen and paper. Soon, opening a wallet will only require your fingerprint, with robust cryptographic protection working invisibly behind the scenes—more secure and user-friendly than ever before.