Web3Auth

Web3Auth is a wallet infrastructure platform that lets applications embed non-custodial wallets directly into their user experience — no seed phrases, no browser extensions, no prior crypto knowledge required. Users create and access wallets through familiar authentication methods like Google, X, email, SMS, or passkeys, while the underlying cryptographic security is maintained through Multi-Party Computation (MPC). Founded in 2019 (originally operating as TorusLabs), the project has grown to serve nearly 50 million end users across more than 8,200 dApps, and in June 2025 was acquired by Consensys, becoming the foundation for MetaMask Embedded Wallets.

What Web3Auth Solves

The friction point Web3Auth targets is wallet creation and recovery. Traditional wallets require users to generate and safeguard a seed phrase — a single point of failure that leads to both lost funds (when forgotten) and stolen funds (when stolen). For mainstream consumer applications trying to onboard users at scale, this has been a persistent conversion killer.

Web3Auth's approach is to replace the seed phrase with a system of distributed key shares. The private key is never assembled in full on any single device or server. Instead, shares are held across multiple parties — including the user's device, a Web3Auth node, and optionally a second factor the user controls — and a threshold signature scheme combines them at signing time without ever reconstructing the raw key. Ronin Chain reported that after integrating Web3Auth, 97% of new users created wallets via social logins instead of seed phrases.

How MPC Works in Practice

Web3Auth's MPC implementation uses two different algorithms depending on the blockchain's cryptographic curve. For EVM-compatible chains, it uses MPC-DKLS19 for ECDSA signatures. For Solana and other chains built on the Ed25519 curve (including NEAR, Aptos, and Algorand), Web3Auth implemented the FROST threshold signature scheme. Unlike DKLS19, which handles secp256k1, FROST operates over Ed25519's Edwards curve, producing EdDSA signatures compatible with Solana's native transaction format.

The MPC approach means that even if a user's device is compromised by malware or a phishing attack, an attacker cannot steal the private key because it is never present in full on the frontend. Signing and login complete in under 1.2 seconds globally, with the infrastructure running on Kubernetes with horizontal autoscaling across multiple regions.

For developers who want more control, Web3Auth offers both a Plug-and-Play SDK (a drop-in modal that handles authentication flow out of the box) and a Core Kit SDK that exposes lower-level primitives for custom implementations. Both paths support social logins, MFA, custom authentication via Firebase, Auth0, or any JWT-compatible provider, and whitelabeled UI.

Solana Integration

Solana is a first-class supported chain within Web3Auth. The platform provides native Solana connectivity across its full SDK lineup: web, Android, iOS, React Native, and Flutter. The Ed25519 MPC support introduced in late 2024 extended full MPC-grade security to Solana wallets — previously, non-MPC SDK versions used Shamir Secret Sharing for Ed25519 keys, which Web3Auth also continues to support for teams that do not require the full MPC security model.

Web3Auth published dedicated integration guides for Solana Seeker (the Solana-native Android smartphone), covering both Core Kit and Plug-and-Play SDKs for mobile dApp developers building on the Solana Mobile Stack. The platform also supports Wallet Pre-generation, which lets developers send tokens directly to a user's email address or social account before that user has ever opened the app — the wallet is generated server-side and transferred to the user on first login.

Account Abstraction and Wallet Services

Beyond key management, Web3Auth includes native Account Abstraction support, enabling smart contract accounts (ERC-4337 and equivalents) to be created automatically at wallet setup. This underpins programmable features like gasless transactions, session keys, and daily transaction limits. Post-authentication, the platform's Wallet Services layer offers a pre-built UI, fiat on-ramp aggregation covering over 100 local payment methods, and NFT minting and checkout flows.

Scale and Notable Customers

Web3Auth's customer list spans both Web2-native brands entering blockchain and native Web3 applications:

• Ronin Chain (Sky Mavis): 97% of new wallet creations via social logins
• Animoca Brands / Mocaverse: nearly 1.5 million unique on-chain mints in six months
• Heroes of Mavia: 100,000 wallet creations in under a week
• Chess.com: brought existing chess.com user identities to NFT minting
• Fox.com / Maskverse: end-to-end user experience ownership beyond NFT transactions
• Additional integrations with Trust Wallet, Binance, Safe Global, Ubisoft, and 100 Thieves

Security and Compliance

Web3Auth maintains SOC 2, CCPA, CPRA, and GDPR compliance, and publishes a public audit log via its Trust Center. The codebase undergoes both internal and third-party security audits. The MPC roadmap reached public audit release in November 2022 and moved to production launch in November 2023 after a beta period.

Consensys Acquisition and Future Direction

In June 2025, Web3Auth announced it had been acquired by Consensys and was being integrated as the backbone of MetaMask Embedded Wallets. The documentation domain shifted to docs.metamask.io/embedded-wallets, and the unified developer dashboard gained direct Infura integration, MetaMask Delegation Toolkit smart accounts, and MetaMask SDK authentication. Web3Auth continues to operate under its own brand as an independent formation within Consensys, with the original dashboard at dashboard.web3auth.io remaining active.

The acquisition roadmap includes deeper Solana and Bitcoin support within the combined MetaMask ecosystem, and plans to bring MPC-powered social onboarding to MetaMask's installed base of monthly active users.

Pricing

Web3Auth's free tier covers the first 1,000 Monthly Active Wallets (MAWs) per application, with additional MAWs at $0.050 each. The Growth plan at $69 per month includes 3,000 MAWs, whitelabeled UI, third-party authentication support, and native Account Abstraction. Enterprise Scale pricing is available on request and includes custom MAW volumes, dedicated infrastructure, and priority support.