I know many of you are waiting for 2FA. Same.
It’s taking longer than we hoped, so I want to explain why it’s not “just another roadmap item”.
Quick thing first, because I keep seeing confusion chatting with our users: HOT Wallet has two account types.
If you created your wallet early on, you most likely have an MPC account.
A non-MPC account is just a classic self-custody wallet.
Here’s the difference in simple words:
- With a non-MPC wallet, one secret controls everything. If someone gets it, game over.
- With MPC, there isn’t a single secret sitting somewhere. The key is split. Part lives on your device, part lives inside HOT Protocol’s MPC infrastructure. You still control the wallet, but it’s much harder to compromise with one lucky mistake.
One important detail: our MPC is not “centralized custody”. The nodes are independent, the protocol is built on top of NEAR One MPC, and it’s been audited by Trail of Bits.
And that’s exactly why 2FA matters.
2FA on top of MPC means: even if you get tricked by a scam dApp, or someone gains access to your device, there’s an extra verification step before anything irreversible happens. Think Authenticator or email confirmations, depending on what you choose.
It’s not a “nice to have”. It’s the difference between “I clicked once and got drained” and “I got a chance to stop it”.
We’ve already seen real support cases where users had malware on their PC, but their HOT funds stayed safe because many drainers are built around the traditional single-key wallet model. They don’t expect MPC.
Now, the tradeoff. MPC accounts currently live inside HOT Wallet and the HOT Protocol ecosystem. That means you can’t always export them into random third-party apps until they support this account type too.
So no, 2FA isn’t just another step toward some date on a roadmap.
It’s the feature that makes HOT Wallet feel like a primary wallet, not a “use at your own risk” wallet.