A standard hardware wallet protects your Bitcoin from hackers. But it doesn't protect you from yourself — a lost or damaged device, a house fire that destroys your seed phrase backup, or a $5 wrench attack that forces you to hand over access.
Multi-signature (multisig) Bitcoin solves all of this. Instead of a single key controlling your Bitcoin, multisig requires multiple keys — and a threshold of them — to authorize any transaction. Lose one key, your Bitcoin is still safe. Get robbed at gunpoint, hand over one key, your Bitcoin is still safe.
For anyone holding more than $100,000 in Bitcoin, multisig isn't paranoia. It's the right architecture.
How Bitcoin Multisig Works
A standard Bitcoin wallet has one private key. The holder of that key controls the Bitcoin. Simple — and fragile.
A multisig wallet is defined by two numbers: M-of-N, where:
- N = total number of keys in the setup
- M = minimum keys required to sign a transaction (the "threshold")
Common configurations:
| Setup | Keys Required | Total Keys | Use Case | |-------|--------------|------------|----------| | 1-of-1 | 1 | 1 | Standard single-sig (not multisig) | | 2-of-2 | 2 | 2 | Two-party authorization (both must sign) | | 2-of-3 | 2 | 3 | Most popular — lose one key, still accessible | | 3-of-5 | 3 | 5 | Institutional — high redundancy and security | | 2-of-3 (collaborative) | 2 | 3 | One key with service, two with you |
The math that makes 2-of-3 powerful:
- To spend your Bitcoin, an attacker needs 2 of your 3 keys
- You can lose 1 key and still access your Bitcoin (2 remaining)
- Your keys are stored in separate locations — an attacker can't get 2 without visiting multiple locations or compromising multiple separate systems
Why Single-Sig Is Insufficient at Scale
A standard hardware wallet with a 24-word seed phrase is a single point of failure. Problems:
Seed phrase theft: If someone finds your seed phrase backup (in a fire safe, bank deposit box, or under the mattress), they have complete access to your Bitcoin.
Seed phrase loss: House fire, flood, or simple loss of the physical backup. Many Bitcoin have been permanently lost this way.
Device compromise: A supply chain attack on your hardware wallet manufacturer could compromise the device before it reaches you.
Coercion: A physical threat ("$5 wrench attack") can force you to hand over a single key. With multisig and geographic distribution, one coerced key gives the attacker nothing.
Death: If you die with the only copy of your seed phrase and haven't told your heirs, your Bitcoin is gone forever. Multisig with a third-party keyholder creates an inheritance path.
The Most Practical Setup: 2-of-3
The 2-of-3 multisig is the sweet spot for individual Bitcoin holders. Here's a concrete implementation:
Three keys, three locations:
| Key | Device | Location | |-----|--------|----------| | Key 1 | Coldcard Mk4 | Your home safe | | Key 2 | Foundation Passport | Safe deposit box at bank | | Key 3 | Seed phrase on metal | Trusted family member or attorney |
To spend Bitcoin: Use any 2 of the 3 keys. In practice, Keys 1 and 2 handle day-to-day transactions.
Disaster recovery: If your house burns down (losing Key 1), you use Keys 2 and 3 to move your Bitcoin to a new wallet.
Coercion scenario: An attacker forces you to hand over Key 1. They have nothing — they need a second key, in a different location.
Death scenario: Your heirs are told about the setup. They find Keys 2 and 3 through your estate plan. They can access the Bitcoin without Key 1.
Collaborative Multisig: The Assisted Route
Setting up a fully self-sovereign multisig requires technical confidence. For those who want the security without the complexity, collaborative multisig services hold one key while you hold two.
How collaborative multisig works:
- You hold 2 keys (on hardware wallets you control)
- The service holds 1 key (can never spend unilaterally)
- To transact normally: you sign with 1 key, service co-signs with their key (2-of-3)
- If service disappears: you use your 2 keys independently (2-of-3 threshold met without service)
Leading collaborative multisig services:
Unchained Capital
- Bitcoin-only, US-based
- 2-of-3: you hold 2 keys, Unchained holds 1
- Provides inheritance and estate planning services
- Also offers Bitcoin-collateralized loans against the multisig vault
Casa
- 2-of-3 and 3-of-5 options
- Mobile key (on your phone) + hardware wallet + Casa key
- Key health checks and recovery assistance
- Inheritance protocol built-in
Theya
- Simpler UX than Casa/Unchained
- 2-of-3 with phone, hardware wallet, and Theya key
- Good for users new to multisig
The critical point: in all collaborative setups, the service cannot spend your Bitcoin unilaterally. They hold 1 of 3 keys; spending requires 2. This is fundamentally different from custodial services like exchanges.
Hardware Wallet Recommendations for Multisig
Not all hardware wallets support multisig equally. The best options:
Coldcard Mk4 — The gold standard for serious multisig users. Air-gapped signing (never connects to a computer via USB). Supports PSBT (Partially Signed Bitcoin Transactions) for multisig coordination. Bitcoin-only.
Foundation Passport — Open-source hardware and firmware. Air-gapped via microSD and QR codes. Strong multisig support. Bitcoin-only.
Ledger Nano X / Stax — Broader asset support, easier UX. Multisig supported but less hardcore than Coldcard. Note: Ledger's 2023 "Recover" firmware controversy revealed that seed phrases can potentially be extracted — concerning for maximum-security setups.
SeedSigner — Open-source, build-it-yourself device. Stateless (no persistent key storage on device — all key material on seeds). Excellent for air-gapped multisig but requires comfort with DIY hardware.
For most users: start with Coldcard + Foundation Passport as the two hardware wallet keys in a 2-of-3. The third key is a metal seed phrase plate.
Software for Managing Multisig
You need software that supports multisig coordination (assembling partially-signed transactions from multiple devices).
Sparrow Wallet — The most capable desktop wallet for multisig. Full PSBT support, connects to your own node, excellent multisig UX. Free and open source. The recommended choice for self-sovereign multisig.
Specter Desktop — Another strong open-source option. Works well with hardware wallets, full multisig support.
Electrum — The veteran option. Multisig support is solid but the UX is dated.
Blue Wallet — Mobile option with watch-only multisig. Use for monitoring; sign with hardware wallets.
Setting Up Your First 2-of-3 Multisig (Overview)
This is a high-level guide. Before implementing, read the full documentation for your chosen software and hardware.
Step 1: Acquire three separate hardware wallets (or two wallets + one metal seed backup) Never use the same wallet type or manufacturer for all three keys — supply chain attacks.
Step 2: Generate three independent seeds Each device generates its own 24-word seed phrase. Write each on a separate metal backup. These are your three keys.
Step 3: Export extended public keys (xpubs) from each device Multisig wallets are created from the public keys — no private key ever leaves a device. Export the xpub from each hardware wallet.
Step 4: Create the multisig wallet descriptor in Sparrow Wallet Import all three xpubs into Sparrow. Specify 2-of-3 threshold. Sparrow generates the multisig wallet.
Step 5: Verify your receive address on all three devices This is critical — verify the first receive address on all three hardware wallets before sending any Bitcoin. This confirms the multisig setup is consistent across devices.
Step 6: Store the wallet descriptor (output descriptor) The multisig setup requires knowing all three xpubs and the threshold. Export the wallet descriptor and store it separately from your keys — this is needed for recovery.
Step 7: Send a small test amount Send $50-$100 of Bitcoin to the multisig address. Practice signing with 2 of 3 keys and broadcasting the transaction. Then do a full recovery test.
Step 8: Distribute your keys Place Key 1 at home, Key 2 at bank/second location, Key 3 with trusted person or attorney.
Common Multisig Mistakes
Not testing recovery: Most users set up multisig but never practice recovery. Test recovering your wallet using only the backup information — before you have significant Bitcoin in it.
Losing the wallet descriptor: The multisig descriptor (all three xpubs + threshold) is needed for recovery. If you only have your seed phrases but not the descriptor, you may not be able to reconstruct the multisig wallet. Store the descriptor separately from your keys.
Storing keys too close together: Two keys in the same house defeats the point. If a burglar or fire takes one, they may take the other. Geographic separation is essential.
Not updating heirs: As your setup evolves, make sure your estate documents stay current. A multisig setup your heirs don't know about is worthless inheritance.
Using untested software: Always use established, open-source wallets (Sparrow, Specter) for multisig. Verify software signatures before using.
How Much Bitcoin Warrants Multisig?
There's no hard rule, but common guidance:
| Bitcoin Value | Recommended Setup | |---------------|-------------------| | Under $10,000 | Single hardware wallet with secure seed backup | | $10,000–$50,000 | Single hardware wallet with multiple seed backups in different locations | | $50,000–$100,000 | Consider collaborative multisig (Casa, Unchained) | | $100,000+ | Self-sovereign 2-of-3 multisig or collaborative multisig | | $500,000+ | 3-of-5 or institutional-grade multisig with estate planning |
The complexity cost of multisig is real — it takes time to set up, requires more care in key management, and has more ways to make mistakes during recovery. Weigh that complexity against the value being protected.
Multisig and Estate Planning
Multisig dramatically improves Bitcoin inheritance. With single-sig, if you die and your seed phrase is lost, so is the Bitcoin. With a 2-of-3 setup and a collaborative service like Unchained or Casa:
- Your heirs are notified of the setup through your estate documents
- They contact the service with your death certificate
- The service co-signs with its key (1 of 3)
- Your heirs access the second key through your estate (2 of 3 total = access)
For detailed estate planning with Bitcoin, read the Bitcoin estate planning guide.
FAQ: Bitcoin Multisig Wallets
What is a multisig Bitcoin wallet? A multisig (multi-signature) Bitcoin wallet requires multiple private keys to authorize transactions, rather than a single key. The most common setup is 2-of-3: three keys exist, and any two must sign to spend. This eliminates single points of failure — you can lose one key and still access your Bitcoin, and an attacker needs multiple keys from multiple locations to steal it.
Is multisig safer than a hardware wallet? Yes, significantly. A single hardware wallet is vulnerable to device loss, seed phrase theft, and physical coercion. Multisig distributes risk across multiple keys in multiple locations, making any single failure insufficient to cause loss or allow theft.
What is the best multisig setup for individuals? The 2-of-3 setup is the most practical: two hardware wallets (Coldcard + Foundation Passport recommended) plus a metal seed phrase backup as the third key. Keys stored in three separate locations (home, bank safe deposit box, trusted person). Managed through Sparrow Wallet.
What is collaborative multisig? Collaborative multisig involves a third-party service holding one of your keys (in a 2-of-3 setup) to simplify key management and provide recovery assistance. You hold two keys; the service holds one. The service cannot spend your Bitcoin unilaterally — they only co-sign when you initiate. Services include Unchained Capital, Casa, and Theya.
What happens to my Bitcoin if I lose one key in a 2-of-3 multisig? Nothing bad — you still have two remaining keys, which meets the 2-of-3 threshold required to spend. You can use your remaining two keys to move your Bitcoin to a new wallet, then set up a new 2-of-3 with fresh keys.
Do I need the wallet descriptor to recover a multisig wallet? Yes. The multisig wallet descriptor (containing all extended public keys and the threshold) is required for recovery. Without it, individual seed phrases alone may not be sufficient to reconstruct the multisig wallet. Store the descriptor separately from your keys, in multiple locations.