21Relay
Back to Self-Custody

Lesson 5 · Advanced Custody

Multisig basics

Multisignature wallets require more than one private key to approve a transaction. They can reduce single points of failure, but they also require more careful backup and recovery planning.

Advanced lesson10–12 minute readTest recovery first

Multisig in simple terms

More than one key protects the wallet

A normal single-signature Bitcoin wallet usually requires one private key to authorise spending.

A multisignature wallet creates a rule requiring a defined number of keys from a larger set. This is commonly written as a threshold such as 2-of-3.

In a 2-of-3 wallet, three keys exist and any two valid keys can approve a transaction.

Core principle

Multisig reduces dependence on one key by requiring a combination of independent keys.

Multiple keys

A multisignature wallet is controlled by more than one private key.

A signing threshold

The wallet defines how many keys are required to authorise a transaction.

Distributed storage

Keys can be kept on different devices and in different physical locations.

Shared control

Multisig can divide control between people, devices or organisations.

Signing thresholds

M-of-N determines how many keys are required

The first number is the number of signatures required. The second number is the total number of keys in the wallet.

2-of-3 multisig

Three keys exist, but any two are required to approve a transaction.

Example

One key at home, one key in a secure second location and one recovery key held separately.

Strengths

One lost key does not prevent recovery

One stolen key cannot spend alone

Suitable for individual long-term custody

Risks

The wallet configuration must also be backed up

Two compromised keys can authorise spending

Recovery is more complex than single-signature custody

2-of-2 multisig

Two keys exist and both are required for every transaction.

Example

One key held by each of two business partners.

Strengths

No single person can spend independently

Useful for strict shared approval

Simple threshold structure

Risks

Loss of either key can prevent spending

Both parties must be available

Limited redundancy

3-of-5 multisig

Five keys exist and any three are required to approve a transaction.

Example

A company distributes keys among directors, secure locations and recovery custodians.

Strengths

Strong redundancy

Suitable for organisations

Can tolerate multiple unavailable keys

Risks

Significantly more complex

More devices and backups to manage

Requires clear governance and documentation

Wallet components

Multisig requires keys and configuration

Recovering a multisig wallet may require more information than recovering a basic single-signature wallet.

Private keys

Each signer has a private key used to approve transactions.

Public keys

Public information from each signer is combined to construct the multisig wallet.

Wallet configuration

The wallet must know the participating public keys, threshold and derivation information.

Signing devices

Hardware wallets or other secure signing devices may hold the individual private keys.

Important

Backing up the seed phrases without backing up the wallet configuration may make recovery significantly harder.

Setup process

Design the recovery plan before funding the wallet

01

Choose the threshold

Decide how many keys will exist and how many are required to authorise spending.

02

Define the threat model

Identify the risks you are trying to reduce, such as theft, device failure, coercion or one-location disasters.

03

Generate keys independently

Create each key on a trusted device and avoid generating every key on the same computer.

04

Record each recovery phrase

Back up every signer independently and clearly identify which backup belongs to which signer.

05

Create the multisig wallet

Combine the required public information using compatible wallet software.

06

Back up the wallet configuration

Store the wallet descriptor, configuration or equivalent recovery information separately from the private keys.

07

Verify receiving addresses

Confirm the same address appears on more than one trusted signer before receiving significant funds.

08

Test signing and recovery

Complete a small transaction and practise recovery before transferring a large balance.

Begin with a small test amount

Practise receiving, signing and restoring the wallet before using it for substantial savings.

Backup requirements

Preserve every part required for recovery

Each signer needs a backup

Every private key should have its own accurate and durable recovery backup.

The configuration also matters

The seed phrases alone may not be enough for an easy recovery. Keep the wallet descriptor or configuration information.

Separate the locations

Avoid keeping enough keys to meet the spending threshold in one location.

Label without exposing

Document which backup belongs to which signer without revealing unnecessary wallet information.

Keep recovery instructions

The intended owner or beneficiary should understand how the wallet is reconstructed.

Test the complete process

Verify that the required combination of keys and configuration can actually restore and spend from the wallet.

Good distribution

Keys and backups are separated so one theft, fire or device failure cannot defeat the wallet.

Weak distribution

Enough keys to meet the threshold are stored in one location or controlled by one person.

Failure scenarios

Understand what happens when a key is lost

One key is lost in a 2-of-3 wallet

The remaining two keys can still authorise transactions. Replace the wallet if the lost key may be compromised.

One key is stolen in a 2-of-3 wallet

The thief cannot spend alone, but the remaining funds should be moved to a newly created wallet.

Two keys are lost in a 2-of-3 wallet

The wallet may become permanently inaccessible because the signing threshold can no longer be reached.

The wallet configuration is lost

Recovery may become difficult even when seed phrases remain available. Restore from a descriptor or equivalent backup.

One signer becomes unavailable

A setup with sufficient redundancy may continue operating using another valid combination of keys.

Replace compromised setups

When a key may have been copied or stolen, create a new multisig wallet with new keys and transfer the funds.

Strengths and limitations

Greater resilience brings greater complexity

Strengths

Reduces reliance on one private key

One compromised key may not be enough to steal funds

Keys can be geographically separated

Useful for shared business or family custody

Can provide redundancy after device loss

Supports structured approval processes

Limitations

More complicated to create and operate

Requires backups for multiple keys

Wallet configuration information must be preserved

Inheritance planning becomes more involved

Incompatible software choices can complicate recovery

Poorly designed thresholds can create new failure risks

Is multisig suitable?

Use complexity only when it solves a real problem

Multisig may be valuable for larger balances, shared funds, inheritance planning and reducing dependence on one device or location.

What problem is multisig solving?

Use multisig to address a clear risk rather than adding complexity only because it sounds more secure.

Who controls each key?

Define ownership, access and responsibility for every signer.

Where will the keys be stored?

Ensure one event cannot destroy or expose enough keys to meet the threshold.

How will recovery work?

Document how the wallet, signer backups and configuration are restored.

Who can help after your death or incapacity?

Plan inheritance without giving one person immediate control of enough keys.

Can you operate the setup confidently?

A simpler single-signature wallet may be safer than a multisig setup you do not fully understand.

Simpler can be safer

A well-protected single-signature hardware wallet may be more secure than a multisig setup that is poorly documented or difficult to recover.

Warning signs

Do not fund a multisig wallet you cannot recover

You cannot explain which keys are required to recover the wallet

Enough keys to meet the threshold are stored together

Every key was generated on the same untrusted computer

The wallet configuration has no backup

You have never completed a recovery test

One person secretly controls enough keys to spend alone

The setup relies on a company without a clear independent recovery path

Lesson summary

The important points

Multisig requires a defined number of keys from a larger set.

A 2-of-3 wallet requires any two of three available keys.

Keys should be generated independently and stored separately.

Every signer needs a reliable recovery backup.

The wallet configuration or descriptor must also be preserved.

The setup should be tested with a small amount before holding significant funds.

Multisig reduces some risks but introduces greater operational complexity.

A simpler wallet may be safer when multisig is not fully understood.