Multisig in simple terms
More than one key protects the wallet
A normal single-signature Bitcoin wallet usually requires one private key to authorise spending.
A multisignature wallet creates a rule requiring a defined number of keys from a larger set. This is commonly written as a threshold such as 2-of-3.
In a 2-of-3 wallet, three keys exist and any two valid keys can approve a transaction.
Core principle
Multisig reduces dependence on one key by requiring a combination of independent keys.
Multiple keys
A multisignature wallet is controlled by more than one private key.
A signing threshold
The wallet defines how many keys are required to authorise a transaction.
Distributed storage
Keys can be kept on different devices and in different physical locations.
Shared control
Multisig can divide control between people, devices or organisations.
Signing thresholds
M-of-N determines how many keys are required
The first number is the number of signatures required. The second number is the total number of keys in the wallet.
2-of-3 multisig
Three keys exist, but any two are required to approve a transaction.
Example
One key at home, one key in a secure second location and one recovery key held separately.
Strengths
One lost key does not prevent recovery
One stolen key cannot spend alone
Suitable for individual long-term custody
Risks
The wallet configuration must also be backed up
Two compromised keys can authorise spending
Recovery is more complex than single-signature custody
2-of-2 multisig
Two keys exist and both are required for every transaction.
Example
One key held by each of two business partners.
Strengths
No single person can spend independently
Useful for strict shared approval
Simple threshold structure
Risks
Loss of either key can prevent spending
Both parties must be available
Limited redundancy
3-of-5 multisig
Five keys exist and any three are required to approve a transaction.
Example
A company distributes keys among directors, secure locations and recovery custodians.
Strengths
Strong redundancy
Suitable for organisations
Can tolerate multiple unavailable keys
Risks
Significantly more complex
More devices and backups to manage
Requires clear governance and documentation
Wallet components
Multisig requires keys and configuration
Recovering a multisig wallet may require more information than recovering a basic single-signature wallet.
Private keys
Each signer has a private key used to approve transactions.
Public keys
Public information from each signer is combined to construct the multisig wallet.
Wallet configuration
The wallet must know the participating public keys, threshold and derivation information.
Signing devices
Hardware wallets or other secure signing devices may hold the individual private keys.
Important
Backing up the seed phrases without backing up the wallet configuration may make recovery significantly harder.
Setup process
Design the recovery plan before funding the wallet
Choose the threshold
Decide how many keys will exist and how many are required to authorise spending.
Define the threat model
Identify the risks you are trying to reduce, such as theft, device failure, coercion or one-location disasters.
Generate keys independently
Create each key on a trusted device and avoid generating every key on the same computer.
Record each recovery phrase
Back up every signer independently and clearly identify which backup belongs to which signer.
Create the multisig wallet
Combine the required public information using compatible wallet software.
Back up the wallet configuration
Store the wallet descriptor, configuration or equivalent recovery information separately from the private keys.
Verify receiving addresses
Confirm the same address appears on more than one trusted signer before receiving significant funds.
Test signing and recovery
Complete a small transaction and practise recovery before transferring a large balance.
Begin with a small test amount
Practise receiving, signing and restoring the wallet before using it for substantial savings.
Backup requirements
Preserve every part required for recovery
Each signer needs a backup
Every private key should have its own accurate and durable recovery backup.
The configuration also matters
The seed phrases alone may not be enough for an easy recovery. Keep the wallet descriptor or configuration information.
Separate the locations
Avoid keeping enough keys to meet the spending threshold in one location.
Label without exposing
Document which backup belongs to which signer without revealing unnecessary wallet information.
Keep recovery instructions
The intended owner or beneficiary should understand how the wallet is reconstructed.
Test the complete process
Verify that the required combination of keys and configuration can actually restore and spend from the wallet.
Good distribution
Keys and backups are separated so one theft, fire or device failure cannot defeat the wallet.
Weak distribution
Enough keys to meet the threshold are stored in one location or controlled by one person.
Failure scenarios
Understand what happens when a key is lost
One key is lost in a 2-of-3 wallet
The remaining two keys can still authorise transactions. Replace the wallet if the lost key may be compromised.
One key is stolen in a 2-of-3 wallet
The thief cannot spend alone, but the remaining funds should be moved to a newly created wallet.
Two keys are lost in a 2-of-3 wallet
The wallet may become permanently inaccessible because the signing threshold can no longer be reached.
The wallet configuration is lost
Recovery may become difficult even when seed phrases remain available. Restore from a descriptor or equivalent backup.
One signer becomes unavailable
A setup with sufficient redundancy may continue operating using another valid combination of keys.
Replace compromised setups
When a key may have been copied or stolen, create a new multisig wallet with new keys and transfer the funds.
Strengths and limitations
Greater resilience brings greater complexity
Strengths
Reduces reliance on one private key
One compromised key may not be enough to steal funds
Keys can be geographically separated
Useful for shared business or family custody
Can provide redundancy after device loss
Supports structured approval processes
Limitations
More complicated to create and operate
Requires backups for multiple keys
Wallet configuration information must be preserved
Inheritance planning becomes more involved
Incompatible software choices can complicate recovery
Poorly designed thresholds can create new failure risks
Is multisig suitable?
Use complexity only when it solves a real problem
Multisig may be valuable for larger balances, shared funds, inheritance planning and reducing dependence on one device or location.
What problem is multisig solving?
Use multisig to address a clear risk rather than adding complexity only because it sounds more secure.
Who controls each key?
Define ownership, access and responsibility for every signer.
Where will the keys be stored?
Ensure one event cannot destroy or expose enough keys to meet the threshold.
How will recovery work?
Document how the wallet, signer backups and configuration are restored.
Who can help after your death or incapacity?
Plan inheritance without giving one person immediate control of enough keys.
Can you operate the setup confidently?
A simpler single-signature wallet may be safer than a multisig setup you do not fully understand.
Simpler can be safer
A well-protected single-signature hardware wallet may be more secure than a multisig setup that is poorly documented or difficult to recover.
Warning signs
Do not fund a multisig wallet you cannot recover
You cannot explain which keys are required to recover the wallet
Enough keys to meet the threshold are stored together
Every key was generated on the same untrusted computer
The wallet configuration has no backup
You have never completed a recovery test
One person secretly controls enough keys to spend alone
The setup relies on a company without a clear independent recovery path
Lesson summary
The important points
Multisig requires a defined number of keys from a larger set.
A 2-of-3 wallet requires any two of three available keys.
Keys should be generated independently and stored separately.
Every signer needs a reliable recovery backup.
The wallet configuration or descriptor must also be preserved.
The setup should be tested with a small amount before holding significant funds.
Multisig reduces some risks but introduces greater operational complexity.
A simpler wallet may be safer when multisig is not fully understood.