Multisig Wallets
No single key can move your funds. When the complexity is worth it — and how to set it up.
SK
Key takeaways
- Multisig requires M-of-N keys to sign (common: 2-of-3 or 3-of-5). No single key compromise = loss.
- Worth the complexity for $50K+ long-term holdings. Below that, hardware wallet + metal backup + passphrase is usually right.
- Use geographically separated keys — home, bank safe-deposit, trusted family member — on different hardware devices.
- Bitcoin: Sparrow, Specter, Nunchuk, Casa. Ethereum + EVM: Safe (formerly Gnosis Safe).
Why multisig
A single-signature wallet — one key controls everything — has an obvious failure mode: anyone who gets that key (theft, coercion, phishing) takes the funds. Anyone who loses that key (fire, forgotten backup) loses the funds. For small balances, these risks are tolerable. For life-changing amounts, the asymmetry becomes unacceptable.
Multisig replaces the single point of failure with a threshold: M of N keys must sign. Common configurations:
- 2-of-3 — three keys exist; any two sign. Most common recreational setup. Can lose one key without loss.
- 3-of-5 — five keys; any three sign. More redundancy; supports inheritance and geographic separation.
- 2-of-2 — two keys both required. Forces paired signing; useful for joint-ownership scenarios but zero redundancy.
Hardware and locations
The principle: keys must be held independently, on independent devices, in independent locations. A typical 2-of-3 setup:
- Key 1: Ledger device, seed backed up on metal plate, stored in home fire-safe
- Key 2: Trezor device, seed backed up on metal plate, stored in bank safe-deposit box
- Key 3: Ledger device (different model), seed backed up on metal plate, stored with a trusted family member in another city, OR at an attorney\'s office with sealed-envelope instructions
Using three identical devices from one vendor in one location largely defeats the point. Mix vendors (Ledger + Trezor + Coldcard) to mitigate vendor-specific vulnerabilities.
Coordinator software
Bitcoin (and Bitcoin-focused)
- Sparrow Wallet — free, desktop, mature, strong privacy features (connect to your own Bitcoin node). Learning curve steep but unmatched transparency.
- Specter Desktop — free, desktop, similar model to Sparrow. Slightly friendlier UX for beginners.
- Nunchuk — mobile + desktop. Good for collaborative multisig (key holders signing from different devices).
- Casa — managed service, monthly subscription ($20–$250+/month depending on plan). White-glove onboarding, key replacement help, inheritance planning. Good for non-technical high-net-worth users.
- Unchained Capital — collaborative custody, supports Bitcoin IRAs. US-regulated, slightly more expensive than Casa.
Ethereum + EVM chains
- Safe (formerly Gnosis Safe) — the standard. Smart-contract-based multisig. Native support for DeFi protocols (stake from the Safe, vote in DAOs, interact with contracts).
Operational tradeoffs
- Every transaction requires coordinating signatures across devices/locations. Not instant. Fine for HODL; painful for active trading.
- Setup complexity — first-time multisig setup is a 2–4 hour careful exercise. Test with small amounts first.
- Change management — adding, removing, or replacing keys requires moving funds to a new multisig wallet. Plan ahead.
- Fee overhead — multisig transactions are slightly larger than single-sig, so on-chain fees are marginally higher.
Inheritance
Multisig pairs naturally with inheritance planning. A 3-of-5 setup can give one key each to your spouse, two adult children, an attorney, and a trusted executor — any three can recover. The operational document (sealed letter + instructions with the attorney) describes exactly what to do if you die. See Crypto inheritance planning.
When NOT to use multisig
- Active trading — sign friction makes each trade slow
- Small balances (<$50K) — complexity outweighs marginal security gain
- No support network — multisig requires either technical competence to self-manage or a trusted service provider
- Unstable relationships — if a co-signer situation (spouse, business partner) could deteriorate, plan contractually for that before depending on their key
Related reading
Frequently asked questions
What is a multisig wallet? +
A multisig wallet requires multiple private keys to authorize a transaction. The most common setup is 2-of-3: three keys exist; any two must sign to move funds. A single compromised or lost key does not lose your funds — it takes two.
At what balance is multisig worth the complexity? +
Somewhere between $50K and $250K for most people. Below that, a single hardware wallet + metal backup + BIP-39 passphrase covers the realistic threat model. Above $250K, the additional security is materially worth the operational friction. Very risk-averse users might move sooner.
What software runs a multisig wallet? +
Bitcoin-focused: Sparrow Wallet (free, desktop), Specter Desktop (free, desktop), Nunchuk (mobile). Managed services: Casa (fee-based, white-glove), Unchained Capital (collaborative custody, supports IRAs). Ethereum-focused: Safe (formerly Gnosis Safe) is the dominant standard — supports any EVM chain. Each coordinator has different trade-offs in UX, recovery process, and fees.
Do I need multiple hardware wallets? +
Usually yes — the point is that keys are held on devices operated independently. Common setup: two Ledger devices + one Trezor, each in a different physical location (home, bank safe-deposit box, trusted family member). Using three identical devices in one location defeats much of the security benefit.
What happens if I lose one key? +
With 2-of-3, nothing — you use the remaining two keys to sign a transaction and move funds to a new multisig wallet (with a fresh key replacing the lost one). With 3-of-5, you can lose two keys and still recover. This forgiveness is the core appeal of multisig over single-key setups.
What if the coordinator software goes away? +
A serious concern — and why self-custody purists prefer open-source coordinators (Sparrow, Specter) over managed services. Even if Sparrow the app disappears, the wallet descriptor you exported lets any Bitcoin wallet software reconstruct access to funds. Keep the descriptor backed up alongside your keys.
Is Safe (Gnosis Safe) the same model? +
Different under the hood, same concept. Safe on Ethereum is a smart contract that holds your funds and enforces multi-signature logic on-chain. Advantage: native to EVM, supports complex access policies (daily limits, time-locks, spending categories). Disadvantage: smart-contract risk (the contract itself could have bugs; bugs are rare in Safe specifically but have occurred in other smart-contract wallets).
Is multisig better than a BIP-39 passphrase? +
Different security models. Passphrase: one extra secret to remember; protects against someone finding the seed. Multisig: multiple keys in multiple locations; protects against theft, fire, and single-point compromise. At $100K+ with geographic dispersion, multisig is materially stronger. At $10K held in one secure location, passphrase is often enough.