Single-sig means one key controls your Bitcoin. If that key is compromised, you lose everything. If that key is lost, you lose everything. One key is a single point of failure in both directions.
Multisig (multi-signature) changes the math. Instead of one key, you create a vault that requires multiple keys to spend. A 2-of-3 multisig means three keys exist, and any two of them are needed to move funds. One key gets stolen? The thief can't spend without a second key. One key gets destroyed? You still have two remaining, which is enough.
This is how banks, exchanges, and institutions have secured Bitcoin for years. It's also how individuals with meaningful holdings should secure theirs. The tools to do it yourself, without a custodian, have never been better.
The Safety Deposit Box Analogy
Think of a traditional bank safety deposit box. It requires two keys to open: the bank's key and your key. Neither party can open it alone. This is essentially 2-of-2 multisig.
Bitcoin multisig extends this concept. A 2-of-3 setup is like having three keyholders where any two can open the vault:
- Key 1: Your hardware wallet at home
- Key 2: A hardware wallet in a safety deposit box
- Key 3: A hardware wallet with a trusted advisor or family member
To spend Bitcoin, you need any two of these three keys. This means:
- If your house burns down (Key 1 destroyed): Key 2 + Key 3 can recover your funds
- If the bank is robbed (Key 2 stolen): the thief needs Key 1 or Key 3, which they don't have
- If your advisor turns malicious (Key 3 compromised): they need Key 1 or Key 2, which they don't have
- If you die: your heir (Key 3) and the safety deposit box (Key 2) can access your funds
No single point of failure. No single point of trust.
Single-Sig vs. Multisig: The Real Tradeoffs
Multisig isn't strictly "better" than single-sig. It's a different set of tradeoffs. Here's the honest comparison:
Single-Sig Advantages
- Simpler. One device, one backup, one recovery process
- Cheaper. One hardware wallet instead of two or three
- Faster. Sign a transaction on one device and you're done
- Well-understood. Every wallet app supports single-sig. Every hardware wallet supports single-sig. The tooling is mature
- Privacy. Standard single-sig transactions are smaller on-chain and blend in with everyone else's transactions
Multisig Advantages
- No single point of failure. The defining feature. Neither loss nor theft of a single key is catastrophic
- Reduced trust. No single person, device, or location needs to be fully trusted
- Geographic distribution. Keys in different locations protect against localized disasters
- Institutional-grade security. This is how serious money is protected
- Inheritance-friendly. Distributing keys to family members or advisors is natural
Multisig Disadvantages
- More complex. Setup requires careful planning. Recovery requires understanding wallet descriptors and derivation paths
- Backup complexity. You need to back up all extended public keys (xpubs) and the wallet configuration, not just seed phrases. Losing this information can make recovery much harder
- Higher transaction fees. Multisig transactions are larger on-chain and cost more in fees (though Taproot is improving this)
- Requires multiple devices. The cost of 2-3 hardware wallets adds up
- Coordination. Signing requires access to multiple keys, which means either physical travel or a trusted coordinator
When to Use Each
Single-sig makes sense when:
- You're getting started with self-custody
- Your holdings are modest (under $10-20K, roughly)
- You prioritize simplicity and speed
- You're the only person who needs access
Multisig makes sense when:
- Your holdings are significant enough that the cost of multiple devices is negligible
- You want to eliminate single points of failure
- You're planning for inheritance
- You want to involve a trusted advisor without giving them unilateral control
- You sleep better knowing no single disaster can wipe out your savings
There's no magic number where you "should" switch. Some people run multisig for $5,000. Others hold $100,000 in single-sig with a passphrase. The right answer depends on your threat model, your technical comfort, and how much complexity you're willing to manage.
How Multisig Actually Works
Let's walk through the practical setup using the most common configuration: 2-of-3.
The Setup
Step 1: Choose your hardware.
Pick three hardware wallets, ideally from different manufacturers. Diversity matters. If a vulnerability is discovered in one manufacturer's secure element, your other keys are unaffected. A good combination might be: Coldcard + Jade + SeedSigner.
Step 2: Initialize each device.
Each hardware wallet generates its own independent seed phrase. You now have three seed phrases to back up securely. Each backup should be stored in a different location.
Step 3: Export the extended public keys (xpubs).
Each device provides its xpub, the public-key information needed for the wallet coordinator to generate addresses and create transactions. This is not sensitive. Xpubs can generate receiving addresses but cannot spend funds.
Step 4: Create the multisig wallet in your coordinator.
Using Sparrow Wallet (or Nunchuk, Specter, etc.), import all three xpubs and configure a 2-of-3 quorum. The coordinator generates a "wallet descriptor" that defines exactly how the multisig works. Back this up. It's essential for recovery.
Step 5: Verify on each device.
Each hardware wallet should display and confirm the multisig configuration. This ensures no device is being tricked into participating in a different multisig than intended.
Spending
When you want to send Bitcoin:
- Your coordinator (Sparrow) creates a Partially Signed Bitcoin Transaction (PSBT)
- You sign with Device 1 (scan QR or transfer via microSD)
- You sign with Device 2 (same process)
- Two signatures collected. The coordinator finalizes and broadcasts the transaction
You never needed Device 3. It sits in its secure location as a backup, ready if Device 1 or 2 is lost or compromised.
Recovery
If you lose one device, you:
- Buy a replacement hardware wallet
- Restore from the lost device's seed phrase backup
- Re-import the wallet descriptor
- You're back to three functional keys
If you lose one device AND its seed phrase backup:
- Create a new key on a new device
- Use your remaining two keys to move all funds to a new 2-of-3 multisig that includes the new key
- The old compromised key is now irrelevant
This is the beauty of multisig: you always have a recovery path as long as you maintain your quorum.
The Wallet Descriptor: The Backup Everyone Forgets
This is the most common multisig mistake, and it's critical enough to deserve its own section.
Your seed phrase backs up one key. But a multisig wallet isn't defined by any single key. It's defined by the combination of all participating public keys and the quorum rules. This combination is captured in a "wallet descriptor" (also called "wallet configuration" or "multisig file").
If you have all three seed phrases but don't have the wallet descriptor, recovery becomes extremely difficult. You'd need to figure out the exact derivation paths, address types, and key ordering that were used. It's technically possible but practically nightmarish.
The solution: Back up the wallet descriptor alongside each seed phrase. Sparrow exports it as a text file. Print it. Store copies with each seed phrase backup. The descriptor contains only public information, so there's no security risk in having multiple copies.
Some people engrave or stamp the descriptor onto their steel backup plates. Others store it as a QR code. However you do it, do not skip this step.
Collaborative Custody: The Middle Ground
Not everyone wants to manage three hardware wallets themselves. Collaborative custody services offer a middle ground: you hold some keys, they hold some keys, and both parties are needed to spend.
How it typically works (2-of-3):
- Key 1: You (your hardware wallet)
- Key 2: The custody service (their infrastructure)
- Key 3: You (a backup key in secure storage)
For normal transactions, you and the service co-sign (Key 1 + Key 2). If the service disappears or goes rogue, you use your two keys (Key 1 + Key 3) to move your funds unilaterally. The service can never steal your Bitcoin because they only hold one of three keys.
Services offering this model:
- Unchained (formerly Unchained Capital)
- Nunchuk (app-based, with optional key agent)
- Bitcoin Butlers (consultation-based setup with ongoing support)
The advantage over DIY multisig is support. Someone helps you set it up, maintains one key professionally, and can assist with inheritance planning. The disadvantage is cost and the need to trust that the service maintains their key securely.
For many people, especially those who don't want to become Bitcoin security experts, collaborative custody is the practical sweet spot between the risks of single-sig and the complexity of full DIY multisig.
Common Multisig Mistakes
Using the same manufacturer for all devices. If Ledger has a firmware vulnerability, and all three of your keys are on Ledgers, all three are vulnerable. Diversify manufacturers.
Storing all backups in the same location. Three seed phrases in the same safe is functionally single-sig with extra steps. The point of multisig is distribution.
Forgetting the wallet descriptor. Covered above, but worth repeating. Back it up. Multiple copies. Different locations.
Over-complicating the quorum. 2-of-3 is right for most people. 3-of-5 adds redundancy but also adds three more devices and backups to manage. Don't increase complexity beyond what your threat model requires.
Not testing recovery. Set up the multisig, send a small amount, then practice recovering it using only 2 of your 3 keys. If you can't do it in a calm practice scenario, you definitely can't do it in an emergency.
Not documenting the setup. Your multisig setup should be documented clearly enough that a technically literate person could reconstruct it from your notes. This matters for inheritance and for your own future self.
Where does your current setup fall on the security spectrum? Find out in 2 minutes:
Setting up multisig correctly is one of those things where the details matter enormously and the cost of getting it wrong is permanent. Our Butlers have configured hundreds of multisig setups across every major hardware wallet combination.
Whether you want to set up your own DIY multisig, explore collaborative custody, or figure out which approach fits your situation, we're here for exactly that conversation.
One session. Your Bitcoin, properly secured. No single point of failure.