Rebuild a wallet's map from the copy written on Bitcoin.
A multisig wallet needs two things to spend: enough keys, and the descriptor that says how those keys fit together. Lose one key and the descriptor together, and the keys you still hold cannot rebuild the wallet, even when they are enough to sign. This page takes the backup and your keys, and gives the descriptor back.
Every guardian bundle already carries this text, and the recovery page reads it there with no internet at all. Use this page when you have a transaction id and no bundle.
To MAKE a backup, use Create Bundles. It asks what your heirs need to know and can put the method on the chain beside the descriptor.
Everything happens on this device. The backup is decrypted in your browser. Your keys never leave this page.
Any ONE of the wallet's keys opens a one-key backup, now or in twenty years, including a key the owner later stopped using. A threshold backup needs the same number of keys it takes to spend.
What stays readable depends on the format. In the threshold format the script type, the threshold and the derivation paths stay in plain text. Whoever recovers needs them to know which keys to derive. In the one-key format the whole descriptor is encrypted. Only a marker and a padded list of entries stay readable.
Never type seed words here. This page takes extended public keys and nothing else.
Recovery does not need us. The text this page reads can be decrypted by other tools. See the last step for how.
Try it first. This opens our own backup, published on Bitcoin on 10 September 2026. It costs nothing, it moves no coins, and the keys are the standard test keys everyone already has.
Two steps. Fetch it here, then press Rebuild my descriptor in step 3.
Paste the extended public keys of the wallet, one per line.
Derive these from your seeds with your signing device, using the paths shown above. This page never asks for a seed.Import this into Sparrow or any coordinator to watch and spend from the wallet again.
That descriptor came off Bitcoin. Nothing was stored by us, and nothing left your browser but one read of a public transaction. The wallet has three keys, and the two above were enough.
Neither format is ours to own. A threshold backup uses the published multisig-backup format. A one-key backup follows draft BIP-138. Both are open, and other software already reads them, so your descriptor can be rebuilt with no Bitcoin Butlers involved.
Your estate insert names the tool and how to reach it, because that is the page someone reads on the day this one is gone.