TL;DR: A multisignature (multisig) wallet requires more than one signature for Bitcoin transactions to enhance security. Common multisig configurations in wallets are 2-of-3 or 3-of-5 signatures. Many Bitcoin companies will offer multisig services ranging from free payment verification to paid lifetime bitcoin management. These collaborative-custody services often hold fewer keys than the threshold needed to move funds, so they cannot spend on your behalf. Multisig wallets are also commonly used for cold (offline) storage of bitcoin, mitigating key loss or malware risks.
Multisig services vary, with options ranging from free and simple payment intent verification via 2FA (an example being the Blockstream app) to more complex, paid services offered through companies like Unchained, designed to assist in managing your bitcoin throughout your lifetime.
Most companies specializing in custody (like Unchained) typically hold fewer keys than the threshold number required to access the funds, ensuring they cannot misappropriate your money. Similarly, you would also store fewer than the necessary number of keys online, safeguarding your funds from being stolen if someone manages to gain control of your wallet, whether through theft or physical coercion.
As long as you maintain control over the wallet, you can work in conjunction with the custodian on the basis of mutual trust whenever you wish to make a payment, together achieving the necessary number of signatures. Conversely, a thief lacking this trust relationship would be unable to access the funds. You would also possess an additional key stored offline, enabling you to access the funds even if the custodian is unable or unwilling to cooperate. In the event of the owner's death, the custodian, legal representatives, and notaries can collaborate to ensure the bitcoin is appropriately distributed to the heirs as intended.
A multisig wallet requires more than one private key to authorize a Bitcoin transaction, so no single key can move the funds on its own. A setup is described as M-of-N, meaning M signatures are needed out of N total keys: a 2-of-3 wallet, for example, holds three keys and needs any two to sign. Spreading keys across separate devices and locations removes the single point of failure that a singlesig wallet has, which is why multisig is widely used for long-term savings, business treasuries, and shared custody.
Multisig wallet: key facts
- Multisig needs a threshold of keys to spend, written as M-of-N (common choices are 2-of-3 and 3-of-5).
- Because several keys must cooperate, losing or having one key stolen does not put the funds at risk, which removes the single point of failure of a singlesig wallet.
- Keys are typically held on different hardware wallets in different places, so a fire, theft, or device failure in one location is survivable.
- The tradeoffs are added setup complexity, more backups to manage, and slightly larger, higher-fee transactions than a singlesig spend.
How a 2-of-3 Multisig Works
In a 2-of-3 wallet, three independent keys are generated, usually on three separate devices, and the wallet is configured so that any two of those three signatures are enough to spend. You might keep one key on a hardware wallet at home, a second on a different hardware wallet elsewhere, and a third with a trusted party or in a bank deposit box. Day to day, two of the three sign a transaction together. If one key is lost or stolen, the remaining two still control the funds, and a thief who obtains a single key gets nothing. This is why 2-of-3 is the most common consumer multisig layout.
Multisig for Cold Storage and Inheritance
Multisig is a natural fit for cold storage, where bitcoin is held offline for the long term. Because the keys sit on separate offline devices, an attacker would have to compromise several of them, in different places, at the same time. The same structure helps with inheritance planning: keys and signing instructions can be distributed among heirs, legal representatives, or a custodian so that funds can be recovered after death without any single person having had unilateral control while you were alive. Using different hardware wallet models for the keys adds a further layer, since malware targeting one device cannot quietly reach the others.
Using Blockstream Jade and the Blockstream App for Multisig
Blockstream Jade can serve as one of the signing devices in a multisig wallet, holding a key offline and signing only after you verify the transaction on its own screen. The Blockstream app supports shared-authority account types as well, including a 2FA-protected multisig account and a 2-of-3 account, so you can require more than one approval to spend without running multisig coordination software yourself. For people who want full control over the signing policy, multisig wallets can also be built with Miniscript, a structured way to express Bitcoin spending conditions that makes complex policies easier to author and audit.
Frequently Asked Questions
What does 2-of-3 multisig mean?
It means the wallet has three private keys in total and any two of them must sign for a transaction to go through. No single key can move the funds, and one key can be lost or stolen without losing access, because the other two still meet the threshold. The three keys are usually kept on separate devices in separate places.
Is a multisig wallet safer than a singlesig wallet?
For larger, long-held amounts, generally yes, because it removes the single point of failure: an attacker needs several keys, not one, and a single lost key is survivable. The tradeoff is complexity. Multisig has more keys and backups to manage and slightly higher transaction fees, so for small everyday balances a singlesig wallet is often the more practical choice.
What happens if I lose one key in a multisig wallet?
In a setup like 2-of-3, losing one key is recoverable: the remaining keys still meet the signing threshold, so you can move the funds to a freshly configured wallet. The priority after a lost key is to spend to a new multisig as soon as possible, since the wallet no longer has its full redundancy until the missing key is replaced.
How do I withdraw from a multisig wallet?
You build the transaction in your multisig software, then sign it with enough of the keys to meet the threshold, often by confirming on each hardware wallet in turn. Once the required number of signatures is collected, the fully signed transaction is broadcast to the network like any other. The extra step compared with a singlesig wallet is gathering signatures from more than one device.
Do I need technical skills to use multisig?
Basic multisig is more involved than a singlesig wallet but is manageable with guided tools. App-based options such as the Blockstream app's 2FA multisig and 2-of-3 accounts handle much of the coordination for you. Building a fully self-managed multisig, choosing the keys, devices, and backup locations, takes more care and is worth practicing with small amounts first.