Multisig Wallets Explained for Individual Investors
Multisig wallets explained: how m-of-n signing works, what a 2-of-3 setup protects against, what it costs in complexity, and when it suits an individual.
Key takeaways
- An m-of-n wallet needs m signatures from n keys. In a 2-of-3, any two keys can spend and any single key can be lost safely.
- Hypothetical: at 5% loss and 1% theft risk per key, 2-of-3 cuts loss odds from 5% to 0.73% and theft odds from 1% to 0.03%.
- The gains depend on independence. Keep two of three keys in one place and the loss odds jump back to 5%, no better than one key.
- Back up the wallet configuration with every public key, not just the seeds, or two valid seeds may not be enough to find your funds.
On this page
What is a multisig wallet?
A standard wallet has one key, and whoever holds that key controls the funds. A multisignature (multisig) wallet splits control across several keys and sets a threshold. Bitcoin’s developer documentation describes it as m-of-n: m is the minimum number of signatures required, and n is the number of public keys involved.
The most common personal setup is 2-of-3: three keys exist, any two can approve a transaction, and no single key can do anything alone. Think of a safe-deposit box that opens only when two of three keyholders turn their keys together.
How the rule is enforced depends on the network:
- On Bitcoin, the rule is written into the script that locks the coins. That script lists all n public keys and requires m valid signatures; the address commits to it by its hash.
- On Ethereum and similar networks, multisig is a smart-contract wallet: a contract that checks for enough approvals before executing. Ethereum’s own documentation lists “requiring multiple signatures for high-value transactions” among the security options smart-contract wallets make possible.
The two risks multisig trades off: loss and theft
With a single key, one event can end everything. Lose the recovery phrase in a flood and the funds are locked forever; let someone photograph it and the funds are gone. As our guide to seed phrase security explains, most protection for a single key is about balancing those two risks.
Extra copies of one seed lower the chance of loss but raise the chance of theft, because every copy is another target. Multisig is one of the few tools that can lower both at once. A worked example shows how much.
Example: Suppose each key, independently, has a 5% chance per year of being lost or destroyed and a 1% chance of being stolen. These are hypothetical round numbers chosen to show the mechanics, not measured rates.
| Setup | Keys to spend | Keys you can lose | Keys a thief needs | Chance of losing access | Chance of theft |
|---|---|---|---|---|---|
| Single key | 1 | 0 | 1 | 5.00% | 1.00% |
| Two copies of one seed | 1 | 1 | 1 | 0.25% | 1.99% |
| 2-of-2 multisig | 2 | 0 | 2 | 9.75% | 0.01% |
| 2-of-3 multisig | 2 | 1 | 2 | 0.73% | 0.03% |
| 3-of-5 multisig | 3 | 2 | 3 | 0.12% | 0.001% |
The 2-of-3 numbers come from the chance that at least two of three keys fail: 3 × 0.05² × 0.95 + 0.05³ = 0.725% for loss, and 3 × 0.01² × 0.99 + 0.01³ = 0.0298% for theft. Compared with a single key, loss odds fall about 6.9-fold and theft odds about 33.6-fold.
Notice the trap in the 2-of-2 row. Requiring every key makes theft harder but nearly doubles the chance of locking yourself out, because losing either key is fatal. Two-key setups need a very good reason.
Why independence is the whole point
The table assumes each key fails on its own. Put two of your three keys in the same house and a single fire or burglary hits both. In that case the chance of losing access is simply the 5% chance of losing that one location, exactly where a single key started, and a thief who finds that spot has the two keys needed to spend.
Real independence means spreading keys across:
- Places. For example, your home, a second secure location, and a trusted person or a professional custodian.
- Devices. Each key on its own hardware wallet. Some people use devices from different manufacturers so a single product flaw can’t affect every key.
- Backups. Each recovery phrase stored separately from the others, never in one envelope or one cloud folder.
What to back up besides the seeds
This is the step that catches careful people out. On Bitcoin, a multisig address is built from all of the public keys plus the threshold. Two seeds can produce two signatures, but your wallet software also needs the third key’s public key, the threshold and the derivation details to rebuild the addresses and find your coins.
That information is usually exported as an output descriptor, a standardized text description of the wallet. BIP-383 defines the multi() and sortedmulti() descriptors for exactly this purpose: a threshold plus the list of public keys. Keep a copy of the descriptor with each key backup. It cannot spend anything, but it does reveal your addresses and balances, so treat it as private.
On Ethereum-style networks, record the multisig contract’s address, the networks it is deployed on, and the list of signer addresses. A contract wallet exists only on the chains where it has actually been deployed, so check before receiving funds on any other network.
What multisig costs you
- Complexity. More devices, more backups, more steps for every transaction, and more ways to make a setup mistake.
- Fees. A Bitcoin multisig spend carries several signatures and a longer script, so it takes more block space than a single-signature spend and costs more at the same fee rate; see how Bitcoin fees are calculated. On Ethereum, executing a contract wallet costs more gas than a plain transfer.
- Coordination. If keys sit in different cities or with different people, spending takes planning.
- Heir readiness. A setup only you understand can defeat its purpose. Written instructions matter even more than with one key.
Does multisig make sense for you? A decision rule
Multisig tends to fit when all of these are true:
- Losing one recovery phrase or one device would be a life-changing loss.
- You can keep three keys in three genuinely separate places.
- You will test a full recovery with a small amount before moving meaningful funds, and again at least once a year.
- Your holdings change rarely, so the extra steps per transaction don’t matter much.
If any of these is false, a single hardware wallet with carefully stored backups is often the safer choice, because a simple setup you run correctly beats a sophisticated one you run badly. The trade-offs between device types are covered in hot wallet vs cold wallet, and funds you leave with a platform carry a different risk entirely, explained in exchange custody risk.
Multisig is one layer. The rest of the routine is in the crypto wallet security checklist.
The bottom line
A 2-of-3 multisig removes the single point of failure: no one key can spend, and any one key can be lost. The benefit depends on keeping the keys truly independent and backing up the wallet configuration along with the seeds. If you can’t commit to that discipline, a simpler setup run carefully is usually the better protection.
Frequently asked questions
What is a 2-of-3 multisig wallet?
A 2-of-3 multisig wallet is controlled by three separate keys, and any two of them must sign before funds can move. One key alone can't spend, so a thief who steals a single key gets nothing, and you can lose any one key without losing access. Each key is usually held on its own hardware wallet with its own recovery phrase, stored in a different place.
Is a multisig wallet safer than a hardware wallet?
They solve different problems and usually work together. A hardware wallet keeps one key off your computer; a multisig setup removes the single point of failure by requiring several keys, each typically on its own hardware wallet. Multisig adds protection against one lost or stolen key, but it also adds steps, backups and room for setup mistakes, so it pays off only if you manage it carefully.
What happens if I lose one key in a 2-of-3 multisig?
You can still spend with the remaining two keys, so your funds are safe for now. But you have lost your margin: one more lost key would lock the funds for good. The usual response is to set up a new 2-of-3 wallet with a fresh third key and move the funds across, then update your backups and written instructions so they describe only the new setup.
What do I need to back up for a multisig wallet?
Back up every key's recovery phrase separately, plus the wallet configuration: the threshold, every cosigner's public key and the derivation details, often exported as an output descriptor file. The configuration can't spend funds, but without it your software may not be able to rebuild the addresses, even if you hold enough seeds. It does reveal your balances, so store it privately alongside each key backup.
Sources
- Developer Guide: Transactions (Multisig and P2SH) — Bitcoin Developer Documentation
- BIP-383: Multisig Output Script Descriptors — Bitcoin Improvement Proposals (GitHub)
- Account abstraction — ethereum.org
This content is for education only and is not financial, investment, tax or legal advice. Crypto assets are volatile and you can lose money. Examples use hypothetical numbers. See our disclaimer and editorial policy.