How to Set Up a Multi-Signature Bitcoin Wallet

A standard Bitcoin wallet uses a single private key to authorise transactions. If that key is lost, funds are inaccessible. If it is compromised, funds are stolen. Either event produces total loss.

A multi-signature (multi-sig) wallet requires multiple keys to authorise a transaction — typically 2-of-3 or 3-of-5. No single key can move funds. This eliminates the single point of failure and is the institutional standard for significant Bitcoin holdings.

This article is part of our Self-Custody Guide.

How Multi-Sig Works

A multi-sig wallet is defined by two numbers: the threshold (how many signatures are required) and the total (how many keys exist). Common configurations:

• 2-of-3 — three keys exist; any two can sign. The most common personal setup.
• 3-of-5 — five keys exist; any three can sign. Common for institutional or family custody.
• 2-of-2 — both of two keys required. Rarely recommended — offers no redundancy against key loss.

Each key is held on a separate device — typically a separate hardware wallet — and stored in a separate physical location. Open-source wallet software on your computer coordinates the signing process: it constructs the transaction, routes it to each signing device in turn, and broadcasts once the threshold is reached.

Why Multi-Sig Matters

A 2-of-3 multi-sig survives the loss of any single key. Your house burns down? Two keys remain — access is intact. Your hardware wallet is stolen? Two keys remain — the thief cannot spend. A family member loses their key in a flood? Two keys remain — you still have full control.

More importantly, a 2-of-3 multi-sig survives the compromise of any single key. An attacker who obtains one of your keys has nothing — they cannot produce the two signatures required. This is a significant upgrade over single-key custody, where a single compromise is total.

A Practical 2-of-3 Setup

Here is a concrete configuration suitable for most individuals holding significant bitcoin:

Hardware

• Key 1: an open-source signing device from one vendor — kept in a home safe
• Key 2: a device from a second, unrelated vendor — kept in a bank safety deposit box
• Key 3: a device from a third vendor — kept at a second location (family member, second deposit box, or trusted friend)

We deliberately do not name the three devices. Judge them on the criteria in our guide to choosing a device — open-source firmware, air-gapped operation, supply-chain integrity, standard BIP-39 recovery — and pick three vendors with no relationship to each other.

Using three unrelated manufacturers is the whole point. If one vendor ships a firmware defect, the other two keys are untouched and your coins do not move. This is not hypothetical — it is the failure this arrangement exists to absorb, and it is why the arrangement matters more than the brand on any one box.

Keep the three locations genuinely separate. Two keys in the same building is a 2-of-3 that one fire defeats.

Generate your own entropy where the device allows it. A seed is only as unguessable as the randomness behind it, and that randomness is the one thing you cannot inspect after the fact. At least 50 fair, independent, private dice rolls contribute enough entropy on their own to put the result beyond brute force, regardless of what the device's internal generator did; around 99 rolls gets you a full 256 bits. Roll them yourself, in private, and verify the phrase on the device before you fund it.

Software

Coordinator software runs on your computer and builds the multi-signature wallet from each device's public key. Choose open-source software that supports devices from several vendors and exports a standard wallet descriptor; we do not name one, for the same reasons we do not name devices. For ongoing operation, you do not need all three devices in one place — the software can construct a transaction, save it to a file (or QR code), and that file can be taken to each signing device in sequence.

Setup sequence

• Initialise each hardware wallet independently, generating separate
• Back up each seed phrase following standard practice — physically separated from the device
• In the coordinator software, create a new multi-sig wallet, importing the extended public key (xpub) from each device
• The software generates a wallet descriptor (also called a "quorum file") — this is the configuration needed to reconstruct the wallet
• Save the descriptor. Back it up separately. Without it, the seed phrases alone are not enough to restore the wallet.
• Send a small test amount. Confirm you can sign and broadcast with any two of the three devices.
• Once verified, proceed to transfer the bulk of your bitcoin into the multi-sig wallet.

The Descriptor Problem

A critical aspect of multi-sig that trips up many users: the wallet descriptor is required to spend. The seed phrases alone are not sufficient. If you lose both the descriptor file AND forget how the wallet is configured (which xpubs, what threshold, which derivation paths), the bitcoin is effectively lost — even though you still have the seed phrases.

Always back up the wallet descriptor alongside the seed phrases. Store copies in multiple locations. Some users inscribe the descriptor information on metal, alongside the seed phrases, for long-term durability.

Collaborative Custody

For users who want multi-sig's security without managing three hardware wallets and descriptors themselves, collaborative custody offers a middle path: a company holding one of the keys. We do not name providers. How it works:

• A 2-of-3 multi-sig where you hold two keys and the company holds the third, so you still hold the threshold. The company can help with recovery and inheritance planning, but cannot spend on its own.
• Before choosing one, check that you could leave it and spend with your own two keys alone, using standard software and your own copy of the wallet descriptor.

Trade-off: the service provider knows your identity and approximate holdings (though they cannot unilaterally spend). For users who require full privacy, self-managed multi-sig is the only option. For users who want the safety net of professional support, collaborative custody is a reasonable compromise.

When to Move to Multi-Sig

The line is between spending money and savings. Money you expect to spend can sit in a hot wallet or on a single device. Savings, which a single fire, theft, death or device defect must not be able to end, belong in multi-sig.

Move to it in steps: practise the whole cycle, recovery included, with a small amount first, and if it is more than you will realistically maintain, let that change what you keep in cold storage. For businesses, treasury management using bitcoin should almost always use multi-sig from day one.

Multi-sig is also a prerequisite for good inheritance planning — it allows you to distribute keys among trusted parties who can jointly recover your bitcoin if you die, without any single party having unilateral control while you are alive.