How to Set Up a Multi-Signature Bitcoin Wallet

A standard Bitcoin wallet uses a single private key to authorise transactions. If that key is lost, funds are inaccessible. If it is compromised, funds are stolen. Either event produces total loss.

A multi-signature (multi-sig) wallet requires multiple keys to authorise a transaction — typically 2-of-3 or 3-of-5. No single key can move funds. This eliminates the single point of failure and is the institutional standard for significant Bitcoin holdings.

This article is part of our Self-Custody Guide.

How Multi-Sig Works

A multi-sig wallet is defined by two numbers: the threshold (how many signatures are required) and the total (how many keys exist). Common configurations:

• 2-of-3 — three keys exist; any two can sign. The most common personal setup.
• 3-of-5 — five keys exist; any three can sign. Common for institutional or family custody.
• 2-of-2 — both of two keys required. Rarely recommended — offers no redundancy against key loss.

Each key is held on a separate device — typically a separate hardware wallet — and stored in a separate physical location. Wallet software (Sparrow, Nunchuk, or similar) coordinates the signing process: it constructs the transaction, routes it to each signing device in turn, and broadcasts once the threshold is reached.

Why Multi-Sig Matters

A 2-of-3 multi-sig survives the loss of any single key. Your house burns down? Two keys remain — access is intact. Your hardware wallet is stolen? Two keys remain — the thief cannot spend. A family member loses their key in a flood? Two keys remain — you still have full control.

More importantly, a 2-of-3 multi-sig survives the compromise of any single key. An attacker who obtains one of your keys has nothing — they cannot produce the two signatures required. This is a significant upgrade over single-key custody, where a single compromise is total.

A Practical 2-of-3 Setup

Here is a concrete configuration suitable for most individuals holding significant bitcoin:

Hardware

• Key 1: Coldcard Mk4 — kept in home safe
• Key 2: Trezor Safe 3 — kept in bank safety deposit box
• Key 3: Jade or Foundation Passport — kept at a second location (family member, second deposit box, or trusted friend)

Using three different hardware manufacturers is deliberate — if one vendor has a firmware vulnerability, the others are unaffected. Diversification across vendors is a defence-in-depth strategy.

Software

Sparrow Wallet (desktop) is the standard choice. It is open-source, supports every major hardware wallet, and handles multi-sig coordination gracefully. For ongoing operation, you do not need all three devices in one place — Sparrow can construct a transaction, save it to a file (or QR code), and that file can be taken to each signing device in sequence.

Setup sequence

• Initialise each hardware wallet independently, generating separate
• Back up each seed phrase following standard practice — physically separated from the device
• In Sparrow, create a new multi-sig wallet, importing the extended public key (xpub) from each device
• Sparrow generates a wallet descriptor (also called a "quorum file") — this is the configuration needed to reconstruct the wallet
• Save the descriptor. Back it up separately. Without it, the seed phrases alone are not enough to restore the wallet.
• Send a small test amount. Confirm you can sign and broadcast with any two of the three devices.
• Once verified, proceed to transfer the bulk of your bitcoin into the multi-sig wallet.

The Descriptor Problem

A critical aspect of multi-sig that trips up many users: the wallet descriptor is required to spend. The seed phrases alone are not sufficient. If you lose both the descriptor file AND forget how the wallet is configured (which xpubs, what threshold, which derivation paths), the bitcoin is effectively lost — even though you still have the seed phrases.

Always back up the wallet descriptor alongside the seed phrases. Store copies in multiple locations. Some users inscribe the descriptor information on metal, alongside the seed phrases, for long-term durability.

Collaborative Custody

For users who want multi-sig's security without managing three hardware wallets and descriptors themselves, collaborative custody services offer a middle path. The most established options:

• Unchained Capital — 2-of-3 multi-sig where you hold two keys and Unchained holds the third. Includes professional support for recovery, inheritance planning, and Bitcoin-backed lending.
• Casa — similar 2-of-3 model, with tiered service levels and an emphasis on emergency recovery support.

Trade-off: the service provider knows your identity and approximate holdings (though they cannot unilaterally spend). For users who require full privacy, self-managed multi-sig is the only option. For users who want the safety net of professional support, collaborative custody is a reasonable compromise.

When to Move to Multi-Sig

There is no fixed threshold. A useful heuristic: if the amount you are holding is large enough that a single catastrophic event — fire, theft, death — producing total loss would be unacceptable, multi-sig is worth the additional complexity.

For most individuals, this threshold is crossed when bitcoin represents a significant fraction of their net worth, or when the absolute amount exceeds what they could comfortably replace. For businesses, treasury management using bitcoin should almost always use multi-sig from day one.

Multi-sig is also a prerequisite for good inheritance planning — it allows you to distribute keys among trusted parties who can jointly recover your bitcoin if you die, without any single party having unilateral control while you are alive.