Multisig: several keys to move the money
Last reviewed: August 2026
In one line
A multisig splits the signature across several devices: stealing one from you isn't enough to empty you out. It's a great tool and you probably don't need it yet.
One device decides. If it gets stolen, they take everything. If you lose it with no backup, you lose everything.
One key can get stolen and nothing happens. You can lose one key and you can still get in.
The problem it solves
A normal wallet has a single point of failure: the seed phrase. Whoever gets it moves everything, and whoever loses it loses everything. All the security depends on one secret, in one place, never leaking or being destroyed.
A multisig changes the rule: the wallet requires M signatures out of N keys to move funds. In a 2-of-3, each key lives on a different device and none of them works alone.
It's not the same as splitting your seed phrase
This is the part that gets confused the most, and the difference is real:
| Method | What it splits | When there's still a single point of failure |
|---|---|---|
| Passphrase | Nothing: it adds a secret | Always: one device signs alone |
| Shamir | The backup | On recovery: the seed gets fully reassembled on one machine |
| Multisig | The signature | Never: no single device has enough |
Shamir protects the paper stored in a drawer. Multisig protects the moment of signing, which is when you actually get robbed. They're complementary, not alternatives.
Splitting words across envelopes is not multisig
Not even close. Whoever finds one envelope already knows most of your words in their exact position. Why it fails is explained in Splitting the seed phrase.
Do you need it?
The honest answer is almost always "not yet":
| If you have… | What's reasonable |
|---|---|
| Less than $5,000 | A software wallet and a good copy of the seed |
| $5,000 – $50,000 | A hardware wallet and two copies in different places |
| More than that, or it's not only yours | Multisig 2-of-3 |
| Funds belonging to a company, a fund, or a DAO | Multisig, no question |
Multisig also adds new ways to lose it
Three devices to maintain, three backups you can't lose, extra fees on every operation, and a procedure you have to remember five years from now. A poorly-built multisig is less secure than a well-kept hardware wallet.
2-of-3, not 2-of-5. With 2-of-3 you can lose one key and still get in, and someone can steal one key from you without you losing anything. 2-of-5 is for organizations with five real people; for a single person it's two extra backups to manage without gaining any security.
If you use Ethereum and EVM networks: Safe
Safe (formerly Gnosis Safe) is the de facto standard for holding funds on Ethereum and compatible networks. It's a smart contract: the wallet is a contract that only executes what M of its N owners signed.
Why it can be recommended without being a gamble:
- Open source code, audited in several rounds by OpenZeppelin, Certora, Runtime Verification, and Ackee
- Years in production holding large treasuries
- The "owners" can be normal wallets or hardware wallets: you sign with your Ledger or Trezor as usual
Don't confuse it with the Trezor Safe
These are different things with the same name: Safe is this multisig, and Trezor's Safe line are hardware wallet models.
Three things worth knowing beforehand:
It's only for EVM
Safe works on Ethereum, Arbitrum, Base, Polygon, and compatible networks. It doesn't work for Bitcoin or Solana. See Which network do I use?.
The same address on another network might not be yours
Your Safe exists on the network where you deployed it. If someone sends funds to that same address on another network where you didn't deploy it, there's no contract controlling them. Deploy the Safe on every network you're going to use, and always check the network before receiving.
Also, each operation costs more gas than a normal send: it's several signatures and a contract executing, not a simple transfer.
If you use Bitcoin: native multisig
Bitcoin has multisig in the protocol itself, no contracts involved. It's set up with a coordinator and your hardware wallets:
| Tool | Where | Notes |
|---|---|---|
| Sparrow | Desktop | Open source, the standard for building multisig on Bitcoin |
| Nunchuk | Mobile and desktop | More guided, a good option if you're not technical |
On Bitcoin, seeds aren't enough
To recover a multisig you also need the wallet's descriptor: the file that describes the quorum and the public keys of the three devices. With two seeds but no descriptor, recovery is very hard. Keep a copy of the descriptor alongside each backup — it's not secret, it doesn't reveal your funds.
Why a multisig doesn't save you from signing blind
In February 2025, Bybit lost about $1.5 billion — the biggest theft in crypto history, attributed by the FBI to North Korea's Lazarus group. The funds were in a Safe multisig.
What matters is how it happened:
- They compromised a machine belonging to a Safe developernot the contract, not the keys
- They planted malicious code in the web interface
- The screen showed the signers a routine transfer
- The real transaction was swapping the wallet contract for the attacker's
- The signers approved what they saw, not what it was
- The attacker ended up owning everything
Safe's contracts didn't fail. What failed was that several people approved without verifying on the screen of their own device.
The lesson
Five people signing blind is exactly as secure as one. Multisig multiplies the keys, not the judgment. If no one verifies on the hardware wallet's screen what they're signing, the quorum is decoration.
What to check before approving is in Before you sign.
If you build it, build it right
The value of a multisig is that the keys are truly independent. Three keys in the same drawer are one key with extra steps.
| Key | Device | Where it lives |
|---|---|---|
| 1 | Hardware wallet | With you, for normal use |
| 2 | Hardware wallet | A different location: safe, family member, bank box |
| 3 | Hardware wallet from a different brand | A third location, or a third party's custody |
Different brands matter: if a flaw shows up in one model, you're not left without all three keys on the same day.
Test it with a little before trusting it with a lot
Set up the multisig, send $20, recover with two different keys, and pull the money out. Only then move the rest. The day you need to recover is not the day to discover you're missing a file.
Summary
- Multisig splits the signature, not the backup: no single device is enough on its own
- It's not the same as Shamir or splitting words across envelopes
- 2-of-3 for one person; 2-of-5 is for organizations
- EVM: Safe. Bitcoin: Sparrow or Nunchuk. There's no one-size-fits-all
- Keep the keys on different devices, brands, and locations
- It doesn't protect against signing blind: verify on the device's screen
If you came looking for something else:Securing the seed phrase · Do I need a Ledger? · Before you sign