A single hardware wallet is a single point of failure. Lose the seed, coerce the owner, burn down the house, and the coins are gone. Multisig splits signing authority across several devices in several locations. Below $25K, one hardware wallet and a good inheritance plan is usually enough. Above it, multisig is how serious holders sleep at night.
READING TIME: 9 MIN
Not financial or legal advice. Multisig adds operational complexity. Misconfigured multisig has lost more coins than any exchange hack. Test with small amounts first. Service pricing and terms marked [VERIFY] should be checked current.
Multisig is a Bitcoin wallet that requires M-of-N signatures from different keys to spend. 2-of-3 is the most common setup. You need 2 of the 3 keys to authorize a transaction. Losing 1 key is fine; losing 2 is terminal. You also need the wallet descriptor (a small file) alongside the keys - a seed alone cannot recover a multisig wallet. Use 3 different hardware-wallet brands, store the keys in 3 different physical locations, store the descriptor alongside each key, and test recovery with a small amount before trusting real savings to it.
A multisig wallet requires M-of-N signatures from different keys to spend. The most common configuration is 2-of-3: three keys exist, and any two of them together can authorize a transaction. No single key can spend alone. The third key is a backup.
Other configurations exist (3-of-5 for higher-value stacks, 2-of-2 for joint spousal control), but 2-of-3 is the sweet spot for most individual holders. It tolerates one lost key, requires compromise of two separate devices to steal, and is simple enough to actually operate.
Multisig transactions are signed in multiple steps. The format that carries an in-progress transaction between devices is the PSBT - Partially Signed Bitcoin Transaction. BIP174.
A pragmatic walkthrough. This is the workflow I would recommend after doing it myself with a single hardware wallet and now considering a move up.
The wallet descriptor is as important as the seeds. Seeds alone cannot recover a multisig wallet, because the wallet structure is the descriptor. Print the descriptor. Store a copy with every seed. Losing all copies of the descriptor means losing the coins even if all three seeds survive.
A conservative distribution for 2-of-3:
All three locations should also store a copy of the wallet descriptor. A single lost seed is recoverable with the other two keys plus the descriptor. A lost descriptor with intact seeds is still recoverable if you have the xpubs written down. But a lost descriptor with no xpub records is not recoverable.
The most important step most people skip. Wipe one of the hardware wallets. Recover it from its seed. Re-import the three xpubs and the descriptor into Sparrow. Sign a small test transaction with the recovered device plus one other. Broadcast.
Only after this full round-trip succeeds should you trust the setup with real savings. Every multisig horror story ends with "I assumed it would work and never tested it." Do not be that story.
The beneficiary of a multisig Bitcoin stack needs two things: enough keys (or the ability to coordinate with whoever holds them), AND the wallet descriptor. Without the descriptor, the keys alone are not enough.
This is where Unchained and Casa shine: their service knows how to coordinate an inheritance. They verify identity, provide the descriptor, and help the beneficiary produce the signatures. DIY multisig requires very careful estate planning, including written instructions the heir can follow without any prior Bitcoin experience.
See inheritance for the full framework.
Rough threshold: $25,000+ long-term stack, or any level where losing a single seed would feel genuinely devastating. Under $25K, a single hardware wallet with a strong inheritance plan (a written guide for your heirs, a metal seed backup, and a trusted person who knows it exists) is usually sufficient.
The right time to set up multisig is before you need it. The wrong time is after a near-miss. If your stack has grown past the threshold where a single-seed failure mode keeps you up at night, start building the multisig in parallel with your single-sig wallet, move a small test amount first, and migrate gradually.
Last updated 2026-04-14. Not financial or legal advice.