What Is a Multi-Sig Wallet?

A multi-sig wallet requires more than one private key to approve a transaction. How M-of-N signing works, and why DAOs and joint custody rely on it.

Updated September 2026 · Reviewed by the PipeFlare team

A multi-signature (multi-sig) wallet requires a set minimum number of separate private keys to approve a transaction, instead of relying on just one

It removes the single point of failure a normal wallet carries, since losing or having one key stolen isn't enough on its own to move funds or lock someone out for good

Compare Coldcard vs Trezor →

About multi-sig wallet

A multi-signature, or multi-sig, wallet requires a set minimum number of separate private keys to approve a transaction before funds can move. A normal wallet relies on just one key instead. A common setup is 2-of-3: three keys exist, held by different people or stored in different locations. Any two signing together can send a transaction, while any one key alone can do nothing. The scheme is configurable to whatever M-of-N ratio a group needs, from a simple 2-of-2 shared account to a 5-of-9 setup for a larger organization's treasury.

How it actually works

On Bitcoin, multisig is built directly into the scripting language through Pay-to-Script-Hash (P2SH). This lets an address encode an M-of-N signing rule that the network itself enforces at the protocol level. A transaction spending from that address must carry the required number of valid signatures or the network rejects it, with no exception process. On Ethereum and other smart-contract chains, multisig instead runs as a smart contract, most commonly Safe (formerly Gnosis Safe). Safe holds funds and checks incoming transactions against a configurable list of owner addresses and a signature threshold before executing anything.

Setting up a multisig means each signer generates and controls their own private key independently, on their own device. No single device or person ever holds every key needed to move funds. Hardware wallets built with multisig in mind, like Coinkite's Cold Card, are designed to coordinate this process. See the Coldcard vs Trezor comparison for how a purpose-built multisig device differs from a general-purpose hardware wallet.

The tradeoff a multisig setup introduces is often the opposite of what people expect going in. Splitting custody across multiple keys removes the single point of failure a lone key represents, but it replaces that with a coordination requirement. Losing access to too many keys at once is just as unrecoverable as losing the one key on a standard wallet. That can happen through death, a falling-out among co-signers, or several devices failing together. There are now more individual points where a single key could go missing. A 2-of-3 setup tolerates losing any one key, but not two. Every additional signer is one more person whose availability, security habits, and continued willingness to cooperate the whole setup now depends on.

The ratio itself is a direct tradeoff between recovery and security. There is no single best default. A 2-of-2 setup requires both signers for every transaction. That maximizes security against any single compromised key. But it tolerates zero lost keys: misplace either one, and the funds are stuck permanently, with no third key able to make up the difference. A 3-of-5 setup can survive losing up to two keys and still recover. The cost is needing three separate people to coordinate on every transaction instead of two. There is no ratio that is both maximally secure and maximally forgiving of lost keys at once. Raising the threshold to stop a thief also raises the number of your own keys a mistake can strand.

Start here

1Decide the M-of-N ratio for the wallet's purpose. A household commonly uses 2-of-3, while an organization's treasury often runs 3-of-5 or higher to tolerate more lost or unavailable signers.
2Distribute the keys across different people, devices, and physical locations. Keeping all of them in the same house or on the same device defeats the point of splitting custody.
3For a DAO or organization treasury on Ethereum, set up the wallet through Safe, the most widely used multisig standard on that chain.
4For Bitcoin, use a wallet built for multisig coordination, such as Coinkite's Cold Card, and see the Coldcard vs Trezor comparison before choosing hardware.
5Test the signing and recovery process with a small amount before moving a larger balance into the setup. A misconfigured threshold can lock funds permanently.

Strengths

No single stolen, lost, or coerced key is enough on its own to move funds, since the threshold requires multiple independent approvals.
A multisig treasury lets an organization or DAO enforce that no one person can unilaterally spend shared funds.
The M-of-N ratio is configurable to the group's actual risk tolerance, from a simple 2-of-2 shared account to a large organization's higher threshold.

Common misunderstandings

Losing access to more keys than the setup tolerates is just as unrecoverable as losing the single key on a standard wallet. In a 2-of-3, that means losing two keys.
Coordinating multiple signers takes longer than a single-key wallet, which is a real friction cost for time-sensitive transactions.
A misconfigured threshold, such as requiring more signatures than the group can realistically produce, can lock funds permanently with no override.

Common questions

What is a multi-sig wallet used for?

Multi-sig wallets secure funds where more than one person's approval should be required before money moves. Common uses include DAO and organization treasuries managed through Safe, and joint accounts between business partners or family members. Institutional or high-net-worth Bitcoin custody through providers like Casa or Unchained is another.

How does a multi-sig wallet work?

A multi-sig wallet is configured with a total number of keys (N) and a minimum number of those keys required to approve any transaction (M), written as M-of-N. Each key is generated and held independently. The network (for Bitcoin, via P2SH) or a smart contract (for Ethereum, via Safe) then checks that a transaction carries at least M valid signatures before allowing it to execute.

What happens if you lose a key to a multi-sig wallet?

It depends on the threshold. In a 2-of-3 setup, losing one key still leaves two working keys, enough to meet the threshold and recover by moving funds to a new setup. Losing two of the three keys is unrecoverable, the same as losing a single-key wallet's seed phrase, since the remaining one key alone cannot meet the 2-of-3 requirement.

Is a multi-sig wallet safer than a single hardware wallet?

For funds where no single point of failure is acceptable, a properly distributed multisig is safer against theft. A stolen or coerced single key still cannot move funds. It is not automatically safer overall, though. A poorly coordinated multisig, with keys stored together or signers who cannot reliably cooperate, can be less safe in practice than a single, well-secured hardware wallet with a properly backed-up seed phrase.

Can a DAO use a multi-sig wallet to manage its treasury?

Yes, and it is the standard practice. Most Ethereum-based DAOs manage treasury funds through Safe, setting a signature threshold among elected or trusted signers so that no single person can move treasury funds unilaterally. Proposals typically require a majority or supermajority of signers to approve a transaction.

What is the difference between multisig and a single wallet with a passphrase?

A passphrase-protected wallet still has one point of failure: whoever holds the device and the passphrase together can move all the funds alone. Losing either one can lock the owner out entirely. Multisig removes that single point by requiring several independently-held keys, so no one device, passphrase, or person is ever sufficient on its own. The tradeoff is the added coordination cost of getting multiple signers to act.

Do all multisig signers need to use the same wallet brand or software?

No. Bitcoin's P2SH-based multisig and Ethereum's Safe contract standard are both signer-agnostic. Each participant can generate and store their key on whatever hardware or software wallet they prefer, as long as it supports the relevant standard. Mixing hardware brands across signers is common practice specifically because it avoids a single vendor's bug or supply-chain issue compromising every key at once.

How much does it cost to run a multisig wallet?

There is no ongoing subscription fee for a self-managed multisig, whether on Bitcoin through P2SH or Ethereum through Safe. Costs are the network fees paid whenever the wallet signs and broadcasts a transaction, plus the upfront cost of any hardware wallets bought for each signer. A managed inheritance-focused multisig service such as Casa or Unchained charges its own recurring fee on top. In exchange, it holds one recovery key and handles the coordination work directly.

Sources

Ready to put this into practice?

Exchange sign-up bonuses pay both you and a referrer after a qualifying trade.

See bonuses →