Multisig locks a Bitcoin output to more than one public key and requires a quorum of signatures, commonly written as M-of-N, such as 2-of-3: three keys exist, any two together can spend.
This directly addresses the single point of failure in a normal wallet. A 2-of-3 setup, with keys held on three separate hardware devices in three separate locations, survives the total loss or theft of any one key without losing funds and without a single point that, alone, can move them.
The cost is complexity: setting it up correctly, keeping each key's individual backup safe, and documenting the scheme so it can actually be used (or inherited) rather than becoming a locked box nobody can open. A coordinator wallet that tracks the addresses and unspent outputs is generally needed alongside the individual signing devices.
Explain more simply
A single-key wallet is one lock with one key: if that key is lost or stolen, the funds are gone or stolen too.
A multisig wallet needs several keys, held in different places, and only requires some of them (say 2 out of 3) to agree to spend.
That means losing one key does not lock you out, and a thief who steals one key still cannot move the funds alone.
Real-world analogy
Multisig is like a bank vault that needs two of three managers' keys turned together: losing one manager's key is an inconvenience, not a disaster, and no single manager can empty the vault alone.
Key facts
- M-of-N multisig requires only M signatures out of N total keys to spend.
- A 2-of-3 setup survives the loss or theft of any single key.
- Descriptors, not just seed words, define the exact spending policy and must be backed up too.
- Multisig trades single-point-of-failure risk for more setup and backup complexity.
Common misconception
“Backing up all the individual seed words is enough to restore a multisig wallet.”
Restoring also requires knowing the exact script structure (how many keys, what quorum, what derivation and script type) usually recorded as a descriptor, without it, the seeds alone may not reconstruct the correct spending path.[4]
Go deeper
Modern multisig is usually built from output script descriptors that record exactly which keys, in which order and with which quorum, make up a wallet, descriptors, not just the raw words, are what must be backed up alongside each individual seed.
Losing a descriptor while keeping every seed can still make funds hard to recover, because the specific script structure (not just the keys) determines the spending path; some wallets embed enough metadata on hardware devices to reduce this risk.
Multisig also changes the privacy and fee profile of transactions (more signatures usually mean a larger transaction and slightly higher fees) and requires coordination software that itself becomes part of the trust and backup picture.
Quick check
Answer every question correctly (100%) to complete this lesson.
1.In a 2-of-3 multisig wallet, what happens if one key is permanently lost?
2.What must be backed up in addition to each individual seed in a multisig wallet?
Counts towards your streak in this browser.
Extra exam questions
Every question here counts towards your accuracy, XP and rank. No guessing: every answer is explained.
Quick check
Answer every question correctly (100%) to complete this lesson.
1.What is a multisignature (multisig) wallet?
2.What does a "2-of-3" multisig setup mean?
3.What is one main benefit of multisig over a single-key wallet?
4.In a well-designed multisig setup, where should the keys ideally be stored?
5.What is a common use case for multisig wallets?
6.What happens if you lose too many keys in a multisig setup (below the required threshold)?
7.How does multisig help protect against a single compromised device?
8.What is a trade-off of using multisig compared to a single-signature wallet?
Counts towards your streak in this browser.
Sources
- Bitcoin Improvement Proposals, bitcoin/bips repository
How proposed rule changes are written, discussed and specified. A BIP is not an adopted rule.
- Bitcoin developer documentation, bitcoin.org / Bitcoin Optech glossary
- BIP-32: Hierarchical Deterministic Wallets, bitcoin/bips