← Bitcoin Encyclopedia

Multi-Signature (Multisig)

🌿 Intermediate

💡 The Plain-English Definition

Multi-signature — multisig — is a Bitcoin security setup where a transaction needs signatures from several private keys to be valid. Instead of one key holding all the power, control is spread across several, so losing or having one key stolen doesn’t mean losing everything.

Multisig removes the single point of failure of one key. Spending requires several signatures — in a 2-of-3 setup, any two of three keys must sign, so no single key can move the money. Lose one key and your coins are still safe (sign with the other two); have one key stolen and the thief still can't spend. The trade-off is a bit more to set up and manage.Diagram by Bit By Bitcoin.

🤔 But Why Though?

Standard Bitcoin security has a single point of failure: the private key. Lose it, and the bitcoin is gone; if someone steals it, they take the bitcoin, and there’s no “undo.” Multisig spreads that risk by requiring M of N keys to sign — meaning any M keys from a set of N can authorise a transaction. The most common setup for individuals is 2-of-3 (any 2 of 3 keys): you can lose one key entirely and still reach your bitcoin with the other two, while a thief who grabs just one key gets nothing.

Different configurations suit different needs. A 1-of-2 setup is about redundancy: either key can spend, so losing one doesn’t lock you out. A 2-of-3 is the sweet spot for an individual, balancing security and recovery. A 3-of-5 is common for business treasuries, where several officers must approve big transactions. A 15-of-20 might secure a large institution’s fund with key holders spread across the world.

Before the Taproot upgrade in 2021, multisig transactions looked visibly different on the blockchain — larger inputs, and a structure that plainly showed multiple signers. That was a privacy problem: anyone scanning the chain could pick out multisig wallets as likely holding larger amounts, which made them targets. After Taproot, key aggregation — mathematically combining several public keys into one, so the combined key is indistinguishable from a single key — means a 2-of-3 spend now looks identical to an ordinary single-signature one. Privacy and efficiency improved at the same time.

The honest tradeoff is coordination. Signing a multisig transaction means coordinating several devices, and sometimes several people. Backup means preserving wallet descriptor files — records of exactly how the keys were arranged together — on top of the seed phrases. And recovery is more involved than with a single-key wallet.

🌍 The Real-World Analogy

Think of multisig like a bank vault that needs two managers to turn their keys at the same time to open it. No manager alone can get in — which guards against one rogue employee taking everything. But any two together can always open it — which guards against losing access if one manager leaves. Different multisig setups are just different key arrangements: some need more managers, some fewer, depending on how much security you want versus convenience.

⚡ So What?

Single-signature custody — one key, one signature — is fine for most people up to what they’d call significant savings. Once your holdings become genuinely meaningful — amounts that would seriously change your life to lose — multisig is worth the added setup effort. A 2-of-3 configuration is the practical starting point for most people holding their own keys. And if you use multisig, the wallet-descriptor backup matters as much as the seed-phrase backup — don’t overlook it.

📩 The Daily Bit · free

Get one plain-English Bitcoin email each morning.

The Daily Bit — free, two minutes, unsubscribe anytime.

The Bitcoin Family GuidePrefer a book? The Bitcoin Family Guide