What is a multisig wallet?

A multisig wallet is a crypto wallet that requires more than one private key to approve a transaction. Instead of a single key being able to move the funds, a multisig sets a rule such as “two of three keys must sign,” so no single person or single compromised device can spend on its own.

Multisig, short for multi-signature, is one of the most effective ways to remove single points of failure from crypto custody. This article explains what a multisig wallet is, how the signing threshold works, why it improves security, and the trade-offs to weigh before using one.

From one key to many

In an ordinary wallet, one private key controls everything. Whoever holds that key can move the funds, which means a single stolen key, lost device or moment of carelessness can lose everything. This is the fundamental weakness a multisig wallet is designed to fix.

A multisig replaces the single key with a set of keys and a rule about how many of them must sign to authorise a transaction. That rule is usually written as “M-of-N”: there are N keys in total, and any M of them are needed to spend.

How the M-of-N threshold works

The threshold is the heart of a multisig. Some common setups make it concrete:

The 2-of-3 arrangement is popular for a reason. You can spread the three keys across different devices or locations, and you only need two to transact, so losing any one key does not lock you out and stealing any one key does not give an attacker control. You get both fault tolerance and attack resistance from the same structure.

How a multisig transaction gets signed

Spending from a multisig is a short collaborative process:

• Propose. One participant creates the transaction — where the funds go and how much.
• Sign. Each required signer reviews it and adds their signature with their own key, often from their own device.
• Execute. Once the threshold number of signatures is collected, the transaction becomes valid and is broadcast to the network.

On some networks this rule is enforced by a smart contract that will only release funds when enough valid signatures are present; on others, such as Bitcoin, multisig is supported at the script level of the protocol itself. Either way, the network refuses to move the funds unless the threshold is met.

A detail worth knowing is that the signers do not have to be in the same place or sign at the same moment. Each keyholder can review and sign from their own device, in their own time, and the partly signed transaction is passed along until it has enough signatures. That is what lets a treasury be controlled by people in different cities, or by one person keeping keys in different locations, without ever bringing all the keys together on a single machine — which would reintroduce the single point of failure multisig exists to remove.

Why multisig improves security

The security benefit comes directly from removing single points of failure:

• No single stolen key is enough. An attacker who compromises one device still cannot spend, because they lack the other required signatures.
• No single lost key is fatal. In a 2-of-3, you can lose one key and still recover using the other two, then rotate to a fresh setup.
• Keys can be separated. Different signers, different devices, different locations — an attacker would have to breach several at once.
• It enforces shared control. For a business or a group, no one individual can unilaterally move the treasury, which reduces both insider risk and the damage from any one person being phished.

This makes multisig a natural companion to cold storage: you can keep the signing keys on separate offline devices, so an attacker would need physical access to multiple hardware wallets to steal anything. It also blunts phishing, which usually targets one person at a time. Tricking a single signer into approving a malicious transaction is not enough when the threshold requires others to independently review and approve it too, giving the group a built-in second look before anything moves.

Who uses multisig, and the trade-offs

Multisig is widely used by exchanges, funds, DAOs and other organisations to protect large treasuries, and increasingly by individuals who want a backup key without handing custody to anyone else. It is a form of self-custody, so it keeps you firmly on the non-custodial side while adding resilience. For an organisation, the appeal is partly about accountability as well as security: because several named people must sign, moving funds becomes a deliberate, auditable act rather than something one individual can do quietly. That governance benefit is often as valuable as the protection against outside theft.

For an individual, a common motivation is inheritance and backup rather than shared control. With a 2-of-3, you might keep one key on a hardware wallet you use, store a second in a safe location, and leave a third with a trusted party or in a separate site. You alone can transact using two of them, but if one is ever lost or destroyed, you can still recover — and no single stolen key ever threatens the funds. It turns the fragile “one seed phrase to lose” model into something with a margin for error.

The benefits come with real trade-offs to plan around:

• More complexity. You now manage several keys and their backups instead of one, and setup requires more care.
• Slower transactions. Gathering multiple signatures takes coordination, which is a feature for security but a cost for convenience.
• Threshold mistakes. Choosing a threshold that is too strict can lock you out if you lose keys; too loose and you weaken the protection. A 2-of-3 balances these for many people.
• You still control the keys. Multisig spreads risk but does not outsource it — losing too many keys at once still loses the funds.
• Recovery needs a plan. Each key still needs its own secure backup, and the group needs a clear, tested procedure for replacing a lost key before it becomes an emergency.

It is also worth distinguishing multisig from superficially similar features. Some services advertise “two-factor” logins or approval steps that happen inside a single company’s system; those can be helpful, but they are not the same as on-chain multisig, where the requirement for multiple signatures is enforced by the network itself and no single provider can override it. When the rule lives on the blockchain, it holds even if one device, one account, or one company is compromised. That is the deeper reason multisig is trusted for treasuries: the protection does not depend on any one party’s goodwill or uptime.

The bottom line

A multisig wallet requires several keys to approve any transaction, replacing a single point of failure with a threshold rule like two-of-three. That one change makes it far harder for a thief to steal your funds and far harder for a single mistake to lose them, which is why organisations and careful individuals rely on it. The cost is added complexity and coordination — a fair price when the goal is to make sure no single key, and no single person, can ever move the money alone.