The moment a wallet is shared by more than one person, single-key control stops making sense. If one person holds the only key, they can run with the funds — or lose everything and take it all down. Multisig replaces “trust one person” with “agreement of several.”
If you’re new to the concept, start with our multi-sig wallet guide. This guide is about deploying multisig for real shared situations.
Real-World Use Cases
| Scenario | Recommended Setup | Why This Threshold |
|---|---|---|
| Business treasury | 3-of-5 | Any 3 of CEO, CFO, CTO, lawyer, board member can spend |
| Couple / family fund | 2-of-3 | You + spouse + a neutral backup (lawyer or adult child) |
| Inheritance | 2-of-3 | You + spouse + executor; spouse + executor can inherit without you |
| DAO treasury | 5-of-8 | Diverse signer set, quorum can’t be quietly hijacked |
| Startup runway escrow | 2-of-2 | Both founders must agree on every drawdown |
The design principle: the threshold should be higher than the number of people who could collude, and lower than the number who could plausibly lose their key.
Setting Up a 2-of-3 Multisig Step by Step
The setup below is for the classic personal + backup structure:
- Choose the platform. For Bitcoin, Sparrow Wallet (free, desktop) or a service like Unchained/Casa. For Ethereum and L2s, Safe (formerly Gnosis Safe).
- Create three independent keys. Each key must be generated on its own device — three separate hardware wallets, never three copies of one seed.
- Create the multisig address with the wallet software, entering each of the three public keys.
- Test with a small amount ($10–$50), then exercise every signing path: (1+2), (1+3), (2+3).
- Document the recovery process — a letter with the setup details (but never the keys) kept off-chain.
Key Distribution Matrix
Who holds what is the entire security model. Distribute across people and geography:
| Key | Holder | Location | Device |
|---|---|---|---|
| Key 1 | You | Home | Hardware wallet A |
| Key 2 | Spouse / co-founder | Their home | Hardware wallet B |
| Key 3 | Lawyer or safe deposit box | Different city | Paper in sealed envelope |
Never keep two keys in the same building, and never give all three keys to one person — that recreates a single point of failure.
What to Do If a Key Holder Loses Access
The 2-of-3 design exists for exactly this moment. The playbook:
| Situation | What Happens | Action |
|---|---|---|
| One key lost/stolen | Still 2 keys remain → funds are safe | Verify the remaining keys sign a transaction immediately |
| Key compromised (device hacked) | Attacker has 1 of 3 → can’t move funds alone | Replace that key by creating a new one and rebuilding the wallet; migrate funds |
| You + spouse both at risk (divorce) | Deadlock — 2-of-3 needs the third signer | The neutral third party becomes the tiebreaker; pre-agree on this in writing |
Rule of thumb: after any key incident, rebuild the wallet with a fresh key and move the balance — never keep spending from a wallet whose key set has been touched.
Choosing a Multisig Service
| Service | Cost | Custody | Chains | Best For |
|---|---|---|---|---|
| Sparrow Wallet | Free | Self-custody (you hold all keys) | Bitcoin | Technically capable users who want full control |
| Unchained Capital | $100+/yr | Collaborative custody (1 of 3 keys held by them) | Bitcoin | Hands-off users who want recovery help |
| Casa | Subscription | Self-custody + insurance/recovery add-ons | Bitcoin, Ethereum | Families with inheritance planning needs |
| Safe (Gnosis) | Gas fees only | Self-custody | Ethereum, L2s, more | DAOs, teams, and DeFi treasuries |
Custody model matters: with Unchained, one of your three keys sits with the service — you get a recovery fallback but give up part of full self-custody. Sparrow keeps all keys with you but offers zero support if you mess up.
Governance Rules for Shared Funds
Before moving real money, write the rules down:
- Minimum signers per transaction (match the threshold)
- Spending cap requiring a higher threshold (e.g., >$50k needs 4-of-5, not 3-of-5)
- Key rotation policy — who can replace a key and how
- Voting/approval process — who proposes, who approves, what counts as a quorum
Bottom Line
Multisig’s real value shows up when control is shared. Pick a threshold that blocks collusion but survives lost keys, distribute the three keys across people and locations, write a recovery playbook before anyone loses a key, and choose between Sparrow (full self-custody, free), Unchained (recovery support), and Casa (family-focused) based on how much help you want. Shared control, done right, beats single-key trust in every multi-person scenario.