Disclosure: This post contains affiliate links; we may earn a commission at no extra cost to you.
Single-key self-custody has one structural weakness: whoever controls that one key controls the funds, permanently and irreversibly, whether that's you on a good day or an attacker who found your seed phrase on a bad one. Multisignature (multisig) wallets fix this by requiring multiple independent keys to authorize a transaction — typically a 2-of-3 setup, where any two of three keys can move funds but no single key can. It's the same logic banks use for dual-authorization wire transfers, applied to Bitcoin. Here's how to actually set one up.
Why 2-of-3 is the standard, not 3-of-5 or something more exotic
A 2-of-3 multisig means you generate three separate keys (usually on three separate hardware wallets, from three different manufacturers) and any two are sufficient to spend. This protects against two failure modes at once: losing one key (device failure, lost safe, house fire) doesn't lock you out, because you still have two of three remaining, and a single point of compromise (one device stolen, one seed phrase found) doesn't let an attacker steal funds, because they'd still need a second key they don't have. Unchained Capital's own guidance on this is worth taking seriously: more keys (3-of-5, 4-of-7) sounds more secure on paper but in practice adds real coordination overhead every time you actually want to spend, and most individual users lose the coordination discipline before they ever face the theoretically-covered attack scenario. For an individual, 2-of-3 is the setup that's actually sustainable long-term.
Three ways to build a 2-of-3 setup
Collaborative custody (Unchained Capital, Casa). You hold two keys, the provider holds one. The provider's key can't move funds without one of yours, so they never have unilateral control — but they can act as your recovery partner if you lose one of your two keys, restoring the “2 of 3” without needing to reconstruct anything from scratch. Unchained's collaborative custody plans run in the range of a few hundred dollars a year (pricing varies by plan and holdings — check current rates), and reduce the number of sensitive items you personally have to secure, since one full key plus its backup lives with a company built specifically to secure it. Casa runs a comparable model with its own device-agnostic app coordinating the signing.
Fully self-hosted with Sparrow Wallet (free, DIY). Sparrow Wallet is free, open-source, and widely regarded as the most capable Bitcoin-native interface for building your own multisig from scratch — no third party involved at all. The practical setup: buy three hardware wallets from three different manufacturers (commonly a Coldcard, a Trezor, and a Ledger or BitBox02 — deliberately not three of the same brand, so a single firmware bug or supply-chain issue can't compromise every key at once), connect each to Sparrow one at a time to export its public key, create a new 2-of-3 multisig wallet in Sparrow combining all three, and verify the receive address matches on all three device screens before ever sending real funds to it. This is the most private and lowest-ongoing-cost option, but you own 100% of the operational responsibility, including inheritance planning if something happens to you.
Newer subscription apps (Nunchuk). Nunchuk offers a similar self-hosted multisig coordinator to Sparrow but as a more guided mobile/desktop app experience, with a lower-cost premium tier than the full collaborative-custody services for users who want some hand-holding without handing a key to a third party.
A practical Sparrow Wallet setup walkthrough
- Buy three hardware wallets from three different brands. This is the single most important decision — don't skip vendor diversity to save money.
- Set up each device independently first, generating its own seed phrase, following that manufacturer's own instructions, before ever opening Sparrow.
- Install Sparrow Wallet (desktop, from the official sparrowwallet.com source only — never a third-party download) and create a new wallet, choosing the multisig option and 2-of-3.
- Connect each device one at a time via USB or by scanning its exported public key/descriptor, adding all three to the new wallet.
- Verify the receive address independently on each hardware device's own screen (not just in Sparrow's software) before funding the wallet — this confirms all three devices agree on the wallet configuration and catches a misconfiguration before money is at risk.
- Send a small test amount first, then practice an actual spend using two of the three devices, before moving meaningful funds in.
- Back up each seed phrase separately, in separate physical locations, and write down Sparrow's wallet descriptor/configuration file too — losing the descriptor (not just the seeds) can make recovery far harder even with all three seed phrases in hand.
Comparison Table
| Option | Cost | Custody model | Setup difficulty | Best for |
|---|---|---|---|---|
| Unchained Capital | Annual fee, roughly a few hundred dollars/year (check current pricing) | Collaborative (you hold 2, they hold 1) | Low — guided onboarding | Users who want a recovery safety net without giving up control |
| Casa | Subscription, tiered by plan | Collaborative | Low — guided app | Similar profile to Unchained, different UX/pricing tiers |
| Sparrow Wallet (DIY) | Free (only hardware wallet cost) | Fully self-hosted | High — you configure everything | Technically comfortable users who want zero third-party involvement |
| Nunchuk | Lower-cost subscription than full collaborative custody | Self-hosted with guided app | Medium | Users wanting DIY control with more hand-holding than raw Sparrow |
Editor’s pick: Ledger hardware wallets
Related reading: Seed Phrase Storage Best Practices
FAQ
Does multisig cost more in transaction fees?
Yes, modestly — a multisig transaction includes multiple signatures, making it larger in bytes than a single-key transaction, which means a somewhat higher fee at the same fee rate. For most users this is a small, worthwhile cost given what it protects against.
What happens if I lose two of my three keys?
You lose access to the funds — a 2-of-3 setup can survive losing any one key, not two. This is exactly why the collaborative-custody model (Unchained/Casa) exists: their held key plus your one remaining key still restores quorum, which a fully self-hosted 3-of-3-in-a-drawer setup can't offer.
Can I do multisig with a software wallet instead of hardware wallets?
Technically yes, but it defeats much of the purpose — software wallets on internet-connected devices are exactly the attack surface multisig is meant to protect against. Nearly every serious multisig guide assumes hardware wallets for at least the majority of the keys.
Is multisig overkill for a small amount of Bitcoin?
For genuinely small holdings, the coordination overhead of multisig may not be worth it compared to a well-secured single hardware wallet with a strong passphrase. Multisig earns its complexity once the amount at risk would meaningfully hurt to lose.