There is a reason the street cats never all eat at once. One stays up. Not formally — nobody drew a rota — but there is almost always a head above the grass while the others have their faces in the bowl. A colony that commits every member to the same activity at the same moment is a colony that gets surprised.
Single-signature bitcoin custody is every cat eating at once. One key, one point of failure, one bad afternoon between you and everything.
Multisig is the head above the grass. It is also, for most people, more trouble than it's worth — and I'd rather explain both halves than sell you the exciting one.
1. What It Actually Is
A multisig wallet requires several keys to authorise a spend, out of a larger set. The standard arrangement is 2-of-3: three keys exist, any two can move funds, no single one can do anything alone.
The consequences fall out immediately:
- Theft requires two. Someone who compromises one key — steals a device, finds one backup, coerces one person — gets nothing.
- Loss tolerates one. Lose a key to fire, flood or forgetfulness and your coins are still spendable with the other two. Then you rotate to a fresh setup.
Single-sig forces you to optimise against theft and loss simultaneously, and those pull in opposite directions: more copies of your seed means more places to lose it from, fewer copies means more chance of losing it entirely. Multisig is how you stop that trade-off being a trade-off.
2. Where the Keys Go
The arrangement matters more than the technology. A 2-of-3 where all three keys sit in the same drawer is a single-sig wallet with extra steps and a false sense of security.
A sane distribution:
- One key at home, on a hardware wallet you use.
- One key somewhere else physically — a safe deposit box, a second property, a relative's house in another town.
- One key held differently — a different hardware brand (so a firmware or supply-chain flaw doesn't hit all three), or held by a collaborative custody provider whose business is co-signing without ever being able to spend alone.
That last option deserves a mention because it's the sweet spot for a lot of people: a company holds one key, you hold two. They cannot move your money. If you lose one of yours, they help you recover. If they vanish tomorrow, you still have two keys and full control. The trust you extend is bounded and reversible, which is a rare shape in this industry.
3. Why It Fixes the Inheritance Problem
I wrote before about the seed phrase as a single point of failure for your family — the passphrase nobody knew existed, the steel plates that opened an empty wallet.
Multisig changes the shape of that problem. You can leave one key with your executor and one with a lawyer or provider, with instructions that neither alone can do anything and that they must act together. Nobody has unilateral access while you're alive. Nobody is left holding a useless piece of metal when you're not.
It is the closest thing self-custody has to an estate structure, and for anyone holding a meaningful amount, that's the argument that carries the most weight.
4. The Honest Case Against
Now the half that gets left out of most articles about this.
- Complexity kills more coins than theft does. Multisig has more moving parts, more to back up, more to understand, and more ways to be quietly wrong for two years. For a beginner holding a modest amount, a well-executed single-sig setup with a steel backup and a tested recovery is safer than a half-understood multisig.
- You must back up more than seeds. To rebuild a multisig you need the wallet's descriptor — the public keys and the policy describing how they combine. Lose that and your three seeds may not be enough to reconstruct the wallet. This surprises people badly, and it is the most common multisig disaster.
- Higher fees. More signatures means larger transactions, which means you pay more every time you spend. Not enormous. Not nothing.
- Recovery is a real drill. You need to practise spending from it, with the keys in their actual locations, before you rely on it. If the drill involves a train journey to a safe deposit box, you will discover that when you do it, not when you plan it.
5. The Threshold
My rough rule, offered as a starting point rather than an answer:
Single-sig, done properly, until the amount would materially change your life if it vanished. Steel backup, geographic separation, an annual recovery test, a letter for your family. Most people never get all of that right, and getting it right beats adding layers on top of a shaky foundation.
Multisig once the amount justifies the operational burden — or once inheritance becomes the dominant concern, whichever comes first. And when you do it, do it with a descriptor backup and a full dry run, or you have simply built a more sophisticated way to lose everything.
The Point
The colony's watch rotation is not caution for its own sake. It's proportionate: they do it because there are real cats and real dogs and the cost of being wrong once is total. Nobody stands watch over an empty bowl.
Scale the machinery to what's actually at stake. A single key well managed protects most people better than three keys managed badly. But once you're holding an amount you cannot afford to lose to a single fire, a single theft, or a single funeral — put a head above the grass.
One key is one bad afternoon. Two of three is a system. 🐾⚡
Not financial or legal advice — I feed cats and write about Bitcoin, which qualifies me for neither profession. Test any custody setup with small amounts first. Do your own research.
