2-of-3 multisig: the strongest self-custody setup

Some product links in this guide are affiliate links. How that works.

A 2-of-3 multisig wallet needs any two of three keys to spend. You keep the three keys on three devices in three places. Lose one key, and you can still spend with the other two. Have one key stolen, and the thief still can’t spend.

It’s the setup many long-term holders move to once their savings are large enough that one mistake would change their life. This guide explains how it works and how to set it up.

Why multisig

A normal wallet has a single point of failure: one seed. If it’s lost, the funds are gone. If it’s found by someone else, the funds are gone.

A 2-of-3 multisig removes that single point:

What happens	Single-seed wallet	2-of-3 multisig
You lose one backup	Funds lost if it was your only one	Still spend with two keys
A thief finds one key	Funds stolen	Thief can’t spend
One device has a hidden flaw	Funds at risk	Other two keys still protect you
House fire destroys one location	Possible total loss	Keys in other locations survive

The cost is complexity. There are more devices, more backups and more steps.

Use three different makers

Build each key on a device from a different manufacturer. For example:

• Key A: Coldcard Q
• Key B: Keystone 3 Pro
• Key C: SeedSigner (or another device)

If one maker’s device has a bug or a compromised supply chain, it affects only one of your three keys. That one key alone can’t spend.

You can also mix in a key created on an air-gapped laptop. Each key just needs to be created and kept offline.

The piece people forget: the wallet descriptor

A multisig wallet is defined by more than its seeds. It also needs the wallet descriptor (sometimes called the wallet configuration or output descriptor). This is a line of text listing:

• The public key (xpub) of each of the three keys
• The rule: 2 of 3
• The address type and derivation paths

Without the descriptor, recovering a multisig is much harder. Two seeds alone may not be enough to find your coins without it. Back up the descriptor with every key.

The descriptor contains no private keys. Someone who finds it can see your balance but can’t spend. It’s a privacy risk, not a theft risk. Store a copy with each key.

What you need

• Three signing devices from different makers
• Sparrow Wallet on your computer to coordinate
• A steel backup for each seed, such as a stamping kit
• Three printed copies of the wallet descriptor
• Optional: your own node, such as Bitcoin Core, so Sparrow doesn’t ask outside servers about your addresses

Rough cost: $600 to $750 for the devices and backups (approximate, November 2026).

Setup in Sparrow

Menu names and exact steps vary by Sparrow and device firmware version. Check each maker’s current guide alongside these steps.

1. Create a seed on each device

Set up each device on its own, following its maker’s instructions. Use dice rolls for extra randomness where supported. Back up each seed separately.

2. Create the multisig wallet

1. In Sparrow, create a new wallet.
2. Set the policy type to multisignature and choose 2 of 3.
3. Choose native SegWit as the script type unless you have a reason not to.

3. Add the three keys

For each keystore slot, import the key from one device. Most air-gapped devices export by QR code or microSD file. Sparrow fills in the public key and fingerprint for each.

4. Save and export the descriptor

1. Apply and save the wallet in Sparrow.
2. Export the wallet descriptor. Sparrow can show it as a QR code and as text.
3. Register the descriptor on each signing device that supports it (Coldcard, Keystone, Jade and others do). Registration lets each device confirm that change addresses belong to your wallet.
4. Print the descriptor three times.

5. Verify an address on two devices

1. Get a receive address in Sparrow.
2. Confirm that at least two of your devices show the same address.
3. Send a small amount.

Your first spend

1. In Sparrow, create a transaction.
2. Export it (QR or microSD) to the first device. Check the address, amount and fee, then sign.
3. Bring the partly signed transaction back to Sparrow.
4. Send it to a second device and sign again.
5. With two signatures, Sparrow can broadcast.

Practice this with a small amount using different pairs of devices, so you know every combination works.

Recovery test

Do this before putting real money in.

1. On a different computer (or a fresh Sparrow install), create a new wallet.
2. Import the descriptor.
3. Restore two of the three keys from their seed backups.
4. Confirm the addresses and balance match.
5. Sign a test spend with only those two.

If this works, you know you can recover from losing any one key.

Where to keep the keys

Spread the three keys so one event can’t take two:

• One at home
• One in a bank safe deposit box
• One with a trusted person, or at a second property

With each key, store its seed backup and a copy of the descriptor. Keep the device and its own seed backup in separate spots within the same location if you can.

Don’t put two keys in the same place. A fire, flood or burglary at one location should cost you at most one key.

Collaborative custody: a middle option

Some companies offer multisig where they hold one key and you hold two. Unchained is a well-known example. You can always spend with your own two keys without them. Their key helps if you lose one of yours, and they offer support and inheritance tools.

This suits people who want multisig’s safety but don’t want to manage every detail alone. You do share some information with the company, including your wallet’s public keys, and they will usually require identity verification.

Plan for inheritance

Multisig makes inheritance both easier and harder. Easier, because no single item gives away the funds. Harder, because your heirs need to understand how to combine two keys with the descriptor.

Write clear instructions. See planning bitcoin inheritance.

Is multisig right for you?

Use multisig when a total loss would change your life. For smaller amounts, a single well-backed-up hardware wallet is simpler, and simplicity prevents mistakes. Learn single-signature cold storage first, then move up. See common mistakes and the full checklist on the cold storage kits page.