What Is a Multisig Wallet? Shared Custody Explained

A multisig (multisignature) wallet is a wallet that requires a minimum number of independent approvals — from a predefined set of signers — before any transaction can execute, rather than relying on a single private key. A common configuration is "2-of-3," meaning any two of three designated signers must approve a transaction for it to go through, while any single signer alone cannot move funds.

This directly addresses the single point of failure inherent in a standard wallet, where compromise or loss of one private key means total loss of control over the funds.

How multisig works technically

On smart-contract-capable chains like Ethereum, multisig is typically implemented as a smart contract that holds funds and enforces the approval logic on-chain: it tracks the designated signer addresses, the required threshold, and only executes a transaction once enough valid signatures have been submitted. Bitcoin has its own native multisig capability built directly into its scripting system, predating smart-contract-based implementations.

Either way, the core mechanic is the same: funds are controlled by a rule ("at least M of these N keys must agree"), not by a single key.

Why multisig adds security

No single point of failure for theft. If one signer's device is compromised or one key is stolen, the attacker still can't move funds without meeting the threshold — they'd need to also compromise additional signers.

No single point of failure for loss. If one signer loses their key, funds aren't necessarily lost, as long as the remaining signers can still meet the threshold — this is a meaningful advantage over a single seed phrase, where loss is unrecoverable without a backup.

Shared decision-making. For teams, DAOs, or family arrangements, requiring multiple approvals prevents any single person from unilaterally moving shared funds, whether through error, coercion, or bad intent.

Common multisig configurations

Configuration	Use case
2-of-2	Two co-founders, both must agree on every transaction
2-of-3	Personal setup with a backup signer, or small team with a tiebreaker
3-of-5	DAO treasury or company funds, balancing security and practicality
M-of-N (larger)	Larger organizations needing broader consensus for major transactions

Where multisig fits versus other security models

Multisig differs from a standard single-key wallet, and it also differs from Shamir Backup, which splits a single seed phrase into shares needed to reconstruct one key. Multisig instead uses multiple genuinely independent keys, each capable of signing on its own, combined through the wallet's own approval logic — it's a shared-custody model, not a backup-recovery model, even though both reduce single points of failure in different ways.

Multisig for individuals, not just organizations

While multisig is most associated with DAOs and companies, individuals with significant holdings sometimes set up a personal multisig as well — for example, splitting signer keys across a hardware wallet, a mobile wallet, and a trusted family member's device, requiring two of the three to move funds. This protects against a single lost or stolen device resulting in total loss, without needing the more involved secret-splitting math of Shamir Backup. It does add day-to-day friction, though, since even a simple transfer requires gathering the required number of approvals rather than a single signature.

Choosing the right threshold for your situation

The right multisig configuration depends heavily on context. A married couple managing shared savings might reasonably use 2-of-2, since both should always be involved in any transaction. A small team might prefer 2-of-3, keeping a spare signer available in case one person is unreachable. Larger organizations or DAOs typically move toward 3-of-5 or higher, both to distribute trust more broadly and to reduce the risk that any small group of insiders could collude. There's no universally correct threshold — it should reflect how many people genuinely need to be involved in approving a transaction, balanced against how often you need transactions to move quickly.

Practical tradeoffs

Multisig adds real security but also real friction: every transaction needs coordination among signers, which is slower than a single-signer wallet and requires signers to actually be available when a transaction needs approval. Losing access to too many signer keys (more than N minus M) can permanently lock funds, just as with a standard wallet — multisig reduces single points of failure, but doesn't eliminate the need for careful key management across every signer.

It's also worth verifying that a multisig contract you're relying on has been properly audited, since the security guarantee depends entirely on the correctness of the underlying contract logic, not just the concept of requiring multiple signatures.

Bottom line

Multisig wallets replace a single point of control with a rule requiring multiple independent approvals, meaningfully reducing the risk that one compromised or lost key results in total loss of funds. They're widely used for DAO treasuries, business funds, and security-conscious individuals who want built-in redundancy beyond a single seed phrase. For a widely used implementation of this model, see our guide to Safe (formerly Gnosis Safe), the most common multisig platform for Ethereum and EVM-compatible chains.