When splitting a backup into multiple shares (like 2-of-3), both Shamir's Secret Sharing (SLIP-039) and native Multisig eliminate single points of failure.
My take:
- Shamir is great for protecting a single seed phrase without needing multiple wallet coordinates or descriptors.
- Multisig provides true security isolation on-chain, though managing descriptors and hardware compatibility requires more discipline.
Do you prefer Shamir’s Secret Sharing or traditional Multisig when distributing backup shares? Share your experience below! 👇
Shamir (SLIP-39) protects the seed at rest, but to spend you must bring enough shares together on one device to rebuild the key - the single point of failure returns at spend time, which is exactly the moment an attacker waits for.
Multisig never recombines keys: each signer signs on its own device, so no complete key ever exists anywhere.
Tradeoff: Shamir is simpler (one seed, no descriptors, no cosigners) and fine for inheritance where shares meet once at recovery. Multisig is heavier but keeps keys separated for their whole lifecycle. If you will actually spend over years, multisig is the honest architecture.