pull down to refresh

Ok, so i basically understand multisig in theory, but it still feels a bit vague.
Like when someone says, I have my funds secured in multisig, are they saying they have selected two other people (or however many the sig is, 2 or 3 etc), given them keys, and then, to unlock funds they need to join forces like Captain Planet to access the funds?
Like if i wanted to do a multi sig setup, how would i even do it with my cold wallet, would i need to get my wife in a give here keys?
So yeah, when someone says they have a multisig setup, I know what they mean, but simply can't visualise it
Use Sparrow or Liana wallet and you will understand it better.
Its actually pretty simple to think about.
1 of 3 (just an example. One of the 3 keys available needs to sign) 2-of-5 (2 of the 5 keys that exist need to sign)
Multi-signature flow uses PSBT files a lot. You may be familiar with PSBT files if you use an airgapped signing device (as opposed to a USB or bluetooth signing device).
When the PSBT file is signed with one of the available signatures, you take the partially signed bitcoin transaction file (PSBT file) and send it to the next person to sign.

Multi-signature requires multiple signatures, not multiple people

Multi-signature as 2FA

So in this way, you can think of it like 2FA (two factor authentication). One device signs, but you need another device to sign. The most simplistic example of this, is the bitkey. The Bitkey is an airgapped signing device, but the wallet people make with the bitkey is NOT cold storage. This is because 2 of the 3 available keys are required to sign. 1 key is in the app (on the phone), one key is with the company, and the 3rd key is on the signing device. So in this way, the bitkey is a 2FA solution, not a cold storage solution.

Multi-signature as hardened security

On the other end of the spectrum is geographically distributed key storage. In this set-up, physical access to multiple locations is required to spend the life savings or whatever it may be. Glacier protocol guide explains the reason someone may want to do this:
Multisignature security protects against the following scenarios:
Theft: Even if somebody physically breaks into a safe, any one key is not enough to steal the money. Loss: If a key is destroyed or simply misplaced, you can recover your money using the remaining keys. Betrayal: You may want to entrust one or more signatories with keys to facilitate access to your funds when you are dead or incapacitated. With multisignature security, entrusting them with a key will not enable them to steal your funds (unless they steal additional key(s), or collude with another signatory).

Multi-signature as collaborative custody

It may be the case that you don't want to be the sole custodian for your own funds. There are many reasons for this. A company or nation state for example should not have 1 person who can make spending decisions. Very often collaborative custody is used as a hand holding option to get people to learn self-custody, while still in reality having a custodian (bitcoin beach wallet when it existed was this kind of training wheels). Anchorwatch wants people to use this kind of multi-signature scheme for "self-custody insurance" From my understanding though anchorwatch will allow many different types of multi-signature arrangements including collaborate custody and multi-signature as inheritance (I'll allow them to explain themselves more, but point is don't get too caught up in that example).
One could also use this kind of collaborative custody the way one would use a joint bank account. For spouses, for event savings (like saving up for a family gathering in which the family collaboratively custodies the funds) Theya wallet is probably the most user friendly software that would allow for this usecase: https://www.theya.us/
The glacier protocol suggests a version of collaborative custody (given the user accepts the risk trade offs) wherein the user can spend at all times, but multiple friends or family members must collude to spend.

Multi-signature as inheritance

For this kind of multi-signature, even a 1-of-2 is reasonable. But why have a 1 of 2 instead of just sharing one key? Because in this setup, the key that the inheritance recipient holds, can not be used until a specified amount of time has passed.
Liana wallet is the user friendly program for setting something like this up: https://wizardsardine.com/liana/

Key exchange

To create a multi-sig wallet with other people, you do not need to see each others private keys or seed phrases. You only need to share each others xpubs (and use the same derivation paths). This information is used to view the wallet balance, while the private key or seed phrase is used to sign.
Hope this helps.
reply
300 sats \ 2 replies \ @nym 20 Dec
I like the Glacier Protocol, but unfortunately it currently only supports address reuse.
reply
See I can reason through guides and say to myself "These are great suggestions" and then if anything is missing, I'll just go "Oh this other guide suggested this" and implement that as well.
You can make a watch-only wallet.
So for example, Glacier protocol suggests going to blockstream.info (https://glacierprotocol.org/docs/check-balance/overview/) to check your wallet balance. Which is insane. Just make a watch only wallet and don't dox your whole stack to a company lol. Right, so I would then follow probably the sparrow guide on connecting to Bitcoin core and setting up electrum and all of that stuff.
reply
0 sats \ 0 replies \ @nym 20 Dec
I agree, I thought that was odd also.
reply
Is it possible for 3 people who each have their own single sig wallet/seed already to form a multisig together with their existing keys, or is this something that must be created/setup from scratch?
reply
There's no reason you couldn't use the same seed phrase, but after you exchange xpubs, it will be a completely different wallet.
reply
311 sats \ 1 reply \ @nichro 19 Dec
sorry to badger you, just to make sure I get it because this is a setup I'm considering if it's possible
3 friends each have their own seed phrase and wallet that holds funds,that they use normally
one day they decide to form a multisig 2 of 3
they each contribute the seed they already have, the one from their respective normal wallets
now they have an extra multisig / shared wallet on top of their own solo wallet that they can still control as normal?
reply
they each contribute the seed they already have
Do not share your seed phrase. Do not! Instead, the xpub should be shared. Download sparrow, create a multi-sig wallet and it will be immediately clear what I'm talking about.
now they have an extra multisig / shared wallet on top of their own solo wallet that they can still control as normal?
Yes, they would have a wallet that's single sig and a wallet that's multi-sig with different Bitcoin addresses. If you download sparrow wallet and create a single sig seed phrase for one script type and then create a new wallet, import the seed phrase and use the multi-sig script type, you will see different Bitcoin addresses and see what I'm talking about.
reply
This is a hell of a reply. Did you have this pre-drafted? Very nice.
reply
No, I just repeat the same shit a lot lmao
reply
Fair enough lol
reply
Yup, pretty tricky.
Also, easier to think of as signing devices rather than people. You need two-of-three devices, not people.
For a well-functioning one, and resistant to accidents or death, it has to be recoverable among other people obviously, but that's how I would think about it
reply
You don't need other people involved. Multisig just means there are multiple (n) keys and you need k of those n to spend your UTXOs.
You can be the only person that holds those n keys, e.g. in a 2-of-3 multisig you may have one key on a steel plate under a floor board, another as a list of references to words in a book and yet another buried in a glass bottle in your backyard.
reply
Or, you could have a 2-of-2 or 3-of-3 with the same seedphrase on all sigs but with different passphrases, that way you only really need to store 1 seedphrase. If you use Taproot, the transaction will look like any other singlesig tx, which helps on privacy and fees
reply
5 sats \ 1 reply \ @OT 19 Dec
Very few wallets do multisig on taproot.
reply
Sadly, that's true 🥲
reply
ok, so in this example, i have one seed hidden away, then say i want to move the bitcoin and i have a 2 of 3 going on.
when starting to transfer i would just have to enter in two of the passkey basically and then the funds move, is that essentially it?
will more wallets have multisig on taproot in the future, or is there another reason why it might not be viable or popular
reply
when starting to transfer i would just have to enter in two of the passkey basically and then the funds move, is that essentially it?
Correct.
will more wallets have multisig on taproot in the future, or is there another reason why it might not be viable or popular
Hopefully. I know Nunchuk does.
reply
11 sats \ 1 reply \ @OT 19 Dec
The keys can be distributed to other people or other locations.
You will need to move your sats onchain into new addresses generated by the multisig wallet.
Make sure to keep a copy of the xpub with every key. Without it you won't be able to recover your sats.
reply
Multisig distributed to other people / locations is newbie trap, they will lose the coins if they don't do it correctly
reply
For 2 of 3 multisig you would need to have 3 sets of keys, most likely 3 hardware wallets but doesn’t have to be. It could be set up where you have a key, your wife has a key and a third person of your choosing has a key. Or it could be set up where you are the only person that has access to all three keys. And you need 2 signatures to spend the funds.
reply
10 sats \ 2 replies \ @k00b 19 Dec
I usually describe it like nuclear codes. Multiple keys are needed to "launch."
reply
and these keys can be with other people or just other devices hidden around, right?
reply
10 sats \ 0 replies \ @k00b 20 Dec
yep!
reply
See subsection on multiple horcruxes.
reply