Security alert · Oct 9, 2026: Ledger devices bought from a reseller in Southeast Asia were drained. Buy hardware wallets only from the maker. What to do →

Articles

Last reviewed: October 2026

Short answers to the questions that come up before, during and after a multisig setup. Each article stands on its own; the setup guide ties them together.

abstract network nodes dark blue minimal

Comparisons · When something goes wrong · Concepts · Hardware security · Doing it well · Devices and apps

Comparisons

Devices, apps, backups and setups side by side.

  1. 01Trezor Safe 5 vs BitBox02 for a bitcoin multisigTrezor Safe 5 or BitBox02 as a key in a 2-of-3 multisig? Screen, firmware, backups and how each handles the multisig setup.
  2. 02Trezor Safe 5 vs Ledger Nano S Plus for a bitcoin multisigTrezor Safe 5 or Ledger Nano S Plus in a 2-of-3 multisig? Price, open source, screens and what the closed secure element means.
  3. 03BitBox02 vs Ledger Nano S Plus for a bitcoin multisigBitBox02 or Ledger Nano S Plus as a key in a 2-of-3 multisig? Open source, secure chips, backups and how each remembers your setup.
  4. 04BitBox02 vs BitBox02 Nova: which one for a multisig?The BitBox02 Nova adds a glass screen, an EAL6+ chip and iPhone support. Does that matter in a desktop multisig?
  5. 05Sparrow vs Nunchuk for a bitcoin multisigSparrow or Nunchuk to run a 2-of-3 multisig with hardware wallets? Desktop vs phone, paid extras and what each shows you.
  6. 06Sparrow vs Electrum for a bitcoin multisigElectrum has been around since 2011, Sparrow is newer. Which one to use as the coordinator for a hardware wallet multisig?
  7. 07Cryptosteel Capsule vs BillfodlTwo popular stainless steel seed backups with letter tiles. How they differ, and the one weakness they share.
  8. 08Metal seed backups: tiles, punched or engraved?Three ways to put a seed phrase on steel, compared on cost, speed, readability and how they fail.
  9. 09DIY multisig vs Unchained or CasaDo it yourself or pay a company that holds one of your three keys? What you gain and give up with collaborative custody.
  10. 102-of-3 vs 3-of-5 multisigIs a 3-of-5 multisig safer than 2-of-3? More keys protect against more failures, but also create more ways to make mistakes.
  11. 11Seed splitting vs multisig vs Shamir backupsWhy cutting a 24-word seed into pieces is risky, how SLIP39 Shamir shares fix it, and why a 2-of-3 multisig is still the stronger option.
  12. 12Best hardware wallets for a bitcoin multisig (2026)Which hardware wallets work best as keys in a 2-of-3 multisig: what matters, a side-by-side table with prices, and the trio I use.
  13. 13Best bitcoin multisig wallet software in 2026Sparrow, Nunchuk, Electrum and Liana compared for a bitcoin multisig: platforms, hardware support, descriptor import, cost and open source.

When something goes wrong

What to do, calmly and in order.

  1. 01Lost or broken hardware wallet in a 2-of-3 multisigOne hardware wallet in your 2-of-3 multisig is broken, lost or stolen. Your bitcoin is safe; here’s how to restore your safety margin.
  2. 02Lost your multisig wallet descriptor? What still worksWithout the descriptor, two seeds may not be enough to recover a multisig. What you can still do, and how to prevent it.
  3. 03What if a hardware wallet company goes bust?Your bitcoin doesn’t depend on Trezor, BitBox or Ledger staying in business. How to recover if a maker disappears.
  4. 04A seed backup was seen or taken: moving to a new multisigSomeone saw, photographed or took one of your seed backups. What that means in a 2-of-3 multisig and how to move your coins to a fresh wallet.
  5. 05Signing laptop broken or infected: what to doYour signing computer died or might have malware. Your keys are safe on the hardware wallets; here’s how to rebuild and what to check.
  6. 06Forgot your Sparrow wallet password?Lost the password that encrypts your Sparrow wallet file? Your bitcoin is fine. How to rebuild the wallet from your descriptor.
  7. 07Bitcoin transaction stuck? Raising the fee with RBFYour multisig transaction is unconfirmed for hours. Why it happens and how to speed it up with Replace-by-Fee in Sparrow.
  8. 08Someone asks for your seed words? It’s a scamSupport staff, a recovery service, an app or a letter asking for your recovery phrase is always a scam. How these scams work and what to do.
  9. 09Receive address doesn’t match the device screenSparrow shows one address and your hardware wallet another. Don’t send anything. What it can mean and how to find out.
  10. 10Recover a Sparrow multisig in Nunchuk or ElectrumSparrow gone or not working? Your 2-of-3 isn’t tied to it. How to open it in Nunchuk from the descriptor, or rebuild it in Electrum from the xpubs.
  11. 11Sparrow can’t find your hardware wallet? FixesSparrow doesn’t see your Trezor, BitBox02 or Ledger? Check these causes in order: maker app open, device locked, charge-only cable, drivers, old firmware.
  12. 12Multisig wallet shows zero balance? What to checkSparrow shows 0 BTC in your multisig? Your coins are still on the blockchain. Check the server connection, passphrase, script type, path and gap limit.
  13. 13Lost the passphrase in a multisig: what still worksLost the passphrase of your bitcoin multisig? What still works depends on how many keys used it. Search first, then test candidates safely on the device.
  14. 14Hardware wallet firmware update failed: what now?Firmware update failed on your Trezor, BitBox02 or Ledger? Your seed is safe. Finish the update in the maker’s app, or restore from the seed if it was wiped.

Concepts

The terms behind a multisig, in plain English.

  1. 01What is a wallet descriptor, and why back it up?A plain explanation of the output descriptor in a bitcoin multisig: what’s in it, why it’s not secret, and why you need it to recover.
  2. 02Multisig vs single-sig: which is safer for your bitcoin?Single hardware wallet or 2-of-3 multisig? The honest trade-offs: theft, loss, bugs, fees, privacy and effort.
  3. 03Should you add a passphrase to a bitcoin multisig?A BIP39 passphrase on top of a 2-of-3 multisig: what it protects against, what it doesn’t, and how to store it without creating a new way to lose everything.
  4. 04What is a PSBT?PSBT, the partially signed bitcoin transaction, explained: how Sparrow and your hardware wallets pass a multisig transaction back and forth until it’s signed.
  5. 05What is an xpub, and who can see it?The extended public key (xpub) explained: what it reveals, what it can’t do, and why one xpub from a multisig reveals less than you’d think.
  6. 06Why use three different hardware wallet brands?Why a 2-of-3 multisig should use hardware wallets from three different makers, with real examples of what can go wrong at one brand.
  7. 07BIP39 vs SLIP39 backupsTrezor offers 20-word SLIP39 backups; most wallets use 24-word BIP39. The difference, and why a mixed-brand multisig should use BIP39.
  8. 08How much more does a multisig transaction cost?Multisig transactions are larger than single-sig ones, so fees are higher. How much, and how to keep them down.
  9. 09Air-gapped vs USB hardware wallets in a multisigAir-gapped hardware wallets sign via QR codes or microSD instead of a cable. Does that matter in a 2-of-3 multisig?
  10. 10What is a multisig wallet? Bitcoin multisig explainedA bitcoin multisig wallet needs two of three keys to spend. What m-of-n means, why 2-of-3, what it protects against and what you need.
  11. 11Timelocked bitcoin inheritance with LianaHow Liana’s timelocked recovery key works for inheritance, why you must refresh coins, which hardware wallets support it, and how it compares with a 2-of-3.
  12. 12Taproot and MuSig2 multisig: does it change anything?What MuSig2, FROST and taproot script-path multisig are, what they’d improve, and why my 2-of-3 guide still uses P2WSH sortedmulti in 2026.
  13. 13Multisig wallet registration explainedWhy a hardware wallet must know your whole multisig to check addresses and change, and how BitBox02, Ledger, Trezor, Jade, Keystone and Coldcard handle it.
  14. 14P2SH vs P2WSH vs P2TR multisig: address typesLegacy P2SH, nested P2SH-P2WSH, native P2WSH or taproot P2TR: what each multisig address type costs, what supports it, and why the guide uses P2WSH.
  15. 15Watch-only multisig wallet: see your balance safelyA watch-only copy of your multisig shows balance and addresses but can’t sign. What it reveals, and how to set one up in Sparrow, Nunchuk or BlueWallet.

Hardware security

Chips, certificates, firmware and what they really protect against.

  1. 01What is a secure element in a hardware wallet?A plain explanation of the secure element chip in hardware wallets: what it protects against, what it doesn’t, and how Trezor, BitBox and Ledger use it differently.
  2. 02What does CC EAL6+ certified mean?Hardware wallets advertise “CC EAL6+” secure elements. What Common Criteria and the EAL levels mean, and what the certificate doesn’t tell you.
  3. 03ST33K1M5: the secure element in the Ledger Nano S PlusWhat the ST33K1M5 chip in the Ledger Nano S Plus is, what its EAL6+ certification means, and why its closed code matters less in a multisig.
  4. 04Infineon OPTIGA Trust M in Trezor Safe 5 and BitBox02 NovaThe OPTIGA Trust M V3 secure element in the Trezor Safe 5 and BitBox02 Nova: what it does, its EAL6+ certification and why makers chose it.
  5. 05ATECC608B: the secure chip in the BitBox02How the BitBox02 uses the Microchip ATECC608B secure chip: guarding an encryption secret and limiting password attempts, while the bitcoin code stays open source.
  6. 06Open vs closed source hardware walletsWhy some hardware wallets publish all their code and others can’t. What open source actually protects you from, and how multisig changes the question.
  7. 07Reproducible builds: verify your wallet runs published codeOpen-source firmware only helps if the device runs that exact code. Reproducible builds let independent people confirm it.
  8. 08Bitcoin-only firmware: is it worth it?Several hardware wallets offer a Bitcoin-only edition or firmware. What it removes, why that helps, and which devices have one.
  9. 09Supply chain attacks on hardware walletsTampered devices, pre-filled recovery cards and fake replacement wallets: how supply chain attacks work and how to protect yourself.
  10. 1012 or 24 words: which seed length?Is a 24-word seed phrase safer than 12 words? What the difference means in practice, and why this guide uses 24.
  11. 11Derivation path explained: what m/48’/0’/0’/2′ meansA plain explanation of the derivation path used for bitcoin multisig, m/48’/0’/0’/2′, and why getting it right matters for recovery.
  12. 12Master fingerprint explainedWhat the 8-character master fingerprint in Sparrow means, why it isn’t secret, and how it tells you the right device and passphrase are connected.
  13. 13Multisig and the $5 wrench attackPhysical attacks on bitcoin holders are rising. What a 2-of-3 multisig does against coercion, what it doesn’t, and why your safety comes first.
  14. 14Fake wallet apps and phishing sites: how to spot themFake Sparrow, Trezor, BitBox and Ledger apps, sites and emails: how they reach you, the official addresses, and the habits that make them harmless.
  15. 15Address poisoning: the lookalike address trickHow scammers plant a lookalike bitcoin address in your history, why checking the start and end fails, and how to stay safe with a multisig.

Doing it well

Storage, upkeep and the habits that keep a multisig working for years.

  1. 01Bitcoin inheritance with multisig: what to leave your familyA multisig with backups in three places is safe, and useless to your heirs if they don’t know about it. What to write down and where to keep it.
  2. 02Is Sparrow Wallet safe?Is Sparrow Wallet safe to use as a multisig coordinator? What it can and can’t do with your bitcoin, and the privacy trade-off.
  3. 03Where to store three seed backupsChoosing three places for the seed backups of a 2-of-3 multisig: the one-event rule, good and bad places, and what to tell whom.
  4. 04Your yearly multisig check-upWhat to check once a year so your multisig still works when you need it: about an hour’s work.
  5. 05Moving bitcoin from an exchange to your multisigWithdrawing from an exchange to a 2-of-3 multisig safely: verify the address, test with a small amount, and what exchanges may ask.
  6. 06Hardware wallet firmware updates: when and howShould you update your hardware wallet’s firmware? How to do it safely in a multisig, and what to check afterwards.
  7. 07Bitcoin multisig for a small businessHolding company bitcoin in a 2-of-3 multisig: separating it from personal coins, who holds the keys, watch-only access for your accountant, and continuity.
  8. 08Signing computer: Windows or Linux?Which operating system for a dedicated bitcoin signing laptop? The trade-offs between Windows and Linux for Sparrow and hardware wallets.
  9. 09Using Sparrow over TorHow to connect Sparrow Wallet through Tor to hide your IP address from the server, with the built-in Tor or the Tor Browser as a proxy.
  10. 10Running your own Bitcoin node for SparrowConnect Sparrow to your own Bitcoin Core node so no outside server learns your addresses. Pruned or full, and what it takes.
  11. 11How much does a bitcoin multisig setup cost?Three hardware wallets, three metal backups and a spare laptop: a budget, middle and premium bitcoin multisig, with maker prices checked October 2026.
  12. 12From a single hardware wallet to a 2-of-3 multisigAlready own a Trezor, BitBox02 or Ledger? Use it as one of three multisig keys: when to keep its seed, when to start fresh, and how to move your coins.
  13. 13How to send bitcoin from a 2-of-3 multisigA real payment from your 2-of-3: build it in Sparrow, pick a fee, sign with two devices, check the screens and broadcast. Plus what to do if a device is away.
  14. 14Multisig with your partner or family: who holds whatKeep all three keys yourself, or give one to your partner or a relative? The options for a 2-of-3, the trust trade-offs and what each person needs to know.
  15. 15Common bitcoin multisig mistakes (and how to avoid them)Ten bitcoin multisig mistakes that cost people their coins, from a missing descriptor backup to two seeds in one place, and how to avoid each one.

Devices and apps

How each hardware wallet and app works in a 2-of-3. The setup guide uses the first three; the pages for the others say plainly that I haven’t used them myself.

  1. 01Trezor multisig with Sparrow: setup and quirksHow the Trezor Safe 5 works as a key in a Sparrow multisig: the 24-word backup, passphrase, and why its address check is only an extra check.
  2. 02Ledger multisig with Sparrow: register and signUsing a Ledger Nano S Plus in a Sparrow multisig: Bitcoin app 2.1+, registering the wallet, passphrase on a second PIN, and when to register again.
  3. 03BitBox02 multisig with Sparrow: step by stepSet up a BitBox02 as a key in a Sparrow multisig: skip the microSD backup, update in the BitBoxApp, register the wallet and check addresses.
  4. 04Keystone 3 Pro multisig with SparrowHow to use a Keystone 3 Pro as one key in a Sparrow 2-of-3 multisig by QR code: Bitcoin-only firmware, importing the wallet and checking addresses.
  5. 05Coldcard multisig with Sparrow: what to knowUsing a Coldcard as a key in a Sparrow multisig: the July 2026 seed flaw, microSD import, registering the setup and signing. Based on the maker’s docs.
  6. 06Sparrow multisig on a Mac: what’s differentRunning the 2-of-3 setup on a Mac instead of Windows: which Sparrow file to download, verifying it with gpg, the Gatekeeper prompt and USB permissions.
  7. 07Nunchuk multisig on your phone: how it worksNunchuk runs a bitcoin multisig on your phone. What’s free, which hardware wallets connect by NFC or QR, and how to open a Sparrow wallet from its descriptor.
  8. 08Electrum multisig with hardware wallets: step by stepHow to build a 2-of-3 bitcoin multisig in Electrum with three hardware wallets: GPG check, cosigners, p2wsh, address checks and backups.
  9. 09Blockstream Jade multisig with Sparrow (QR or USB)How to use a Blockstream Jade or Jade Plus as one key in a Sparrow 2-of-3 multisig, over USB or by QR code: setup, registration and address checks.
  10. 10SeedSigner multisig with Sparrow: a stateless signerUse a DIY SeedSigner as one key in a Sparrow 2-of-3: verify the software, export the xpub by QR, check addresses with the descriptor and sign.
  11. 11Ledger Flex and Stax in a Sparrow multisigThe Ledger Flex and Stax work in a Sparrow multisig like the Nano S Plus. What the touchscreen, Bluetooth and NFC change, and what they don’t.
  12. 12BitBox02 Nova in a Sparrow multisig: what’s newThe BitBox02 Nova in a Sparrow 2-of-3: USB only, multisig registration as on the original, the 9.25.0 firmware fix, and the Bitcoin-only edition.
  13. 13Trezor Safe 3 in a bitcoin multisigThe Trezor Safe 3 as one key in a Sparrow 2-of-3: the small two-button screen, the 24-word backup, no stored multisig, and when it beats the Safe 5.
  14. 14Sparrow multisig on Linux: udev rules and setupRun your Sparrow multisig from a Linux laptop: which package to download, gpg and sha256sum checks, udev rules, and the makers’ apps on Linux.