Multisig inheritance: more keys, more for her to find

If you hold bitcoin in a multisig wallet, you chose it for good reasons. I'm not here to argue with them. I'm here to tell you what it looks like from the chair your heir would sit in.

In our house, my husband handles self-custody and I'm the non-technical one. For years I'd nod while he "explained it," and I couldn't have done anything with it. Multisig inheritance adds pieces to that picture. This is one part of bitcoin inheritance, and our full guide to bitcoin inheritance goes through the rest.

What multisig is, in the words she'll need

You know this well. Here's the version she'll need, written where she'll first need it.

A multisig wallet needs more than one key to approve a payment. The most common example is 2-of-3 multisig: there are three keys, and any two of them can approve a payment. Bitcoin multisig is the opposite of a single-signature wallet, where one key does everything.

Each key is usually its own hardware wallet or its own seed phrase backup. Hardware wallets from makers such as Blockstream Jade, Coldcard, Ledger, and Trezor can each hold one key. A device and its own seed phrase are the same key, not two. That distinction needs to be in writing, because to her they look like two separate things.

There's one more piece she won't know to look for: the wallet descriptor, sometimes called an output descriptor or multisig descriptor. It records how the keys fit together, including the public keys of every key and how many are needed. Recovery usually needs it, along with wallet software that supports multisig, such as Electrum, Sparrow Wallet, or Specter.

Why multisig appeals to holders

I understand why you'd choose it. With a 2-of-3 multisig, losing one key doesn't lose the bitcoin. A thief who finds one key can't spend anything. There's no single key whose loss or theft ends the story.

Bitcoin multisig also spreads the private keys across separate devices or backups, so no one hardware wallet holds everything. Some holders go a step further with collaborative custody, where a company holds one of the keys as a backup.

Those are real advantages for self-custody, and they matter while you're alive and well.

What changes is who has to use it. You built the setup, so you know which key is which, where each one is, and what the software expects. Every protection that makes multisig safer for you comes with a step someone else has to complete if you're not there.

That isn't an argument against it. It's a reason to make sure those steps are written down, tested, and followed by the person who would actually do them.

Multisig inheritance from her side

From my side, every extra piece is another place I could stop.

More keys means more things to find. More places means more directions to follow. Similar-looking devices mean more chances to pick up the wrong one. And the steps depend on each other: the second key only matters once the first one has worked.

On my first attempt alone, my husband sat behind me and wasn't allowed to say a word to help. I got stuck early on, mostly over words he didn't notice were jargon. Every stop worked the same way: I told him how I'd have worded the step, and he rewrote it.

Now imagine that with three keys instead of one. "Get the second key" sounds like one step to you. To her, it's several: which item is it, where is it, how does she know it's the right one, and what does she do with it next?

That's the trade-off at the heart of multisig inheritance. The same spread-out private keys that protect you are what your heir has to gather, one at a time, without you.

What your family needs besides the keys

Enough keys to meet the threshold are only part of it. For multisig wallet inheritance, your instructions should name each of these and say where it is, never what it is:

• Each key, with a picture and a plain name, so she can tell them apart.
• The wallet descriptor, and how to recognize the current copy.
• The software steps for opening the bitcoin wallet and approving a payment, in whichever program your setup uses (Electrum, Sparrow Wallet, and Specter are common examples).
• Any PINs or passphrases, and where each one is kept.
• The people involved, if another person holds a key, and how to reach them.
• Any company's process, if a company holds one of the keys. With collaborative custody, your heirs will need to follow that company's steps too.

Our instructions contain no secrets. They point to where things are and explain how to check each step. The secret words are printed in red everywhere they appear, and a diagram of how the pieces fit was one of the things that helped me most.

Your executor, or a trustee if there's a trust, may handle the legal side. They'll still need the same practical steps. For legal questions, ask a professional where you live.

Single key or multisig, test it the same way

The test doesn't change with the setup. Only the number of steps does.

1. Hand her the instructions where she'd first find them.
2. Sit behind her and don't help.
3. Let her find and identify every key she needs.
4. Let her follow the software steps on the real setup.
5. End with a small test payment she sends herself. She checks the full receiving address on the device's screen and sees it arrive.
6. Rewrite every step where she stopped, then run it again from the start.

Mine ended with me sending a small test payment myself and seeing it arrive. A checkpoint after each stage let me confirm I was on track without asking anyone.

One rule for every bitcoin wallet, single-signature or multisig: the seed phrase and private keys never get typed into a website, a chat, or anything a stranger suggests.

Keep it current

We redo our self-custody test once a year. With multisig, run it again after any change to a key, a device, or a person who holds one.

A replaced device changes what she needs to recognize. A moved backup changes where the instructions lead. A new key holder changes who she contacts. Each change has to reach every copy of the instructions she might use, and the descriptor has to match the current setup.

For what each device needs on its own, see hardware wallet inheritance. The same rule holds for any crypto inheritance plan: the steps on paper should match the setup on the table.

Frequently asked questions

Is multisig better for inheritance than a single key?

Neither is better on its own. Multisig protects against one lost or stolen key. A single-signature wallet has fewer pieces for your family to find. What matters for crypto inheritance is whether the person who would use it has done it alone.

What happens if my family can't find one of the multisig keys?

With 2-of-3 multisig, any two keys and the wallet descriptor are usually enough. A lost device isn't a lost key if its seed phrase backup can still be found. The instructions should say what to do if one key is missing.

Does my family need the wallet descriptor to recover a multisig wallet?

Usually, yes. The seed phrases alone may not include every key's public keys or how they fit together. Treat the descriptor as required recovery material, and make sure your heir knows where it is.

Can my wife recover a multisig wallet without me?

She can if the instructions are complete and she's already done it once. The only way to know is to watch her try, with you sitting behind her and not helping, ending with a small test payment. That's true of any bitcoin inheritance plan.