A multisig wallet requires several independent keys to authorise a transaction — typically “2 of 3”, meaning three keys exist and any two can spend. It is the strongest answer to the inheritance problem, because it is the only arrangement where no single person can steal the funds and no single loss destroys them.
It is also the most demanding thing on this site, and it introduces a failure mode most people have never heard of. Both halves matter.
How it differs from splitting a seed phrase
These get confused constantly, and they are not the same thing.
| Shamir backup (SLIP-39) | Multisig | |
|---|---|---|
| What exists | One key, split into shares | Several independent keys |
| To spend | Reassemble the key first | Each key signs separately |
| Moment of exposure | Yes — the whole key exists on one device during recovery | No — keys never meet |
| Visible on chain | No | Yes |
| Complexity | Moderate | High |
The third row is the real distinction. Shamir has a reconstruction moment where the complete secret sits on one machine. Multisig never does — each key signs where it lives and only signatures travel. For inheritance that also means an heir with one key can do nothing alone, which is often exactly what you want.
Arrangements that actually work
2-of-3, you hold two. Two keys with you in separate locations, one with your heir or solicitor. You can spend any time using your own two. If you die, your heir combines theirs with whichever of yours the estate recovers. If you lose one of yours, you still have a spending pair. This is the sensible default.
2-of-3 across three people. You, your heir, and a professional third party. Nobody can act alone, including you — which is excellent for large holdings and irritating for routine use.
3-of-5 for larger estates with multiple beneficiaries. More resilient, considerably more to coordinate.
What to avoid: 2-of-2, which has no redundancy at all — either loss is fatal — and any arrangement where all keys live in one building, which is a single point of failure wearing a costume.
The failure nobody warns you about
Here is the part that catches people, and it is the reason multisig inheritance plans fail even when the keys survive.
The keys alone are not enough. You also need the wallet configuration — the descriptor or output descriptor in Bitcoin, which records the public keys, the threshold, the address type and the derivation paths.
Without it, holders of a sufficient number of keys still cannot reconstruct the wallet, because they cannot work out which addresses it controls. The money is visible on the chain and unreachable, which is a uniquely frustrating way to lose it.
So the descriptor must be backed up too — with every key holder, in the instructions, everywhere. The good news is that it is not secret. It reveals your addresses and therefore your balances, so treat it as private, but a leaked descriptor cannot spend anything. Copy it widely.
What it costs
- Complexity, permanently. Every transaction needs coordination between devices. Routine spending becomes a chore, which is why multisig suits savings rather than daily use.
- Higher fees on Bitcoin. Multisig transactions carry more data, so they cost more to send.
- Uneven support. Bitcoin multisig is mature and well-tooled. On other chains it varies from good to awkward, and smart-contract wallets bring their own risks.
- Your heirs must be able to use it. A 2-of-3 scheme is worthless if the person holding the third key cannot follow the process under stress, years later, without you.
Is it for you?
Probably not if you hold a modest amount, this is your first wallet, or nobody in your circle is technical. The complexity introduces failure modes of its own, and a well-executed simple plan beats a badly-executed sophisticated one every time. Sealed instructions with a solicitor genuinely work.
Consider it when the holding is large enough that a single trusted person is too much to ask of one relationship, when you want protection against your own coercion, or when several beneficiaries need to act together.
If you do go ahead: build it, fund it with a trivial amount, then rehearse a recovery with the actual people involved — using only the keys and documents you have left them. Most plans fail on that rehearsal, which is exactly why it is worth doing while you can still fix them.
And as always: no legitimate setup, service or co-signer ever needs your recovery phrase. Not here either.