Single-sig or multisig? How to pick a bitcoin setup your family can actually recover

The short answer: multisig removes the single point of failure that single-sig has, but it gives your family more pieces to find and put back together. For most people the best setup is the one the person who inherits can actually recover, from written instructions, without you there. That might be a well-backed-up single-sig wallet, a multi-share backup, a collaborative custody service, or a multisig you run yourself. This guide explains the trade-off in plain English, shows exactly what your heirs would need for each option, and ends with a checklist.

2026 has brought exchange breaches and a cold-storage failure (TRM Labs), so “single-sig or multisig?” keeps coming up among bitcoiners. Underneath it is one question: can my family get to it if something happens to me?

What single-sig and multisig actually mean

Single-sig (single signature) means one key controls the wallet. Most hardware and software wallets work this way, and the key is backed up by one seed phrase (Bitkey). Whoever has those words (plus the passphrase, if you added one) has the bitcoin.

Multisig (multiple signatures) means several keys are involved and a set number of them must sign before coins can move. In a 2-of-3 wallet there are three keys and any two are needed; 3-of-5 is the other popular setup (Trezor). That rule, “k of n keys must sign,” is written into the wallet itself; the Bitcoin standard for describing it calls k the threshold (BIP 383).

Each key in a multisig usually lives on its own hardware wallet with its own seed backup, ideally in different places. The wallet also has a descriptor (sometimes called the wallet configuration file): a record of every key’s public key (xpub) and how they combine. That file can’t spend anything, but it’s how wallet software finds the coins.

The real trade-off: theft and bugs vs. losing access

What multisig protects you from. With single-sig, one bad device or one leaked backup can cost everything. That’s what happened in 2026 when a firmware bug made some Coldcard devices generate weak seeds: attackers drained roughly 1,816 BTC from more than 5,200 addresses without touching the devices. TRM Labs’ takeaway was that multisig setups that combine independently designed devices and independently generated entropy (randomness) give “meaningful defense in depth” (TRM Labs). In a 2-of-3, one compromised key on its own can’t move your coins.

What multisig costs you. More things to keep safe. Unchained counts them: single-sig with a passphrase is 3 items (device, seed, passphrase); a standard 2-of-3 is 6 items (3 devices and 3 seed backups) plus the wallet configuration file; with a collaborative custody partner holding one key, it’s 4 items plus the config file (Unchained). Trezor puts it bluntly: multisig adds complexity, and if you lose the xpubs you can’t send, even with enough private keys (Trezor).

The flip side: multisig is more forgiving of losses. In a properly backed-up 2-of-3, you could lose up to three hardware wallets and a seed phrase and still recover with the two remaining seed phrases, as long as you still have the configuration file (Unchained). With single-sig plus a passphrase, losing the passphrase alone means the bitcoin is gone.

Other honest downsides of multisig:

• Higher fees. Multisig transactions carry more keys and signatures, so they are bigger and cost more to send (Trezor).
• Less privacy. Multisig addresses can be recognized on-chain, which tells an observer something about your security setup (Trezor, Unchained).
• Changes mean a new wallet. You can’t turn a single-sig wallet into a multisig, or swap out a lost key, without creating a new wallet and moving your coins (Trezor).
• More travel. If your keys are in different places, spending means reaching at least two of them (Unchained).

What your family needs to recover each setup

This is the part most debates skip. Here is what the person who inherits has to have in hand:

• Single-sig: the seed words, plus the exact passphrase if one was set. A passphrase opens a completely separate wallet, and it’s case-sensitive (Unchained). If a restored wallet looks empty, read what to check when a restored wallet shows zero.
• A multisig you run yourself: enough seed backups to meet the threshold and every key’s xpub, which the descriptor contains. Sparrow’s own backup prompt says it plainly: to restore a multisig wallet you need at least the threshold number of seeds “and ALL of the xpubs” (Sparrow). Bitcoin Well’s inheritance guide adds that signer phrases alone don’t describe the wallet; the successor needs the descriptor plus enough signer backups (Bitcoin Well). And if any of those keys has its own passphrase (you can add one to individual multisig keys), your heirs need that exact passphrase too, because a passphrase turns the same seed into a completely different wallet (Unchained).
• Collaborative custody (a company holds one key in a 2-of-3, such as Casa or Unchained): the company can’t move your coins without you, and it can help your executor through recovery (Trezor, Unchained). The trade-offs are fees, sharing data with a financial company, and relying on it still being around.
• Bitkey’s inheritance feature: Bitkey is a 2-of-3 multisig (phone key, hardware key, and a key on Bitkey’s server). The beneficiary needs their own Bitkey app and hardware to accept the invitation. If they start a claim, a six-month delay begins, you get alerts and can cancel it, and only an unchallenged claim is approved (Bitkey support, Bitkey). Bitkey also notes that naming a beneficiary doesn’t by itself make them the legal owner; your will or other documents may decide that (Bitkey support). Our inheritance guide covers it step by step.

Four setups compared

1. Single-sig with a solid backup

The simplest setup, and the one most families can follow: one hardware wallet, one seed backup stored away from the device, and clear written instructions. Sparrow’s guide treats single-sig on a hardware wallet as the normal setup for beginners and intermediate holders, and points to multisig at the stage where losing your bitcoin might have a considerable impact on your future (Sparrow). The weak spot is that one list of words (and one device’s randomness) holds everything. For backup basics, see how to back up your seed phrase.

2. Single-sig with a multi-share backup

A middle path: one wallet and one signature, but the backup is split into shares (for example, any 2 of 3 restore it). Trezor recommends this SLIP39 multi-share backup for individuals who want to remove the single-list-of-words weak spot: it needs one device and no xpubs. SLIP39 is the default backup on a new Trezor Safe 5 and newer Safe 3 devices, and a single-share SLIP39 backup can be upgraded to multi-share without moving your funds (Trezor). If you want a device that supports it, the Trezor Safe 5 Bitcoin-only or the budget Trezor Safe 3 Bitcoin-only are options (affiliate links; I may earn a commission at no extra cost to you. Prices and availability may change. Check Trezor’s site for current pricing). The honest limit: it still relies on one device signing, so it doesn’t give the multi-vendor protection TRM described.

3. Collaborative custody

Multisig with help. You hold most of the keys and a company holds one, so it can’t spend without you, but it can co-sign if you lose a key and guide your executor later. Trezor calls this a hybrid that trades some control for convenience and support, and notes these are paid services (Trezor). Bitkey’s built-in 2-of-3 with an inheritance feature is a related approach (Bitkey). Companies are named here as examples, not recommendations; check their current pricing and terms yourself.

4. A multisig you run yourself

The most independent option and the most work. Sparrow’s best practice for true cold storage is at least 2-of-3, hardware wallets from different vendors, and the wallets and backups kept in different locations (Sparrow). You need wallet software that coordinates multisig; Trezor notes that Trezor Suite doesn’t manage multisig wallets directly, so Trezor devices are used as keys through apps such as Electrum or Sparrow (Trezor). It fits people who will keep everything organized and test it, and whose family has someone who can follow technical steps or a written plan for getting help.

How to choose: three questions

1. Who will recover it? Picture the actual person, under stress, with only your instructions. If they could follow a one-page sheet but not a multi-device setup, that matters more than any security debate. Bitcoin Well suggests having your successor do a dry run using only the instructions (Bitcoin Well).
2. What are you most worried about? If it’s one device being buggy or one backup leaking, multisig (yours or collaborative) addresses that directly. If it’s mainly losing things or family confusion, a simpler setup with great instructions may be safer.
3. Will you maintain it? Multisig needs every backup kept, the descriptor kept, firmware updated and recovery drills done (Trezor). If you won’t, a collaborative service or a simpler setup is the more honest choice.

You don’t have to pick just one. Unchained suggests you might keep the larger part in multisig and a smaller amount in a simple wallet for easy access (Unchained).

If you pick multisig: a family-proof checklist

• Back up the descriptor (or the wallet file) as well as every seed. Keep a copy with each seed backup; on its own it can’t spend, but keep it private because it reveals your wallet’s structure and history (Bitcoin Well, Sparrow).
• Record any signer passphrases. Most people skip passphrases on multisig keys because multisig already removes the single point of failure (Unchained). If you did add one, store its record separately from that key’s seed and say in your instructions which keys have one.
• Use different vendors and different places, so one bug, fire or break-in can’t take two keys (Sparrow, Trezor).
• Keep it to 2-of-3 or 3-of-5. Trezor says more than 5 keys is likely too complex for an individual and raises the chance of human error (Trezor).
• Test recovery with a small amount before you put real savings in, and repeat it (Trezor).
• If a key is lost, move to a new wallet soon. You can still spend with the other two (as long as you have every xpub), but your safety margin is gone (Trezor). Our guide to moving bitcoin to a new wallet covers the test-send habit.
• Write down the wallet software too, and which version you used, so your family knows where to load the descriptor (Bitcoin Well).

If you stay single-sig: make it recoverable

• Keep the seed backup offline and stored apart from the device (Sparrow), never as a photo or in the cloud.
• If you use a passphrase, record it separately and make sure your instructions say it exists. A missing or mistyped passphrase is a common reason a restored wallet looks empty (here’s why).
• Consider a multi-share backup if one lost or stolen backup is your biggest worry (Trezor).
• Never put the seed phrase in a will. Bitcoin Well warns that a probated will may become public or pass through many hands (Bitcoin Well).

Write it down for your family

Whatever you choose, the plan only works if someone can follow it. Bitcoin Well suggests two layers: an instruction layer that explains the wallet type, the threshold and where things are, and a separate secrets layer (seeds, passphrases, devices) stored so no single event or person can collect enough to spend (Bitcoin Well).

The free Bitcoin Inheritance Kit is built for exactly this. Its guide has a full step on multisig, shares and collaborative custody, and its letter-of-instruction template asks for each wallet’s type and, for multisig, where the keys and the configuration file are. It also lists “a multisig with seed phrases but no wallet configuration file” as a common mistake to avoid. For the bigger picture (exchange accounts, wills and the legal side), read how to get your bitcoin to your family when you die.

Want a quick read on your own setup? The Is My Wallet Safe? checker asks four questions and runs in your browser. If you’re still choosing a device, start with hardware wallets explained. And if you haven’t met Node yet, he’s the main character of the An Honest Node cartoon.

What this guide can’t tell you

Wallet apps, services and their fees change, so check each company’s own pages before you set anything up. This guide isn’t legal advice; talk to an estate attorney about wills and trusts. Nobody from An Honest Node will ever ask for your seed phrase, and you should never type one into a website. Educational only, not financial advice.