source avatarHeidi

Share

IN JULY, ONE BUG IN ONE COMPANY'S FIRMWARE EMPTIED THOUSANDS OF BITCOIN WALLETS. MOST PEOPLE USING THAT SAME DEVICE INSIDE A MULTISIG LOST NOTHING. That's the whole case for multisig. One seed phrase, one device and one company's code is a single point of failure. Multisig takes it away. Here's how it works, and how to set one up without getting it wrong. What it is A normal wallet has one key, and whoever has it can spend. A 2-of-3 multisig has three keys, and it takes any two to move a single sat. A thief with one key gets nothing. Lose one key and you can still get in with the other two. The rule is built into the Bitcoin address itself, so nobody can override it. What you need Three hardware wallets, ideally from three different makers, so one company's bug can only ever touch one of your keys. A metal backup for each seed phrase. And free software to tie them together. Sparrow is a popular choice on Bitcoin. Setting it up 1. Set up each hardware wallet on its own, with a brand new seed. Never type a seed phrase into a computer or a phone. 2. In Sparrow, create a new wallet, choose multi signature and set it to 2 of 3. Add each device as one of the keys. 3. Sparrow gives you a wallet file. Save it and print it. More on why below. 4. Send in a small amount. Then send it back out, signing with two of the devices. If that works, the setup works. 5. Now the step almost everyone skips. Delete the wallet from Sparrow and rebuild it from the wallet file. Check the first receive address matches. Only then move your real savings. The wallet file This is the part that catches people out. To rebuild a multisig you need two of the seeds and the wallet file. Lose the file and you'll need all three keys to put it back together, which defeats the point. The file can't spend anything, so keep a copy with each key. But it shows every address and your full balance, so treat it as private. Don't email it, don't upload it. Where to keep the keys Three places, one key in each. For example, one at home, one with family or at the office, and one in a safe deposit box. Each place gets the device, its seed backup and a copy of the wallet file. Someone who gets into any one place gets one key, and one key isn't enough. The mistakes that cost people 2-of-2. It sounds safer, but lose either key and the coins are gone for good. All three devices from the same maker. Two keys in the same house. One fire or one break-in takes both. Letting a company hold enough keys to sign. If a company holds one, it should only ever be one. Never testing a recovery until the day you actually need it. What it costs The software is free. The real cost is three hardware wallets and three metal backups. Each spend costs a little more in fees than a normal wallet, because the transaction carries more signatures. Your family If something happened to you tomorrow, could your family get in? Write them a short letter. Say it's a 2-of-3 multisig, where each key is, which software to use and who they can ask for help. Never put a seed phrase in that letter. When you need it It isn't a dollar amount. Ask yourself one question. Would losing this change your life? If the answer is yes, one key is carrying too much. Hold your keys. Plural.

No.0 picture
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.