🔐 Multisig & Splitting the Responsibility
When one key is no longer a single point of failure — plus a recap.
Start the interactive lesson →
What if one key wasn't everything?
What if losing one key didn't mean losing everything —
and stealing one key didn't mean stealing anything either?
Multisig, explained
Multisig (multi-signature) requires more than one key to approve a transaction.
The common setup is 2-of-3: any 2 of 3 keys must sign to move funds.
- Lose one key → the funds are still safe.
- Steal one key → a thief still can't move anything alone.
One failure stops being a catastrophe.
Multi-institutional custody
This idea can extend further: keys held across multiple independent institutions or people, so no single party — including you alone — can move funds without coordinated agreement.
That last part sounds like a downside until you consider what it protects against: coercion, a moment of panic, or someone with a wrench.
Pros and cons
Pros: eliminates a single point of failure; well suited to large holdings, businesses, or inheritance planning.
Cons: more complex to set up, requires real coordination among key holders, and may involve fees for institutional key-holding services.
Complexity is itself a risk. A multisig nobody in your family understands is not safer than a hardware wallet they do.
Where it sits
Still fundamentally self-sovereign — no single outside party can unilaterally control the funds —
but structured to remove the fragility of relying on one key, one device, or one person's memory.
The answer to lesson one
Remember the order you guessed at the start? Here it is, least self-sovereign to most:
- 1. 📈 Bitcoin ETF — zero keys. Price exposure through three counterparties.
- 2. 🏛️ Exchange account — zero keys. An IOU you can convert by withdrawing.
- 3. 📱 Hot wallet — your keys, on a connected device.
- 4. 🔒 Hardware wallet — your keys, offline.
- 5. 🔐 Multisig — your keys, offline, and no single one of them is fatal.
How close were you?
Quick check: What does an ETF actually give you ownership of?
- Shares in a fund, not bitcoin itself ✓
- Bitcoin held in your name
- A claim redeemable in bitcoin
Price exposure, delivered through your broker, the issuer, and their custodian.
Quick check: What's the core risk of leaving funds on an exchange?
- Counterparty risk — hacks, insolvency, or frozen withdrawals ✓
- The exchange might change its fees
- Your transactions become public
Three different causes, one identical outcome: the withdrawal button stops working.
Quick check: What's the main tradeoff between hot and cold wallets?
- Convenience versus exposure to remote attacks ✓
- Cost versus transaction speed
- Privacy versus legality
Which is why most serious holders run both, sized to the job each one does.
Quick check: What does a 2-of-3 multisig setup protect against?
- The price falling
- Losing or having a single key stolen — funds stay safe since at least 2 keys are required ✓
- Your transactions being recorded on the blockchain
One key lost is survivable. One key stolen is useless to the thief.
Quick check: What does multi-institutional custody remove?
- A single point of failure or control over the funds ✓
- The need for private keys entirely
- All setup complexity
No one party can act alone — including you, which is the trade being made deliberately.
Quick check: Which custody option requires you to hold zero keys yourself?
- A hardware wallet
- A Bitcoin ETF ✓
- A 2-of-3 multisig
The far end of the spectrum — maximum convenience, no keys, no self-sovereignty.
Course complete
"Not your keys, not your coins" isn't a slogan — it's a spectrum you now understand end to end.
You know exactly what you're trading away, and what you're gaining, at every point along it.
There's no single right answer here. There's only the one you chose on purpose.