Back to: Wallets & Security 101
Single-key wallets have a single point of failure: one stolen seed, one $5 wrench, one lost paper. Multisig plus hardware is how that failure mode gets engineered away.
Multisig in one paragraph
A 2-of-3 wallet needs any two of three keys to move funds. Lose one key? You’re fine. One key stolen? Useless alone. Structure it geographically — home safe, bank box, trusted person — and no single event (theft, fire, coercion) takes your money.
Who actually needs multisig
– Holdings you’d be devastated to lose (~5 figures and up). – Shared money: couples, business partners, DAOs, treasuries. – Anyone who’s ever thought “what if someone puts a wrench to my head” — multisig plus a decoy setup is the professional answer.
Hardware done right
1. Buy direct from the maker. Verify the device is genuine on first boot. 2. Generate the seed on the device screen, never on a computer. 3. Never type the seed into anything except the device itself during setup. 4. Keep firmware updated; verify receiving addresses on the device display (this defeats clipboard malware — the device shows truth). 5. Pair with a passphrase once your backups are proven.
The threat model ladder
1. Everyone: hot + cold split, offline backups. 2. Serious holdings: hardware + passphrase + steel backups. 3. Life-changing amounts: 2-of-3 multisig across locations + hardware + inheritance docs.
Climb one rung past your comfort zone, not three past your competence — complexity you don’t understand is its own risk.
Security scales with value. Match the vault to the treasure, and practice
> recovery *before* you need it.
Next lesson: recovery and inheritance — planning for the worst day.