[{"data":1,"prerenderedAt":22},["ShallowReactive",2],{"blog-content-en-what-is-a-multisig-wallet":3},{"slug":4,"title":5,"excerpt":6,"description":7,"bodyHtml":8,"faqItems":9},"what-is-a-multisig-wallet","What Is a Multisig Wallet? Threshold Signing Explained","A multisig wallet requires M of N independent keys to approve a transaction, so one stolen or lost key cannot move the funds. Here is how threshold signing actually works, why modern multisig is a smart account, what it protects against, what it costs — and why WATS is not one.","Multisig wallets explained: M-of-N threshold signing, Safe-style smart accounts, what multisig protects against, its gas and coordination costs, multisig vs MPC, multisig vs dual custody, and why WATS is single-user self-custody rather than a multisig.","\u003Cblockquote>\u003Cp>A \u003Cstrong>multisig wallet\u003C\u002Fstrong> is a crypto wallet that requires several independent keys to approve a transaction before it can move funds — M of N designated signers, such as 2-of-3 or 3-of-5 — so no single stolen, lost or coerced key is enough to spend. On EVM chains it is normally a smart-contract account, the model popularized by Safe, that holds the funds itself and verifies the signatures on-chain; Bitcoin expresses the same rule natively in its locking script. The protection is real against single-key theft and single-key loss, and so are the costs: higher gas, every action waiting on M humans, and permanent freezing if more than N minus M keys are lost. Multisig is close to mandatory for shared money — DAO treasuries, protocol admin keys, company funds — and usually more overhead than it is worth for the balance you transact with daily. WATS is not a multisig wallet: it is single-user self-custody where you hold the keys and WATS never holds a key, which is the shape that fits personal funds rather than a shared treasury.\u003C\u002Fp>\u003C\u002Fblockquote>\n\n\u003Ch2>What a multisig wallet actually is\u003C\u002Fh2>\n\u003Cp>A \u003Cstrong>multisig wallet\u003C\u002Fstrong> is a crypto wallet that requires several independent approvals before any transaction moves funds — typically M of N designated signers, such as 2-of-3 or 3-of-5. On modern chains it is usually a smart-contract account that enforces the threshold on-chain, so no single stolen, lost or coerced key can spend the money alone.\u003C\u002Fp>\n\u003Cp>Compare that to a standard wallet, where one private key is the whole story: whoever holds it — you, a thief, a phisher — has total control. A multisig replaces that single point of failure with a policy. It is not about hiding the key better; it is about making one key not enough.\u003C\u002Fp>\n\n\u003Ch2>How does M-of-N threshold signing work?\u003C\u002Fh2>\n\u003Cp>Every multisig is defined by two numbers: \u003Cem>N\u003C\u002Fem>, the total number of signers, and \u003Cem>M\u003C\u002Fem>, how many must approve. A transaction begins as a proposal — send this amount to that address. Each signer reviews and signs it independently, often from separate devices in separate places. Once M valid signatures exist, the transaction executes; below the threshold, nothing happens.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>2-of-3\u003C\u002Fstrong> — the classic personal and small-team setup: any two of three keys spend, so a single stolen or lost key cannot move the funds — though a compromised key still has to be rotated out before a second one goes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>3-of-5\u003C\u002Fstrong> — common for project treasuries: no individual can act alone, and two keys can go missing before funds are at risk.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Wider sets\u003C\u002Fstrong> — DAOs often run larger signer groups so that no small cluster of insiders can collude quietly.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The property that matters: the rule is enforced by the blockchain itself, not by a company's policy server. There is no support desk to socially engineer and no admin override — unless the account has opted into extra modules such as recovery or automation, the threshold is the law of the account.\u003C\u002Fp>\n\n\u003Ch2>Modern multisig is a smart account, not a key trick\u003C\u002Fh2>\n\u003Cp>Bitcoin has native multisig at the script level — spending conditions written into how coins are locked. On EVM chains, the dominant model — popularized by \u003Cem>Safe\u003C\u002Fem>, formerly Gnosis Safe — is different: the multisig is a \u003Cstrong>smart account\u003C\u002Fstrong>, a contract that holds the funds itself. The signer list and the threshold are variables in the contract's storage, and every proposal is data the contract checks signatures against before executing.\u003C\u002Fp>\n\u003Cp>That design has practical consequences. You can rotate out a compromised signer or change the threshold without moving a single asset. Signatures are usually collected off-chain and submitted together in one execution, containing costs. And the arrangement remains a \u003Ca href=\"\u002Fblog\u002Fwhat-is-a-non-custodial-wallet\">non-custodial wallet\u003C\u002Fa> in the full sense — every signer holds their own key, and no company sits between the group and its funds.\u003C\u002Fp>\n\n\u003Ch2>What does a multisig protect you from?\u003C\u002Fh2>\n\u003Cp>Two failure modes above all. \u003Cem>Single-key theft\u003C\u002Fem>: an attacker who phishes, malware-steals or physically seizes one key still cannot move anything — they hold one vote, not a majority. \u003Cem>Single-key loss\u003C\u002Fem>: as long as M keys survive, a lost or destroyed key is an inconvenience, not a catastrophe. It also blocks unilateral insider action — no treasurer can quietly drain a treasury they merely co-sign.\u003C\u002Fp>\n\u003Cp>Be honest about what it does not do. If M signers approve a malicious transaction — a drainer dressed up as a routine payment — the contract executes it faithfully. Multisig multiplies the number of people who must be fooled; it does not make anyone unfoolable. And the account itself is code: use audited, battle-tested implementations, not novelty forks.\u003C\u002Fp>\n\n\u003Ch2>What does multisig cost you?\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Cstrong>Gas\u003C\u002Fstrong> — executing through a contract that verifies multiple signatures costs more than a plain transfer from an ordinary account.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Coordination\u003C\u002Fstrong> — every action waits for M humans. In a fast market or a live security incident, that latency is real money.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Signer-loss math\u003C\u002Fstrong> — lose more than N minus M keys and the survivors can never reach quorum: the funds are frozen permanently. Signer replacement has to be planned before it is needed, not after.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Compatibility\u003C\u002Fstrong> — some apps and flows still assume an ordinary single-key account; smart-account support is broad as of 2026, but not universal.\u003C\u002Fli>\n\u003C\u002Ful>\n\n\u003Ch2>Who actually needs a multisig?\u003C\u002Fh2>\n\u003Cp>Anywhere money is shared, multisig is close to mandatory: DAO treasuries, protocol admin keys, company funds, foundation reserves. In those settings the question \"should one person be able to move this alone?\" answers itself.\u003C\u002Fp>\n\u003Cp>For personal users it is a judgment call. A 2-of-3 makes sense for large long-term holdings, inheritance planning or business savings — money you touch rarely and cannot afford to lose to one compromised key. For everyday funds, the coordination overhead usually outweighs the benefit; a single-signer non-custodial wallet with a strong physical factor is the more livable answer, and the trade-offs between those approaches are mapped in \u003Ca href=\"\u002Fblog\u002Fseedless-vs-nfc-vs-hardware-wallet-security-2026\">seedless vs NFC vs hardware wallet security\u003C\u002Fa>.\u003C\u002Fp>\n\n\u003Ch2>Multisig vs MPC: what's the difference?\u003C\u002Fh2>\n\u003Cp>Both require multiple parties, but they live in different layers. Multisig is an \u003Cem>on-chain policy\u003C\u002Fem>: several complete keys, and a contract anyone can inspect that enforces the threshold publicly. \u003Cstrong>MPC\u003C\u002Fstrong> — multi-party computation — distributes control of \u003Cem>one\u003C\u002Fem> key across shares held by different parties, which jointly compute a single ordinary signature without the complete key ever existing in one place; the blockchain sees a normal one-key account, and the threshold logic lives in the protocol run between the share-holders. MPC is cheaper on gas and invisible on-chain; multisig is transparent, auditable and independent of any coordinating service. The share-based model gets a full treatment in \u003Ca href=\"\u002Fblog\u002Fwhat-is-an-mpc-wallet\">what is an MPC wallet\u003C\u002Fa>.\u003C\u002Fp>\n\n\u003Ch2>Is multisig the same as dual custody?\u003C\u002Fh2>\n\u003Cp>They rhyme but differ. \u003Cem>Dual custody\u003C\u002Fem>, as a concept, means two parties each hold a separate credential and both must participate — effectively a fixed 2-of-2 between specific roles, often a user and a service. Multisig is the general, on-chain version of that idea: any M of any N, with the policy enforced by a contract rather than by an arrangement with a provider. The concept — and where it shows up in wallet designs — is unpacked in \u003Ca href=\"\u002Fblog\u002Falways-on-dual-custody-wallet-explained\">the dual-custody wallet explainer\u003C\u002Fa>.\u003C\u002Fp>\n\n\u003Ch2>Where WATS fits\u003C\u002Fh2>\n\u003Cp>WATS uses none of the models in this article — no multisig, no MPC, no dual custody. All four WATS products, the \u003Ca href=\"\u002Fchrome-extension\">Chrome Extension\u003C\u002Fa>, the Mobile App, the Hot Wallet and the NFC Metal Card, are single-user self-custody: the keys are generated on your device and stay yours, and WATS never holds a key. Its physical layer is the \u003Cstrong>NFC Metal Card\u003C\u002Fstrong>, a tap-to-authenticate companion that pairs to exactly one device and stores no private keys at all — the keys stay in the WATS apps and the card proves it is you tapping, as described on the \u003Ca href=\"\u002Fsecurity\">security page\u003C\u002Fa>. WATS covers Ethereum, Arbitrum, Optimism, Base, Polygon, BNB Chain, Solana and TON, and does not natively support Bitcoin, so the Bitcoin script-level multisig above is outside what a WATS wallet does.\u003C\u002Fp>\n\u003Cp>The practical takeaway is a split, not a winner. If the money is shared, or large enough that one compromised key would be a catastrophe, use an audited multisig smart account with a signer set and a replacement plan you decided before you needed it. For the personal balance you actually transact with, the honest answer is a single-signer non-custodial wallet, a physical second factor and disciplined key backups — which is exactly the WATS setup: install WATS from the \u003Ca href=\"\u002Fdownload\">download page\u003C\u002Fa>, write down the recovery phrase it generates before you fund anything, and pair the NFC Metal Card so access needs a tap from a card that authenticates rather than stores your keys.\u003C\u002Fp>",[10,13,16,19],{"q":11,"a":12},"What does 2-of-3 multisig mean?","It means the wallet has three designated signers and any two of them must approve before a transaction executes. One key can be stolen without the thief being able to spend, and one key can be lost without locking the funds — the remaining two still meet the threshold. It is the most common configuration for individuals and small teams because it balances safety against coordination overhead.",{"q":14,"a":15},"Can you still lose funds with a multisig?","Yes, in three ways. If more keys are lost than the threshold can spare — more than N minus M in an M-of-N setup — the survivors can never reach quorum and the funds are frozen permanently. If enough signers are tricked into approving a malicious transaction, the multisig executes it faithfully. And the account itself is code, so audited, battle-tested implementations matter. Multisig removes single points of failure; it does not remove judgment.",{"q":17,"a":18},"Do I need a multisig for personal crypto?","Usually not. Multisig earns its overhead when funds are shared or large enough that one stolen key would be catastrophic — treasuries, team funds, long-term savings you rarely touch. For everyday personal use, the coordination cost outweighs the benefit; a single-signer non-custodial wallet with a strong physical factor and disciplined key backups covers the realistic threats. WATS is built for that side of the split: it is fully non-custodial, you hold the keys, and the NFC Metal Card adds a tap-to-authenticate factor that pairs to exactly one device. If one compromised key losing everything still keeps you up at night, a 2-of-3 is the simplest step up.",{"q":20,"a":21},"Is WATS a multisig wallet?","No. WATS is single-user self-custody, not multisig — and not MPC or dual custody either. Across all four products, the Chrome Extension, the Mobile App, the Hot Wallet and the NFC Metal Card, the keys are generated on your device and remain yours, and WATS never holds a key, so there is no threshold policy and no second required signer. The NFC Metal Card is an authentication factor rather than a signer: it stores no private keys, carries a unique card ID and pairs to exactly one device. WATS covers Ethereum, Arbitrum, Optimism, Base, Polygon, BNB Chain, Solana and TON.",1786059326865]