Multisig Wallet for a Small Team: When It Makes Sense and What Is Easy to Miss
Multisig Wallet for a Small Team: When It Makes Sense and What Is Easy to Miss
Key takeaways:
- A multisig wallet requires multiple signatures for a transaction, reducing the risk of a single point of failure.
- The 2-of-3 configuration means two keys out of three are required, so one key can be lost or compromised.
- The most common mistake is keeping all keys in the same place or with the same person, which defeats the purpose of multisig.
- Before implementing, define who holds which key and how to handle emergencies.
- Multisig is not a solution for everything; for simple needs, a regular wallet with strong protection may be sufficient.
When two people manage a company’s funds, one key is a single point of failure. If they lose it, or if it is stolen, the funds are inaccessible or stolen. A multisig wallet solves this problem by requiring multiple signatures for each transaction. Instead of one key, several are used, so the risk of a single point of failure is significantly reduced, but it does not disappear.
For a small team, a multisig wallet can be a smart choice, but only if it is set up correctly. This article explains when it makes sense, how 2-of-3 works, and the most common mistake.
What is a multisig wallet and how does 2-of-3 work
A multisig wallet is a type of crypto wallet that requires multiple private keys to approve a transaction. Instead of one key controlling everything, several keys are used, and the transaction only goes through once enough signatures are collected.
The 2-of-3 configuration means there are three keys, and two are required to send funds. This allows flexibility: if you lose one key or it is stolen, you can still access the money with the remaining two, provided both remaining keys are actually available when needed. Therefore, the availability of the backup key is tested in advance. Also, if one key falls into the wrong hands, an attacker cannot do anything without the second key.
This setup is common for companies because it balances security and practicality. Two keys are sufficient for operational needs, and the third serves as a backup.
When multisig makes sense for a small team
A multisig wallet makes sense when the team has more than one person managing finances, or when you want to protect funds from individual error or misuse. For example, if two people run the company, multisig ensures that both must agree before money is sent.
It is also useful when there is a risk of internal fraud or when an employee has access to a key, but you do not want them to be able to withdraw everything on their own. Additionally, if someone leaves the company or becomes unavailable, the key they held does not block access to funds.
On the other hand, if the team is just one person, or if transactions are rare and small, multisig can be overly complicated. A regular wallet with a strong password and a hardware key may be sufficient.
Who holds which key? Practical distribution
The key decision is who will hold each of the three keys. The goal is that no single person has access to all keys, and that keys are not kept in the same place.
Example distribution for 2-of-3:
- Key 1: company director, on a hardware wallet in a safe.
- Key 2: financial manager, on a hardware wallet at home.
- Key 3: lawyer or auditor, as a backup key, in a secure location outside the company.
It is important that key 3 is not with the same person as key 1 or 2. If all keys are with the director, then multisig adds no security, only complexity.
Also, consider what happens when someone leaves the company. If that person holds a key, you must have a procedure for changing keys or transferring funds to a new wallet.
The most common mistake: all keys in the same place
The most common mistake in practice is that a team sets up multisig, but then keeps all keys in the same drawer or with the same person. The reason is often practicality: it is easier when everything is in one place. But this defeats the entire purpose of multisig.
If all keys are in one place, an attacker who breaks into the office or steals a laptop gets everything. The same applies if one person holds all keys: they become the single point of failure, and if they are compromised, the money is lost.
For multisig to make sense, keys must be physically separated and under the control of different people. This means each person keeps their own key in their own place, preferably on a hardware wallet.
How to avoid mistakes during setup
Before setting up multisig, make a plan. Determine who holds which key, where it will be stored, and what happens in emergencies, such as key loss or employee departure.
Test the process by sending a small amount before transferring all funds. This allows you to verify that everything works and that everyone is familiar with the procedure.
Use hardware wallets for keys, as they are more resistant to malware and phishing attacks. Avoid storing keys on a computer or in the cloud, as these are common attack targets.
Regularly check that keys are secure and that procedures are up to date. If something changes in the team, adjust the key distribution.
What multisig does not solve
Multisig does not protect against all risks. For example, if all keys are on hardware wallets purchased from the same vendor, there is a risk of a compromised supply chain. Therefore, it is important to buy hardware wallets directly from the manufacturer and verify their integrity.
Also, multisig does not protect against phishing attacks on individual users. If an attacker manages to trick the director into signing a transaction that sends money to the wrong address, multisig will not prevent that. Therefore, training the team to recognize scams is crucial.
Finally, multisig does not solve the problem of losing all keys. If all three keys are lost or destroyed, the funds are inaccessible. Therefore, it is important to have a backup copy of the keys in a secure place, but separate from the originals. The backup copy (seed phrase) must be stored under the same or stronger measures as the key itself, because whoever steals it gets full access. Consider whether a copy is even necessary given the existence of a third key as a backup.
Related articles
Frequently asked questions
Is a multisig wallet safe for a small team?
Multisig reduces the risk of a single point of failure, but it is not absolute protection. Security depends on how you store keys and how trained the people are.
How many keys does a small team need?
For a team of two to three people, 2-of-3 is a common choice. It allows one key to be a backup, while no one has full control.
What happens if I lose one key?
If the key is only lost, move the funds to a new configuration before continuing work; if you suspect it is compromised, do so urgently. The third key is replaced by transferring funds to a new 2-of-3 configuration with a new key (on some smart contract wallets, changing the owner in the contract is sufficient).
Can I use multisig for crypto and fiat?
Multisig is used for cryptocurrencies. For fiat money, there are similar concepts, but they are not the same. This article refers to crypto.
Where should keys be stored?
On hardware wallets, in different physical locations, with different people. Avoid storing on a computer or in the cloud.