What is a multisig wallet?
Understanding the basics
Multisig means multi-signature. A multisig wallet holds several private keys, and more than one of them has to sign before any coins move. At Casa the standard version is a 3-key vault, where any two of the three keys can move your bitcoin.
Bitcoin moves when someone signs a transaction with a private key, and whoever holds that key can spend the coins. Protecting keys is the whole job of self-custody, and spreading that job across several keys instead of one is what multisig changes. Below is what the structure does and what it protects against.
What is a multisig wallet?
A multi-signature wallet is an app that manages several private keys, tracks your balances and addresses, and collects each signature when you send.
The word that matters is threshold. A Casa 3-key vault holds three keys, and any two of them sign a transaction. An attacker who compromises one key still cannot move your bitcoin, and you can lose one key and still move it yourself.
That shape differs from most of the security people meet online. Two-factor authentication requires every factor to be valid, so losing your second factor locks you out alongside the attacker. A threshold leaves you spare capacity instead. Three keys exist, any two are enough, and the remaining is your margin for error.
Casa holds one key on every vault, and that key is never required to move your bitcoin. It exists for recovery and to make signing more convenient.
How does multisig work?
Sending happens in rounds. You build the transaction in the app, sign it with one key, then sign that same transaction again with a second key on a different device. Once the threshold is met the app broadcasts the transaction to the bitcoin network.
Nothing moves before enough signatures exist, and no single device ever carries enough authority on its own.
Receiving works the way it does in any wallet. The app derives addresses from the full keyset, you share one, and the bitcoin lands in the vault. Only spending needs the threshold.
Thresholds come in other shapes. A wallet can require two signatures out of two keys, three out of five, or another combination entirely, and the choice trades convenience against how many keys you can afford to lose.
What is a multisig vault?
A vault is a specific set of keys. Casa's 3-key vault is three keys with a threshold of two, and Premium membership adds a 5-key vault where any three signatures move funds.
The keyset is what defines it. Change which keys belong to a vault and you have a different vault with different addresses, which is why replacing a lost key moves your balance rather than editing the old vault in place.
Why one key in one place is the old problem again
Before bitcoin, wealth sat in one place under somebody else's protection. A government could freeze the bank account, a burglar could crack the safe, and the first mate on your pirate ship could dig up the treasure chest. Each of those arrangements put everything in one location guarded by one party.
Bitcoin removed the guard. Your coins sit on a public ledger that thousands of independent nodes verify, and the only thing between those coins and anyone else on earth is the private key that controls them. You gain money nobody can freeze, and in exchange you take on protecting a secret nobody can reissue for you.
Keep that secret in a single place and the old problem returns in a new shape. A laptop, a bank vault, a metal plate buried in the yard, each one puts everything you own somewhere that can be phished, seized, burgled, or lost track of.
Multisig vs. a single hardware wallet
A hardware wallet keeps your key off an internet-connected machine, which is a real improvement and the right tool for many bitcoiners. What one device cannot do is survive its own loss, because a single key is the entire wallet.
Adding keys changes that. Good security raises the cost of an attack without raising your own cost of recovery, and a threshold moves both at once.
Two identical devices from the same manufacturer, sitting in the same drawer, move neither. One firmware flaw or one supply chain problem reaches both, and a disclosed vulnerability in a widely used device is an ordinary event rather than a hypothetical one.
The same weak spot shows up in two-factor authentication. Log in on your phone, let the code arrive on that same phone, and one compromised device hands over both factors.
Casa recommends mixing hardware from different manufacturers so that no single device type accounts for a quorum. That applies to any vault carrying more than one hardware key. A Premium 5-key vault carries three hardware keys, so the mix matters more there than in a 3-key vault built around a single hardware device and a mobile key.
Houston Morgan
Are multisig wallets safe?
Casa designs vaults around four failures, a social engineering attack, a phished device, a physical attack, a lost seed phrase.
One threshold handles all four for the same structural reason. Each of those events takes out one key or one device, and one key is never enough to move bitcoin out of a vault.
The limit is worth saying plainly. No structure protects you from handing over the keys yourself, which is why the social engineering case leads that list rather than closing it.
A vault's margin also depends on the keys being apart. Keys kept together travel together, and seed phrases stacked in one drawer collapse the distribution back into the single point you were trying to remove.
Where to keep your keys
Distribution is the other half of the design. A vault protects you when no attacker can collect a quorum in one trip and no single fire, flood, or burglary can take enough keys to strand you.
In a 3-key vault, which is what Standard membership includes, you hold two of the three keys, most often a mobile key stored in your phone's secure enclave and one hardware device. If your phone is with you all day, keep the hardware device somewhere other than your primary residence. You can also swap the mobile key for a second hardware device without changing the principle. Avoid leaving a quorum within arm's reach unless you are about to sign.
Seed phrase guidance depends on which setup you run. With a singlesig wallet, storing the seed phrase away from the device adds real redundancy, because the device and its backup are the only two things you have. A 3-key vault flips that advice. Keep each seed phrase with its own key, since the redundancy already comes from keys held in separate places.
What happens if you lose a key
Life happens, and a 3-key vault is built for it. One lost or destroyed key leaves you with two, which is still enough to sign.
Casa walks members through replacing the missing key. Because a vault is defined by its keyset, swapping a key in produces a new vault with new addresses, and your balance moves there in a transaction your surviving keys authorize. You pay a network fee for that move, and your access never lapses along the way.
Test recovery before you need it. Wipe a device and rebuild it from the seed alone, or buy a second device of the same model, rebuild from the seed, and confirm you reach the same vault.
Where a 3-key vault sits on the security spectrum
Self-custody runs along a spectrum rather than a pass/fail line. A singlesig wallet is real self-custody and the right tool for many bitcoiners. Adding a passphrase puts a second secret in front of an attacker, one that never lives on the device. A 3-key vault goes further and removes the single point of failure, which starts to matter once the amount you hold would hurt to lose.
A useful way to size it up is to secure your bitcoin as if it's worth 10x what it is today. Standard and Premium sit at different points on that line. For bitcoiners managing significant positions, multisig is what the next level of protection looks like.