Started by Bitcoin, Mar 13, 2023, 11:02 am
0 Members and 1 Guest are viewing this topic.
Crypto wallets safeguard your private keys, which are required to validate any cryptocurrency transactions broadcast to a blockchain network. Before funds can actually be sent or spent from a wallet, the transaction must be digitally “signed” using its private key. The process of signing transactions is a fundamental wallet security feature that prevents unauthorized access to an individual’s crypto. Sometimes, for various reasons we’ll get into shortly, users may need additional wallet security. Multisignature wallets, or multisig wallets, require two or more private keys to authorize a transaction, adding another layer of protection against hackers and thieves. Ahead, we’ll get into what multisig wallets are and how they work, and talk about some of the use cases they unlock, plus how to create a multsig wallet yourself.
Multisig wallets, also known as shared wallets, are a type of crypto wallet that require two or more signatures to confirm and send a transaction. They allow more than one individual/device (or “copayer”) to share the same wallet while preventing unauthorized use by any one party. Unless the required amount copayers sign off on a transaction, no payments can be made from a multisig wallet. But when would you need to use a multisig wallet?
If you’re following crypto safety best practices, you already know never to share your private key with anyone for any reason. But with a multisig wallet even if one private key is compromised it’s useless to the thief without the others required to sign a transaction, which means less risk of stolen funds. Multisig wallets also help protect against funds lost due to misplacing your seed phrase. When using a single-signature wallet, a lost seed phrase could render a wallet’s funds irretrievable. But with a multi-sig wallet funds can still be recovered with the other seed phrases.
Multisig wallets are useful for a variety of scenarios where a user (or users) desire added security.
Multisig wallets are a great solution when multiple authorizations are required to make a payment in a business/workflow scenario. This ensures all parties are aligned on every payment that originates from the wallet.
Similar to a joint bank account, a multisig wallet shared by multiple users can allow access to a shared pool of funds.
Given the multiple signatures required and increased security, a multisig wallet makes sense as a place to store larger amounts of funds which won’t be touched very often. The “cold” in cold storage means your device never connects to the internet. During this use case a “hot” wallet, or one that connects to the internet, with a smaller amount of funds will be used for more frequent transactions.
Similar to multi-factor authentication, a multisig wallet requires multiple steps to send payments. Crypto users can implement a multi-signature process across multiple devices (ex: phone, computer, hardware wallet or paper wallet) to improve security against thieves and hackers. Even if one device is compromised, others are needed to approve payments.
If one recovery phrase is lost or destroyed, you may recover funds with another phrase.
Note: We’ll focus on the last three in this guide – cold storage, single user and contingency for lost/damaged devices
Whether you’re sharing a pool of crypto funds with another wallet copayer or just want some additional peace of mind , a self-custody multisig wallet could be an effective security solution for you. Getting started with a multisig wallet takes only a few steps.
The first decision to make when creating a multisig wallet is how many signatures are required out of the group in order to authorize a transaction. Multisig wallet transactions are often called “M-of-N transactions”, where M is a variable representing the number of signatures required and N represents the total number of keys. So for example, a 2-of-3 wallet has 3 total copayers, and at least two of them must sign off before a transaction can be executed. 2-of-3 is a common signature setup for a multisig wallet, but you can decide how many signatures are required out of the total number of copayers, for example, 3-of-5, 5-of-7, 5-of-5 and so on. Signatures can be made from devices controlled by separate parties or one single party controlling multiple devices/keys.
It’s best not to put all of your security eggs in one basket when it comes to your crypto keys, so it’s strongly advised to keep all of a multisig wallet’s private keys in different places. Even across different types of wallets, if possible. For instance, one copayer’s key can be stored on a hardware wallet and another’s on a mobile or desktop wallet. Spreading keys out among different wallet types will make theft even more difficult.
The process for creating a multisig wallet will vary depending on the provider you choose, but you can quickly create a multisig wallet using the BitPay app by following these steps:
A recovery phrase (or seed phrase) is a series of random words every newly created crypto wallet generates as a last line of defense against a lost or stolen private key. If a user loses access to their wallet, they can recover it by inputting the 12- or 24-word sequence verbatim, and in the exact same order they were given. That being said, it’s easy to see why a seed phrase should be protected with just as much rigor as your private key.
Seed phrases should never be stored on any device that can connect to the internet. If you want to follow wallet security best practices, this means securing your seed phrase offline and locked safely away. Remember, anyone who has your seed phrase can gain access to your funds, so every effort should be made to ensure it never ends up in the wrong hands.
Now that you’re all set up, it’s time to take that shiny new multisig wallet out for a test drive. You’ll want to familiarize yourself with its features and get comfortable with the process of sending and receiving transactions. This can be done right from the BitPay homescreen.
By now you should have a much better understanding of what multisig wallets are and how they are used. To conclude, let’s take a moment to revisit some of the best practices to follow when using a multisig wallet. This will help you get the most out of your multisig wallet and avoid a potentially costly security blunder.
Backing up your Bitcoin wallet by generating and recording your recovery phrase will ensure your funds are recoverable even in the event of a lost or stolen private key or wallet device.
Once you’ve committed to a specific use for a wallet, it’s best not to deviate from the plan. For example, are you using it for long-term cold storage? Making major purchases? A crypto savings account? Keeping different wallets for different purposes makes it easier to keep your accounts and expenditures organized. All of your hot wallets can be managed simultaneously from the BitPay Wallet, including Coinbase accounts and self-custody wallets imported from other wallet providers.
The worst time to learn your fire extinguisher doesn’t work is when your kitchen is on fire. That same idea can be applied to your seed phrase. You don’t want to find out you wrote down a wrong word or mixed up the order after you’ve already lost access to your wallet. Instead, it’s smart to do a trial recovery run to make sure your seed phrase is recorded accurately. Regularly check that your wallets’ phrases match what you’ve recorded. It’s a small thing, but it could save you a lot of panic and heartache in the event you lose access to your wallets.
It’s a good general safety move to keep your wallet’s recovery phrase written down and kept somewhere secure. But what’s even more secure is keeping recovery phrases in different locations. You could keep one of the phrases in a hidden safe or lockbox at home and the other in a safety deposit box at the bank. That way even if someone broke into your house and managed to get inside your safe, they’d only have one of the signatures, which will not give them access to the wallet. Whatever you do, resist the temptation to store your recovery phrases digitally, it will always be less secure than good old fashioned pen and paper.
Important! Don’t disclose your seed phrase to anyone unless you want to give them access to your funds. BitPay or any other reputable wallet provider will never ask for your seed phrase. If someone asks or requires access to your seed phrase for any reason they are most likely deceiving you!
Anybody with your recovery phrase will be able to access your wallet and the funds it contains. Which means unless you want the person to have access to your funds, you should never share your seed phrase with anybody for any reason. It’s also critical to establish a plan that will ensure your partner, spouse or next-of-kin will be able to recover your funds if something unexpected happens to you. Otherwise your funds may be lost forever.
Multisig wallets are a great security tactic to keep your funds safe. But you’ll also want to protect your funds from yourself. Most lost crypto is the result of human error. Establish a realistic protocol that you’ll be able to abide by and give yourself the flexibility for mishaps and mistakes. You’ll most likely want to create a wallet where the number of signatures required is less than the total number of copayers/devices (ex: 2-of-3, 3-of-4 or 3-of-5 instead of 2-of-2, 3-of-3 or 4-of-4). This will give you the flexibility to recover funds even if one device is compromised.
Using different device types and manufacturers is a smart way to protect your funds in the case of colossal failure. Buggy software updates, data breaches, recalls and widespread hacks happen. To hedge against these rare but potential issues use a combination of iOS and Android devices, a variety of hardware wallet options or even different bank branches where sensitive information relating to your funds will be kept.
Page created in 0.065 seconds with 17 queries.