A multi-signature wallet, referred to as a "multi-signature wallet", is a wallet control method that requires multiple independent keys to jointly approve transactions. Ordinary single-signature wallets usually only need one valid signature; multi-signature wallets follow the preset M-of-N Rule execution: N represents the total number of signers, and M represents the minimum number of valid signatures required to complete the transaction.
Functional boundaries:This article introduces the general concept of multi-signature. It does not mean that UKey Wallet currently supports the network, protocol or multi-signature scheme involved in the examples in this article. For specific functions and compatibility range, please refer to the official information released by UKey.
How does M-of-N work?
Using 2-of-3 as an example: the wallet is jointly managed by three independent signers A, B, and C. Any two valid signatures can approve the transaction.
Signature | Can it be executed? |
Only A | No, two signatures are not reached |
A+B | OK |
A+C | OK |
B+C | OK |
In this structure, one key leak is usually not enough to transfer assets alone; when one key is lost, two signers can usually still reach the authorization threshold if the remaining keys and the required configuration of the wallet are still intact. However, if both keys are lost at the same time and there is no other recovery mechanism, the assets may no longer be transferable.
What is the difference between single signature and multi-signature?
comparison item | Single signature wallet | Multi-signature wallet |
Transaction authorization | A valid signature is enough | Must meet preset threshold |
Single key leaked | May lead to loss of control of assets | A reasonable threshold is usually not sufficient to transfer assets |
Single key lost | Access may not be restored | Usually still operable when not below the threshold |
Setup and maintenance | relatively simple | Need to manage multiple independent keys and necessary configuration |
Multiple signatures are not inherently more secure than single signatures. Actual security depends on whether the keys are truly independent, whether the thresholds are reasonable, and whether backups and day-to-day operations are reliable.
What does multisig not mean?
Not equal to multiple devices:If multiple hardware wallets use the same set of mnemonic phrases, they are usually just copies of the same key system and do not constitute multiple independent signers.
It is not equal to splitting the mnemonic:Splitting or secret sharing solves how to recover the same secret; multi-signature requires multiple independent keys to be signed separately, and the threshold is verified by an on-chain script or smart contract.
Not equal to MPC:MPC or threshold signatures typically involve multiple parties collaborating off-chain to produce a final signature; multi-signatures typically submit multiple independent signatures. Both reduce single-point risk, but have different implementations, recovery methods, and on-chain performance.
What risks can be reduced by multiple signatures?
The theft of a single private key immediately results in loss of control of assets;
Access is interrupted due to damage to a single device or loss of keys;
Unauthorized transfer of assets by a single member of the team.
What problems can't be solved by multiple signatures?
Wrong transaction:Multisig does not automatically prevent execution if a erroneous or malicious transaction is jointly approved by signers who meet the threshold.
Key concentration:Multiple keys may still expire simultaneously if they are stored on the same device, location, or in an environment affected by the same attack.
Configuration and recovery data are lost:In addition to the private key, some multi-signature schemes also require public keys, scripts, derivation paths or contract information to recover.
Realization risk:Smart contract vulnerabilities, malicious modules, or incompatible software may pose additional risks.
FAQ
Does multi-signature have to be managed by multiple people?
Not necessarily. One person can also keep multiple independent keys separately, but the keys must be truly independent and avoid being concentrated in the same risk environment.
2-of-3 Can I still use a key after losing it?
It doesn't necessarily just depend on the number of keys. In addition to the remaining two valid keys, recovery and continued use may also require information such as descriptors, public keys, scripts, derivation paths, or contract configurations. Whether to replace signers, establish new control structures, or migrate assets depends on the specific multi-signature implementation, and the official instructions of the corresponding solution should be followed.
Is a multi-signature wallet a cold wallet?
No. Multi-signature describes authorization rules, and cold wallet describes whether the key is kept offline and isolated. Multi-signature can be combined with offline hardware devices or managed by online software wallets.
Summary
Multisig reduces the single point of risk posed by a single key through the M-of-N threshold, but increases the complexity of setup, recovery, and day-to-day collaboration. It is not a substitute for key protection, transaction reconciliation, and solid recovery planning.