What this is
Three hardware wallets — ideally from three different manufacturers — all held by you. Any two of the three together can spend. The keys live in different places (a common split: home, a bank safe-deposit box, and a trusted family member or second property). This is the first rung that genuinely removes single points of failure for personal-scale holdings.
What it’s good at
- No single point of failure. Losing any one key, or one location, or trusting any one vendor, no longer risks your coins.
- Full sovereignty. No company is involved. Nothing to freeze, fail, or subpoena.
- Recoverable. Lose one key and you simply sign with the other two, move funds to a fresh 2-of-3, and you’re whole again.
What it costs you
- Complexity — the top cause of lost Bitcoin. You now manage six sensitive items (three devices, three seed backups), plus the wallet descriptor and coordinator software.
- Geographic coordination. To spend you need to reach two of three locations — manageable normally, hard during a crisis.
- Harder inheritance. “Just give them the seed” no longer works (see below).
- Arduous re-keying. A lost key means sweeping everything to a fresh setup and paying on-chain fees.
Complexity is the risk here The most-repeated finding across every serious source: the most common way people lose Bitcoin self-custodying is by introducing too much complexity. Don’t adopt multisig until you’re genuinely comfortable with single-sig — multisig amplifies your operational discipline, it doesn’t supply it.
Use three different manufacturers If all three devices are the same brand, one firmware bug or supply-chain problem could compromise all three keys at once — defeating the whole point. Mixing brands (say Coldcard + BitBox02 + Foundation Passport) means a single-vendor failure costs you at most one key. It’s the cheapest meaningful upgrade to any multisig.
Who should use it
Holders with material Bitcoin exposure, the discipline to manage six distributed items, and a real plan for how the setup gets recovered if you’re unavailable. Everyone agrees it’s overkill for small balances, and a mistake to adopt before you’re confident with single-sig.
Planning for inheritance
Your heirs need to locate three keys or seed backups, hold the wallet descriptor, know which software coordinates a spend, and understand the signing flow. That’s a high bar for a grieving non-technical person — which is exactly why many holders with substantial stacks choose the collaborative version (rung 5), where a professional partner carries that knowledge for your heirs.
When to climb
If managing the whole thing yourself — and especially handing it to your heirs — feels like too much, collaborative custody (rung 5) keeps the same 2-of-3 security while a partner carries the complexity. Going to 3-of-5 (rung 6) is rarely the right move for an individual.