A multi-signature (multi-sig) wallet is controlled by several keys and needs a set number of approvals, usually two or more, before funds can move. In a 2-of-3 set-up, for example, there are three approvers and any two of them must approve each transaction.
How multi-signature approval works
A standard wallet is controlled by a single key: whoever holds it can move the funds. A multi-signature wallet replaces that single point of control with a rule, usually written as M-of-N. N is the number of authorised approvers, and M is the number of approvals required before a transaction is carried out.
One approver proposes a transaction, the others review it, and it only proceeds once the threshold has been reached. Until then, the funds stay where they are.
Why teams and treasuries use multi-sig
- No single point of failure. With a threshold of two or more, one compromised key is not enough to move funds.
- Separation of duties. The person who prepares a payment is not the only person who approves it.
- Continuity. When the threshold is lower than the number of approvers, the team can still operate if someone is unavailable.
- Accountability. Each approval is recorded, which gives a clear trail of who authorised what.
Choosing an approval threshold
| Set-up | Typical use | Trade-off |
|---|---|---|
| 1-of-2 | Shared access for convenience | Either person can act alone, so it does not protect against one compromised key |
| 2-of-3 | Small teams and individuals wanting a backup | A common balance: one key can be lost without losing access |
| 3-of-5 | Larger teams and treasuries | Stronger control, but approvals take more coordination |
A higher threshold makes unauthorised transfers harder, but it also slows down legitimate ones. If the threshold equals the number of approvers, losing a single key can lock everyone out.
Good practice for shared control
- Spread approvers across different people and devices.
- Agree in advance who can propose payments and who approves them.
- Document how an approver is replaced if they leave or lose access.
- Test the process with a small amount before relying on it.
- Review the approver list and threshold regularly.
What multi-sig does not protect against
Multi-signature control reduces the risk of a single key being misused. It does not help if enough approvers are deceived into approving the same fraudulent request, or if they act together. Approvers still need to check what they are signing.
Multi-sig also says nothing about the funds you receive. It governs outgoing approvals, not the source of incoming deposits, which is a separate question covered in what a crypto risk wallet is.
Multi-signature control in Finyon Wallet
Finyon Wallet includes a multi-signature vault with approval thresholds designed for teams and treasuries. It sits alongside the wallet's source controls: trusted-source routing sends deposits from counterparties you know to your Main Wallet, while transfers from other sources are isolated in a Risk Wallet for review.
Together, these give a team a way to manage both sides of a wallet: what comes in, and who approves what goes out.
Common questions
Is multi-sig the same as two-factor authentication?
No. Two-factor authentication adds a second check when one person signs in. Multi-signature control requires a set number of approvals, usually from two or more authorised approvers, before a transaction is carried out.
What does 2-of-3 mean?
There are three authorised approvers, and any two of them must approve a transaction before it proceeds. One approver can be unavailable without stopping the team from operating.
What happens if an approver loses access?
If the remaining approvers still meet the threshold, the wallet can continue to operate. This is why the threshold is usually set lower than the total number of approvers, and why a documented replacement process matters.
This guide is general information, not financial, legal or tax advice. Digital assets carry risk, and a risk scan or score is a decision aid that cannot detect every risk. See digital asset risks.