Best hardware wallets for Bitcoin multisig

A 2-of-3 multisig assumes the three keys fail independently. Sparrow's own best-practice page says to use hardware wallets from multiple vendors, so a vulnerability in one vendor does not compromise the whole setup. Three devices from one company give you three copies of the same firmware, the same random number generator code, and the same supply chain.

This stopped being theoretical in 2026. The Coldcard seed-generation flaw sat in one vendor's firmware from March 2021 to July 2026, and attackers drained seeds generated on affected devices. A 2-of-3 built from three of that vendor's devices could hold three weak seeds. A mixed 2-of-3 held at most one, and one key is not enough to spend.

Count companies, not products. Jade, Jade Plus, and Jade Core all run Blockstream's Jade firmware, so they count as one vendor. Use one of them per multisig.

Count code bases, too. SeedSigner pins the embit library, Krux vendors embit into its build, and Specter DIY pulls embit in as a submodule. Three different projects share one Bitcoin library, embit. Each project writes its own signing checks, so a bug in one project's code stays in that project. A flaw in the shared library could reach all three, so I put at most one embit device in any multisig (Krux vs SeedSigner covers how the two differ).

The same logic applies to OneKey and Trezor: OneKey's firmware repository still carries files marked as part of the Trezor project. Pair one of them with devices from other code bases, never both.

Ranked by my current ratings (see each review for the score). "Remembers the multisig" means the device stores the wallet setup and can check a receive or change address against it. Prices are the vendor's list price as of November 2026.

SeedSigner's stated goal is to lower the cost and complexity of Bitcoin multisig. It generates native SegWit multisig xpubs, signs PSBTs over animated QR codes, and has an Address Explorer for multisig wallets. It stores nothing: the seed lives in memory until you pull the power, and you load it each session from a SeedQR or by typing the words.

What it cannot do: the README still says Taproot is not quite yet supported. The bigger issue for multisig is a fix that has not shipped. In September 2026 the project merged a security fix for forged change outputs: a malicious coordinator could dress up an attacker's output as your change. As of November 5, 2026, the latest release is still 0.8.7 from July 2026, so the fix is not in a release yet.

Best slot: the offsite or deep-storage key. Until the next release ships, confirm the change amount on a second device that checks change against a registered wallet, such as Jade or BitBox02, before you broadcast.

Jade Plus registers a multisig wallet over QR or USB, then checks receive addresses and validates change addresses during signing. Blockstream says it can hold up to eight 8-of-8 multisig setups. Its Bitcoin code comes from libwally, which makes it a clean pairing with any embit device.

What it cannot do: Liana says Jade supports miniscript in P2WSH wallets from firmware 1.0.30, not Taproot, and only over USB: a Jade set up in QR mode refuses USB, so Liana cannot reach it. Firmware 1.0.24 to 1.0.36 also had a buffer overflow in the descriptor registration command, fixed in 1.0.37. Blockstream says QR mode was never exposed and it knows of no exploitation. Current firmware is 1.0.41.

Best slot: the home key you sign with most often.

Krux turns off-the-shelf boards into air-gapped signers for single-sig and multisig wallets, signing over QR or SD card. Version 25.03.0 added Taproot and P2WSH miniscript with on-device policy and cosigner verification, and version 26.04.0 started rejecting impossible quorums such as 0-of-3. Current firmware is v26.09.0.

What it cannot do: Krux is embit-based, like SeedSigner and Specter DIY, so it takes the one embit slot in a kit. Liana cannot detect it, so you move PSBTs by SD card.

Best slot: the embit slot, if you want miniscript or Taproot multisig that SeedSigner cannot sign yet.

Jade runs the same firmware as Jade Plus, with the same multisig registration and change checks. Blockstream has it on sale for $67 against a $79 list price. It counts as the Blockstream slot, so never pair it with a Jade Plus or Jade Core in the same wallet.

Best slot: the Blockstream key in a budget kit.

Specter DIY's README says its main focus is multisig with other hardware wallets, using PSBTs and descriptors to import and export wallets, with QR codes as the default link. Version 1.10.5 made change-output classification require verified descriptor derivation.

What it cannot do: it uses embit, and you assemble it yourself from a discovery board and a QR scanner. SeedSigner vs Specter DIY covers which build is easier.

Best slot: the embit slot, for people who want a large touchscreen.

Jade Core runs Jade firmware but connects only by USB-C or Bluetooth, with no camera, so it cannot sign over QR. It is a fine cosigner over USB, and it still counts as the Blockstream slot.

Best slot: the Blockstream key for someone who signs at a desk over USB.

BitBox02 has supported multisig with account registration on the device since firmware 6.0.0. Shift Crypto lists single-sig and multisig support in Sparrow, Nunchuk, Electrum, Specter Desktop, and Bitcoin Safe, and Liana supports it for miniscript in P2WSH and Taproot. Its firmware is Shift Crypto's own, separate from both libwally and embit. Current firmware is v9.27.1.

What it cannot do: it signs only over USB, and Shift Crypto says the BitBox02 does not work on iPhone or iPad. Buy the Bitcoin-only edition; the two editions cannot be converted later.

Best slot: the third key that shares no code with the other two. See BitBox02 vs Jade Plus.

Passport Prime imports multisig setups, and KeyOS 1.3.0 added the crypto-output QR format for Sparrow. It runs Foundation's own KeyOS, so it adds a third code base next to libwally and embit.

What it cannot do yet, until you update: KeyOS 1.4.0 fixed bugs where Passport Prime could label attacker-controlled multisig outputs as change, and where repeated cosigner keys could lower your threshold. Foundation called it an important security update. Install 1.4.0 or later before you register a multisig. Liana does not list Passport Prime.

Best slot: the third key in an all-QR kit. See Passport Prime vs Jade Plus and BitBox02 vs Passport.

Trezor sells Bitcoin-only editions, and its Bitcoin-only firmware is a version that supports only BTC accounts. Trezor documents multisig in Electrum. In January 2026 Trezor disclosed a multisig fee-bump display bug that could mislead signers if an attacker controlled one signer and the other signers ran a compromised Trezor Suite. Trezor marks it resolved.

Best slot: a USB key from a separate code base, if you already own one. Do not pair it with OneKey.

OneKey's help center walks through building a multisig in Sparrow with its hardware. The firmware descends from Trezor's code, the parent company sells multi-coin devices, and OneKey documents nothing about storing a multisig setup on the device. It works as a cosigner. I would buy something higher on this list first.

The coordinator is the app that builds the multisig and passes transactions between devices. It is a separate choice from the hardware. For most people it should be Sparrow: set up Sparrow first, then add the devices. My multisig coordinator rankings compare Sparrow with the other apps.

Each kit uses three companies and at most one embit device. Prices, totals, and the reasoning for each slot are on my full kits for large holdings page.

Bitkey is a 2-of-3 out of the box: Bitkey says you hold two keys and the company holds one, and one key alone cannot move funds. That makes it a multisig product, and its site says nothing about adding the device as a cosigner to a multisig you build in Sparrow or Nunchuk. If you want a company holding one key, compare it with the collaborative custody services first.

I delisted it. Its seed-generation flaw is the clearest real-world case for mixing vendors, and the full sourced writeup and a free checker are on my warning page. If you already hold a Coldcard key in a multisig and generated its seed from March 2021 onward, read that page before anything else.

Competitor lists often name these for multisig. They work as cosigners, but they run firmware with code for other coins, so I do not recommend them.

Start with the slot you will use most. If you want one device that does QR and USB and remembers the multisig, that is Jade Plus. Add one embit device: SeedSigner if you only need native SegWit multisig, Krux if you want miniscript or Taproot. Fill the third slot with a different code base: BitBox02 Bitcoin-only over USB or Passport Prime over QR.

If you would rather keep Blockstream out of it entirely, pair SeedSigner with BitBox02 and Passport Prime. Then follow the multisig setup guide step by step.