Best Bitcoin multisig wallets: the coordinator apps

A multisig wallet locks your bitcoin to a rule such as "any 2 of these 3 keys" (see how a 2-of-3 works). The keys live on separate hardware wallets. The coordinator is the software in the middle: it collects each device's public key (the xpub), writes them into one output descriptor, shows you addresses, and builds unsigned transactions in the PSBT format for the devices to sign.

A coordinator never holds your private keys. If the app vanishes tomorrow, your bitcoin does not. What you need is the descriptor (or a BSMS file, the BIP129 format for the same information) plus enough seed phrases to meet the threshold. Every app below can import one.

I only rank Bitcoin-only apps that build a multisig from keys on your own hardware. Services that hold one of your keys for a fee belong on my collaborative custody page. If you still need the devices themselves, start with my hardware wallet rankings.

Sparrow talks to more Bitcoin-only hardware than any other coordinator I've used. Over USB it reaches BitBox02 and Jade through Lark, its hardware wallet library. For air-gapped devices, its multisig importers read files and QR codes from SeedSigner, Jade, Passport, Krux, and Specter DIY, plus standard BSMS files. You can connect it straight to your own Bitcoin Core node or to an Electrum server.

Version 2.5.6 also checks the signatures on unconfirmed incoming transactions, a fix ported from the Electrum advisory covered below.

Recovery without Sparrow: after you create a multisig, it shows the full descriptor and offers a Save PDF button. My Sparrow setup guide covers verifying the download. The limit: Sparrow's features page lists standard multisig script types and no timelock policies, so it has no built-in inheritance path.

Nunchuk runs on iOS, Android, and desktop, and its free plan includes DIY multisig wallets. Its device list covers Jade, BitBox, Passport, Krux, and SeedSigner among the Bitcoin-only wallets I review, and the home page says it has "Strictly no KYC."

Since July 2026, Nunchuk's phone apps can also hold USDT on the Liquid network, which my rule allows.

The paid plans add a key Nunchuk holds. Iron Hand is a 2-of-3 assisted wallet for $120 a year, and Honey Badger, at $480 a year, adds an inheritance key and two 2-of-4 wallets. Honey Badger offers an on-chain timelock, but in that mode every key must be Miniscript-compatible: among the Bitcoin-only devices I review, only Jade and BitBox02 make the list.

Recovery without Nunchuk: export the wallet configuration as a BSMS file, which Nunchuk calls the "sovereign backup" for restoring without its help. The limit: the timelock features cost money and narrow your hardware choices.

Liana, from Wizardsardine, builds wallets where a backup key can only spend after a delay you choose. Its site says "Timelocks are on by default." Your everyday keys spend as normal; if they are lost, or if you die, a recovery key held by you or an heir becomes usable once the timelock runs out. The community edition is free and open source, and Liana Business costs 0.016% of the bitcoin secured per month.

Liana's own signing device list names Specter DIY, BitBox02, Jade and Jade Plus, and Krux among Bitcoin-only devices. Krux signs by SD card, because Liana can't detect it over USB. Jade signs over USB in P2WSH (SegWit) wallets only: don't pick QR mode on the Jade during setup, and Taproot "is not yet available" in Jade's firmware. SeedSigner and Passport are not on the list.

That last point matters this month. Liana v16.0 makes Taproot the default in the installer. If one of your keys is a Jade, choose Segwit at that step. The limit: a shorter device list than Sparrow, and desktop only.

BlueWallet calls itself "Bitcoin only" and builds multisig vaults on iOS and Android, with a macOS app as the only desktop option. It connects to "Passport, Jade, Keystone and other PSBT-compatible hardware wallets."

The limit: no timelock option and no Windows or Linux app. It suits someone who wants to check a vault from a phone and sign with air-gapped devices.

Specter Desktop is built around Bitcoin Core and also connects to an Electrum server. Its device list includes SeedSigner, Specter DIY, Jade, BitBox02, and Passport. Swan's vault page tells customers they can import the vault recovery kit into Specter Desktop, which makes it a common recovery tool.

The limit: the last stable release was v2.1.11 on August 9, 2026, with 2.2.0 pre-releases after it, and no timelock features.

Bitcoin Keeper moved to a community-led model, and "All features are available to everyone without a subscription." It was originally built by BitHyve, and the code now lives at KeeperCommunity on GitHub.

Its signer types cover SeedSigner, Jade, Passport, BitBox02, Specter, and Krux, the widest set of any mobile coordinator here. An optional Inheritance Key and Emergency Key add delayed access paths, and a Keeper-assisted Server Key can co-sign but cannot spend alone. The limit: the project now depends on volunteer maintainers.

Electrum has done multisig for years and supports hardware wallets including BitBox02 and Jade. Caveat one: that support is on desktop. Hardware wallet support on Android is still an open request on Electrum's GitHub, so the Android app works as a watch-only or software-key wallet.

Caveat two: Electrum 4.8.3, released October 23, 2026, fixed a high-severity flaw (CVE-2026-117601) titled "Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it." A malicious server could swap your transaction for a fake one paying the attacker and wait for you to fee-bump it. Update to 4.8.4 or later, and check every output on the device screen before you sign.

Caravan is a stateless web app: it stores nothing, and you supply the wallet details each time. Unchained hosts a copy, and the code is MIT-licensed. Unchained's own concierge lists external recovery with Caravan or Sparrow among its services.

The limit: it connects directly to only a few devices, mostly multi-coin ones, and takes public keys and signatures as text from everything else. I keep it around to confirm that a descriptor produces the right addresses.

Each cell comes from the project's own documentation: Sparrow's importers and Lark, Nunchuk's device list, Liana's signing devices, Specter's docs, Keeper's signer types, and Electrum's hardware page. "Not listed" means the project doesn't name the device, so test with a small amount before you rely on it.

A plain 2-of-3 has one rule forever. Miniscript lets a wallet carry a second rule that switches on later, such as "after about a year without movement, this recovery key can spend." That gives heirs or a future you a way back in without handing anyone a key that works today.

Three apps here do it. Liana builds it into every wallet. Nunchuk's Honey Badger plan offers an on-chain timelock that removes Nunchuk's platform key from the picture once the date passes. Bitcoin Keeper adds Inheritance and Emergency Keys with delayed access. The catch is the hardware: each key in a timelocked wallet has to be able to sign miniscript, which today means Jade, BitBox02, Krux, and Specter DIY on Liana's list, and Jade and BitBox02 on Nunchuk's. For the legal and family side, see inheritance services compared.

Every multisig address is built from all of its public keys. Two seed phrases from a 2-of-3 are enough to sign, but without the third xpub no wallet can find your coins. Back up the descriptor or BSMS file next to each seed phrase.

Then test it. Import the descriptor into a second coordinator (Sparrow and Caravan are both free) and check that the first receive address matches. If it matches, you are no longer dependent on the app you started with.

Sparrow's best-practice guide recommends devices from different vendors in a multisig, and 2026 showed why. The Coldcard seed-generation flaw hit every device running the affected firmware at once. SeedSigner merged a fix in September for change checks that forged PSBT data could fool, and the latest release, 0.8.7 from July, predates it. Foundation patched multisig validation in KeyOS 1.4.0 for Passport Prime. With three vendors, one bug reaches one key. The full list is on my security incidents page.

The second habit: confirm receive addresses and every output on the device screens, never only in the app. A check of the outputs on the device would have caught the fake transaction in the Electrum server attack.

Some apps get called multisig wallets but fail the test for this list. No links to them here.

Every app above is free or close to it, and you hold every key. If you want a company to hold a backup key and help you recover, that is collaborative custody, and I compare those services on my collaborative custody page.

Picked an app? Now pick three devices from three vendors, all on its list. My multisig hardware wallet rankings compare the devices one by one.