Level 9 · Advanced technical layer

Advanced multisig, descriptors and recovery

Why seeds alone are insufficient and how descriptors, PSBTs and key origins preserve recoverability.

Article: 86
Reading time: 15 minutes
Reviewed: 10 September 2026

In a nutshell

Multisig divides authority among keys, but the full script—not the seed list—protects the funds. An output descriptor records the script type, threshold, public keys and derivations; a PSBT carries the context needed for coordinated signing.

M-of-N is only the start

A 2-of-3 policy can tolerate one lost key and needs two signatures. It does not prove that devices and backups are independent, or that every signer verified the same receiving address.

A descriptor says what to derive

Descriptors can encode the wrapper, threshold, public keys, fingerprints and derivation paths. A watch-only descriptor can reconstruct addresses and history but reveals financial metadata; a descriptor containing private keys is itself secret.

PSBT moves signing context

A PSBT may carry the unsigned transaction, previous outputs, scripts, derivations and partial signatures. It coordinates participants but does not make a malicious proposal safe; every signer must verify recipients, change and fee.

Recovery is a separate system

Seeds are insufficient if software does not know the full policy, key order and derivations. Back up the public wallet configuration separately, test recovery with a small amount and avoid exposing every secret to one device.

Level 9 · Advanced technical layer

Terms to know

Output descriptor: A machine-readable description of wallet scripts, keys and derivations.
PSBT: A format for exchanging an incomplete transaction and signing context.
Key origin: A fingerprint and path recording where a public key came from.

Common misconception

For 2-of-3, any two seed backups are enough.

A more accurate explanation

Reliable recovery also needs the complete descriptor or equivalent policy, all public keys, their order and derivation information.

A more accurate explanation

Is multisig always safer?

No. It removes a single-key failure only when devices, backups, verification and recovery are genuinely independent. Poor operations add new ways to lose access.

Key takeaways

01A threshold does not create independence by itself.
02The descriptor is part of recovery.
03PSBT coordinates data, not trust.
04Recovery should be tested in advance.

A child-friendly recap

In very simple terms

Multisig needs several keys, but secret words alone may not rebuild the wallet. A descriptor is the recipe that puts its keys and rules back together.

Reviewed: 10 September 2026