Key security

Multisig

Also called: Multi-signature wallet

A wallet that needs signatures from several separate keys, such as 2 of 3, before the network accepts a transaction.

A multisig wallet is enforced by the network itself: a transaction is valid only with the required number of signatures from a defined set of keys. Bitcoin supports it in its scripts; on Ethereum, it's done with smart-contract wallets such as Safe.

Strengths and costs:

  • No single key can move funds, and the rule is visible on-chain.
  • Every signer must take part in each transaction, so it's slow for high-volume payouts.
  • It's network-specific: each network does it differently, and some don't support it at all.
  • Fees are higher: more signatures, or contract calls, cost more.

Multisig suits treasuries and reserves. High-volume payouts usually use one key protected by strong policies, an MPC setup, or a hardware enclave.

On Valtu

Valtu wallets use one key per wallet held in a hardware enclave, not on-chain multisig. The "several people must agree" part is done with approval policies: payouts can require approvals from a named group, confirmed with passkeys, and with team signing on the enclave checks those approvals itself before it signs.

Related terms

Keep reading.

More in key security: HSM · Hardware enclave · Remote attestation · Enclave measurement · Reproducible build · Key ceremony · Shamir secret sharing. The whole glossary.

Put it into practice.

Every workspace starts on testnets with free test coins: same dashboard, same API. Go live when your team is ready.