Bitcoin Multisig for Estate Planning: The Institutional Standard

Every serious institutional Bitcoin holder uses multisig. The reasons are well-understood in the custody world: single-key Bitcoin is a single point of failure. If that key is lost, the Bitcoin is gone forever. If the key is stolen, the Bitcoin is gone forever. For an individual holding life-changing wealth in a hardware wallet, these risks are not theoretical — they are the central operational problem of Bitcoin ownership.

What is less often discussed is that single-key Bitcoin is also a single point of failure for succession. When a Bitcoin holder dies with funds secured by a single private key and that key is in a safe deposit box that heirs cannot immediately access, or in a hardware wallet that requires a PIN that no one knows, or in a passphrase-protected wallet documented only in an undiscoverable memory — the estate is in crisis. The funds may be permanently inaccessible. This outcome is more common than the industry acknowledges.

Multisig solves both problems simultaneously. It eliminates the single point of failure for both security and succession, distributes control across multiple parties and locations, and creates a structure that estate attorneys, trustees, and heirs can work with. This guide explains how to use multisig as the foundation of an institutional-grade bitcoin multisig estate plan — covering quorum design, trust integration, legal frameworks, real-world case studies, provider comparisons, and the specific trust provisions that make multisig work across generations.

At approximately $66,000 per Bitcoin in early 2026, the federal estate tax exemption under the OBBBA (One Big Beautiful Bill Act) of $15 million per individual / $30 million per married couple means a couple can transfer roughly 454 BTC free of estate tax. For holdings above those thresholds — or for anyone who expects Bitcoin to appreciate significantly — the custody architecture you choose today determines whether your heirs will actually receive the wealth you intend to transfer. Multisig is the only architecture that reliably solves this problem.

What Multisig Is: The Basic Mechanics

A multisignature (multisig) Bitcoin wallet requires multiple private keys to authorize a transaction, rather than a single key. A 2-of-3 multisig wallet generates three keys (or "extended public keys" at the descriptor level) and requires any two of the three to sign a transaction. No single key can move the Bitcoin alone.

This architecture achieves two things simultaneously:

• Redundancy against loss: If one key is destroyed, lost, or stolen, the other two keys can still access the Bitcoin. You can recover from losing one key without losing the funds.
• Security against theft: An attacker who obtains one key still cannot move any Bitcoin. They need two keys. Distributing keys geographically means an attacker must compromise multiple separate locations — a substantially higher barrier than compromising a single hardware wallet.

For estate planning, the redundancy property is what matters most. Heirs can access the Bitcoin after the holder's death as long as they can assemble two of the three keys, even if one is held by the deceased and temporarily inaccessible.

Technically, multisig is implemented using Bitcoin's native OP_CHECKMULTISIG opcode (for legacy and P2SH addresses) or through witness scripts (for P2WSH SegWit addresses). The wallet descriptor — a standardized string that encodes the quorum policy and all extended public keys — is the critical piece of information needed to reconstruct the wallet in any compatible software. This descriptor is public information (it cannot authorize transactions) and should be stored with estate documents for heir access.

The signing process uses Partially Signed Bitcoin Transactions (PSBTs) — a standard format (BIP-174) that allows a transaction to be passed between signers, each adding their signature independently. The first signer creates the PSBT, signs it with their key, and passes it to the second signer, who adds their signature to complete the quorum. This process can happen asynchronously and across geographic locations, which is precisely what makes it suitable for trust and estate structures where keyholders may be in different cities, states, or countries.

Why Single-Key Bitcoin Fails in Estate Planning

Before diving deeper into multisig configurations, it is worth understanding precisely why single-key Bitcoin — the setup most individual holders use — creates catastrophic estate planning failures. The failure modes are not edge cases. They are the default outcome when no plan exists.

Failure Mode 1: The Inaccessible Key

The holder dies. The hardware wallet is in a safe. The safe combination is known only to the holder. The cold storage seed phrase backup exists somewhere — possibly in a safe deposit box — but no one knows which bank, which branch, or which box. The executor spends months searching. If the backup is never found, the Bitcoin is permanently lost. Estimates suggest 3-4 million BTC (15-20% of all Bitcoin ever mined) are permanently inaccessible, much of it due to exactly this scenario.

Failure Mode 2: The Discoverable Key

The opposite problem: the holder stores the seed phrase in a location that is too accessible. A family member, house cleaner, home health aide, or anyone with physical access discovers the 24 words, imports the wallet on a phone, and transfers the Bitcoin before anyone notices. Single-key Bitcoin offers zero protection against this — anyone with the seed phrase has complete, irrevocable control. There is no "undo" button, no fraud department to call, no chargeback mechanism.

Failure Mode 3: The Probate Delay

Even if the key is accessible, the estate may be subject to probate — a court-supervised process that can take 6-18 months (or longer in contested estates). During probate, Bitcoin's price can move 50-80% in either direction. Assets held in probate cannot be sold, traded, or even moved to more secure custody. A properly structured trust avoids probate entirely, but single-key Bitcoin held outside a trust (titled to the individual, not the trust) may be stuck in probate limbo regardless of the holder's intentions.

Failure Mode 4: The Contested Key

Multiple heirs claim the right to access the Bitcoin. Without multisig, whoever physically possesses the hardware wallet or seed phrase has de facto control — regardless of what the will says. This creates a race condition: the first heir to access the key can transfer the Bitcoin irreversibly, and the legal system has no mechanism to reverse an on-chain transaction. Multisig eliminates this race condition by requiring quorum consensus for any transaction.

Quorum Structures for Different Family Situations

2-of-3: The Most Common Structure

The 2-of-3 quorum is the default institutional choice and appropriate for most Bitcoin families. Three keys are created and distributed across three parties or locations. Any two can sign. The holder keeps one key (on hardware, at their primary residence), a trusted family member or estate attorney holds a second key (at a different location), and a professional custodian or institutional service holds the third key.

In estate succession: the holder dies holding Key 1. Key 2 (trusted person) and Key 3 (professional custodian) together can access the Bitcoin immediately after death, without waiting for probate, without needing to recover Key 1 from the deceased's possessions.

The 2-of-3 structure is the foundation of collaborative custody services like Unchained and Casa, making it the most operationally mature multisig configuration. Estate attorneys are increasingly familiar with it, collaborative custody providers have built heir onboarding workflows around it, and the signing process is straightforward enough that non-technical trustees can participate with minimal training.

3-of-5: For Larger Families or Institutional Structures

A 3-of-5 quorum is appropriate for families with complex succession structures, significant holdings ($5M+ in Bitcoin), or multiple trustees. Five keys are distributed across five parties or locations; any three are needed to transact. This structure provides much higher redundancy — you can lose two keys and still access the funds — but is substantially more operationally complex. Periodic key signing exercises, annual verification of key accessibility, and clear documentation of all five keyholder locations are essential if you use 3-of-5.

For a Bitcoin family office in Wyoming directed trust holding significant Bitcoin, the 3-of-5 structure is worth the operational overhead. The Investment Director might hold two keys, the Administrative Trustee might hold one in escrow, a trusted family member holds one, and a backup custodian holds one. No single party can act unilaterally; the required coalition of three prevents both theft and unauthorized distribution.

2-of-5: Maximum Redundancy, Reduced Security Threshold

A 2-of-5 configuration provides extreme redundancy — three keys can be lost and the Bitcoin remains accessible. However, it also creates a lower security threshold: any two of five keyholders can conspire to move funds. This makes 2-of-5 appropriate only for situations where the primary risk is key loss rather than theft, and where all five keyholders are deeply trusted. In practice, 2-of-5 is used by some family offices as a "doomsday" configuration for backup wallets that hold a portion of the family's Bitcoin — the logic being that if a catastrophic event destroys three keys, the remaining two can still recover funds.

2-of-2: Married Couples Only, With Caution

A 2-of-2 requires both keys to sign. Both spouses hold a key, and any transaction requires both. This provides mutual control and prevents unilateral movement of assets, which has appeal for jointly-held Bitcoin. The severe drawback: if either spouse dies unexpectedly, the Bitcoin becomes inaccessible unless the surviving spouse can recover the deceased's key. For married couples who want mutual control, a 2-of-3 with the third key held by an estate attorney is significantly safer. See our dedicated section on multisig for married couples below.

4-of-7: Board-Level Governance

For family offices with formal governance structures, a 4-of-7 or 5-of-7 quorum mirrors a board vote — a majority of keyholders must agree before any transaction is authorized. This is the quorum structure used by some Bitcoin treasuries and institutional funds. The operational complexity is significant: seven hardware wallets must be maintained, seven keyholders must be available for periodic signing exercises, and the trust document must address what happens when a keyholder leaves the board. For most families, 3-of-5 provides sufficient governance without the overhead of 4-of-7.

Quorum Configuration Comparison: Which Is Right for Your Family?

The quorum structure — the ratio of required signatures to total keys — is the most consequential design decision in multisig estate planning. Each configuration makes a different tradeoff between security, complexity, and inheritance reliability:

The 2-of-3 configuration is correct for most Bitcoin families because it: eliminates the single-key loss risk without requiring coordination of three parties for routine transactions; allows collaborative custody services (Unchained, Casa) to hold one key; distributes the other two geographically; and is well-understood by estate attorneys, successor trustees, and Bitcoin custody professionals.

Multisig vs. Single-Sig: Estate Outcomes Compared

The difference between single-sig and multisig becomes starkest when you examine specific estate scenarios. The table below compares outcomes across the most common failure events in Bitcoin estate administration:

In every scenario that matters for estate planning — death, incapacity, theft, fire, domestic disputes, probate delays — multisig produces a dramatically better outcome than single-sig. The question is not whether to use multisig for estate-relevant Bitcoin holdings. The question is which quorum structure and which custody partners to select.

Best Quorum Configuration by Family Size and Holdings

The optimal multisig configuration depends on your family structure, the number of trusted parties available to hold keys, and the value of the Bitcoin holdings. Here is our recommendation framework:

Geographic Distribution: The Three-Location Rule

The security benefit of multisig is diminished if multiple keys are kept at the same location. If your house burns down and Keys 1 and 2 are both in a home safe, you have a 2-of-3 multisig that has effectively become single-key with respect to fire risk. The institutional practice is to maintain at least three geographically distinct key locations, following what practitioners call the three-location rule:

• Location 1: Primary residence (one key, hardware wallet)
• Location 2: Secure offsite location (second key — bank safe deposit box, secure storage facility, or attorney's office)
• Location 3: Professional custodian (third key held by Unchained Capital, Casa, or similar institutional service)

For families with multi-state or international footprint, geographic distribution should reflect actual risk geography — not just different rooms or buildings within the same city, which shares risks of regional natural disasters and infrastructure failures.

Geographic Distribution for 3-of-5 Configurations

For 3-of-5 setups, the geographic distribution framework expands to five locations across at least three distinct jurisdictions:

• Location 1: Primary residence (holder's key)
• Location 2: Spouse's separate secure location (different building, ideally different city)
• Location 3: Estate attorney's secure storage (different state preferred)
• Location 4: Professional custodian (institutional vault — Unchained, Casa, etc.)
• Location 5: International vault or second professional custodian (different country for jurisdictional diversification)

Each location should be in a different natural disaster zone. Keys 1 and 2 should never share the same flood plain, earthquake fault line, or hurricane corridor. For families with international exposure, placing one key outside the United States provides a structural hedge against domestic seizure risk — though this must be balanced against the operational complexity of accessing an international key when needed for time-sensitive transactions.

Case Study: The $66M Home Invasion — Why Multisig Defeats Physical Attack

How Multisig Would Have Prevented This

In a 2-of-3 multisig configuration, the victim's home key is one of three. Even under coercion, the attacker can only obtain one signature. The second key — held at a different location by a different party — is physically inaccessible to the attacker. The transaction cannot be completed.

More importantly, the attacker knows the transaction cannot be completed. If multisig custody is widely adopted, the economic incentive for home invasion drops dramatically because the attack vector is structurally neutralized. The victim can truthfully say: "I only hold one key. I physically cannot move the Bitcoin from this location." This is not a bluff or a social engineering defense — it is a cryptographic reality.

Implications for Estate Planning

The $66M robbery case has direct estate planning implications beyond physical security:

• Duress provisions: Trust documents should include a duress protocol — if the investment direction advisor is coerced, the remaining keyholders should have standing instructions to not sign any transaction initiated during a suspected duress event. A "cooling off period" of 24-72 hours for large transactions provides structural protection.
• Public visibility risk: Bitcoin holders with publicly known wealth face elevated physical risk. The asset protection trust should anonymize ownership — the trust name should not reference the family, the trust's situs should be in a different state from the family's residence, and the trust should not appear in any public filing that connects it to identifiable individuals.
• Insurance integration: Kidnap & ransom (K&R) insurance, while traditionally associated with corporate executives, is increasingly relevant for publicly identified Bitcoin holders. The trust should carry K&R coverage that explicitly includes digital asset extortion scenarios.

Case Study: The Hong Kong Seed Phrase Theft — Why Multisig Defeats Domestic Theft

How Multisig Would Have Prevented This

In a 2-of-3 multisig where each spouse holds one key and a neutral third party (estate attorney or custodian) holds the third, neither spouse can unilaterally transfer Bitcoin. The photographed seed phrase — even if it compromises one key — cannot authorize a transaction without a second key held elsewhere.

This structural protection is vastly more reliable than behavioral trust. People change. Marriages end. Financial stress creates incentives that didn't exist when the marriage was healthy. Multisig converts a behavioral trust problem (will my spouse act honestly?) into a structural guarantee (my spouse cannot act unilaterally regardless of intent).

Implications for Prenuptial and Divorce Planning

• Prenuptial agreements should specify the multisig configuration, including which party holds which keys, what happens to key allocation upon divorce, and which party retains the relationship with the collaborative custody provider.
• Divorce proceedings: In contested divorces, the court can appoint a neutral third party as a keyholder replacement — the professional custodian's key can be reassigned to a court-appointed receiver, effectively freezing the Bitcoin until property division is complete. This is structurally impossible with single-key custody. See our full guide to Bitcoin and divorce.
• Concealment prevention: Multisig creates a structural audit trail. The wallet descriptor is known to multiple parties. The blockchain shows all transactions. It is substantially harder to conceal Bitcoin held in a multisig trust than Bitcoin held in an undisclosed single-key wallet.

What Happens to Multisig in an Estate

When a keyholder dies, the quorum structure determines what happens next. In a 2-of-3 where the holder is Key 1, Keys 2 and 3 can immediately sign transactions — meaning heirs can access and transfer the Bitcoin using the surviving keys. The dead keyholder's key is not needed for transactions, only for spending. This is the feature that makes multisig so powerful for succession: death of one keyholder does not freeze the estate assets.

The estate administration process for multisig Bitcoin follows a specific sequence:

1. Death notification: The executor or successor trustee notifies all keyholders of the holder's death and provides the death certificate.
2. Wallet reconstruction: Using the wallet descriptor stored with estate documents, the executor reconstructs the wallet in compatible signing software (Sparrow, Electrum, or the collaborative custody platform).
3. Balance verification: The executor confirms the Bitcoin balance and documents it for estate tax purposes. For estates above the $15M individual / $30M couple exemption (under OBBBA), the alternate valuation date election (6 months post-death) may be strategically important if Bitcoin's price has declined.
4. Distribution authorization: The distribution trustee or executor authorizes distribution per the trust terms or will provisions.
5. PSBT signing: The remaining keyholders create and sign a PSBT to transfer Bitcoin to the beneficiaries' wallets.
6. Key rotation: After distribution, a new multisig wallet is created with the beneficiaries' new keyholder set, and any remaining trust Bitcoin is transferred to the new wallet.

After the estate is administered and Bitcoin is transferred to its ultimate owners (direct heirs or trust beneficiaries), the new custody structure should be rebuilt from scratch. The old wallet descriptor — which includes all three original extended public keys — should be retired. A new multisig wallet is created with the new keyholder set, and the Bitcoin is transferred to the new wallet. This process is called a key rotation, and it should occur whenever a keyholder dies, resigns, becomes incapacitated, or otherwise leaves the key structure.

Stepped-Up Basis and Multisig

When Bitcoin passes through an estate at death, the beneficiary receives a stepped-up cost basis equal to the fair market value on the date of death (or the alternate valuation date, if elected). This eliminates the capital gains tax that would have been owed if the holder had sold during their lifetime. For a holder who acquired Bitcoin at $1,000 and dies when it's worth $66,000, the $65,000/BTC of unrealized gain disappears entirely.

Multisig does not change the stepped-up basis mechanics, but it ensures the basis step-up is actually usable — meaning the Bitcoin can actually be accessed, valued, and distributed. A stepped-up basis on Bitcoin that's locked in an inaccessible wallet is worthless. This is one of the most underappreciated benefits of multisig estate planning: it protects not just the Bitcoin itself, but the tax benefit that comes with proper estate succession.

Documenting Multisig for Heirs

The central documentation challenge of multisig is that heirs need to know enough to access the Bitcoin after your death, but the information needed to access the Bitcoin — if provided to the wrong person or in an insecure way — could enable theft during your lifetime. The solution is a separation of information layers:

• The wallet descriptor (XPUB set): The wallet descriptor contains the extended public keys for all signers and the quorum policy. This information is needed to reconstruct the wallet in signing software and identify which keys are needed. The descriptor is not sufficient to sign transactions — it cannot move funds. It should be stored with your estate documents, accessible to your executor.
• The individual key material (hardware wallets + PINs + passphrases): Each keyholder secures their own key independently. Your key is documented separately and secured under your own protocols. Your heirs need to locate and access your hardware wallet; the other keyholders provide their keys when needed for estate transactions.
• The Letter of Instruction: A plain-language document (not a legal document, not part of the will) that tells your executor and heirs how to access the Bitcoin, where each key is located, who to contact for each key, and the step-by-step process for combining keys to transact. This document should be updated whenever the multisig structure changes.

The Three-Envelope Method

A practical approach to multisig documentation for families is the three-envelope method:

• Envelope 1 — Estate Attorney: Contains the wallet descriptor, the Letter of Instruction, the contact information for all keyholders, and the trust provisions governing Bitcoin custody. This envelope is opened upon death or incapacity. The attorney does not hold a signing key — they hold the map to the keys.
• Envelope 2 — Safe Deposit Box: Contains a backup of the holder's key material (seed phrase on steel, not paper). This envelope is accessible only with the holder's safe deposit box key — which is a physical object documented in the Letter of Instruction and accessible to the executor.
• Envelope 3 — Trusted Family Member: Contains a simplified version of the Letter of Instruction — enough for the family member to contact the estate attorney and the collaborative custody provider, but not enough to independently access the Bitcoin. This is the "break glass" document for when the estate attorney is unreachable.

The Letter of Instruction for Multisig

The PIN, seed phrase, and passphrase are what actually control your key. These should be stored separately — typically in a sealed envelope in a safe deposit box, in a fireproof safe, or with a trusted third party under specific protocols — and never in the same document or location as the Letter of Instruction.

The Directed Trust + Multisig Model

For families holding Bitcoin within a Wyoming directed trust, multisig and directed trust structure work together as a single institutional custody architecture. The Investment Director role — which has authority over Bitcoin custody and transactions — is typically held by a professional service that maintains one or more keys in the multisig quorum. The trust beneficiaries or a distribution advisor may hold another key. The Administrative Trustee holds no keys (appropriate, since they have no investment authority) but maintains the wallet descriptor and documentation for estate administration purposes.

This structure means that any transaction requires coordination between the Investment Director and at least one other quorum participant, preventing unilateral action. The trust document specifies the multisig policy and the keyholder roles. The Administrative Trustee can confirm to heirs and courts that the trust holds Bitcoin, what the wallet structure is, and who the authorized keyholders are — without holding any key material themselves.

Why Directed Trust is Essential for Multisig

A standard (non-directed) trust creates a dangerous mismatch: the trustee has a fiduciary duty to manage trust assets, but a standard corporate trustee typically has no Bitcoin custody capability, no understanding of multisig, and no infrastructure for holding hardware wallet keys. The result is either (a) the trustee refuses to accept Bitcoin, (b) the trustee liquidates the Bitcoin to fiat, or (c) the trustee mismanages the custody architecture.

The directed trust statute solves this by separating the roles:

• Investment Direction Advisor (IDA): A Bitcoin-competent individual or firm that holds signing authority over the multisig keys. The IDA is not a fiduciary in the traditional sense — they act on the family's investment direction, not their own judgment. This allows a family member or Bitcoin-native advisor to manage custody without being a regulated trustee.
• Administrative Trustee: A corporate trustee (bank or trust company) that handles tax filings, distribution documentation, regulatory compliance, and record-keeping. The administrative trustee never touches the Bitcoin — they administer the trust wrapper.
• Distribution Advisor: An optional role that controls when and how distributions are made to beneficiaries. This can be a family member or trusted advisor.

This three-role model maps perfectly onto a 3-of-5 multisig: the IDA holds two keys, the distribution advisor holds one key, the collaborative custody provider holds one key, and a geographic backup key is stored in a vault. No single party can transact. The administrative trustee verifies the quorum structure and documents it for fiduciary records — but holds no signing authority.

Worked Example: Family of 4 — 2-of-3 Multisig Inside an Irrevocable Trust

Step 1: Trust Structure Selection

The Martinezes establish a Wyoming irrevocable trust — the Martinez Family Bitcoin Trust — with the following roles:

• Grantor: David Martinez (the person transferring Bitcoin to the trust)
• Investment Direction Advisor: David Martinez (retains custody authority over Bitcoin)
• Successor IDA: Sofia Martinez (takes over custody authority if David is unable to serve)
• Administrative Trustee: Wyoming Trust & Estate Services, Inc. (a corporate trustee licensed in Wyoming)
• Distribution Advisor: Elena Martinez
• Beneficiaries: Sofia Martinez and Marco Martinez, in equal shares
• Trust Protector: Family attorney with power to modify administrative provisions, replace trustees, and authorize technology migrations

Step 2: Multisig Configuration

The trust document specifies a 2-of-3 multisig custody architecture with the following key allocation:

• Key 1: David Martinez (IDA) — Coldcard Mk4 hardware wallet, stored at primary residence in Portland, Oregon
• Key 2: Unchained Capital — collaborative custody key, stored in Unchained's institutional vault in Austin, Texas
• Key 3: Geographic backup — Coldcard Mk4 hardware wallet, stored in a safe deposit box at First National Bank, Cheyenne, Wyoming (the trust's situs state)

Step 3: What the Trust Document Says

The trust document includes the following Bitcoin-specific provisions (summarized):

Step 4: Transfer to Trust

David creates the 2-of-3 multisig wallet using Unchained's platform. He verifies the wallet descriptor, records it in the Letter of Instruction, and stores a copy with the Administrative Trustee. He then transfers 100 BTC from his personal wallet to the trust's multisig wallet.

This transfer is a completed gift for estate tax purposes. At $66K/BTC, the 100 BTC transfer uses $6.6M of David's $15M lifetime gift/estate tax exemption (under OBBBA), leaving $8.4M of exemption for future transfers. All future appreciation — if Bitcoin reaches $200K, $500K, or $1M — occurs outside David's taxable estate. The trust beneficiaries (Sofia and Marco) will eventually receive the Bitcoin without estate tax, regardless of how much it appreciates.

Step 5: What Happens at David's Death

1. Elena (Distribution Advisor) notifies the Administrative Trustee and Unchained of David's death.
2. Sofia (Successor IDA) assumes custody authority per the trust document.
3. Sofia contacts Unchained to initiate key rotation — replacing David's key (Key 1) with Sofia's new Coldcard key.
4. Unchained verifies Sofia's identity and Successor IDA status with the Administrative Trustee.
5. Using Key 2 (Unchained) and Key 3 (geographic backup), Sofia creates a new 2-of-3 wallet with her key as the new Key 1.
6. The remaining trust Bitcoin is transferred to the new wallet. The old wallet is retired.
7. The Administrative Trustee updates trust records with the new wallet descriptor and keyholder information.

The entire process occurs without probate, without court involvement, and without any delay in access to the Bitcoin. The successor structure is predefined in the trust document. The multisig architecture ensures that even during the transition period — after David's death but before the key rotation is complete — the Bitcoin remains accessible via Keys 2 and 3.

Step 6: How Heirs Eventually Access Funds

When Elena (Distribution Advisor) authorizes distributions to Sofia and Marco — whether as regular distributions during the trust's existence or as final distributions upon trust termination — the process is:

1. Elena sends written distribution authorization to Sofia (IDA) specifying the amount and recipient wallet addresses.
2. Sofia creates a PSBT in Sparrow Wallet (or Unchained's platform) specifying the distribution amounts.
3. Sofia signs the PSBT with her Coldcard (Key 1).
4. Sofia submits the PSBT to Unchained for the second signature (Key 2).
5. Unchained verifies the distribution authorization, confirms the receiving addresses, and co-signs the PSBT.
6. The fully-signed transaction is broadcast to the Bitcoin network.
7. Sofia records the TXID, amount, and date in the trust's transaction log.

Bitcoin-Specific Trust Provisions for Multisig

Standard trust documents — drafted for stocks, bonds, real estate, and bank accounts — are grossly inadequate for Bitcoin held in multisig. The trust document must address Bitcoin's unique custody characteristics explicitly. The following provisions should be included in any trust holding Bitcoin in multisig:

Key Rotation Clause

The key rotation clause is the single most important Bitcoin-specific provision in any trust document. Without it, a deceased keyholder's key remains "in play" indefinitely — creating a degraded security posture that grows more dangerous over time as the deceased's key material may be discovered by unauthorized parties during estate administration.

Keyholder Succession

Without a keyholder succession schedule, the death of a keyholder triggers an ad hoc search for a replacement — a process that may take weeks or months during which the trust's custody architecture is degraded. The succession schedule ensures that replacement keyholders are pre-identified, pre-vetted, and available to assume their role immediately.

Technology Migration Authority

This provision is essential for dynasty trusts that may span 100+ years. Without it, the trust may be legally unable to upgrade its custody technology as Bitcoin evolves — potentially trapping funds in an obsolete wallet format that future signing software cannot support.

Geographic Distribution Requirements

Signing Threshold Provisions

Annual Verification Requirement

Signing Ceremony Requirements

A signing ceremony is the operational process of authorizing a multisig Bitcoin transaction. For trust-held Bitcoin, signing ceremonies should follow a formal protocol that creates an audit trail meeting fiduciary standards:

Pre-Signing

1. Distribution authorization: The Distribution Advisor provides written authorization specifying the amount, recipient, and purpose of the transaction.
2. Address verification: At least two parties independently verify the receiving address — checking character-by-character against a previously confirmed address, or using a new address that has been communicated through two separate channels (e.g., email and phone call).
3. Amount confirmation: The IDA confirms the BTC amount and its current USD value, and verifies that the transaction is consistent with the trust's distribution schedule.

Signing

1. PSBT creation: The first signer creates the PSBT in compatible wallet software, specifying the inputs, outputs, and fee rate.
2. First signature: The first signer signs the PSBT with their hardware wallet. The PSBT is exported (via microSD for air-gapped devices, or via QR code).
3. PSBT transfer: The partially-signed PSBT is securely transferred to the second signer. For geographically distributed keyholders, this may be via encrypted file transfer or physical microSD card.
4. Second signature: The second signer imports the PSBT, verifies all transaction details independently, and adds their signature.
5. Broadcast: The fully-signed transaction is broadcast to the Bitcoin network.

Post-Signing

1. Confirmation: Wait for at least 3 confirmations (approximately 30 minutes) before considering the transaction final.
2. Documentation: Record the TXID, block height, amount, fee, date/time, purpose, authorizing party, and both signers in the trust's transaction log.
3. Notification: Notify the Administrative Trustee and the Distribution Advisor that the transaction has been completed.

Hardware Wallet Standards for Trust Multisig

The hardware wallet selection for trust-held multisig is a critical infrastructure decision. The trust document should specify hardware wallet standards, and the Letter of Instruction should document the exact make, model, and firmware version of each device in the quorum.

Recommended Hardware Wallets for Multisig

• Coldcard Mk4 / Coldcard Q: The gold standard for multisig. Air-gapped (microSD or NFC transfer), Bitcoin-only firmware, full PSBT support, and the most battle-tested multisig implementation in the industry. The Coldcard Q adds a QWERTY keyboard and larger display for easier PSBT verification. Recommended for the primary keyholder and the geographic backup key.
• Trezor Model T / Trezor Safe 3: Open-source firmware (fully auditable), strong Sparrow Wallet integration, and broad multisig compatibility. Recommended as a secondary key in the quorum — using a different manufacturer from the primary key eliminates correlated firmware vulnerabilities.
• Blockstream Jade: Air-gapped operation via camera (QR-based PSBT transfer), good Sparrow integration, and a lower price point. Suitable for the third key position in a 2-of-3 quorum.
• Foundation Passport: Open-source, air-gapped, and designed specifically with multisig as a primary use case. Strong privacy features including Tor support for blockchain queries.

Hardware Diversity Rule

Each key in the multisig quorum should use a different hardware wallet manufacturer. If all three keys are on Coldcard devices and a firmware vulnerability is discovered in the Coldcard platform, all three keys are simultaneously compromised. Using Coldcard + Trezor + Jade (or any three different manufacturers) ensures that a vulnerability in any single vendor's firmware affects at most one key — which is insufficient to breach the quorum.

Hardware Wallet Lifecycle

Hardware wallets are physical devices with finite lifespans. The trust document should address:

• Replacement schedule: Hardware wallets should be replaced every 5-7 years, or sooner if the manufacturer discontinues firmware support. Key rotation should coincide with hardware replacement.
• Firmware updates: The IDA should apply firmware updates within 30 days of release, after verifying the update on the manufacturer's official channels. Each firmware update should be documented in the trust's custody log.
• Battery replacement: Some hardware wallets have internal batteries that may fail over time. The annual signing ceremony should include a battery health check.
• Seed phrase steel backups: Each hardware wallet's seed phrase should be stamped on steel (not written on paper) using products like Cryptosteel, Billfodl, or SeedPlate. Steel backups survive fire, flood, and time — paper does not.

Multisig Vendors and Platforms

Unchained — 2-of-3 Collaborative Custody

Unchained Capital is the leading institutional provider of collaborative multisig custody. In a typical Unchained arrangement, the client holds two keys and Unchained holds one. Clients can transact independently with their two keys; Unchained's key is a backup and can be used (with identity verification) if the client loses one key. Unchained provides explicit estate planning support, including key recovery procedures for heirs and executor documentation. For Bitcoin families using 2-of-3, Unchained is the default institutional choice.

Unchained's trust compatibility is strong: they support both revocable and irrevocable trust accounts, provide documentation for administrative trustees, and have a dedicated inheritance protocol that onboards successor keyholders after a death. Their concierge tier includes direct phone support for executors and successor trustees — a critical feature for non-technical fiduciaries who need to navigate multisig during a stressful estate administration.

Onramp — Bitcoin-First Wealth Management

Onramp provides collaborative custody with a wealth management overlay. Their multisig structure is similar to Unchained (client holds majority of keys), but Onramp adds financial planning services, tax optimization guidance, and estate planning coordination. For families who want a single provider handling both custody and financial advisory, Onramp is a compelling option. Their fee structure is AUM-based rather than flat-fee, which may be more economical for larger holdings.

Casa — Multi-Key With Mobile Key Option

Casa offers a 3-key structure with a mobile app key, hardware wallet key, and Casa key, as well as higher-tier plans with 5-key structures. Casa is oriented toward security-conscious individuals rather than pure institutional structures, but its estate planning documentation and key recovery services are solid. Appropriate for holders who want institutional-grade security with a consumer-friendly interface.

Casa's unique advantage is the mobile key — a key stored on the user's phone that enables quick transactions for smaller amounts without pulling out a hardware wallet. For trust structures, the mobile key is typically assigned to the IDA for routine transactions, with the hardware wallet key and Casa key providing institutional-grade security for larger distributions.

Nunchuk — Full-Featured Multisig Platform

Nunchuk is a dedicated multisig wallet platform that supports any quorum configuration (2-of-3, 3-of-5, 4-of-7, etc.) with any combination of hardware wallets. Unlike Unchained and Casa, Nunchuk does not hold any keys — it is a coordination platform for self-managed multisig. Nunchuk provides collaborative features including shared wallets, PSBT passing between co-signers, and transaction approval workflows.

For sophisticated family offices that want full self-custody with no third-party key dependency, Nunchuk provides the best coordination infrastructure. The trade-off is that key recovery and heir support are entirely the family's responsibility — there is no institutional backup.

Sparrow Wallet — Self-Managed Multisig

Sparrow Wallet is a desktop Bitcoin wallet with robust multisig support that does not require a third-party custodian. Sophisticated users can construct any quorum structure and manage all keys themselves, using hardware signers from Coldcard, Trezor, Ledger, or other devices. Sparrow is appropriate for technically proficient holders who want full self-custody with no third-party key dependency. The trade-off: operational discipline requirements are substantially higher, and key recovery procedures for heirs must be documented more rigorously since there is no institutional backup.

Multisig Provider Comparison

Collaborative Custody vs. Self-Custody in Trusts

The fundamental custody decision for trust-held Bitcoin is whether to use a collaborative custody provider (Unchained, Onramp, Casa) or to self-manage all keys (using Sparrow, Nunchuk, or similar tools). Both approaches use multisig — the difference is whether a professional third party holds one of the keys.

When to Use Collaborative Custody

• The trust has non-technical successors: If the successor IDA or successor trustee is not deeply familiar with Bitcoin custody, the collaborative custody provider's heir onboarding and support services are essential. Unchained and Onramp can walk a successor through the entire key recovery and transition process — something that Sparrow cannot.
• The trust needs institutional documentation: Collaborative custody providers generate institutional-grade reports, transaction histories, and key verification records that administrative trustees need for fiduciary compliance. Self-managed multisig requires the family to create all of this documentation themselves.
• The trust holds $1M+ in Bitcoin: For significant holdings, the insurance coverage and operational backup that collaborative custody provides is worth the annual fee. The risk of a documentation error or key loss in a fully self-managed setup increases with the value at stake.

When to Self-Manage

• The family has dedicated security personnel: Multi-generational family offices with a CTO or security officer can manage all keys internally, eliminating third-party dependency. This requires institutional-grade operational security practices — not a DIY hobby project.
• The family prioritizes sovereignty above all: Some Bitcoin holders have a principled commitment to holding all their own keys, with no third-party key dependency under any circumstances. For these families, self-managed multisig via Sparrow or Nunchuk is the only acceptable option.
• The trust holds Bitcoin across multiple jurisdictions: If the trust's Bitcoin is distributed across international jurisdictions, a single collaborative custody provider may create unwanted jurisdictional concentration. Self-managed keys can be distributed across any number of countries.

Insurance for Multisig Bitcoin

Insurance for Bitcoin held in multisig is available but remains a developing market. The key insurance considerations for trust-held multisig Bitcoin are:

What Collaborative Custody Providers Insure

Unchained, Onramp, and Casa carry insurance policies covering their key — specifically, coverage for theft or loss of the key they hold in their institutional vault. This coverage typically does not extend to the client's keys. If a client loses both of their keys in a 2-of-3 setup, the provider's insurance does not cover the resulting loss. The insurance protects against the provider's failure, not the client's.

Specialty Bitcoin Insurance

For Bitcoin in cold storage or multisig, specialty insurers offer several policy types:

• Crime/Specie policies: Cover theft, fraud, or unauthorized access to Bitcoin. Providers include Evertas, Breeze, and certain Lloyd's of London syndicates. Premiums typically run 1-2% annually for $1M+ coverage, with higher rates for self-managed custody (no collaborative custodian) and lower rates for institutional multisig setups.
• Errors & Omissions (E&O): Cover losses due to operational errors — wrong addresses, failed key rotations, firmware update mishaps. E&O is particularly relevant for trust-held Bitcoin where the IDA has a fiduciary duty and operational errors could trigger personal liability.
• Directors & Officers (D&O): For Wyoming PFTCs and family offices, D&O coverage protects the directors and officers against claims arising from Bitcoin custody decisions. Given the novelty of Bitcoin custody fiduciary standards, D&O coverage is a prudent layer.

Trust Document Insurance Requirements

The trust document should specify minimum insurance requirements for any third-party keyholder:

Legal Framework: How Courts Treat Multisig

The legal treatment of multisig Bitcoin — particularly the question of who "controls" Bitcoin in a multisig arrangement — is evolving rapidly as states adopt the Uniform Commercial Code (UCC) Article 12 amendments and as courts encounter Bitcoin in trust, divorce, and estate disputes.

UCC Article 12: "Control" of Digital Assets

UCC Article 12 (now adopted by Wyoming, Texas, and a growing number of states) defines "control" of a controllable electronic record (CER) — which includes Bitcoin — as the ability to (a) avail oneself of substantially all the benefit of the record, (b) have exclusive power to prevent others from obtaining substantially all the benefit, and (c) have the ability to transfer control to another person.

In a 2-of-3 multisig arrangement, no single keyholder meets this definition of "control." A single keyholder cannot avail themselves of the benefit (they can't sign a transaction alone) and cannot prevent others from doing so (the other two keyholders can transact without them). This has several important legal implications:

• Creditor claims: A creditor who obtains a judgment against one keyholder cannot "seize" the Bitcoin by levying on that keyholder's key alone. They would need to obtain a court order compelling a quorum of keyholders to sign — which may involve parties who are not the debtor and who may be in different jurisdictions.
• Divorce proceedings: In a divorce, a court cannot simply order one spouse to "hand over the Bitcoin" if that spouse holds only one key in a multisig. The court must order sufficient keyholders to cooperate — and if one key is held by a third party (like a collaborative custody provider), that party becomes relevant to the proceedings.
• Estate administration: For probate purposes, the executor "controls" the Bitcoin only if they can assemble a quorum of keys. If the deceased held one key and the other keyholders are outside the probate court's jurisdiction, the estate administration becomes significantly more complex — or, in a properly structured trust, entirely unnecessary (because the trust avoids probate).
• Trust situs: The question of where multisig Bitcoin is "located" for jurisdictional purposes is unsettled. Under UCC Article 12, control determines location — but if control is distributed across three keyholders in three states, the Bitcoin's situs may follow the trust's situs (as specified in the trust document) rather than the physical location of any key.

Fiduciary Implications

For trustees and investment direction advisors, multisig creates a structural enforcement of prudent man standards. The requirement that multiple parties must agree before any transaction mirrors the dual-control requirements in traditional banking and institutional asset management. A trustee who holds all keys in a single-sig wallet has unchecked unilateral power — which creates both temptation and liability. A trustee who holds one key in a multisig quorum has structural accountability built into every transaction.

Courts have not yet ruled extensively on whether multisig satisfies fiduciary duty standards for digital asset custody. However, the structural analogy to dual-control requirements in banking suggests that courts will view multisig favorably — and may eventually view single-sig custody by a trustee as a breach of the duty of care, particularly for large holdings.

Multisig + Quantum Resistance: BIP-360 Migration

The emergence of quantum computing poses a long-term risk to Bitcoin's current cryptographic signature scheme (ECDSA using the secp256k1 curve). While practical quantum attacks on Bitcoin are not imminent (current quantum computers are far from the scale needed to break secp256k1), estate plans — particularly dynasty trusts spanning 100+ years — must account for the possibility that quantum computers capable of breaking current cryptography will exist within the trust's lifespan.

BIP-360: Pay to Quantum Resistant Hash (P2QRH)

BIP-360 is a proposed Bitcoin protocol upgrade that would add quantum-resistant signature schemes to Bitcoin, allowing wallet holders to migrate their funds to quantum-safe addresses. For multisig estate plans, BIP-360 is significant because:

• Multisig migration path: BIP-360 would allow a multisig wallet to migrate to a quantum-resistant format while preserving the quorum structure. A 2-of-3 multisig using ECDSA keys would become a 2-of-3 multisig using post-quantum signature keys — the trust structure doesn't change, only the underlying cryptography.
• Migration authority: The trust document's "Technology Migration Authority" provision (described above) gives the IDA the power to execute this migration when it becomes available — without requiring a trust amendment, court approval, or beneficiary consent.
• Extended public key replacement: Migrating to quantum-resistant signatures would require generating new extended public keys for each signer. This is operationally identical to a key rotation — a process the trust should already be familiar with from annual verification exercises.

Quantum Timeline and Estate Planning

The current consensus among cryptographers is that quantum computers capable of breaking Bitcoin's ECDSA signatures are 15-30+ years away. For a revocable trust or a trust with a defined termination date within 20 years, quantum risk is a monitoring item — not an urgent action item. For dynasty trusts with perpetual or 150+ year terms (permitted in Wyoming, South Dakota, and several other states), quantum migration is an architectural requirement that must be built into the trust's technology governance framework.

Multisig Key Management for Dynasty Trusts (100+ Years)

A Bitcoin dynasty trust in Wyoming or South Dakota can exist in perpetuity — theoretically forever. The practical question for multisig is: how do you maintain a key management system that survives across multiple generations, multiple technological revolutions, and multiple changes in the legal landscape?

The 100-Year Key Problem

Consider the operational challenges of a multisig dynasty trust established in 2026 and designed to last until 2126+:

• Hardware obsolescence: The Coldcard Mk4 you buy today will not exist in 20 years. The USB standard it uses may not exist in 40 years. The microSD cards it reads may not exist in 60 years. The trust must be able to migrate to successor hardware platforms — repeatedly — over its lifetime.
• Software obsolescence: Sparrow Wallet, Unchained's platform, and every other software tool in the current ecosystem will eventually be superseded. The trust's wallet descriptor must be stored in a format that future software can interpret — which is why standardized descriptor formats (BIP-380, BIP-381) are critical.
• Institutional continuity: Unchained Capital may not exist in 50 years. Any collaborative custody provider holding a key is a single institution whose survival is not guaranteed over dynasty trust timescales. The trust must have a protocol for replacing a defunct provider.
• Personnel turnover: The original grantors, keyholders, attorneys, and advisors will all die. Their successors will die. Multiple generations of successors will serve and be replaced. The keyholder succession schedule must be a living document updated at least annually.
• Legal evolution: Trust law, UCC provisions, tax treatment of digital assets, and regulatory frameworks will change — possibly dramatically — over 100+ years. The trust protector must have broad authority to adapt the trust's provisions to new legal realities.

Institutional Solutions for Century-Scale Key Management

• Wyoming Private Family Trust Company (PFTC): A PFTC provides perpetual institutional existence. The PFTC's charter can include specific provisions for Bitcoin custody, key management protocols, and technology migration authority. As family members serve as directors, the key management knowledge is transferred across generations through board succession — not through informal family conversations. See our section on multisig with a Wyoming PFTC.
• Annual key rotation: Rather than waiting for a triggering event (death, incapacity, etc.), a dynasty trust should rotate keys annually as a routine operational practice. This ensures that (a) all keyholders are currently active and capable, (b) the key rotation process itself is well-practiced and documented, and (c) the trust never accumulates "stale" keys that may be compromised or inaccessible.
• Dual custody provider strategy: Rather than relying on a single collaborative custody provider, a dynasty trust should maintain relationships with two providers (e.g., Unchained and Onramp), with each holding one key in a 3-of-5 quorum. If one provider ceases to exist, the other remains operational while a replacement is identified.
• Technology governance committee: For dynasty trusts holding $10M+ in Bitcoin, a dedicated technology governance committee (separate from the distribution committee) should monitor developments in Bitcoin custody, evaluate new hardware and software options, and recommend technology migrations to the IDA. This committee should include at least one member with deep Bitcoin technical expertise.

Multisig with a Wyoming Private Family Trust Company

A Wyoming Private Family Trust Company (PFTC) is a state-chartered trust company owned and operated by a single family, authorized to serve as trustee for family trusts. For Bitcoin families, the PFTC model is exceptionally powerful because it allows the family to serve as its own institutional trustee — holding keys, managing custody, and administering the trust without relying on a corporate trustee that may not understand Bitcoin.

PFTC + Multisig Architecture

In a PFTC-managed multisig structure, the PFTC's board of directors (family members) holds multisig keys in their official fiduciary capacity. A typical configuration for a PFTC with a 3-of-5 multisig:

• Key 1: PFTC Director A (family patriarch/matriarch) — Coldcard, stored at PFTC office
• Key 2: PFTC Director B (adult child) — Trezor, stored at Director B's residence
• Key 3: PFTC Director C (adult child or trusted advisor) — Foundation Passport, stored at Director C's location
• Key 4: Collaborative custody provider (Unchained) — institutional vault
• Key 5: Geographic backup — Coldcard, stored in a vault in a different state

Three of five keys are needed to transact. The three PFTC directors collectively hold three keys — meaning the family can transact without the collaborative custody provider or the backup key, but no single family member can act alone. If two directors are unavailable, the remaining director plus the Unchained key and the backup key still meet quorum.

Advantages of PFTC for Multisig

• Perpetual existence: Unlike individuals, a PFTC exists in perpetuity. Directors come and go; the institution persists. This solves the "keyholder mortality" problem for dynasty trusts.
• State regulatory oversight: Wyoming regulates PFTCs, providing a layer of external oversight that courts and beneficiaries can rely on. This institutional legitimacy is important for defending the trust's validity in litigation.
• Board succession: When a director dies or resigns, the remaining board appoints a replacement. The key rotation protocol is built into the PFTC's corporate governance — not left to informal family arrangements.
• Fiduciary record-keeping: The PFTC is required to maintain formal records (meeting minutes, financial statements, key rotation logs). This creates a contemporaneous documentary record that is essential for defending trustee actions in future disputes.
• Tax efficiency: Bitcoin held by a PFTC-managed trust in Wyoming benefits from Wyoming's favorable trust tax environment — no state income tax, no state capital gains tax, and asset protection provisions that shield trust assets from creditors. See our comprehensive guide to Bitcoin estate planning in Wyoming.

Multisig for Married Couples

Married couples present unique multisig design considerations that intersect with community property law, prenuptial agreements, and estate tax planning.

The 2-of-3 Spousal Configuration

The recommended configuration for married couples is a 2-of-3 multisig where:

• Key 1: Spouse A (primary Bitcoin-holding spouse)
• Key 2: Spouse B
• Key 3: Neutral third party (estate attorney, collaborative custody provider, or family advisor)

This configuration ensures that:

• Either spouse can transact with the third party's cooperation (Key 1+3 or Key 2+3)
• Both spouses can transact together without the third party (Key 1+2)
• Neither spouse can transact unilaterally
• If either spouse dies, the survivor + third party can access funds immediately
• In a divorce scenario, neither spouse can move Bitcoin without cooperation from the other spouse or the neutral third party

Community Property vs. Separate Property States

In community property states (Arizona, California, Idaho, Louisiana, Nevada, New Mexico, Texas, Washington, Wisconsin), Bitcoin acquired during the marriage is presumptively community property — meaning both spouses have equal ownership regardless of which spouse holds the keys. The 2-of-3 configuration with both spouses holding keys reflects this equal ownership structurally.

In separate property (common law) states, the spouse who acquired or was gifted the Bitcoin is the titling owner. If Bitcoin is held in a trust, the trust terms govern — not marital property law. The key allocation should reflect the trust's ownership structure, not the marital relationship.

Prenuptial Agreement Integration

A Bitcoin prenuptial agreement should address multisig explicitly:

• Which spouse holds which keys, and what happens to key allocation upon divorce
• Whether the collaborative custody provider's key is assigned to one spouse or remains neutral during divorce proceedings
• Whether key rotation is required upon filing for divorce (to prevent either spouse from pre-positioning to move Bitcoin during proceedings)
• How Bitcoin held in a multisig trust is characterized — community or separate — and whether the characterization changes if both spouses hold keys

Estate Tax Planning for Married Couples

Under the OBBBA, married couples have a combined $30M estate tax exemption. For couples whose Bitcoin holdings are below this threshold, the primary goal of multisig estate planning is succession reliability — ensuring the surviving spouse can access Bitcoin immediately upon the first spouse's death.

For couples whose Bitcoin holdings may exceed $30M (either currently or through future appreciation), multisig within an irrevocable trust enables the granting spouse to remove Bitcoin from their taxable estate while maintaining family key control through the directed trust structure. The buy-borrow-die strategy is particularly effective with multisig: the Bitcoin remains in the trust (never sold), the trust can borrow against the Bitcoin for liquidity, and at death, the stepped-up basis eliminates all unrealized gains.

2026 Estate Tax Context and Multisig Planning

The estate tax environment in 2026 is defined by the One Big Beautiful Bill Act (OBBBA), which established a federal estate tax exemption of $15 million per individual / $30 million per married couple. At Bitcoin's current price of approximately $66,000, the exemption thresholds translate to:

• Individual: ~227 BTC can pass free of federal estate tax
• Married couple (with portability): ~454 BTC can pass free of federal estate tax

For Bitcoin holders above these thresholds, the federal estate tax rate is 40% on the excess. On a $50M Bitcoin estate, the tax liability above the $15M exemption would be approximately $14M — enough to force a significant liquidation of Bitcoin to pay taxes, potentially at a disadvantageous time.

Why Multisig Matters for Estate Tax Planning

Multisig is not a tax planning strategy — it is a custody infrastructure that makes tax planning strategies work. The most effective estate tax strategies for Bitcoin require the Bitcoin to be held in trust:

• Irrevocable trusts: Remove Bitcoin from the taxable estate and freeze the gift tax value at the transfer date. Future appreciation occurs outside the estate. Multisig enables the family to retain custody control even though the Bitcoin has been legally transferred to the trust.
• GST-exempt dynasty trusts: Transfer Bitcoin to a trust that benefits multiple generations, with the generation-skipping transfer tax exemption applied at funding. Multisig ensures the Bitcoin is actually accessible across those generations.
• Charitable remainder trusts (CRTs): Contribute appreciated Bitcoin to a CRT for an immediate income tax deduction, income stream to the grantor, and eventual charitable distribution. The CRT's trustee needs to manage Bitcoin custody — multisig within the CRT provides the necessary security and governance structure.
• Buy-Borrow-Die: Hold Bitcoin in a trust, borrow against it for liquidity (never triggering a taxable sale), and pass it to heirs at death with a stepped-up basis. This strategy requires the Bitcoin to remain in custody — not be sold, not be lost, not be stolen — for potentially decades. Multisig is the only custody architecture that provides this long-term reliability.

Every one of these strategies fails if the Bitcoin is inaccessible at the critical moment — whether that's the grantor's death, the trust's distribution date, or the point at which estate taxes are due. Multisig ensures the Bitcoin is always accessible to the authorized parties, regardless of what happens to any individual keyholder.

Implementation Checklist: Setting Up Multisig for Your Estate

Use this checklist as a practical guide for implementing multisig within your estate plan. Each step should be completed in order:

Phase 1: Planning (Weeks 1-2)

1. □ Determine total Bitcoin holdings and current estate tax exposure
2. □ Identify the trust structure: revocable, irrevocable, dynasty, or PFTC
3. □ Select the quorum configuration (2-of-3 for most families; 3-of-5 for $5M+)
4. □ Identify all keyholders and their successors
5. □ Select a collaborative custody provider (Unchained, Onramp, or Casa) or decide on self-managed custody
6. □ Consult an estate planning attorney experienced with Bitcoin trusts

Phase 2: Legal Documentation (Weeks 3-6)

1. □ Draft trust document with Bitcoin-specific provisions (key rotation, technology migration, signing protocols, geographic distribution)
2. □ Draft or update prenuptial agreement with multisig provisions (if married)
3. □ Prepare keyholder succession schedule
4. □ Draft Letter of Instruction with multisig-specific content
5. □ Review and sign all documents

Phase 3: Technical Setup (Weeks 6-8)

1. □ Purchase hardware wallets (different manufacturers for each key position)
2. □ Generate keys and create the multisig wallet (via collaborative custody platform or Sparrow)
3. □ Create steel seed phrase backups for each key
4. □ Distribute keys to their designated geographic locations
5. □ Test the multisig setup with a small transaction
6. □ Record the wallet descriptor and store it with estate documents

Phase 4: Funding and Verification (Weeks 8-10)

1. □ Transfer Bitcoin to the multisig trust wallet
2. □ Verify the transfer on-chain and confirm the balance
3. □ Document the transfer for gift tax purposes (if transferring to an irrevocable trust)
4. □ File IRS Form 709 (Gift Tax Return) if the transfer exceeds the annual exclusion
5. □ Conduct a full signing ceremony to verify all keys are operational

Phase 5: Ongoing Maintenance (Annually)

1. □ Annual key verification / signing ceremony
2. □ Update Letter of Instruction if any keyholder, location, or hardware has changed
3. □ Update keyholder succession schedule
4. □ Verify collaborative custody provider's insurance coverage
5. □ Review trust provisions for any needed updates
6. □ Replace hardware wallets approaching end-of-life (5-7 year cycle)

Bitcoin Mining Income and Multisig Trust Architecture

For families who combine Bitcoin accumulation through mining operations with long-term estate planning through trusts, multisig provides the critical custody bridge between mining income and generational wealth preservation.

When mining rewards flow directly into a multisig trust wallet, the Bitcoin is secured from the moment of receipt. This eliminates the vulnerability window that exists when mining rewards accumulate in a single-key mining wallet and are only periodically transferred to a trust. For institutional mining operations producing significant daily output, this vulnerability window can represent millions of dollars of exposure.

Mining Trust Architecture

• Mining entity: An LLC or S-Corp that owns the mining hardware and operates the mining facility. The mining entity captures depreciation and operational expense deductions.
• Irrevocable trust: Owns the mining entity (or a controlling interest), ensuring that mining profits and accumulated Bitcoin grow outside the grantor's taxable estate.
• Multisig wallet: The trust's multisig wallet receives mining rewards directly. The IDA manages the wallet; the administrative trustee documents the inflows for tax reporting.

This structure combines the tax advantages of mining (depreciation, OpEx deductions, capital gains deferral on accumulated BTC) with the estate planning advantages of an irrevocable trust (estate tax exemption, creditor protection, multi-generational transfer) and the security advantages of multisig (no single point of failure, geographic distribution, institutional governance).

Frequently Asked Questions