Model 09 · Advanced
The Multisignature Vault
Shared control: no single key can open it alone.
Explanation level
How to use this model
How to use this modelWhat you see, what you can touch, what changes, what to take away
What am I looking at?
A precision vault with independent locking mechanisms that opens only when the configured m-of-n policy is satisfied.
What can I touch?
- Configure required signers
- Add simulated keys
- Remove simulated keys
- Approve with individual signers
What happens when I change something?
Change how many signatures are required or remove keys, and the vault shows which combinations of signers can still spend and what recovery needs.
What should I understand afterwards?
Explain why a 2-of-3 vault survives one lost key.
Understand shared control.
A bank vault that needs two of three managers.
After this you can
- Explain why a 2-of-3 vault survives one lost key.
Try different signing arrangements and lost-key scenarios.
Configure, lose, recover.
After this you can
- Determine whether a set of signers can spend under a policy.
Explore scripts, policies, descriptors and threshold-signature distinctions.
CHECKMULTISIG vs Taproot vs MuSig2/FROST.
After this you can
- Explain why the descriptor backup is required for recovery.
Open the model in its own window · works offline once loaded
Missions operate the model to complete them
-
Open a 3-of-5 vault
IntermediateCompletedConfigure a spending policy and collect exactly the signatures it needs.
Your task: Set the vault to 3-of-5, then approve with signers until it opens.
Use: Configure required signers · Add simulated keys · Approve with individual signers
A 3-of-5 policy needs any three valid signatures. It survives the loss of two keys, but recovering it also needs the descriptor that records all five public keys.
Missions are checked from the model's own simulation state, not from clicks. No time limit. Completion is stored only in this browser. The quiz questions in the learning paths remain available.
Tutor Ask a question, or let the tutor show you around
The tutor answers by explaining and, within the permissions below, by operating this model. Every change it makes is shown and listed, and you can undo it. It cannot run code, read your browser data or see anything secret. The page works the same without it.
What the tutor did
Common mix-ups
- Myth: Seeds alone are enough to recover a multisig wallet.
- In fact: You also need the wallet configuration (descriptor: all xpubs, policy, script type).
- Myth: Multisig and threshold signatures are the same.
- In fact: Script multisig puts m signatures on chain; threshold schemes produce one aggregate signature.
Concepts in this model
Helpful to know first
Next recommended
You have reached the last model in the collection. Try a learning path.
Part of these learning paths