Table of Contents
What a Multisig Actually Does
A normal Solana wallet has one private key. Whoever holds it can move everything, instantly, with no second opinion.
A multisig replaces that with an on-chain account governed by rules: a list of member wallets and a threshold. To move funds, one member proposes a transaction, others approve it, and once the threshold is met anyone can execute it. Below the threshold, nothing happens — the proposal just sits there.
Squads is the established implementation of this on Solana. The multisig lives on-chain as a program account, so the rules are enforced by the network rather than by trust between founders.
The vault has its own address. A Squad isn't a shared login to someone's wallet — it's a distinct Solana address that holds assets. That address is what you publish as your treasury and what people watch on Solscan.
Two Reasons to Use One
1. It eliminates the single point of failure. With a 2-of-3 setup, an attacker who fully compromises one founder's machine still can't move anything. Neither can a founder who decides to leave with the money. Both of those are real ways projects have died.
2. It's publicly verifiable. This is the part founders underrate. Anyone can look up your treasury address and confirm it's a multisig with a threshold above one. That converts "trust us" into something a stranger can check in thirty seconds — which is the entire theme of building token credibility. A treasury sitting in a personal hot wallet is listed among token red flags for exactly this reason.
Choosing Your Threshold
| Setup | Protects against | Survives | Good for |
|---|---|---|---|
| 2 of 3 | One rogue or compromised member | One lost key | Most small teams — the default |
| 3 of 5 | Two rogue or compromised members | Two lost keys | Larger teams, bigger treasuries |
| 2 of 2 | One rogue member | Nothing | Rarely — one lost key locks funds forever |
| 1 of 3 | Nothing meaningful | Two lost keys | Convenience only, not security |
The rule: threshold must be greater than 1 and less than the member count. Greater than one, or it isn't a multisig. Less than the total, or one lost key permanently freezes the treasury — a failure mode that has locked real projects out of their own funds.
For a solo founder, you can still build one across your own devices: a hot wallet, a Ledger, and a backup wallet stored separately, at 2 of 3. A compromised laptop then isn't enough to drain anything.
Setting Up a Squad, Step by Step
Step 1 — Every member needs their own wallet
Separate wallets, on separate devices, with separate seed phrases. A 2-of-3 where two keys live on the same laptop is a 1-of-1 wearing a costume. If members need to create wallets, start with how to create a Solana wallet.
Step 2 — Create the Squad
Go to the official Squads app (type the domain directly — never follow a link from a DM), connect your wallet, and create a new Squad. This deploys the on-chain multisig account.
Step 3 — Add members by address
Add each signer's public wallet address. Check every character. Adding a wrong address means fixing it later through an approved transaction, and adding an address nobody controls permanently wastes a member slot.
Step 4 — Set the threshold
2 of 3 unless you have a specific reason otherwise. You can change it later, but changing it requires meeting the current threshold.
Step 5 — Test before funding
Send a tiny amount in, propose sending it out, and have members approve and execute. Confirm every member can actually find and sign a proposal. Discovering that a co-founder can't sign is much cheaper now than during an emergency.
Step 6 — Fund it and publish the address
Move project funds into the vault, then publish the vault address on your site and socials so holders can watch it.
Should the Multisig Hold Mint Authority?
It can, and that's much better than one founder holding it. But for most tokens it's the wrong question.
For a memecoin or any fixed-supply token, the stronger move is to revoke mint authority entirely. Revoked means new supply is impossible. Multisig-held means new supply requires two signatures — better, but still a door that exists. Holders and rug checkers read "revoked" as a hard guarantee and "multisig" as a soft one.
Where the multisig genuinely helps is authorities you need to keep:
- Metadata update authority — if you want to be able to fix a logo or update links later, hold it in the multisig rather than personally. See updating token metadata.
- Treasury and reserve allocations — the core use case.
- LP tokens, if you're not burning or locking them.
- Governance authorities for a DAO token, as an interim step before on-chain governance is live.
The full picture of which authorities to keep and which to drop is in the mint and freeze authority guide.
Operating the Treasury Day to Day
Multisig approval adds friction to every transaction, which is the point — but it makes a multisig a bad fit for frequent small payments. The standard pattern:
- Treasury (multisig): holds the bulk. Moves rarely, with approvals.
- Ops wallet (hot): small working balance for marketing, listings, tooling. Topped up from the treasury periodically.
That way routine spending doesn't require chasing co-founders for signatures, and the amount at risk in the hot wallet is bounded. This is the same structure described in wallet setup for token founders.
Turning It Into a Trust Signal
A multisig nobody knows about protects your funds but wins you nothing publicly. Make it visible:
- Publish the vault address on your site, in your docs, and pinned in your community.
- State the threshold and how many members there are. "2-of-3 multisig" is a concrete claim people can verify.
- Explain what the treasury is for and what it'll be spent on.
- Announce significant outflows before they happen. An unexplained treasury movement reads as an exit even when it's a legitimate payment.
Combine this with locked liquidity and revoked authorities and you've covered the three things buyers check first. That's the substance behind making your token look legit — and the reason it works is that none of it requires anyone to take your word.
Common Mistakes
- All keys on one device. Defeats the entire mechanism while looking correct on-chain.
- Threshold equal to member count. One lost key locks the treasury permanently.
- Adding a member who doesn't understand they're a signer. If they can't sign when needed, your effective threshold is lower than you think.
- Never testing. Find out during setup whether everyone can sign, not during an incident.
- Setting it up after launch. Holders saw where the funds were on day one. Do it before.
- Using a link from a DM. Fake multisig sites exist and the target is obvious. Type the domain.
FAQ
What is a multisig wallet on Solana?
A wallet controlled by several keys, where moving funds requires approval from a set number of them. A 2-of-3 multisig needs two of its three members to sign before anything executes, so no single person can move funds alone.
Is Squads free to use?
Creating a Squad costs only network fees plus a small account rent deposit — typically a fraction of a SOL. Each transaction needs normal network fees. Advanced team features may be priced separately, but a basic treasury multisig is cheap to run.
What threshold should I choose for my multisig?
For a three-person team, 2-of-3 is standard: it prevents anyone acting alone while surviving one lost key. Don't require every member to sign — a single lost key would lock the treasury permanently.
Can a multisig hold mint authority for my token?
Yes, and it's much better than one founder holding it. But for most memecoins and fixed-supply tokens, revoking mint authority entirely is a stronger signal, because it makes new supply impossible rather than merely harder.
What happens if a multisig member loses their key?
As long as the remaining members meet the threshold, the treasury keeps working — they can approve a transaction removing the lost key and adding a replacement. This is exactly why the threshold should be below the member count.
Do I need a multisig for a solo project?
Less critical, but still useful. A solo founder can create one across their own devices — laptop wallet plus hardware wallet — so a single compromised machine can't drain the treasury. The public trust signal applies either way.
Can I convert my existing treasury wallet into a multisig?
Not directly — a multisig is a new on-chain account with its own address. Create the Squad, then transfer the assets from your existing wallet into the new vault. Announce the migration so holders aren't alarmed by a large treasury outflow.