Bitcoin Multisig Cost Calculator: Setup and Transaction Fees

What Does Bitcoin Multisig Cost?

A multisig wallet protects bitcoin by requiring multiple private keys to authorize a transaction. The tradeoff for that security is cost: you need multiple hardware signers, coordinator software, and every transaction you send is larger on-chain than a single-signature equivalent. How much larger depends entirely on the address type and signing scheme you choose.

This guide breaks down every cost component of multisig ownership: hardware, software, transaction fees across address types, and ongoing maintenance. It also compares on-chain multisig with MPC wallets and threshold signature alternatives so you can make an informed decision based on your security requirements and budget.

The "per-transaction overhead" range spans from P2TR keypath spend with MuSig2 (lowest overhead, indistinguishable from single-sig on-chain) to legacy P2SH (highest overhead). Choosing the right address type is the single most impactful decision for long-term transaction costs.

Hardware Signer Costs by Configuration

A 2-of-3 multisig requires three signing devices (you spend from any two). A 3-of-5 requires five. The cost of your signer set depends on which devices you choose and whether you prioritize air-gapped signing, vendor diversity, or budget. Most security-focused setups use devices from at least two different manufacturers to reduce supply chain risk.

A budget 2-of-3 setup using three SeedSigners costs around $150. A high-security setup using a Coldcard Q, Foundation Passport Core, and BitBox02 runs approximately $597. For a detailed feature comparison, see the hardware wallet comparison and multisig setup comparison.

Transaction Fee Comparison by Address Type

Transaction fees are where address type selection has the biggest impact on multisig costs. Traditional multisig using OP_CHECKMULTISIG places every public key and signature on-chain, and costs grow linearly with the number of signers. With Taproot keypath spending using MuSig2, all keys and signatures are aggregated off-chain into a single Schnorr signature. The result is a transaction that looks identical to single-sig on-chain.

The following table shows input sizes in virtual bytes (vB) for each configuration. Total transaction size equals the sum of input sizes plus output sizes (31–43 vB each) plus ~10.5 vB of overhead.

The critical insight: P2TR keypath input size stays at 57.5 vB regardless of how many signers participate. A 2-of-3 MuSig2 spend costs the same as a 15-of-15. This is because key aggregation combines all participant keys into one 32-byte public key and one 64-byte signature before the transaction hits the blockchain.

Note: BitGo reported approximately 30% total transaction fee savings after deploying MuSig2 in production for their 2-of-3 custody wallets. Per-input savings are higher (~45% vs P2WSH), but fixed overhead like outputs reduces the percentage when measured across entire transactions.

Fee Impact at Different Fee Rates

The cost difference between address types becomes dramatic during periods of high network congestion. The following table shows the per-input cost in satoshis at different fee rates, using a 2-of-3 configuration.

At 500 sat/vB (which has occurred during inscription and Runes minting events), a single P2SH 2-of-3 input costs 148,000 sats. The same spend via P2TR keypath costs 28,750 sats: a savings of over 119,000 sats per input. For transactions with multiple inputs (common when consolidating UTXOs), these savings multiply accordingly.

For real-time fee monitoring, use a fee estimator and consider RBF or CPFP strategies for fee bumping if you undershoot.

Coordinator Software and Service Costs

Multisig requires coordinator software to construct PSBTs, collect signatures from each device, and broadcast the final transaction. You can either run free open-source software yourself or pay for an assisted custody service that holds one key and provides recovery support.

DIY setups have zero recurring costs but require you to manage your own backups, verify receive addresses independently, and handle inheritance planning manually. Assisted services reduce operational complexity at the expense of recurring fees and reliance on a third party for one key. In both cases, you retain self-custody of enough keys to spend independently. For a deeper look at the tradeoffs, see our MPC vs multisig custody comparison.

On-Chain Multisig vs MPC and Threshold Signatures

On-chain multisig is not the only way to require multiple approvals for a Bitcoin transaction. Multi-party computation (MPC) and FROST threshold signatures are alternatives that produce standard single-sig transactions on-chain, keeping costs identical to a regular spend regardless of signer count.

MuSig2 is an n-of-n scheme: all designated signers must participate. It pairs well with script path fallbacks in a Taptree, where a less efficient but functional recovery path handles cases where one signer is unavailable. FROST supports true m-of-n thresholds using distributed key generation, but hardware signer support is still limited. For institutional users managing significant AUM, MPC platforms like Fireblocks (starting around $12,000/year at the low end, with median contracts near $39,000/year) offer full policy engines and compliance tooling.

Annual Cost of Multisig Ownership

Beyond initial hardware, multisig wallets have ongoing costs that vary by usage pattern. The following estimates assume 12 transactions per year at a median fee rate of 20 sat/vB, using a 2-of-3 configuration with 1 input and 2 outputs per transaction.

• P2SH 2-of-3: ~392 vB per transaction, 12 transactions = ~94,080 sats/year in fees
• P2WSH 2-of-3: ~200 vB per transaction, 12 transactions = ~48,000 sats/year in fees
• P2TR keypath (MuSig2): ~154 vB per transaction, 12 transactions = ~36,960 sats/year in fees

Add hardware replacement costs (firmware obsolescence, device failures) of roughly one device every 3–5 years, annual UTXO consolidation transactions during low-fee periods, and any subscription fees for assisted custody services. A typical DIY P2WSH setup costs under 50,000 sats per year in fees alone. Switching to P2TR keypath spend reduces that to roughly 37,000 sats.

How to Minimize Multisig Costs

Several strategies reduce the total cost of operating a multisig wallet:

• Use P2WSH at minimum, P2TR with MuSig2 where supported: the address type determines 60–87% of your fee savings versus legacy P2SH
• Consolidate UTXOs during low-fee periods: batch small UTXOs into larger ones when fees drop below 5 sat/vB to avoid overpaying later
• Use transaction batching to combine multiple payments into a single transaction, amortizing the fixed overhead across more outputs
• Choose hardware from at least two manufacturers for vendor diversity, but budget-tier devices like SeedSigner or Jade keep the signer set affordable
• Start with free DIY coordinator software (Sparrow, Nunchuk free tier) and upgrade to assisted services only when the operational complexity justifies the subscription cost
• For high-value holdings that rarely move, fewer transactions per year mean address type matters less: focus on security over fee optimization

Layer 2 solutions can further reduce costs for users who need frequent transfers. Spark enables instant, low-cost bitcoin and stablecoin transfers off-chain, which can complement an on-chain multisig vault used for cold storage.

Frequently Asked Questions

How much does it cost to set up a Bitcoin multisig wallet?

A DIY 2-of-3 multisig wallet costs between $150 and $600 for hardware signers, plus $0 for open-source coordinator software like Sparrow or Electrum. The cheapest option is three SeedSigners at roughly $50 each. A high-security setup with air-gapped devices from multiple vendors (such as a Coldcard, Passport, and BitBox02) runs approximately $500 to $600. Assisted custody services like Casa or Unchained add $250/year but handle one key and provide recovery support.

Are Bitcoin multisig transactions more expensive than single-sig?

With traditional on-chain multisig (P2SH or P2WSH), yes. A P2WSH 2-of-3 input is roughly 104 vB compared to 68 vB for a single-sig P2WPKH input: about 53% larger. Legacy P2SH 2-of-3 inputs are even worse at approximately 296 vB, which is over 4x the size of single-sig. However, P2TR keypath spend with MuSig2 produces a 57.5 vB input that is actually smaller than single-sig P2WPKH and identical to single-sig P2TR.

What is the cheapest multisig address type?

P2TR with MuSig2 keypath spending is the cheapest option at 57.5 vB per input, regardless of how many signers participate. This is 81% cheaper per input than legacy P2SH multisig and 45% cheaper than P2WSH. The tradeoff is that MuSig2 requires an interactive signing protocol (two rounds of communication between signers) and hardware wallet support is still expanding. BitGo deployed MuSig2 in production and reported roughly 30% total transaction fee savings.

How does MPC compare to multisig for Bitcoin custody?

MPC and multisig achieve similar goals (multiple approvals required) but differ in implementation. Traditional multisig operates on-chain via Bitcoin Script, making the quorum structure publicly visible. MPC operates off-chain, producing a standard single-sig transaction. MPC is primarily used by institutions through platforms like Fireblocks ($12,000–$216,000/year). For personal custody, on-chain multisig with MuSig2 provides similar fee efficiency without institutional pricing. See the full MPC vs multisig analysis for more detail.

Does Taproot make multisig as cheap as single-sig?

Yes, when using keypath spending. A P2TR keypath spend with MuSig2 produces an input that is exactly 57.5 vB: the same size as a single-sig P2TR transaction. On-chain observers cannot distinguish it from a regular single-key spend. This eliminates the traditional fee premium of multisig entirely. The caveat is that keypath spend requires all designated signers to be online (n-of-n), so most setups include a script path fallback for recovery, which is larger if used.

What is the best multisig configuration for most users?

For most individuals, 2-of-3 offers the best balance of security and usability. You can lose one device and still access your funds, while requiring a quorum prevents single points of compromise. Use P2WSH for maximum hardware compatibility today, or P2TR with MuSig2 if your signers support it. A multisig setup comparison can help you choose between DIY and assisted custody based on your technical comfort level.

How do FROST threshold signatures differ from MuSig2?

FROST supports true m-of-n threshold signing (any 2 of 3, any 3 of 5), while MuSig2 is strictly n-of-n (all designated signers must participate). Both produce a single Schnorr signature that looks like single-sig on-chain. FROST requires a one-time distributed key generation ceremony, while MuSig2 can work with independently generated keys. Hardware wallet support for FROST is still emerging, making MuSig2 the more practical choice today. See the FROST explainer for a full comparison.

This tool is for informational purposes only and does not constitute financial advice. Transaction sizes are approximate and based on publicly available data from Bitcoin Optech, BitGo field reports, and protocol specifications. Hardware prices reflect retail listings as of mid-2026 and may vary by region. Fee rates fluctuate with network demand. Always verify current costs before making purchasing or configuration decisions.