Several keys, one opening

Updated September 2026

Two-of-three sounds like a thicker lid. The lid on this site is a hash. When the spend reveals the script, the keys in that script are as public as any other opened box.

What multisig is

A policy such as two-of-three means two devices, two people, or two locations must agree. That is useful when one seed must not be enough. It does not change secp256k1. It does not create a new quantum-resistant lock. Post-quantum cryptography is a later conversation, and BIP-360 is still a draft.

What the spend reveals

Legacy and wrapped-segwit multisig typically hide a redeem script behind a hash until they spend. The spend publishes the script and the keys. After that, those keys are on the chain for as long as the chain exists. Change that goes back into a fresh hash-based script can be a new closed box. Change that goes back into the same already-used script is reuse. Check outputs in the checker.

Taproot and MuSig

Taproot can look like a single key on arrival even when several people agreed off-chain. The key on arrival is still public. That is the open-on-arrival rule, not a loophole. Key-aggregation schemes change who has to coordinate. They do not put the key back in a hash.

What to do

Use multisig because you want a second person or a second device, not because a thread said it is quantum-safe. If you are moving coins for hygiene, prefer a fresh hash-based address you have never spent from. Nothing here is a call to buy a coordinator or a device.