Oddbean new post about | logout
 > Multisig is how we should think about key recovery…

Could you expand on this point a bit? 
 Setups should be thought as as varying levels of multisig in complexity and sovereignty.

As I mentioned with @bitcoinpup, let’s say you have someone who’s buying their first bitcoin. You just onboarded your friend basically.

Well then maybe the setup should be that you have a key, your friend has a key, and the wallet provider has a key. That way this person can come back to you and still recover funds in case anything goes wrong.

It leverages local trust, instead of some huge, distant corporate (or scam wallet) trust model. 

Then this can have all sorts of default variations based on the level of user skill and knowledge. 3/7 for someone who really needs help, but has a ton of funds, and has a spouse/friend they trust with a device also. Use tapsigners for main keys because they are super easy and have no input or UI complexity. They always work and you just keep them in your wallet. Multiple options for recovery, and to them it’ll look like just “tap to sign” because their phones auto sign with a local key too. 

This way if they lose their phone, tapsigner, and additional key, it can still be recovered through their group. The UX challenge for something like that is mostly in the setup process.

But then there’s all sorts of options in between. As well as timelocks in the case of too many keys lost, let recovery still be possible on one key, with a 3 month delay, etc.

Just lots to explore and it could be hidden for the user behind, “just have these devices” or “just have this person confirm,” or “just tap this card,” etc. 
 Got it that all makes sense.

I like the idea of popularizing tapsigners, from a UX perspective it’s the most familiar which is a boon for onboarding.

I think assisted 2/3 multisig would be a good setup for most people, but that would probably require a subscription fee or some other funding mechanism to keep the provider’s lights on. Which may turn some people off of it altogether.