BSMS
Invesco BulletShares 2028 Municipal Bond ETF
stock NASDAQ ETF

I have a ledger. This is my claude told me:
Key thing first: Ledger Live can't do multisig. You use your Ledger as one signer inside a coordinator app that assembles the multisig wallet. The desktop standard is Sparrow; Nunchuk is the polished mobile option. I'll use Sparrow.
Before you start — the point of multisig: the whole reason you're doing this is to kill single points of failure. So a 2-of-3 should use keys from different vendors — e.g., your Ledger + a Trezor or BitBox02 + a third device or an offline seed. Three Ledgers still leaves you exposed to one Ledger firmware bug, which defeats the purpose.
Setup (2-of-3 in Sparrow):
Download Sparrow — only from [sparrowwallet.com](http://sparrowwallet.com), and verify the download signature. Fake wallet software is the #1 way people get drained.
Gather your signers — 3 hardware devices (ideally different brands). Each already initialized with its own seed, each seed backed up separately and offline.
In Sparrow: File → New Wallet, name it, set Policy Type: Multi Signature, and choose 2 of 3.
For each of the 3 "keystores," click Connected Hardware Wallet (or Airgapped), plug in the device, and Import its xpub. Do this for all three devices.
Sparrow builds the wallet. Back up the wallet output descriptor / BSMS file — this is the map of all three keys. Without it, having the seeds isn't enough to rebuild the wallet. Store copies with each seed backup.
Test before funding. Send a small amount in, then do a practice spend: it should require you to sign on 2 of the 3 devices. Confirm you can also recover the whole thing from backups on a fresh Sparrow install before you move real money.
Once verified, move funds in.
The rule that makes it actually safe: store the 3 seeds in 3 separate physical locations. If two seeds live in the same drawer, you've rebuilt a single point of failure with extra steps.
One honest caveat: multisig has real operational overhead — more devices, more backups, more ways to lock yourself out if you're sloppy. It's the right tool if your stack is large enough to justify it. If it's not, a single-sig with a strong passphrase on a well-supported device is a legitimate simpler choice.

I have a ledger. This is my claude told me:
Key thing first: Ledger Live can't do multisig. You use your Ledger as one signer inside a coordinator app that assembles the multisig wallet. The desktop standard is Sparrow; Nunchuk is the polished mobile option. I'll use Sparrow.
Before you start — the point of multisig: the whole reason you're doing this is to kill single points of failure. So a 2-of-3 should use keys from different vendors — e.g., your Ledger + a Trezor or BitBox02 + a third device or an offline seed. Three Ledgers still leaves you exposed to one Ledger firmware bug, which defeats the purpose.
Setup (2-of-3 in Sparrow):
Download Sparrow — only from [sparrowwallet.com](http://sparrowwallet.com), and verify the download signature. Fake wallet software is the #1 way people get drained.
Gather your signers — 3 hardware devices (ideally different brands). Each already initialized with its own seed, each seed backed up separately and offline.
In Sparrow: File → New Wallet, name it, set Policy Type: Multi Signature, and choose 2 of 3.
For each of the 3 "keystores," click Connected Hardware Wallet (or Airgapped), plug in the device, and Import its xpub. Do this for all three devices.
Sparrow builds the wallet. Back up the wallet output descriptor / BSMS file — this is the map of all three keys. Without it, having the seeds isn't enough to rebuild the wallet. Store copies with each seed backup.
Test before funding. Send a small amount in, then do a practice spend: it should require you to sign on 2 of the 3 devices. Confirm you can also recover the whole thing from backups on a fresh Sparrow install before you move real money.
Once verified, move funds in.
The rule that makes it actually safe: store the 3 seeds in 3 separate physical locations. If two seeds live in the same drawer, you've rebuilt a single point of failure with extra steps.
One honest caveat: multisig has real operational overhead — more devices, more backups, more ways to lock yourself out if you're sloppy. It's the right tool if your stack is large enough to justify it. If it's not, a single-sig with a strong passphrase on a well-supported device is a legitimate simpler choice.

Use Nunchuk wallet to coordinate your multisig. It's quite user friendly.
Store a copy of the BSMS file with your backup for each key.