Open-Source · Watch-Only · Non-Custodial

BitcoinMultisig

Without the Risk.

ZeroKeys coordinates your multisig wallets without ever touching private keys. All operations happen locally, encrypted, and entirely under your control.

Cold Reserve Multisig

Electrum Connected
Signing Process
Device 1
Device 2
Device 3
Amount0.15000 BTC
Status0 of 3 signed
0
Keys Ever Stored
AES-256
Encryption Standard
N-of-M
Multisig Policies
100%
Client-Side

Features

Designed for sovereign Bitcoin users.

Core

100% Client-Side

All cryptographic operations run in your browser. Nothing leaves your device unencrypted.

Security

Watch-Only by Design

ZeroKeys never imports or stores private keys. Signing happens exclusively on your hardware device.

Multisig

N-of-M Multisig

Import xpubs from any hardware wallet and build flexible 2-of-3, 3-of-5, or custom spending policies.

Encryption

AES-256-GCM Encryption

All wallet data — xpubs, labels, addresses, UTXOs, and settings — is encrypted with 600K PBKDF2 iterations.

Flexibility

Local or Cloud Sync

Store your encrypted multisig on-device or sync it to the cloud. Your encrypted payload, your choice.

Transparency

Open Source

Every line is public. No black boxes, no trust assumptions. Audit the code yourself.

How It Works

Multisig, simplified.

01

Import xpubs

Connect hardware wallets by importing extended public keys. ZeroKeys builds watch-only descriptors automatically.

02

Build your multisig

Define your multisig policy — choose co-signers and the required threshold. ZeroKeys handles the descriptor math.

03

Coordinate & sign

Create PSBTs and share with co-signers. Keys sign offline on hardware; ZeroKeys just coordinates the round.

Security Model

Your keys, your multisig,
your rules.

ZeroKeys is built on a simple principle: a coordinator should never have custody. Everything is encrypted locally and only you hold the passphrase.

AES-256-GCM

Authenticated encryption for all multisig data

600,000 PBKDF2 Iterations

OWASP-recommended key derivation hardness

IndexedDB Storage

Encrypted at rest, never transmitted raw

BIP32 / PSBT Compatible

Open Bitcoin standards, no proprietary formats

multisig.enc · IndexedDB
// AES-256-GCM encrypted payload
{
algorithm: "AES-GCM",
keyLength: 256,
iterations: 600_000,
iv: "<random 12 bytes>",
salt: "<random 16 bytes>",
ciphertext: "<your encrypted multisig>"
}
// Private keys: never here.

Get Started

Secure your Bitcoin.
Keep your sovereignty.

No account required. No custody. No compromises.