<p>Yes, that's possible.</p>

<p>In fact, the party that creates the address is the only one who needs to agree on the character sequence.</p>

<p>Suppose you have an address that can be spent with 2-of-3 multisig. This is a pay-to-script-hash address (starting with 3 instead of 1). Your script would probably look something like this:</p>

<pre><code>2 &lt;pubkey A&gt; &lt;pubkey B&gt; &lt;pubkey C&gt; 3 OP_CHECKMULTISIG
</code></pre>

<p>This works, but this script's hash (with overwhelming probability) will be rather boring.</p>

<p>Suppose party A wants a more interesting address. She knows her private key k_A, and her public key Q_A, as well as everyone else's public key. All she has to do run the following algorithm:</p>

<pre><code>while not interesting(address):
    Q = Q + G
    k = k + 1
    address = hash160('2 &lt;Q&gt; &lt;pubkey B&gt; &lt;pubkey C&gt; 3 OP_CHECKMULTISIG')
</code></pre>

<p>At which point her public key is Q, and her private key is k. G is the generator point for the secp256k1 curve. Then Alice reveals this script to Bob and Charlie, who verify that the script contains their public keys and that it hashes to the expected address.</p>

<p>Bob and Charlie cannot distinguish between an address generated in this special way, and Alice getting lucky on the first try in her choice of private key.</p>

<p>vanitygen already implements something like this for 1-of-1 signatures when you tell it to generate address starting with 3.</p>

CC BY-SA 3.0
2016-10-26T19:38:36.460Z
2016-10-26T19:38:36.460Z
maservant
<p>Agreement of the vanity multisig address is not required, the main thing is to provide the correct redeem script for the waste and the signature of the addresses used.</p>

<p>On bitcointalk there is an interesting thread on this topic:</p>

<p><a href="https://bitcointalk.org/index.php?topic=1952943" rel="nofollow noreferrer">Rare multisig (P2SH) address hall of fame</a></p>

CC BY-SA 3.0
2017-06-08T11:47:31.753Z
2017-06-08T11:58:42.593Z
2017-06-08T11:58:42.593Z
addrstore.com
<p>If so, do the three separate parties have to agree on the character sequence?</p>

<address><multi-signature><address-generation><vanity-address>
Can a multi-sig address also be a vanity address?
user2716556
# Can a multi-sig address also be a vanity address?

(Asked by: username_0 on 2016-10-26)

If so, do the three separate parties have to agree on the character sequence?

**Tags:** address, multi-signature, address-generation, vanity-address


---

## 2 answers

### Answer by username_1 on 2016-10-26. Score: 2 | Accepted answer

Yes, that's possible.

In fact, the party that creates the address is the only one who needs to agree on the character sequence.

Suppose you have an address that can be spent with 2-of-3 multisig. This is a pay-to-script-hash address (starting with 3 instead of 1). Your script would probably look something like this:

```
2 <pubkey A> <pubkey B> <pubkey C> 3 OP_CHECKMULTISIG

```

This works, but this script's hash (with overwhelming probability) will be rather boring.

Suppose party A wants a more interesting address. She knows her private key k\_A, and her public key Q\_A, as well as everyone else's public key. All she has to do run the following algorithm:

```
while not interesting(address):
    Q = Q + G
    k = k + 1
    address = hash160('2 <Q> <pubkey B> <pubkey C> 3 OP_CHECKMULTISIG')

```

At which point her public key is Q, and her private key is k. G is the generator point for the secp256k1 curve. Then Alice reveals this script to Bob and Charlie, who verify that the script contains their public keys and that it hashes to the expected address.

Bob and Charlie cannot distinguish between an address generated in this special way, and Alice getting lucky on the first try in her choice of private key.

vanitygen already implements something like this for 1-of-1 signatures when you tell it to generate address starting with 3.


---

### Answer by username_2 on 2017-06-08. Score: 0

Agreement of the vanity multisig address is not required, the main thing is to provide the correct redeem script for the waste and the signature of the addresses used.

On bitcointalk there is an interesting thread on this topic:

[Rare multisig (P2SH) address hall of fame](https://bitcointalk.org/index.php?topic=1952943)


---

