<p>Multisig does not make funds more secure just because you are using multisig. Multisig requires multiple keys to sign in order to release funds. The typical use case is with multiple parties holding the required keys. That way in order to spend multiple parties need to agree and sign. If all of the keys required to sign are held by a single party then it defeats the purpose of multisig and no additional security has been added.</p>

CC BY-SA 4.0
2020-07-04T11:53:26.093Z
Do you think as operations should be automatically done in online exchanges, is it possible to use multisig approach in such project?
Mohammad Saberi
CC BY-SA 4.0
2020-07-02T14:02:47.387Z
2020-07-02T14:02:47.387Z
m1xolyd1an
<p>I've craeted a small online exchange based on Bitcoin Core. The features in this application are:</p>
<ol>
<li>User send request to get a new address, and the Bitcoin Core generate a new one with defined passphrase.</li>
<li>User can receive BTC on his own address.</li>
<li>User can send BTC from his own address, and for this purpose, I've used <code>sendtoaddress</code> after unlocking account with <code>walletPassphrase</code>.</li>
</ol>
<p>In this scenario, there is one complicated passphrase which is able to unlock all accounts. But after reading about multisig feature, I thought about implementing a scenario in this regard on my application. But there are some questions in my mind:</p>
<ol>
<li>I have used a fixed passphrase in my codes while sending transactions. Regarding to multisig concepts,  I need to use different private keys to sign data instead of using a passphrase to unlock that account. Am I right?</li>
<li>As the operation in an online exchange should be do automatically, I think I have to use all required private keys in the final step of my codes. In this case, I think I did not add any new security mechanism to my application as everything is located beside each other. Can I cound on security impact of multisig accounts in my application at all?</li>
</ol>
<p>I hope you can help me so solve these issues in my mind.</p>

<bitcoin-core><exchanges><private-key><multi-signature><sendtoaddress>
How to use Multisig feature on Bitcoin Core RPC in an online exchange?
Mohammad Saberi
# How to use Multisig feature on Bitcoin Core RPC in an online exchange?

(Asked by: username_0 on 2020-07-02)

I've craeted a small online exchange based on Bitcoin Core. The features in this application are:

1. User send request to get a new address, and the Bitcoin Core generate a new one with defined passphrase.
2. User can receive BTC on his own address.
3. User can send BTC from his own address, and for this purpose, I've used `sendtoaddress` after unlocking account with `walletPassphrase`.

In this scenario, there is one complicated passphrase which is able to unlock all accounts. But after reading about multisig feature, I thought about implementing a scenario in this regard on my application. But there are some questions in my mind:

1. I have used a fixed passphrase in my codes while sending transactions. Regarding to multisig concepts, I need to use different private keys to sign data instead of using a passphrase to unlock that account. Am I right?
2. As the operation in an online exchange should be do automatically, I think I have to use all required private keys in the final step of my codes. In this case, I think I did not add any new security mechanism to my application as everything is located beside each other. Can I cound on security impact of multisig accounts in my application at all?

I hope you can help me so solve these issues in my mind.

**Tags:** bitcoin-core, exchanges, private-key, multi-signature, sendtoaddress


---

## 1 answers

### Answer by username_1 on 2020-07-02. Score: 0

Multisig does not make funds more secure just because you are using multisig. Multisig requires multiple keys to sign in order to release funds. The typical use case is with multiple parties holding the required keys. That way in order to spend multiple parties need to agree and sign. If all of the keys required to sign are held by a single party then it defeats the purpose of multisig and no additional security has been added.

> **Comments:**
> **username_0**: Do you think as operations should be automatically done in online exchanges, is it possible to use multisig approach in such project?  

---

