This guide explains BIP 129 Bitcoin Secure Multisig Setup (BSMS) in plain English. It covers the problem behind the BIP, why it matters and whether the proposal is part of Bitcoin today.
TL;DR
- What it is: BIP 129 defines Bitcoin Secure Multisig Setup, a Complete application-layer specification for exchanging signer key records and a final multisig descriptor template through a structured two-round ceremony. It aims to reduce tampering, leakage and inconsistent storage during cross-vendor setup.
- Why it matters: BIP 129 turns multisig setup into a reviewable interoperable ceremony. Its protection comes from each signer independently verifying and storing the same authenticated descriptor policy, not from coordinator convenience.
- Current position: The BIP is Complete, Applications and Specification, requiring BIP32, BIP322 and output descriptor standards.
BIP 129 Bitcoin Secure Multisig Setup (BSMS) in simple English
BIP 129 Bitcoin Secure Multisig Setup (BSMS): The coordinator distributes setup parameters and each signer returns a key record with origin and extended public-key information plus the required proof.
Simple example
A node operator is checking BIP 129 Bitcoin Secure Multisig Setup (BSMS). Every signer verifies threshold, membership, script, network, derivations and its own key before persisting the same configuration.
Key terms in plain English
- BIP:
- Bitcoin Improvement Proposal: a document describing a proposed rule, standard or process. Its status must be checked separately.
- Node:
- A computer running Bitcoin software that checks data and communicates with other peers.
Status and prerequisites
The BIP is Complete, Applications and Specification, requiring BIP32, BIP322 and output descriptor standards. Pin supported modes and revision across every participant.
Roles
A coordinator assembles the wallet policy and signer records; signers create and authenticate their own contributions and validate the final configuration. The coordinator is not automatically trusted with keys.
Round one
The coordinator distributes setup parameters and each signer returns a key record with origin and extended public-key information plus the required proof. Authenticate the session and expected participant out of band.
Round two
The coordinator constructs and distributes the descriptor template. Every signer verifies threshold, membership, script, network, derivations and its own key before persisting the same configuration.
Privacy and encryption
BSMS defines no-encryption and encrypted modes with session tokens and derived encryption keys. Encryption protects transport content but does not authenticate a malicious coordinator by itself.
Durable recovery
Store the final descriptor or template, signer origins, threshold, script type and network alongside each independent seed backup. A seed alone cannot reconstruct an arbitrary multisig wallet.
How specialists test it
Developers test the proposal with made-up data on an isolated test network. They check normal cases and deliberately invalid cases. Different implementations should reach the same result before anyone relies on the proposal.
Frequently asked questions
What is the main point of BIP 129 Bitcoin Secure Multisig Setup (BSMS)?
BIP 129 Bitcoin Secure Multisig Setup (BSMS): The coordinator distributes setup parameters and each signer returns a key record with origin and extended public-key information plus the required proof.
For BIP 129 Bitcoin Secure Multisig Setup (BSMS), what should a beginner know about status and prerequisites?
The BIP is Complete, Applications and Specification, requiring BIP32, BIP322 and output descriptor standards.
For BIP 129 Bitcoin Secure Multisig Setup (BSMS), what should a beginner know about roles?
A coordinator assembles the wallet policy and signer records. Signers create and authenticate their own contributions and validate the final configuration.
For BIP 129 Bitcoin Secure Multisig Setup (BSMS), what should a beginner know about round one?
The coordinator distributes setup parameters and each signer returns a key record with origin and extended public-key information plus the required proof.
Conclusion
BIP 129 turns multisig setup into a reviewable interoperable ceremony. Its protection comes from each signer independently verifying and storing the same authenticated descriptor policy, not from coordinator convenience.
Primary sources
Check the current specification status and the documentation for the exact implementation you operate before moving production funds or changing a mining node.



Join the ASIC Mining Discussion
Members can read and join the discussion
Log in to read comments from other miners. Create a free account if you would like to ask a question or share your experience.
Membership helps us protect the discussion from spam and keep answers useful.