Casa multisig takes multisignature custody, one of the strongest ways to protect bitcoin, and wraps it in an interface simple enough that you don’t need to understand xpubs, PSBTs, or output descriptors to use it. Casa has spent years refining its approach to self-custody and aims for the simplest multisig experience on the market. This review examines what Casa offers, how its security model works, what it costs, and who it’s actually designed for.
How Casa Multisig Works
Casa’s security model eliminates single points of failure by distributing key control across multiple devices and locations. Rather than trusting all your bitcoin to one seed phrase written on a piece of paper, Casa splits authority across independent signing keys that must cooperate to move funds.
Standard Plan: 2-of-3 Multisig
The Standard plan distributes three keys:
- Mobile key: Created and kept in the Casa app on your phone, and backed up automatically to your iCloud or Google Drive account (more below).
- Hardware wallet key: Stored on a hardware wallet you own (see the FAQ below for the models Casa supports). This device stays in your physical possession.
- Casa Recovery Key: Held by Casa. It isn’t used in normal spending, only to help you recover access if you lose another key, and even then only after checks and a waiting period (security questions and a 7-day delay on Standard).
To spend bitcoin, your phone signs automatically and you approve on the hardware wallet (2-of-3). Casa’s key sits unused until you need recovery. This means Casa can never spend your bitcoin unilaterally — they hold only one key in a quorum that requires two. That is the default layout, and the one this review describes; for 3-key bitcoin vaults Casa also offers an alternative layout in which a second hardware key replaces the phone key, recommended for advanced users only.
Premium Plan: 3-of-5 Multisig
The Premium plan adds two more hardware keys for deeper redundancy:
- Mobile key
- Hardware wallet key #1
- Hardware wallet key #2
- Hardware wallet key #3 (each on a separate device)
- Casa Recovery Key
Any three of five keys can authorize a transaction: to spend, the phone signs and you approve on two hardware devices. This provides tolerance for losing up to two keys simultaneously — a level of redundancy appropriate for substantial bitcoin holdings. Casa’s pricing page lists an onboarding package including hardware for Premium members.
The No-Seed-Phrase Philosophy
Casa deliberately does not give users seed phrase backups for the mobile key. This is their most controversial design decision — and their most intentional one.
Their argument: seed phrases are the number one cause of bitcoin loss. People store them insecurely, lose them, get them stolen, or fall for phishing attacks that trick them into entering their words. By removing seed phrases from the mobile key, Casa eliminates the most common attack vector against self-custody users.
Instead, Casa backs the mobile key up automatically to your iCloud or Google Drive account. That backup is stored encrypted, and Casa keeps the secret that decrypts it, so restoring it takes your cloud account as well as your Casa account. Protect both well (the mobile key alone is never enough to spend). Your hardware keys are ordinary hardware wallets with their own seed phrases, so those backups are still yours to manage. The exception is a YubiKey, which Casa also accepts as a hardware key: it has no seed words unless you make its optional 12-word backup (Create Offline Backup in the Casa app), and that backup is what lets it sign in Sparrow or Electrum without Casa. If you lose your phone, the cloud backup is restored through the Casa app, or your hardware key and Casa’s Recovery Key move your bitcoin to a new vault; Casa’s app and support team guide the process.
This approach works well for its target audience — people who want strong security without managing multiple seed phrase backups. However, it does mean the mobile key cannot be recovered independently of Casa. In an emergency you can export it from the app as 12 words, but Casa then marks the key for replacement, so it isn’t something you do in advance. Compare this with the traditional seed phrase approach covered in our courses, where every key can be independently restored from its mnemonic backup. For a deeper comparison of all multisig approaches, see our multisig coordinator comparison.
Key Features
Health Check
The Casa app reminds you at least every six months to verify each key in your multisig setup still works. You check each key separately: for a hardware key you approve a signature on the device, and no funds move; the phone key check confirms the key is on your phone and backed up to your cloud account; and on Standard you confirm your answers to the security questions for Casa’s Recovery Key. This prevents the nightmare scenario of discovering a key is inaccessible only when you urgently need to move funds.
Inheritance Protocol
Inheritance is included in all of Casa’s individual plans, Standard included. You name a recipient, who gets shared access to some of your vault’s keys but can’t use them until a claim succeeds. When the time comes, the recipient files a claim in the Casa app; on Standard and Premium a six-month verification period starts, with a notification to you every month, and if you don’t reject the claim the recipient gets access. Private Client adds “enhanced verification” (US only). Our inheritance options guide walks through the claim step by step. This is one of the more practical inheritance solutions available — far simpler than building your own with a DIY multisig inheritance setup.
Sovereign Recovery
If Casa went offline permanently, you could still move your bitcoin without it, as long as you’ve prepared. Casa’s Sovereign Recovery uses enough of the keys you hold to reach the threshold (two of three on Standard, three of five on Premium) together with the wallet descriptor (or the public keys and derivation paths in the Sovereign Recovery email), in open-source wallets such as Sparrow or Electrum; the Casa Recovery Key isn’t needed. Three things come only from the Casa app:
- The Sovereign Recovery email, which Casa sends when you set up a vault. It lists your public keys and derivation paths with step-by-step instructions, and it can’t move coins on its own. Keep a copy; you can ask for a new one under Settings → Send Sovereign Recovery Info.
- The wallet descriptor. In your vault, tap Deposit Funds, then the three dots, then View Wallet Descriptor, and store a copy with each hardware key’s seed.
- The phone key, exported from the app as 12 words. Because exporting marks the key for replacement, it stays in the app until an emergency, so, on Standard’s default layout, recovery also depends on still having your phone and knowing your Casa password, which the export asks for. Keep “Clear Cache on Logout” turned off in the app’s Settings so the app still opens offline.
The case to plan for on Standard’s default layout is losing your phone while Casa is unavailable: you would hold only the hardware key, one short of the two you need. Casa’s two-hardware-key layout avoids this: those two keys reach 2 of 3 without the phone or Casa. Switching moves your coins to a new vault, and Casa advises a second device from a different maker. Premium is less exposed, because its three hardware keys meet the 3-of-5 threshold without the phone. Recovery this way takes more technical skill than normal Casa operation.
Pricing
| Plan | Price | Vault | Inheritance | Hardware Included |
|---|---|---|---|---|
| Standard | $250/year | 3 keys, 2-of-3 | Included | No (bring your own) |
| Premium | $2,100/year | 5 keys, 3-of-5 | Included; video verification for emergency actions | Onboarding package including hardware |
| Private Client | $7,500/year | 5 or 6 keys, customisable | Included, with enhanced verification (US only) | Onboarding package including custom hardware |
Prices from casa.io/pricing, checked on 7 November 2026; they change, so check again before you sign up. Standard comes with a 30-day free trial. The Standard plan at $250 a year suits most people with meaningful bitcoin holdings. Premium at $2,100 a year adds two more hardware keys and video verification for emergency actions; Private Client adds a dedicated advisor and an emergency phone line.
Pros and Cons
Pros
- Simplest multisig onboarding — no technical knowledge required
- No seed phrase management for the mobile key reduces a major attack vector
- Health check feature catches key problems before they become emergencies
- Inheritance included in every individual plan
- Sovereign Recovery: your own keys can move your coins without Casa, in Sparrow or Electrum
- Human support: email on Standard, priority video support and an advisory team on Premium
- Clean mobile interface for managing multisig from your phone
Cons
- Third-party dependency — Casa holds a key and manages the coordination infrastructure
- Recovery without Casa needs preparation: the descriptor or the Sovereign Recovery email and, on Standard, your phone and Casa password
- Casa’s app is not open source (recovery without Casa uses open-source wallets)
- Annual subscription cost — security becomes an ongoing expense
- Casa stores your xpubs, meaning they can see your balances and transaction activity
- No-seed-phrase model means the mobile key can’t be independently recovered without Casa
Casa vs Unchained vs DIY Multisig
| Factor | Casa | Unchained | DIY (Sparrow) |
|---|---|---|---|
| Keys you hold | 2 of 3, or 4 of 5 | 2 of 3 | All 3 |
| Can spend without provider | Yes, with the descriptor or the Sovereign Recovery email (and, on Standard, your phone) | Yes, with the wallet configuration file | Yes (always) |
| Technical skill needed | Low | Medium | High |
| Inheritance | Included in all individual plans | Signature plan or Inheritance Boot Camp | Manual |
| Financial services | Buy/sell via Zero Hash (US except New York); OTC desk on Premium and Private Client | IRAs, loans (US only) | No |
| Open source | App: no (recovery uses Sparrow or Electrum) | Partial (Caravan) | Fully open source |
| Annual cost | $250, $2,100 or $7,500 | $250 per vault | Free |
Casa optimizes for simplicity: everyday spending runs through its app and servers. Unchained also leaves you two of three keys, requires an identity check and adds US financial services. DIY with Sparrow Wallet gives you maximum control but maximum responsibility. For a complete walkthrough of all options, see our lesson on Multisig in Practice.
Who Should Use Casa?
Casa is designed for people who:
- Own meaningful bitcoin holdings but don’t want to become security engineers
- Prefer managed simplicity over DIY sovereignty
- Need inheritance planning without building it themselves
- Want multisig protection without learning xpubs, descriptors, and PSBTs
- Value a polished mobile experience for managing their bitcoin security
If you’re technically confident and prefer holding all your own keys with no third-party involvement, a DIY solution like Sparrow or Nunchuk is the better path. Casa is for the user who wants strong security with minimal friction — and is willing to pay an annual fee for that convenience.
Verdict
Casa delivers on its core promise: making multisig accessible to non-technical users. The 2-of-3 setup genuinely eliminates the single point of failure that plagues standard single-sig wallets, and the health check and inheritance features add practical value beyond raw security. The no-seed-phrase model is a reasonable tradeoff for its target audience, even if it makes sovereignty purists uncomfortable.
The main risk is dependency. You trust Casa’s infrastructure for the recovery key, their servers for wallet coordination, and their team for inheritance execution. Sovereign Recovery covers the doomsday scenario, provided you’ve saved an up-to-date copy of the descriptor or the Sovereign Recovery email and, on Standard, still have your phone; day-to-day operation relies on Casa being a functioning company. For users who accept that tradeoff, Casa is one of the most approachable multisig products available.
Frequently Asked Questions
Can I use my existing hardware wallet with Casa?
Usually, yes. Casa’s device guide (dated May 2026) lists Trezor One, Model T, Safe 3 and Safe 5; Ledger Nano S, Nano S Plus, Nano X, Flex and Stax; Coldcard Mk3 and later; the Keystone Pro 2; Foundation’s Passport Core; and the YubiKey 5C NFC and C NFC (firmware 5.5 or later, on Windows 11). Some of these are no longer sold, and newer models such as the Trezor Safe 7 and Keystone 3 Pro aren’t on the list, so check Casa’s guide before you buy. If your Coldcard made its seed on older firmware, read our Coldcard advisory first. On Standard you bring your own device; Premium’s onboarding package includes hardware.
What if Casa goes out of business?
You hold two of three keys (Standard) or four of five (Premium), and Casa’s Sovereign Recovery guide shows how to move your coins with Sparrow or Electrum and the wallet descriptor, without Casa’s key. Be ready before you need it: keep a copy of the descriptor and of the Sovereign Recovery email, and remember that on Standard the phone key leaves the Casa app only as an emergency export, which needs your Casa password and an app that can open offline (keep “Clear Cache on Logout” off in Settings). On the default layout, lose the phone while Casa is gone and you’d be one key short; for 3-key bitcoin vaults, Casa’s optional second hardware key in place of the phone key closes that gap.
Does Casa require KYC?
Casa’s pricing page doesn’t mention an identity check for its vault plans (checked 7 November 2026); Private Client inheritance adds “enhanced verification”, US only. Check what you’re asked for when you sign up. Either way, Casa holds your vault’s xpubs, so it can see your whole balance and history. If you want no company to see your wallet, a do-it-yourself multisig with Sparrow Wallet is the better option.
Is Casa’s 2-of-3 safer than a single hardware wallet?
Significantly. A single hardware wallet has multiple single points of failure: the device itself, the seed phrase backup, and the passphrase. If any one of these is lost or compromised, your bitcoin is at risk. Casa’s 2-of-3 multisig means no single lost or compromised key can result in loss of funds. The security improvement over single-sig is substantial for any holder with meaningful amounts.
Can I upgrade from Standard to Premium?
Yes. Casa supports upgrading between plans. The migration involves creating a new multisig configuration with the additional keys and transferring your bitcoin from the 2-of-3 vault to the 3-of-5 vault. Casa’s support team guides you through the process.
