Nunchuk Wallet Review: Mobile Multisig

What Is Nunchuk?

Nunchuk is a bitcoin wallet application built specifically for multisig. Available on iOS, Android, Windows, macOS, and Linux, it serves as a multisig coordinator that works with most major hardware wallets and provides a collaborative signing experience that few competitors match. Where other wallets bolt on multisig as an afterthought, Nunchuk treats it as the primary use case.

The app launched in 2021 and has gained steady adoption among bitcoiners looking for a mobile-friendly multisig solution. This review covers Nunchuk’s feature set, the multisig workflow, collaborative custody options, Tap Signer support, and an honest assessment of where it excels and where it falls short.

Core Features

Native Multisig First

Unlike wallets that support multisig through hidden menus or complex import processes, Nunchuk’s entire interface is designed around managing multiple keys. Creating a 2-of-3 or 3-of-5 wallet takes a few taps. The app guides you through adding each cosigner, whether it is a hardware wallet, another Nunchuk installation on a different device, or a key held by a trusted contact.

Nunchuk supports standard multisig configurations including 2-of-3, 2-of-4, and 3-of-5. It uses descriptor-based wallets, which means wallet configuration exports are portable to other software like Sparrow or Bitcoin Core; Electrum can’t import them, but you can rebuild a standard multisig wallet there by hand.

Cross-Platform Sync

With an account, Nunchuk syncs your wallets across your devices through its servers. Create a multisig wallet on your desktop, monitor balances on your phone, and sign transactions from whichever device has access to the required hardware wallet. This solves a pain point of desktop-only coordinators where you cannot check your wallet balance without being at your computer.

Air-Gapped Communication

For hardware wallets that do not connect via USB, Nunchuk supports QR code and NFC communication. You can create a transaction on the app, display it as a QR code, scan it with a Coldcard Q or Passport, sign it on the hardware device, and scan the signed result back into Nunchuk. The full round trip happens without any wired connection.

Nunchuk runs on your phone and your computer, which stay in sync if you have an account. With hardware keys it holds only public keys (xpubs), so it can build payments but can't sign them. Each private key stays on a hardware device, which talks to Nunchuk in one of five ways: by NFC, tapping it on the phone (a Tap Signer or a Coldcard); by QR codes, scanning the screens (a Coldcard Q, Jade or Keystone); by microSD card, carrying a file (a Coldcard); by Bluetooth, pairing it with your phone (Ledger, Trezor and BitBox models that have Bluetooth); or by USB cable on a computer (a Trezor, Ledger, BitBox or Jade). Each device keeps its own private key and signs on the device: only public keys, PSBTs and signatures travel between it and Nunchuk. — **Nunchuk coordinates; your devices sign.** With hardware keys, the app knows only your public keys, so it can build addresses and payments but can’t move your coins. Each private key stays on its own device, whichever way that device connects.

Key Management Dashboard

Each key in your multisig setup gets its own profile in the app. You can see the master fingerprint, the derivation path, the device type, and whether the key has signed recent transactions. This visibility makes managing multiple wallets across multiple devices far less confusing than tracking everything manually.

Setting Up a Multisig Wallet in Nunchuk

Step 1: Add Your Keys

Open Nunchuk and tap Keys at the bottom.
Tap Add Key and choose the source:
- NFC — Tap a Tap Signer, or a Coldcard with NFC turned on, to import the key.
- Air-gapped — Scan a QR code or import from file (Coldcard via microSD).
- Bluetooth — Pair a Ledger, Trezor or BitBox that has Bluetooth with your phone (the phone apps added these between July and September 2026).
- Wired — Connect a Trezor, Ledger, BitBox or Jade by USB cable in the desktop app; the Android app also takes a Ledger or BitBox by USB.
- Software key — Generate a hot key on the device (less secure, useful for testing).
Repeat for each hardware wallet in your setup. A 2-of-3 requires three keys.

Step 2: Create the Wallet

Go to Wallets and tap Create New Wallet.
Select the wallet type: Standard Wallet (single-sig) or Multi-sig Wallet.
Choose the quorum: 2-of-3, 3-of-5, etc.
Assign keys to the wallet from your key list.
Name the wallet and confirm.

The wallet generates its first receiving addresses immediately. Before depositing funds, register the wallet on each hardware device that supports it, checking the cosigner keys it lists, and confirm that every device with a screen shows the same first address as the app. A Tap Signer has no screen and can’t do this check. One matching device isn’t enough: a compromised app can hand it a configuration with an attacker’s keys.

Step 3: Receive and Send

Receiving works identically to any bitcoin wallet — share the address, wait for confirmation. Sending is where multisig gets interesting.

Create the transaction in Nunchuk (recipient, amount, fee).
The app generates a PSBT (Partially Signed Bitcoin Transaction).
Sign with the first key — tap the key, connect via NFC/QR/USB, confirm on the hardware device.
Sign with the second key — repeat with a different device.
With the threshold met, the transaction shows “Ready to broadcast”: check it and tap Broadcast to send it to the network.

The PSBT standard means you can also export the unsigned transaction to another coordinator (like Sparrow Wallet) for signing if needed.

Collaborative Custody With Nunchuk

Nunchuk’s standout feature is collaborative multisig — sharing a wallet with other people, each holding their own key. This works for:

Couples or families — Joint custody of shared savings where both parties must agree on spending.
Business treasury — A company’s bitcoin requires multiple authorized signers.
Inheritance setups — A trusted family member holds one key as part of an inheritance plan.

How Collaborative Custody Works

One person creates the multisig wallet in Nunchuk.
They invite cosigners via encrypted link or QR code.
Each cosigner imports their own key into their Nunchuk installation.
When a transaction is created, it appears in every cosigner’s copy of the shared wallet.
Each signer approves (or rejects) and signs with their key from their own device.

The signature collection happens asynchronously — cosigners do not need to be online at the same time. One person can create and sign a transaction in the morning, and the second cosigner can add their signature hours later from a different timezone.

A shared 2-of-3 wallet in Nunchuk. 1: in the morning you create the payment, an unsigned PSBT. 2: you sign it on your hardware device after checking it: 1 of 2 signatures. It then waits, encrypted, in the shared wallet. 3: hours later your co-signer, in another time zone, checks it and signs on their own device: 2 of 2. 4: with 2 of 2 it is ready to broadcast, and a tap on Broadcast sends it to the Bitcoin network. Nobody has to be online at the same time, and each key signs on its owner's device. — **One payment, two signers, hours apart.** The partly signed transaction (PSBT) waits in the shared wallet until enough keys have signed. The same flow works when all the keys are yours: you sign on one device, then on another.

Nunchuk Free and Paid Plans

Plans and prices from Nunchuk’s pricing page, checked on 7 November 2026; they change, so check again before you sign up:

Free — Do-it-yourself single-key and multisig wallets with your own hardware wallets. No key held by Nunchuk.
Iron Hand ($120 a year) — A 2-of-3 assisted wallet: two hardware keys of yours and one key held by Nunchuk, with cloud backups, assisted recovery, key health checks and emergency lockdown. No inheritance features.
Honey Badger ($480 a year) — Two 2-of-4 assisted wallets with a dedicated inheritance key and a choice of timelock: on-chain, enforced by the Bitcoin network itself, or off-chain, which you can change without moving coins but which needs Nunchuk’s key to complete your heir’s claim. It needs three hardware keys (two regular keys and the inheritance key), and Nunchuk’s page says “No KYC required.”
Honey Badger Premier ($2,100 a year) — Three 3-of-5 assisted wallets with two inheritance keys; it needs four hardware keys.

The free tier is fully functional for technical users who want pure self-custody. The paid plans add convenience and backup options: Nunchuk holds one key (never enough to spend alone), which lets you recover if you lose one of your own keys. The multisig in practice lesson compares these plans with Casa and Unchained.

Who holds the keys on each Nunchuk plan. Free: your own wallets, for example a 2-of-3; all the keys are yours and Nunchuk holds none. Iron Hand: a 2-of-3 with two keys of yours and one held by Nunchuk; your two keys can spend without Nunchuk's key. Honey Badger: a 2-of-4 with two keys of yours, an inheritance key that is yours to leave to your heir, and Nunchuk's key, plus a timelock on-chain or off-chain. Honey Badger Premier: a 3-of-5 with two keys of yours, two inheritance keys and Nunchuk's key. On a paid plan Nunchuk's one key can never spend alone, but Nunchuk holds your xpubs and sees your whole balance and history. — **On each of these paid plans, Nunchuk holds exactly one key.** That key helps you recover and, on Honey Badger plans, with inheritance, but it can never move your coins alone. The trade-off is privacy: Nunchuk can see the whole wallet.

Tap Signer and SATSCARD Support

Nunchuk was among the first wallets to integrate Coinkite’s Tap Signer — a credit-card-sized NFC signing device. At $27.99 in Coinkite’s store when we checked on 7 November 2026 (list price $49.99), the Tap Signer is far cheaper than a traditional hardware wallet, making multisig more accessible.

How Tap Signer Works With Nunchuk

Initialize the Tap Signer by tapping it to your phone in the Nunchuk app.
The Tap Signer generates a private key internally and gives Nunchuk only its XPUB; the private key leaves the card only inside an encrypted backup file.
Back up the card before you fund the wallet. A Tap Signer has no seed phrase: its backup is an encrypted file, and the key that opens it is printed on the back of the card. Save the file and a copy of that key, and store them in separate places. The backup can’t be restored onto another Tap Signer, only imported into other wallet software or a device that supports it, such as a Coldcard.
Add the Tap Signer as one of the keys in your multisig wallet.
When signing transactions, enter the card’s PIN in Nunchuk and tap the Tap Signer to your phone’s NFC reader.
The Tap Signer signs the transaction internally and returns the signature via NFC.

The Tap Signer has no screen, which means it cannot independently display transaction details for verification. This is its primary security limitation — you are trusting the Nunchuk app to show you the correct transaction. For this reason, using a Tap Signer as one key in a multisig (alongside screened hardware wallets like a Coldcard or Passport for the other keys) is a reasonable trade-off. Using only Tap Signers for all keys in a multisig reduces your security guarantees.

Two 2-of-3 wallets. The first has one Tap Signer and two hardware wallets with screens, A and B. Of the three pairs that can sign, Tap Signer plus A, Tap Signer plus B, and A plus B, every one includes a screen, so every spend gets checked. The second has three Tap Signers: none of its three pairs has a screen, so you only see what the app shows. A screen shows the real address and amount before you approve; a Tap Signer signs whatever the app sends it, and can't show you a receive address. — **Pair a Tap Signer with devices that have screens.** With one Tap Signer in a 2-of-3, every pair of keys that can spend includes a device with a screen, so every payment appears on a screen you can check. With only Tap Signers, none does.

SATSCARD support is also integrated. A SATSCARD is an NFC card for gifting bitcoin, with ten slots that are each used once: you load a slot with sats and hand the card to someone, who unseals that slot in Nunchuk to claim the funds.

Privacy Considerations

Nunchuk connects to Bitcoin nodes to fetch balance and transaction data. By default, it uses Nunchuk’s servers, which means they can see your addresses and balances. For users who prioritize privacy, Nunchuk supports connecting to your own Electrum server. Your address and balance lookups then go to your own node instead of Nunchuk’s server. That doesn’t hide a wallet you sync through an account or hold on a paid plan, as explained below.

Account sync sends a copy of each wallet through Nunchuk’s servers: its name and notes, any payment still waiting for signatures, and its descriptor, the list of the wallet’s public keys and spending rules, which reveals your whole balance and history. That list comes from the sync code in Nunchuk’s open-source library. Nunchuk documents end-to-end encryption for group wallets and their chat, and publishes no such statement for syncing your own wallets, so plan as if it could read that copy. For maximum privacy, use guest mode: it syncs nothing and keeps wallet data on each device, and you copy it between your devices yourself.

What Nunchuk can see depends on three separate choices. Which server checks your coins: with Nunchuk's own server, the default, Nunchuk sees your addresses and balances; with your own Electrum server, the app asks your node instead and your addresses stay with your node. Sync between your devices: with an account and sync on, each wallet's descriptor goes through Nunchuk's servers, so Nunchuk could see your whole wallet, because it publishes no end-to-end encryption for this sync; in guest mode, with no account, nothing syncs and your wallets stay on your devices. On a paid plan Nunchuk holds a key and your xpubs, so it sees your whole balance and history whatever server you use. Most private: the free tier in guest mode, with your own Electrum server; the price is that you copy wallet data between your devices yourself. — **What Nunchuk sees depends on three separate choices.** Its server learns your addresses unless you point the app at your own; an account syncs your wallets through its servers, while guest mode keeps them on your devices; and a paid plan shows it the whole wallet whatever server you use.

Pros and Cons

Strengths

Multisig built for the phone. Creating, managing and signing multisig transactions works smoothly on iOS and Android.
Collaborative custody done right. Async signing, a shared chat and shared wallet visibility make joint custody practical.
Broad hardware wallet support. Works with Coldcard, Trezor, Ledger, Passport, Jade, BitBox02, Keystone, and Tap Signer.
Descriptor-based wallets. Configuration exports are portable. You are not locked into Nunchuk — you can reconstruct your wallet in any descriptor-compatible software.
Free tier is genuinely useful. It gives you do-it-yourself single-key and multisig wallets without a subscription.
NFC signing. Tap Signer integration makes signing fast and cable-free.

Weaknesses

Server dependency by default. Without configuring your own Electrum server, Nunchuk’s infrastructure sees your addresses.
Tap Signer’s no-screen limitation. You cannot verify transaction details on the Tap Signer itself, which requires trusting the software.
Assisted features require a subscription. Assisted recovery starts at $120 a year (Iron Hand) and inheritance at $480 a year (Honey Badger).
Partly open source. Nunchuk publishes its core library, desktop app and Android app on GitHub; the iOS app and the sync and backend services aren’t published.

Nunchuk vs Sparrow vs Casa

Feature	Nunchuk	Sparrow	Casa
Mobile app	Yes (iOS + Android)	No (desktop only)	Yes (iOS + Android)
Collaborative signing	Built-in	Manual PSBT exchange	Built-in
Own node support	Yes (Electrum server)	Yes (Bitcoin Core / Electrum)	No
Coin control	Yes (select, tag and lock coins)	Full	Yes (manual UTXO selection, paid plans)
Open source	Core library, desktop and Android apps	Fully	No
Free tier	Yes	Yes (fully free)	Single-key Casa Pay only (multisig vault: 30-day free trial)
Tap Signer support	Yes	Yes (with an NFC card reader)	No
Inheritance planning	Honey Badger plans ($480/year and up)	Manual	All paid individual plans (from $250/year)

Security Architecture

Nunchuk’s security model centers on the principle that, when you use hardware keys, the app never holds your private keys. All signing operations happen on your hardware wallets or Tap Signer — the app only constructs transactions, collects signatures, and broadcasts the final result. Even if Nunchuk’s servers were fully compromised, an attacker could not spend your bitcoin because they never have access to your private keys.

The app stores wallet configuration data (XPUBs, derivation paths, transaction labels) on your device and, if you have an account, in a synced copy on Nunchuk’s servers. This data allows the app to generate addresses and display balances but is insufficient to sign transactions. Nunchuk doesn’t say that this synced copy is encrypted end to end, so treat an account as letting Nunchuk see your wallets; guest mode keeps them on your devices.

On the paid plans Nunchuk holds one key of each assisted wallet. That key can’t spend alone, and on Iron Hand your two hardware keys can spend without it. Nunchuk also holds the wallet’s xpubs, so it can see your whole balance and history: weigh that if privacy matters to you.

Verifying Receive Addresses

As with any multisig coordinator, the most critical security practice is verifying receiving addresses on your hardware wallet screens before depositing funds. Nunchuk supports address verification for hardware wallets that have registered the multisig configuration. After registering, navigate to the address verification feature on your hardware device and confirm the address matches what Nunchuk displays. If they diverge, the app may be compromised — do not deposit funds until resolved. This principle applies to all coordinators, not just Nunchuk, and is covered in our Bitcoin security architecture guide.

Who Should Use Nunchuk?

Nunchuk fits best for users who want multisig on mobile without sacrificing security fundamentals. It is particularly strong for:

Couples or families managing shared bitcoin custody.
Users who own a Tap Signer and want a wallet that supports it natively.
Anyone migrating from single-sig to multisig and wanting a guided process.
Bitcoiners who already use Sparrow at home but want mobile monitoring and signing capability.

If you prioritize advanced transaction building, a detailed view of your coins and their history, or fully open-source infrastructure, Sparrow Wallet remains the better choice for your primary coordinator. The two tools complement each other well — use Sparrow for complex operations and Nunchuk for mobile access and collaborative signing.

Getting Started With Nunchuk

The onboarding process is straightforward:

Download the app from the App Store (iOS), Google Play (Android), or the desktop releases page. Verify the download source — only use official distribution channels.
Create an account or use guest mode. An account enables cross-device sync. Guest mode keeps everything local.
Add your first key. If you have a hardware wallet, add it immediately. If testing, create a software key first.
Create a wallet. Start with a single-sig wallet if you are new to Nunchuk, then graduate to multisig once you are comfortable with the interface.
Connect to your own server (optional). Under Settings, configure your own Electrum server if you run a Bitcoin node. This significantly improves privacy.

The app includes contextual help throughout the setup process. Nunchuk’s documentation covers edge cases for specific hardware wallet combinations. If you encounter issues pairing a device, check that the hardware wallet’s firmware is up to date — older firmware versions sometimes have compatibility gaps with newer coordinator software.

For users coming from a single-sig wallet, the singlesig to multisig migration guide provides a structured approach to transitioning your funds safely into a new multisig wallet managed through Nunchuk or any other coordinator.

Part of our free Bitcoin course: This topic is covered in depth in Multisig in Practice from the Advanced Bitcoin Security & Privacy course.

Frequently Asked Questions

Is Nunchuk open source?

Partly. Nunchuk publishes its core library (libnunchuk), its desktop app and its Android app on GitHub; the iOS app and the backend sync service aren’t published there. You can audit the code that runs on Android and desktop, but you trust Nunchuk’s servers for the sync layer.

Can I use Nunchuk without creating an account?

Yes. You can use Nunchuk in guest mode without an email account. This disables cross-device sync but preserves full wallet functionality. For privacy-conscious users, guest mode with your own Electrum server is the recommended configuration.

What happens if Nunchuk the company shuts down?

Your bitcoin remains accessible, provided you have the wallet’s descriptor: export it from Nunchuk while the app works and store a copy with each seed backup. The wallet uses standard Bitcoin descriptors, so you can import a standard multisig wallet into Sparrow or Bitcoin Core; a Miniscript wallet, such as a Honey Badger wallet with an on-chain timelock, can’t go into Sparrow, and Nunchuk’s own guide recovers it with Bitcoin Core. Electrum can’t import a descriptor, but it can rebuild a standard multisig if you enter each cosigner’s extended public key in Zpub format and set the quorum by hand. Your hardware wallets and seed phrases are independent of Nunchuk. On an assisted plan, your own keys must reach the threshold without Nunchuk’s key: on Iron Hand, your two hardware keys do. On Honey Badger plans, inheritance depends on the timelock you chose. With the off-chain timelock, your heir’s claim needs Nunchuk’s key to co-sign, so it can’t go through if Nunchuk closes for good. With the on-chain timelock, once the date passes the wallet can be spent without Nunchuk’s key, so your heir can claim with the inheritance key and the wallet’s descriptor. Beyond that, you lose the convenience of Nunchuk’s sync and collaboration features.

Does Nunchuk support Taproot?

Yes, in part. Taproot single-sig is supported, and in December 2024 Nunchuk launched Taproot multisig wallets built on MuSig2 as a beta (up to five keys). At launch they worked only with software keys, and Nunchuk called the feature experimental and advised against storing significant funds in it; check its release notes for hardware-wallet support before you rely on it. Nunchuk’s standard multisig wallets use P2WSH scripts. A Taproot multisig spend that uses the key path looks like an ordinary single-key spend on-chain, which saves fees and helps privacy.

Can I recover a Nunchuk multisig wallet without the app?

Yes. Export the wallet descriptor from Nunchuk (open the wallet → View wallet config → More → Export wallet configuration) and import it into any descriptor-compatible wallet software. To sign, you also need enough keys to meet the quorum, each as the device or its backup: a seed phrase for most hardware wallets, and for a Tap Signer, its encrypted backup file plus your copy of the key printed on the card. The descriptor can’t spend, but it shows your whole balance and history, so keep it as private as your seeds and store a copy with each seed backup.

How does Nunchuk handle transaction fees?

Nunchuk provides fee estimation based on current mempool conditions. You can choose between priority levels (high, medium, low) or set a custom fee rate in sats/vByte. For multisig transactions, the app correctly accounts for the larger transaction size due to multiple signatures. The fee estimate shown before signing reflects the actual cost of the final broadcast transaction.

Can I use Nunchuk alongside Sparrow for the same wallet?

Yes for a standard multisig wallet, and this is a common setup; a Miniscript wallet, such as a Honey Badger wallet with an on-chain timelock, can’t go into Sparrow. Export the wallet descriptor from one coordinator and import it into the other. Both will show the same addresses, balances, and transaction history. You can monitor on mobile via Nunchuk and perform complex operations (coin control, batch sends) on desktop via Sparrow. The wallet descriptor format is standardized, so there is no lock-in to either platform. Just ensure both coordinators are connected to the same Bitcoin network data source — ideally your own full node — to prevent discrepancies in balance or transaction visibility.

Filed under: Bitcoin Wallets & Self-Custody