# More secure than a Ledger? Get a MULTISIG SAFE now! By [Zelotes](https://paragraph.com/@zelotes) · 2023-01-28 --- Table of Content ---------------- In this article, I will explain in simple terms what a multisig wallet is and how to use it. I will also show you step-by-step… * how to set up a multisig wallet with Gnosis Safe * how to transfer tokens out from that Safe * how to connect your safe with dApps like OpenSea Alright, let’s get started! Refresher --------- On Ethereum there are two types of addresses: 1. Accounts 2. Contracts The first one, ACCOUNTS, also called EOA, is what you are using everyday, an public ETH address in your wallet, created from your seed phrase. You can have multiple such accounts in your wallet. Each account has a public address and a private key. Whoever holds the private key can perform transactions in that account. Don’t loose it! The second type, CONTRACTS, are what you usually know from the projects you deal with. You mint NFTs from a contract, you sell them via a (SeaPort) contract or you are using the WETH smart contract when swapping ETH. A smart contract is not controlled by a private key - which is good, so it can’t get stolen. Contracts are controlled by one or more accounts (EOA). Hardware wallets ---------------- Hardware wallets like Ledger or Trezor are considered a must have when degening around in web3. It’s the most secure way of holding your funds. The quasi standard. It’s so good because the seed phrase and the derived private keys for each account are stored on the hardware device and never ever leave it anywhere, especially not to this evil thing, called internet. To approve a transaction, you have to physically connect your hardware device and press a button on it. It’s like a hardware two-factor-authentication. Very safe. BUT … is it really the safest way to store your assets like NFTs or crypto funds?… …NO! ---- You guessed it: No! It’s not the safest way. The safest way of storing your funds is on a smart contract like the Gnosis SAFE. Here comes the magic: Such a safe (which is a smart contract) can be owned by not only one but by multiple wallet-accounts. This is why it’s called a _“multisig wallet”._ It’s a short form of multi-signature. The term wallet is a bit misleading as a crypto wallet is a piece of software that holds ACCOUNTS but not CONTRACTS. Most accurate is, to just call it a _“multisig Safe”._ Let’s say there are four accounts that own this smart contract (Safe). This could be four public Ethereum addresses that you own yourself. Or it could be two accounts that you own and two accounts that your partner owns. Or you and three friends have one account each that together own the safe. In the settings you can decide how many of the owners need to sign a transaction before it gets approved and valid. Let’s say you would like to make it two. Every time you want to perform a transaction with your safe, you need two signatures from one of the four accounts that own the safe. It doesn’t matter which two but only if two wallets-accounts confirm the transaction it gets executed. It works like the two-men missile launch control, that requires two humans with one key each, to launch a nuclear missile - in order to prevent one alone fucking up. Set up your Safe ---------------- ### I. Open the Gnosis Safe homepage Go to app.safe.global. If you feel uncomfortable clicking my link (very good!) then navigate yourself via the official Twitter with the easy to remember handle: @safe [https://app.safe.global/welcome](https://app.safe.global/welcome) You should now see a page like this. Click ‘Create new Safe’: ![Welcome page from Gnosis Safe](https://storage.googleapis.com/papyrus_images/315ef2602277397c1e9bacd5f0511aafbd5aa5f630caea900337424cb0ad40c2.png) Welcome page from Gnosis Safe ### II. Connect your Wallet Ideally you use a hardware wallet account for maximum safety. You might want to consider using the main account you have your ENS associated with. You can also just start with a MetaMask account to get familiar with the process. Hit _“Connect”_ ![Wallet Connect](https://storage.googleapis.com/papyrus_images/0bdc7da462dd3da89969d7d0757741e8181774acb9bc2777b781d144390983d5.png) Wallet Connect In the next menu, you get plenty of options to connect your wallet. If you use a ledger for example, you can directly connect via the Ledger Live app. ![](https://storage.googleapis.com/papyrus_images/106538468b5fa12c80c2a789bde1fbd9fdd173315bd4b79223d20bead156d5c0.png) Using your Ledger, the app will scan your wallet and list all available accounts that you have created. In my example it’s 16. Select the one you want to use and hit _“Connect”_ ![Account selection from Hardware Wallet](https://storage.googleapis.com/papyrus_images/3a3b9a6708b0444b6c34539d56227b34c31dbb606eb8d31f7eaa5836d60596f9.png) Account selection from Hardware Wallet If you have chosen an account that has an ENS linked to it, Gnosis Safe will recognize it as you can see the right preview and the top right corner. It captured my zelotes.eth. Make sure to pick the right network. In my case it’s Ethereum. ![Accept TOS and Privacy Policy](https://storage.googleapis.com/papyrus_images/039f5909ec67b21436772c502c512ada102ef66a1feaba833ba47215f58cb470.png) Accept TOS and Privacy Policy ### III Configure your Safe Now the cool stuff is starting. You need to decide now, how many owners your Safe shall have and how many of those owners are required to confirm a signature. Definitely make sure to set more than one signer. On the other hand don’t set all owners as signers because if just one of them loses access to his wallet-account, you can not control your safe anymore. Pay close attention to the little warnings shown to you during the setup process. ![Set up menu for the Safe](https://storage.googleapis.com/papyrus_images/2051521bcca818480f973c6a3c275914faec7228f3b54ec48aa6f99593c8a5f7.png) Set up menu for the Safe In this example I have decided to go with four accounts of mine: Three ledger accounts that all have an ENS associated as well as one MetaMask account. I might also set up the ‘Safe Mobile owner key’ as an additional security measure later on. Hit _“Next”_ ![Four Owner, Two Signer Set-up](https://storage.googleapis.com/papyrus_images/3935b6c9ecf235f0df650d0cd695deee46901bd7f2be7d64a0fe9efea86f63e1.png) Four Owner, Two Signer Set-up ### IV Review and Confirm You will be now shown a summary and the estimated fees to create this smart contract for you. Make sure that you have enough funds to pay this fee and hit _“Next”_ ![Review your set-up](https://storage.googleapis.com/papyrus_images/3d07d3c2d27affe77ed7307795df58a50dd4ce629bea0c5d6af249273be61710.png) Review your set-up ### V Sign with your wallet and wait You are now prompted to sign a transaction in order to get the Safe contract created. It’s quite a few clicks with a Ledger but you only have to do this with your main account in this step. Now, just wait until the transaction is processed. Once done, just hit _“Start using Safe”_ ![Safe contract succesfully created](https://storage.googleapis.com/papyrus_images/260330b39b99f119096edc7ff884d3871f66e1af510482244ae33652d5ec16db.png) Safe contract succesfully created ### VI Congrats! You own a real Safe now! NOW you have the safest way of storing your NFTs and crypto funds. Make sure to save your Safe contract address somewhere, you can access it quickly. I do it in my password manager. You can use it in a similar way now as your regular public address from an wallet-account: Receive and transfer stuff. As a first step, you can transfer something into your new safe and try to transfer it out again. Use the Safe Dashboard ---------------------- Hitting _“Start using Safe”_ will direct you to the Safe dashboard with a tipps & tricks modal upon entry. Read this carefully, confirm _“Got it”_ and make yourself familiar with all the provided information. Please pay special attention to the _“Settings”_ in the menu and play around with them. You can enable some more cool safety measures. ![The Safe Dashboard](https://storage.googleapis.com/papyrus_images/1762599b16d3b6f5ce6aca7ba119f6f509b51902a3382d8ce0ab1f802524adee.png) The Safe Dashboard Perform a Test Transaction -------------------------- Let’s try our new Safe out. I have transferred some ETH and one NFT to my new Zelotes Safe and will now transfer the NFT back via the Dashboard. ### I Select a token Hovering over the NFT a “Transfer” button appears. Clicking this opens up a modal to enter the recipient’s address. Make sure to use your address book, to not fall for an _“address poisoning scam”_ which is currently happening quite often. Maintaining an address book also applies for your regular Soft- and Hardware- Wallets. ![Displaying Assets in Safe](https://storage.googleapis.com/papyrus_images/dbd20b0789ecde228f79e5daa81fc1797a51e21ebb6ff068b9b96fe95b6c1fba.png) Displaying Assets in Safe ### II Enter Recipients Address After entering the recipients address hit _“Next”_ ![Transfer a NFT out of the Safe](https://storage.googleapis.com/papyrus_images/9402d676b39a922e57489143734ffb0ca2bd43fe5fcf7fe9f7c16cffbad24319.png) Transfer a NFT out of the Safe ### III Submit your transaction In the last step, review your transaction carefully, before you hit _“Submit”_ to then sign the transaction with your main wallet-account. At this point, no gas is required. ![Review & Confirm a transaction](https://storage.googleapis.com/papyrus_images/591eeabb8c13af4a53e87e46af91b130b4c7a0f4060a07a1cc781e93608b284c.png) Review & Confirm a transaction ### IV Access the Transaction Since I have configured that two of the four contract owners need to sign a transaction, I have to switch my wallet now to perform the second signature. I can access my transaction from the main menu on the left. You can clearly see that one signature is missing yet. ![Pending Transaction](https://storage.googleapis.com/papyrus_images/7f2cca7d06e96f06941f933b555ae2ea925e4c263248466fa4157da811674c52.png) Pending Transaction ### V Switch your account Now it’s time to switch accounts and connect with one of the other three owners, in order to provide the second signature. The last owner who signs the transaction has to pay the gas at the present costs. ![Performing the last signature](https://storage.googleapis.com/papyrus_images/e8b5842abef6a8c30030658d38052a3661f45142b1e7ad854f064281add90289.png) Performing the last signature ### VI Check out the Summary After a few seconds, the transaction is confirmed and my NFT is back in my account I transferred it from earlier. Piece of Cake! ![Transaction Summary](https://storage.googleapis.com/papyrus_images/7dbc5aae10b74694f857d49049fccfe44cb955ae87933649f14ad022a94b51d4.png) Transaction Summary Connect to OpenSea ------------------ ### I Open WalletConnect on Safe As a last step, let’s try to connect our Safe to OpenSea. Go to _“Apps”_ in the main menu, search for _“WalletConnet”_ and select it from the list. ![Open to WalletConnect](https://storage.googleapis.com/papyrus_images/12bd982459fc506282d8ec33eea53243ec241b808edfe2e1ec7cdf80372ee97e.png) Open to WalletConnect The following page opens up and provides you with the instructions on how to connect. ![WalletConnect in Safe](https://storage.googleapis.com/papyrus_images/f2c88549c04712b51e4aa8b9f2897246ca009e19e45e3fab71a3be35159c5ccf.png) WalletConnect in Safe ### II Open Wallet Connect on OpenSea Now go to OpenSea, click connect wallet per usual and select WalletConnect. Click _“copy to clipboard”_ below the QR code. ![](https://storage.googleapis.com/papyrus_images/a67cc9411a56d1f78c0e94131e4ccfaf8c3be7e9e4478c0e0e5c933f5370ccf3.png) ### III Connect WalletConnect Now paste the link into the WalletConnect input field on Safe ![Connection established](https://storage.googleapis.com/papyrus_images/a0d1a04f172b27a3f3226755b11837b25e36447a4c79a9e52f93d6a3b0d20551.png) Connection established ### IV Sign Message Switch back to OpenSea and hit the “Accept and Sign” button ![Trigger the Message](https://storage.googleapis.com/papyrus_images/cf394b5ae34c0464a5829e0f585ca6a8a36b72ec8dec2d4a05c9f979091f0c19.png) Trigger the Message Then switch back to Safe to sign the message as a first owner ![Owner 1 Signing Message](https://storage.googleapis.com/papyrus_images/5ca4d3a604e10c548bb5b66e41b3d501d7c4d493c9a10250ddf4583086b49366.png) Owner 1 Signing Message Find the Transaction in the main menu ![Open Transaction](https://storage.googleapis.com/papyrus_images/cc57248b90cf65fde3b0eaa9f314df0e1d098544d5bf930cd0ea063db5c68dec.png) Open Transaction Perform the second signature. Please be aware that even signing a message with your Safe triggers a call to the blockchain and costs gas! ![Owner 2 Signing the Message](https://storage.googleapis.com/papyrus_images/51e89f81af861ac71f6dc896d421f36e1c5f4dc0286762605e270665b083accc.png) Owner 2 Signing the Message ### V That’s it! You are in OpenSea now and can adjust your profile if desired. But as mentioned above it comes at a cost as gas is required for every signature of a message. Check out the Mobile App ------------------------ Gnosis also offers a slick mobile App which has a pretty amazing rating. Loading the Safe as very easy as you only have to scan the QR code, set a pin and you are ready to go in read-only mode. If you would like to confirm transactions from your mobile, you can create a mobile key in various ways. Definitely check it out. Below are impressions from the App store ![Safe in App Store](https://storage.googleapis.com/papyrus_images/9d09fa0f3e573d490b0eef03c8a149afbf2d497603ad47d8b59b4a1314de0c8e.png) Safe in App Store ![Safe in App Store II](https://storage.googleapis.com/papyrus_images/6a9cf1ddf9d7ed20eaa58c81ba150221fa96555b21520d5b5a22ad9d29d2eaea.png) Safe in App Store II Summary ------- Respect! If you made it till the end. Now you know what is the safest way to store your crypto coins and digital collectibles: In a Safe with multisignature enabled. This is by far more secure than a hardware wallet and it allows you to share a Safe with friends or members of a DAO. Nevertheless, a hardware wallet is still a must-have for your wallet strategy. Make sure top store the seed phrase in a secure way. You can learn how in this article: [https://mirror.xyz/zelotes.eth/vdF7g7hyOEdFGnVxVUx96\_fDnxPzI-y0Auk77rTPpWI](https://mirror.xyz/zelotes.eth/vdF7g7hyOEdFGnVxVUx96_fDnxPzI-y0Auk77rTPpWI) For more content like this, feel free to check out my recent Twitter Threads: [https://twitter.com/Zelotes\_eth](https://twitter.com/Zelotes_eth) --- *Originally published on [Zelotes](https://paragraph.com/@zelotes/more-secure-than-a-ledger-get-a-multisig-safe-now)*