What is a threshold signature?
- Author
- CRYPTO PORT Editorial
- Published
- Updated
- Reading time
- 6 min
In short
A threshold signature lets any t of n participants jointly produce a single valid signature. The goal resembles multisig, but the output is one ordinary signature, so the chain cannot tell how many people signed. Crucially, the full private key never exists in one place at any moment.
Key points
- Any t of n signers can produce one valid signature
- The complete private key never exists anywhere
- On-chain it is indistinguishable from a normal signature
- Unlike multisig, it needs no support from the chain
Definition
A cryptographic scheme in which a private key is shared among several parties so that only a predefined number of them, acting together, can produce a valid signature.
It builds on secret sharing. From key generation onwards, each participant holds only a share. Signing is an interactive computation between shares, and only the finished signature leaves the group. Because the whole key never materialises on any single machine, stealing one device is not enough to move funds.
The visible difference from classic multisig is what the chain sees. A Bitcoin 2-of-3 multisig publishes three public keys in the script and carries two signatures, exposing the arrangement. A threshold signature shows one public key and one signature: cheaper in fees and silent about who holds what authority.
Practical protocols such as FROST for Schnorr signatures are being standardised. What varies wildly between implementations is operational: how you recover when a participant goes offline, and how shares are backed up. At adoption time those questions matter more than the cryptographic strength.
Watch out for
- · Without a defined share-recovery procedure, a lost share can freeze the funds permanently
- · Nothing about the setup is recorded on-chain, which complicates audits and inheritance
- · Proprietary implementations risk stranding assets if the provider shuts down