Tonkey
Open App

TON multisig wallet

How to create a TON multisig wallet

A multisig wallet holds funds that move only when enough of its owners approve. This is how to set one up on TON with Tonkey, what it costs, and how to choose the signers and the threshold.

What a TON multisig wallet is

An ordinary wallet has one key: whoever holds it can move everything. A multisig wallet has a list of signers and a threshold, such as 2 of 3. Every transfer is proposed as an order, and it executes only when that many signers have approved it.

On TON this is a smart contract. Tonkey uses the official multisig-contract-v2 from the TON core team, audited by Zellic and Trail of Bits. The funds stay in that contract: Tonkey has no backend and never holds keys.

Teams, DAOs, projects and families use a multisig so that no single lost, stolen or careless key can empty the treasury.

Before you create it

Signers. Each signer needs their own TON wallet that supports TON Connect, such as Tonkeeper, MyTonWallet or Tonhub. Collect their addresses. A multisig can have up to 255 signers.

Threshold. How many approvals an order needs. 2 of 3 suits a small team: one person can be away or lose a key and the others can still act. 3 of 5 suits a larger group. A threshold equal to the number of signers means one lost key locks the funds, so leave room.

Proposers (optional). Addresses that can create orders but cannot approve them, for example an accountant who prepares payments.

GRAM for the deploy. The person who deploys pays the network fee and sends 0.1 GRAM, which stays in the new multisig.

Create the multisig, step by step

  1. Open app.tonkey.site in a browser or inside Telegram, and connect your wallet.
  2. Choose to create a new multisig.
  3. Add the signer addresses, including your own if you are a signer.
  4. Optionally add proposers.
  5. Set the threshold, for example 2 of 3.
  6. Review the signers, the threshold and the address the multisig will have, then confirm the deploy in your wallet.

When the deploy lands, the multisig has an address like any wallet. Share it with the other signers: there is nothing for them to accept, they open it in Tonkey with their own wallet.

Fund it and make the first transfer

Send GRAM, jettons or NFTs to the multisig address from any wallet or exchange.

To pay someone, one signer or proposer creates an order: the recipient, the amount, a comment if needed, and an expiry date. Several transfers can go in one order. Tonkey simulates the order before anyone signs and shows exactly what it will do.

The other signers open the order and approve it in their own wallet. When the threshold is reached the order executes on its own; nobody has to press a final button.

Things to know before you rely on it

An approval cannot be taken back, and an order that has expired can never execute.

Changing the signers, or raising the threshold above an order’s own, makes the pending orders unexecutable: create them again after the change.

Signers can keep their keys in hardware wallets: a multisig and a hardware wallet protect against different things, and together they cover both.

Check the contract yourself: the code hash of every multisig Tonkey shows is compared with the official build, and the security page lists the hashes.

Questions about TON multisig wallets

How much does it cost to create a TON multisig wallet?

Tonkey is free. The deploy costs a network fee plus 0.1 GRAM that stays in the multisig. Afterwards, whoever creates an order pays for creating and storing it, and each execution is paid from the multisig balance.

Can I change the signers or the threshold later?

Yes. A settings change is an order like any other and needs the current threshold to approve it. Pending orders created before the change of signers stop being executable.

What if a signer loses their wallet?

As long as the remaining signers can still reach the threshold, they create an order that replaces the lost address. This is why a threshold below the number of signers is safer.

Which wallets can sign?

Any TON wallet that supports TON Connect. Each signer uses their own wallet; Tonkey never sees keys or seed phrases.

Is the multisig contract audited?

Yes. multisig-contract-v2 was audited by Zellic and Trail of Bits. The audits cover the contract, not the Tonkey app.

Can I hold jettons and NFTs, or stake?

Yes. A multisig holds GRAM, jettons and NFTs, renews .ton names it owns, and can stake idle GRAM in KTON, all as orders the signers approve.

Put your treasury under shared control

Create a multisig in a few minutes. You only need a TON wallet and the addresses of your co-signers.

Open AppRead the guide