Multi-sig that
survives time zones
on Hedera.

Approve Tuesday, sign Wednesday from London, network executes when the threshold is met. Up to 62 days later. Threshold signatures, agent automation, scheduled async signing. Private keys never leave your device.

Join Signing Session Create Session

Participants join to sign. Coordinators create sessions and build transactions.

How this works. We host the user interface; you (or a teammate) host the coordinator via npx hedera-multisig server. The dApp connects to that coordinator URL — Vercel never sees your transactions. New here? Try the walkthrough →

Treasury management

Move HBAR, tokens, and NFTs with multi-party approval. Smart-contract calls with ABI verification. The most common use case for teams managing shared accounts.

See the HBAR walkthrough →

Agent signing

Automated agents with composable policy rules. Amount limits, recipient allowlists, time windows.

Scheduled transactions

Async signing over hours, days, or up to ~62 days (HIP-423). No 120-second pressure for cross-timezone teams.

Security model

Keys stay local: Private keys are never transmitted. Only frozen transactions and signatures flow over the network.
Verified data separation: You always see what the transaction actually does, clearly separated from what the coordinator claims it does.
Mixed sessions: CLI tools, browser wallets, and automated agents can join the same signing session.
Real-time coordination: Live sessions with automatic reconnection, so participants can sign together without manual coordination.

The server coordinates signing without ever seeing your private keys.

Multi-sig thatsurvives time zoneson Hedera.

Treasury management

Agent signing

Scheduled transactions

Security model

Multi-sig that
survives time zones
on Hedera.