Sanctum has implemented a 2-of-3 multisig security system for all wallets within its consumer mobile application. This setup requires authorization from any two of three distinct keys to approve transactions, moving away from traditional single-key or seed-phrase models.
The security architecture distributes control across three locations: a device key stored on the user's phone protected by biometrics, a cloud key saved in iCloud or Google Drive, and a recovery key linked to the user's email via Turnkey. This structure allows users to recover funds if a device is lost or stolen.
The multisig infrastructure is powered by Squads, a platform currently securing over $15 billion in assets across the Solana ecosystem. This deployment marks a shift from institutional-grade security models to retail-focused applications.
The feature was first referenced in the Sanctum App 2.0 release on October 1, 2026, with a full public rollout announced on November 5, 2026. This new system operates independently of the protocol's existing 6-of-11 multisig used for governance and upgrades.
