Gatekeeper

Challenge your keymasters

What is Gatekeeper?

Gatekeeper verifies your multisig cosigners control the keys they claim. Load a wallet descriptor, select a key, and challenge the cosigner to sign a message with the derived address. Everything runs client-side — no data leaves your browser.

How do I export my wallet descriptor?

Sparrow Wallet

Go to Settings tab, then click Export and choose "Wallet Descriptor" or "Output Descriptor".

Coldcard

Insert your microSD, go to Settings > Multisig Wallets, select your wallet, and choose Descriptors > Export.

SeedSigner

Navigate to Tools > Export Xpub and scan the resulting QR code, or export the BSMS file from your coordinator wallet.

Nunchuk

Open your wallet, tap the gear icon, select Wallet Configuration, and export or copy the descriptor.

Taproot uses Schnorr signatures (BIP-340). Standard message signing verification is not supported for Taproot addresses.
Copied!

Generate a QR code for SeedSigner signing. Multisig paths require patched firmware. Learn more.

How do I sign a message?

Sparrow Wallet

Go to Tools > Sign/Verify Message, paste the address and message, then sign with your key.

Coldcard

Go to Advanced/Tools > Sign Message. Load the message from microSD or enter it manually.

SeedSigner

Use the patched firmware to scan the signing QR code generated above, then scan the resulting signature QR.

Trezor

Use Trezor Suite: go to the account, click Sign & Verify, enter the message, and sign. Uses BIP-137 format.