Both firmwares build the same 2-of-3 multisig wallet. We ran the whole setup on each and photographed every screen.
Almost everything is the same. Creating a seed is the same. Exporting the public keys, building the wallet, reviewing a transaction and signing it are the same.
One thing is not: getting the seed off the device and somewhere safe.
On stock SeedSigner that means writing the seed down as a QR. The device shows you a 25 square grid, one magnified square at a time, and you copy each one by hand onto something that will survive. Twenty five squares, per seed. Three seeds in a 2-of-3, so seventy five.
On ShieldSigner you put a card in, choose a PIN, and the seed is on the card.
Counted in screens, for the whole 2-of-3:
| stock | ShieldSigner | |
|---|---|---|
| A: Make 3 seeds | 40 | 40 |
| B: Back up 3 seeds | 90 | 24 |
| C: Export 3 public keys & build wallet | 19 | 19 |
| D: Review and sign | 14 | 14 |
| Whole 2-of-3, total | 163 | 97 |
Only B differs, and it differs by 66 screens. Every step is below, in order, so this doubles as a guide to setting up a 2-of-3 properly.
How this was done
ShieldSigner is a SeedSigner fork that adds smartcard support.
Both runs happened in the browser simulator, which runs the real SeedSigner firmware. Each device created its own seed, as it would in real use. Nothing here touches real money: these seeds were thrown away and must never hold funds.
Two screens count as the same screen when the device is showing the same screen. A different fingerprint printed on it does not make it a different screen.
A: Make 3 seeds
Identical on both. The device takes a photograph, turns the noise in it into a seed, shows you the twelve words and asks you to confirm you have them.
B: Back up 3 seeds
This is the difference, and it is worth reading slowly.
Per seed, stock takes thirty screens. Five of them are choices and warnings. The other twenty five are the QR, one magnified square at a time, and each of those twenty five is a square you copy by hand onto something permanent. Three seeds, so ninety screens and seventy five squares.
ShieldSigner takes eight per seed, twenty four for all three. The card says it is blank, you pick a PIN, you confirm it, you accept the label, the seed is on the card.
Both are real backups. One takes a steady hand and a long evening, the other takes a PIN.
stock SeedSigner
ShieldSigner
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner
ShieldSigner: no equivalent step in this backup route.
stock SeedSigner: no equivalent step in this backup route.
ShieldSigner
stock SeedSigner: no equivalent step in this backup route.
ShieldSigner
stock SeedSigner: no equivalent step in this backup route.
ShieldSigner
stock SeedSigner: no equivalent step in this backup route.
ShieldSigner
stock SeedSigner: no equivalent step in this backup route.
ShieldSigner
stock SeedSigner: no equivalent step in this backup route.
ShieldSigner
The other two seeds
A 2 of 3 needs three seeds, so everything above happens three times. The steps are the same each time, so they are not repeated in full below; where a step is a repeat, it says which step it repeats.
Steps 50 to 97 repeat steps 2 to 49 for seed 2.
Steps 98 to 145 repeat steps 2 to 49 for seed 3.
C and D: Export 3 public keys, build wallet, review and sign
From here the two firmwares stop differing. Reading the keys off the device, assembling the 2 of 3, checking the transaction and signing it twice: same screens, same order, on both.
Steps 153 to 159 repeat steps 146 to 152 for seed 2.
Steps 160 to 166 repeat steps 146 to 152 for seed 3.
What this means if you are choosing
If you are asking whether the smartcard fork changes how multisig works, it does not. Same ceremony, same keys, same descriptor, same signatures, and the screens show it.
What it changes is phase B, and only phase B: writing the seed down as a QR. Seventy five hand copied squares across three seeds is not a small ask, and it is the job people put off.
QR codes do carry error correction, and SeedQR uses level L, so a few wrong dots are recoverable rather than fatal. The device will also scan your copy back and tell you whether it reads. So the cost here is the work, not fragility: an evening of careful copying, three times over, against putting a card in and choosing a PIN.
That is the thing to weigh. Not the signing, not the wallet, not the addresses. The backup.
You can run either firmware yourself in the browser simulator and press the same buttons, with no hardware and nothing installed.