diff --git a/common/protob/messages-bitcoin.proto b/common/protob/messages-bitcoin.proto
index 9635cc8beb..fff4d8d406 100644
--- a/common/protob/messages-bitcoin.proto
+++ b/common/protob/messages-bitcoin.proto
@@ -53,6 +53,11 @@ enum AmountUnit {
     SATOSHI = 3;        // sat
 }
 
+enum MultisigPubkeysOrder {
+    PRESERVED = 0;      // order of pubkeys is preserved
+    LEXICOGRAPHIC = 1;  // pubkeys are sorted lexicographically (BIP-67)
+}
+
 /**
  * Type of redeem script used in input
  * @embed
@@ -63,6 +68,7 @@ message MultisigRedeemScriptType {
     required uint32 m = 3;                  // "m" from n, how many valid signatures is necessary for spending
     repeated common.HDNodeType nodes = 4;    // simplified way how to specify pubkeys if they share the same address_n path
     repeated uint32 address_n = 5;                              // use only field 1 or fields 4+5, if fields 4+5 are used, field 1 is ignored
+    optional MultisigPubkeysOrder pubkeys_order = 6 [default=PRESERVED]; // order of pubkeys in script pubkey
     /**
     * Structure representing HDNode + Path
     */
@@ -625,4 +631,3 @@ message AuthorizeCoinJoin {
     optional InputScriptType script_type = 7 [default=SPENDADDRESS];    // used to distinguish between various address formats (non-segwit, segwit, etc.)
     optional AmountUnit amount_unit = 8 [default=BITCOIN];              // show amounts in
 }
-