A self-custody is the practice of personally holding and managing digital assets so that the owner alone controls the private keys that authorize access to funds on a blockchain, without relying on a bank, exchange, or other third-party custodian.[1]
It contrasts with custodial arrangements, in which a third party — typically a centralized exchange — holds the keys and therefore controls the assets.[2]
The concept is often summarized by the phrase "Not your keys, not your coins," a restatement of a line by Andreas Antonopoulos: "Your keys, your Bitcoin. Not your keys, not your Bitcoin."[2][3]
Self-custody is presented as an expression of the founding ethos of cryptocurrency: decentralization and financial sovereignty. Bitcoin was designed as an electronic, peer-to-peer payment system allowing two parties to transact directly without middlemen, an approach that attracted early adopters after the 2008 financial crisis.[2]
Self-custody rests on public-key cryptography. Every blockchain address is tied to a key pair: a public key, from which a blockchain address is derived and which acts as a unique identifier, and a private key, which authorizes the management of assets held at that address.[2] Anyone in possession of a private key can access the funds at the associated address, which is why the key must never be shared.[2]
A common analogy compares the public key to a mailbox lock into which anyone can drop mail, the address to a shortened version of the public key shared to receive funds, and the private key to the physical key that opens the mailbox and authorizes transfers.[3] Ownership in this model equals the ability to sign transactions: without a valid signature produced by the private key, funds do not move.[3]
A frequent misconception is that a wallet stores cryptocurrency. It does not; cryptocurrency is recorded on the blockchain network, maintained by every node, while the wallet stores the secret information — the private key — that allows management of a blockchain account.[2]
A practical consequence is that if a device is lost but the recovery phrase is retained, the funds can be restored on a new device, because the assets reside on the blockchain rather than on the hardware itself.[3]
There are two broad custody approaches. In a custodial arrangement, private keys are held by a third party, typically a centralized exchange, and Ledger compares this to storing funds in a bank: the provider can access accounts, and the user depends on the provider's solvency and behavior.[2] In a non-custodial arrangement, the owner manages their own keys, which Ledger likens to holding physical cash — only the owner controls spending, but the owner also bears full responsibility for secure storage, a tradeoff Ledger sums up as "with self-custody comes responsibility."[2]
Comparisons of the two models place them at opposite ends of several axes. Control is delegated under traditional custody but total under self-custody; privacy is low with custodial services because of Know Your Customer (KYC) requirements and high with self-custody; ease of use tends to be higher for custodial services; support and recovery exist with a custodian but not in pure self-custody; and the risk profile differs, shifting from platform hacks or fund freezes on the custodial side to losing one's own key or seed phrase on the self-custody side.[3]
Because these strengths and weaknesses are complementary, many users are advised to adopt a hybrid model. This strategy splits funds into a main fund held in a self-custody wallet for long-term savings and a smaller "pocket" balance kept on an exchange or mobile wallet for quick daily access.[3]
Self-custody is practiced through several wallet types that differ in how and where the private key is stored.
Also called hot wallets, are applications downloaded onto a computer or mobile phone that store private keys on the internet-connected host device. They are easy to use and provide convenient, low-cost access, but they are vulnerable to malware, viruses, phishing, and hacking, and depend heavily on the security of the device on which they are installed; they are considered unsuitable for large amounts.[2][1] Examples cited include Bitnovo, MetaMask, and Trust Wallet.[3]
Also called cold wallets, are physical devices that store private keys completely offline, often in a chip separated from the internet connection, offering better protection from malware and spyware than software wallets. They are widely considered the most secure form of self-custody, are more user-friendly than paper wallets thanks to a digital interface, but carry an acquisition cost — cited as roughly €50 to €200 — and require a connection for each operation and safe storage of the device, which can be lost or damaged.[2][3]
Examples cited include Ledger, Trezor, and Yoseyomo.[3]
Consist of private and public keys printed on paper, often as a QR code. They provide complete offline storage with no risk of digital hacking, but they are fragile, easy to lose or damage, risky to generate if insecure software or printers are used, and not practical for frequent transactions.[2][3]
Require two or more private keys to authorize a transfer, providing greater security at the cost of added complexity; all participants must back up their keys carefully, and if the required number of signers cannot be reached, funds can become inaccessible.[3]
Advocates cite several benefits of holding one's own keys.
The first is control: with private keys in hand, the owner has full authority over their assets, can transact at any time without third-party approval, and is not subject to spending limits or other restrictions imposed by custodial services.[1] Related to this is censorship resistance — funds held in self-custody are not subject to arbitrary freezes or seizures — and constant availability, since a self-custody wallet can be accessed 24 hours a day worldwide.[3]
Security is a second claimed benefit: managing one's own keys removes exposure to the hacks and breaches that affect centralized exchanges, and a decentralized approach helps an individual wallet remain secure even if part of the network is compromised.[1]
Privacy is a third: custodial services require KYC procedures that collect personal information such as name, address, and photo ID, whereas self-custody allows asset management without sharing such data with a third party.[2][1]
A fourth benefit is reduced fees, because avoiding intermediaries sidesteps the transaction, withdrawal, and service charges levied by exchanges and custodial providers — an advantage described as particularly relevant for frequent traders or those moving large amounts.[1] A fifth is independence from third parties: custodial services can suffer operational failures, regulatory problems, or insolvency, and holding one's own keys shields assets from bankruptcy or provider failure — one cited example being the counterparty risk of fiat-backed stablecoins whose centralized issuers rely on bank reserves.[2]
Distrust following major exchange collapses, such as the failure of FTX, is cited as a motivation for users adopting self-custody.[3]
Self-custody is also generally required to interact with decentralized applications (dApps) on smart-contract chains such as Ethereum and Solana, including decentralized exchanges, decentralized finance (DeFi) protocols, non-fungible token (NFT) marketplaces, and governance platforms.[2]
The defining tradeoff of self-custody is that greater control brings greater responsibility. If the private keys or seed phrase are lost, the funds are irretrievably lost, because there is no customer service able to recover them.[3]
The seed phrase — the list of 12 or 24 words that recovers an entire wallet — is therefore the central object of protection, and mistakes in spelling or word order will prevent recovery.[2]
Beyond simple loss, users face security threats from both software and human error. Storing keys in photos or screenshots exposes them to cloud compromise; digitizing a seed phrase invites spyware; copying and pasting addresses can be intercepted by "clipper" malware that swaps the destination address; typing a seed phrase on a computer can be captured by keyloggers; and failing to test a backup can leave funds irrecoverable due to writing errors.[3]
Physical theft is also a risk: an attacker who obtains both a device and its recovery details can access the funds, which is why the device and recovery phrase should never be stored together.[3]
Scams targeting self-custody users take recurring forms: identity spoofing and clone apps, unsolicited direct messages on platforms such as Telegram or Discord from people claiming to offer support, requests for seed phrases to "validate your wallet" or "give you a prize," guaranteed-yield offers promising to double money quickly, and urgent update emails that threaten account blocks to exploit a sense of urgency.
Legitimate wallet support will never ask for a seed phrase or private key.[3] Network-level attacks also occur; the 2022 Ronin Network attack, in which North Korean hackers infiltrated the Axie Infinity network by compromising validator nodes, resulted in the theft of approximately $615 million in ether (ETH) and USD Coin (USDC).[3]
Recommended practice centers on protecting the seed phrase, since it restores associated accounts regardless of the wallet provider or the physical device used.[2]
The phrase should be recorded by hand and never stored on digital devices — phones, tablets, computers — or in cloud storage, photos, screenshots, or phone notes, because such servers are hackable.[2][3]
Instead, it should be stored physically on paper or engraved on a metal plate to withstand fire and floods, with at least two exact copies kept in different geographic locations, each secured against theft or damage.[2][3]
Setup and verification routines reduce error. Hardware wallets should not be bought second-hand; a PIN should be set on first use, a 12
- or 24-word seed generated and written down, and any complementary software installed.[3]
Software wallets should be downloaded only from official app stores, with the generated seed backed up in writing and a strong password and 2FA enabled; paper wallets should be generated offline using open-source tools and stored in a waterproof, fireproof place.[3]
Before committing large sums to a new wallet, users are advised to delete and reinstall it from the backup to confirm the recovery words work, to visually verify the first and last six characters of any recipient address to defeat clipper malware, and to keep operating systems and wallet software updated.[3]
Segregating assets across multiple accounts — for example a "cold" account and a "burner" account — limits damage, so that signing a malicious transaction with one account does not affect assets held in others.[2]
