In November 2022, customers of FTX, then one of the largest crypto exchanges on earth, woke up to frozen accounts and a roughly eight billion dollar hole where their deposits used to be. None of those customers did anything wrong by crypto's usual standards. They did not click a phishing link or lose a password. They simply trusted a company to hold their coins, and the company had quietly spent them. That disaster turned an old crypto proverb into mainstream advice: not your keys, not your coins. This guide explains what that actually means, how wallets really work under the hood, and how to take custody of your own crypto without falling into the opposite trap, becoming the single point of failure yourself. Because here is the uncomfortable symmetry: exchanges lose customer funds, and individuals lose their own, and the second happens far more often than people admit.
Start by deleting the mental image of a digital coin purse. Your crypto is not in your wallet, your phone, or any device you own. It is an entry on a public ledger, the blockchain, that thousands of computers maintain together. What your wallet holds is a private key, a gigantic secret number that can produce valid signatures for your entries on that ledger. The blockchain obeys whoever can sign. That is the entire security model.
A useful analogy: your wallet address is like a glass mailbox on a public street. Anyone can look inside and see what it contains, and anyone can drop money in. But the mailbox only opens for one signature, and your private key is the only pen that can produce it. The wallet app or device is just a pen holder. Lose the pen holder and you can buy another. Lose the pen, or let someone copy it, and the mailbox is theirs.
This explains the two facts that surprise every beginner. First, you can recover everything if your phone dies, because the coins were never on the phone. Second, there is no password reset, because there is no company standing between your key and your money. The system cannot tell the difference between you and anyone else holding your key. That is the feature. It is also the risk.
When you create a self-custody wallet, it shows you a list of 12 or 24 ordinary English words and tells you to write them down. This is your seed phrase, sometimes called a recovery phrase, and it deserves more respect than almost any document you own. Those words encode the master secret from which the wallet mathematically derives every private key and every address you will ever use. Enter the same words into any compatible wallet, anywhere on earth, and your entire balance reappears.
Read that again, because both halves matter. The seed phrase is your disaster recovery plan: house fire, dead device, corrupted phone, none of it can touch coins you can restore from those words. And the seed phrase is your single point of failure: anyone who reads those words, a hacker, a houseguest, a cloud breach, a fake support agent on the phone, can drain everything from the other side of the planet, instantly and irreversibly. Essentially every crypto scam that targets self-custody is, at bottom, a trick to make you reveal those words or to sign something you did not understand.
One rule covers ninety percent of seed phrase security: the words should never exist on anything that connects to the internet. Not in a photo, not in a notes app, not in an email draft, not in a password manager entry, not typed into any website ever. Legitimate software asks for your seed only during a deliberate wallet restore that you initiated. Anything else asking for it is an attack, with no exceptions worth learning the hard way.
Custody is not a binary choice between an exchange and a bunker. Think of it as a spectrum with three useful stops.
Custodial, where a company holds the keys. This is every exchange balance. It feels like online banking, recovery is a password reset away, and for small amounts at a large U.S.-regulated platform it is a reasonable place to be. The cost is counterparty risk. You hold an IOU, the platform holds the coins, and crypto on a platform carries no FDIC deposit insurance and no SIPC protection if the platform itself fails. The 2022 collapses of FTX, Celsius, Voyager, and BlockFi turned that fine print into lived experience for millions of customers, many of whom waited years in bankruptcy court to recover a fraction of their balances.
Software wallets, where your keys live on your phone or computer. Free apps that put keys in your hands within minutes. This is real self-custody, and for small amounts it is a fine classroom. The weakness is that your keys now live on a general-purpose, internet-connected device, sharing a home with your browser, your downloads, and whatever malware slips in. Infostealer programs specifically scan infected machines for wallet files and seed phrases.
Hardware wallets, where keys live on a dedicated offline device. A small gadget, typically $60 to $150, that generates and stores keys inside a chip that never exposes them, not even to the computer it plugs into. Transactions are signed inside the device, and you physically confirm each one on its screen. Malware on your computer can lie to your screen, but it cannot press the button on the device or extract the key from the chip. This is the standard tool for self-custody of meaningful amounts, and the one most worth doing properly. If you decide to go this route, buy a hardware wallet new, directly from the manufacturer or an authorized seller, never secondhand and never from a marketplace listing where a device could have been tampered with before it reached you.
It is worth pausing on the scoreboard, because both failure modes are expensive. On the custodial side, Mt. Gox lost roughly 850,000 bitcoins of customer funds in 2014, and the 2022 wave of platform failures froze tens of billions of dollars of customer balances. On the self-custody side, the toll is quieter but enormous: analyses of blockchain data have estimated that millions of bitcoins, plausibly close to a fifth of the total supply, sit in wallets that have not moved in many years, much of that presumed lost to discarded drives, forgotten passwords, and unbacked-up keys. The lesson is not that one side is safe. The lesson is that custody is a real job, and someone has to do it competently, either a company you trust or you.
The process takes under an hour, and doing it carefully once beats doing it casually forever.
Two parts of that flow deserve emphasis. The test restore, where you verify your written seed phrase actually works before committing real money, is the step almost everyone skips and the one that separates a backup from a hope. And the small test transaction, sending $20 before sending $20,000, costs you a few cents in fees and catches nearly every fat-finger mistake, wrong-network mix-up, and address error in the one place it is still cheap to catch them.
Write the words on paper, or better, stamp or engrave them into a steel plate sold for exactly this purpose, since paper burns and fades while steel shrugs off house fires and floods. Store the backup somewhere a burglar would not casually find it, and consider a second copy in a different secure location, a safe deposit box or a trusted relative's safe, to survive a disaster that takes out your home. Do not photograph it. Do not type it. Do not split it into two halves stored separately, which sounds clever but doubles your chance of losing it while only modestly slowing a thief. If you want sophistication, hardware vendors support a passphrase feature, an extra word only you know that creates a hidden wallet, but understand that a forgotten passphrase is just as fatal as a lost seed.
Finally, plan for the version of events nobody enjoys imagining. If you were hit by a bus tomorrow, could your spouse or executor find and use the backup? A sealed letter with your estate documents, explaining what exists and how to access it, is the difference between an inheritance and a permanently locked mailbox. Several million dollars of crypto are stranded this way every year, and the families involved never get a do-over.
Everything above assumes one seed phrase controls everything, which keeps life simple and keeps all your eggs in one carefully guarded basket. There is a level beyond that. Multisignature wallets, multisig for short, require several keys to approve any transaction, for example two of three keys held in three different places. A burglar who finds one backup gets nothing. A house fire that destroys one key destroys nothing. You can lose any single key and still recover, because the other two can move funds to a fresh wallet. This is how businesses, charities, and large long-term holders typically secure crypto, and it is the closest the self-custody world comes to eliminating single points of failure.
The catch is complexity, because three keys mean three setups, three backups, and more ways to confuse yourself, and a confused owner is its own risk. A growing middle option is collaborative custody, where a specialized company holds one key of your multisig, you hold the other two, and the company cannot move anything alone but can help you recover if you lose one of yours. For most readers, a single hardware wallet handled with the discipline described above is plenty. File multisig away as the upgrade path for the day your holdings, or your anxiety, outgrow one seed phrase.
The blockchain itself almost never loses anyone's money. People lose money at the edges, in remarkably predictable ways.
Notice what is absent from that list: exotic cryptography breaks. The math is not the weak point. The human in a hurry is, which is genuinely good news, because habits are upgradeable in a way math is not.
Self-custody is not a virtue test, and the right answer depends on honest self-assessment. It makes sense when your balance has grown large enough that a platform failure would genuinely hurt, when you plan to hold for years rather than trade weekly, and when you are willing to spend one careful afternoon on setup plus a little ongoing discipline. It makes much less sense for someone who loses keys and passwords routinely, shares devices, wants a beneficiary to inherit assets with zero friction, or holds an amount so small that a $100 device is a meaningful percentage of it. A common middle path: keep a working balance at one major regulated exchange, and sweep long-term holdings to a hardware wallet once they cross a threshold that would sting, for many people somewhere around one to five thousand dollars.
One thing custody cannot do is tame the asset itself. The live chart above moves the same whether your coins sit on an exchange or in a steel-backed hardware wallet. Custody decides who can lose your coins. It says nothing about what they will be worth, which is a separate question we tackle in our guide to how much crypto belongs in a portfolio.
Good self-custody is less like installing a safe and more like flossing, a small recurring discipline. A few habits cover nearly everything.
None of this takes more than a few minutes a quarter. The owners who lose funds are almost never the ones who lacked sophistication. They are the ones who were rushing.
Self-custody hands you total control and total responsibility, which makes your knowledge the entire security model. The Financial IQ Test is a quick audit of the money knowledge that custody now depends on.
Crypto's defining trade is that it replaces institutions with mathematics, and custody is where that trade gets personal. Held by a platform, your crypto is as safe as that company's balance sheet and ethics. Held by you, it is as safe as your habits. Neither is automatically better; both are jobs. If you take the job, take it seriously: a hardware wallet bought new from the maker, a seed phrase that never touches the internet, a tested backup in durable form, a test transaction before every large transfer, and a plan for your heirs. Do those five things and you will have better operational security than the vast majority of crypto owners, including, as 2022 proved, some of the people who were running the exchanges.
Volatility is survivable. Not knowing what you own is not. The Financial IQ Test measures your actual money knowledge, from market basics to risk math, so your conviction is built on understanding instead of a feed full of hype.
Test your Financial IQNothing happens to your coins, because the coins live on the blockchain, not in the device. Buy a replacement device, or use any compatible wallet, enter your seed phrase, and your full balance reappears. This is exactly why the seed phrase backup matters more than the gadget itself, and why anyone who finds your seed phrase effectively finds your money.
You are living on borrowed time. The wallet still works, but if the device breaks, is lost, or asks you to restore from seed after an update problem, the funds are gone forever. The right move is to transfer your crypto to a brand new wallet whose seed you have backed up properly, then retire the old one.
Large U.S.-regulated exchanges are far safer than the offshore casinos that blew up in 2022, but exchange balances are still a claim on a company rather than coins you control, and crypto held there has no FDIC or SIPC insurance protecting it against the platform's failure. Many people reasonably keep small or active balances on a major exchange and move long-term holdings to self-custody.
Most security-minded holders say no for any meaningful amount. Anything stored on an internet-connected device can be phished, synced, or breached, and seed phrases are exactly what infostealer malware hunts for. Paper or stamped metal stored in one or two secure physical locations remains the standard advice, boring as that sounds.
Not necessarily. Most hardware wallets and many software wallets support both chains and dozens of others from a single seed phrase. What you must never do is send coins across the wrong network, for example sending bitcoin to an Ethereum address. Modern wallets block the obvious versions of this mistake, but always match the asset and the network before confirming a transfer.
Moving crypto between wallets you own is not a taxable event, but you remain responsible for tracking your cost basis across every wallet and exchange. The IRS treats digital assets as property, and since the 2025 tax year brokers report sales on Form 1099-DA, so keep your own records tidy rather than relying on platforms to reconstruct your history.
One smart money idea each week, charts included. Join free and get the printable 2026 Money Calendar in your welcome email.
