Self-custody crypto wallets: how they work and the real risks

A self-custody wallet, also called a non-custodial wallet, is a crypto wallet where you alone hold the private keys. No exchange, bank, or app company can move your coins or freeze them. You get full control. You also carry the full responsibility, because there is no support desk to undo a mistake.

Its slogan is blunt: not your keys, not your coins. Ledger, a hardware wallet maker, puts it plainly on its learning site, noting that a wallet stores the private key, not the coins themselves, which live on the blockchain. Whoever holds that key holds the money.

What a private key and a seed phrase actually are

Behind every wallet sit two linked codes. Ledger describes the private key as the code that lets you manage the assets at an address, while the public key is what the address is built from. Share the address freely. It works like an account number people can pay into. Never share the private key, because it proves ownership and can move the funds.

Reading a raw private key is impractical for people, so most wallets turn it into a seed phrase, a list of plain words, usually 12 or 24 of them. Those words can rebuild the wallet on a new device if the old one breaks or is lost. They are the master backup. Anyone who sees them can take everything, which is the whole reason this guide keeps circling back to them.

Custodial or non-custodial: who holds the keys

One question settles which type you have. Who keeps the private key? With a custodial wallet, a company keeps it for you. That is what you get when you leave coins on an exchange such as Coinbase or Binance. The firm can reset your password. It can also freeze your account, or fail and take your balance down with it.

A non-custodial wallet flips that around. The key sits on your own device, created and stored by software you control. You sign each transaction yourself. Nobody can approve or block it for you. For plenty of people the custodial route is easier, and that convenience is the entire draw.

Some wallets sit between the two. They split the key into shares, or use smart-contract accounts that let you add a recovery contact. These cut single points of failure. They also add parts that can break. Read how any such feature works before you trust real money to it.

What self-custody protects you from

Self-custody removes one specific danger: the risk that whoever holds your coins goes bad or goes bust. When a custodian fails, your balance can vanish with it. Exchanges, lenders, and brokers have all gone under in past cycles and taken user balances down with them. Crypto has a long list of those failures.

FTX is the clearest case. The exchange collapsed in late 2022, and its co-founder and former chief executive, Sam Bankman-Fried, was sentenced on 28 March 2024 to 25 years in prison after a jury convicted him on seven counts of fraud, money laundering, and conspiracy. Decrypt reported that he had siphoned more than $8 billion in customer funds. People who held coins on FTX could not simply withdraw them. The keys were never theirs.

A self-custody wallet would have sidestepped that particular trap. Ledger's site makes the same point, describing custodial services as run by centralized entities with the power to impose rules on your funds without warning. No third party can freeze a key you alone control.

That protection is real, but narrow. It guards against someone else losing or seizing your coins. It does nothing about the far more common way people lose crypto, which is their own mistakes.

Where self-custody can bite

Hold your own keys and you become your own bank. That means your own security guard too. Lose the secret and the money is gone, with no reset link and no hotline.

The seed phrase is the usual weak point. Lose that paper, store it in a photo, or type it into a fake website, and the coins can go for good. No issuer can reissue it.

Scammers lean on this. One common trick is approval phishing, where a victim is talked into signing a transaction that lets an attacker move their tokens later. Blockchain analysis firm Chainalysis estimated that approval phishing drained about $374.6 million from victims through November 2023, and roughly $1 billion since May 2021. In a report published on 14 December 2023, it called even that figure likely just the tip of a much larger iceberg, which means the true total is not known.

None of that needs anyone to break the math behind Bitcoin. It needs a person to be rushed, tired, or fooled. Self-custody asks you to be the last line of defense, every single time.

Hot wallets and cold wallets

Self-custody comes in two broad shapes. A hot wallet stays connected to the internet. A cold wallet does not.

Hot wallets are apps on a phone or browser, such as MetaMask or Phantom. They are free, quick, and handy for small amounts and for using DeFi apps. Being online is the catch, because a key that sits on a connected device is easier for an attacker to reach.

Cold wallets keep the key on a device that stays offline until you plug it in, such as a Ledger or Trezor. Ledger says its devices generate and hold keys offline in a dedicated chip, and advises never typing a key into an internet-connected machine. Hardware costs money and adds steps. For larger balances, many people treat that cost as cheap insurance.

A rough rule people use: keep spending money in a hot wallet, and savings in cold storage. It mirrors keeping some cash in a pocket and the rest in a safe at home.

Can anyone freeze or seize a self-custody wallet?

No ordinary company can reach into a self-custody wallet and freeze it, because there is no account to suspend. That is the point of holding your own keys. A court or police force is a different matter.

Authorities can still act. They can seize the device, order you to hand over the key, or trace coins as they move, since most blockchains are public ledgers rather than anonymous ones. Self-custody changes who holds the key. It does not make you invisible.

Some governments are going further and limiting self-custody itself. Russia has moved to bar self-custody crypto transfers and ban peer-to-peer trading from July 2027, a reminder that holding your own keys does not put you beyond the reach of the law.

Getting started without getting burned

Start small. Set up a free software wallet, move a tiny amount in, and practice sending it back out before you trust it with real savings. If you are weighing which app to use, our guide to choosing a crypto wallet runs through the practical checks.

Guard the seed phrase as the real prize. Write it on paper or metal, keep it offline, and never enter it into a website or share it with anyone, including a support agent who messages you first. Genuine wallet makers never ask for it.

A few habits remove most of the danger. Check the receiving address before you send, because a wrong entry can send coins somewhere you cannot recover. Bookmark the real wallet site and ignore links in emails or chats. Keep large holdings on a hardware device, and treat anything on a phone as spending money you could afford to lose.

Be honest about which risk you would rather carry. Custodial accounts can be frozen or lost in a collapse. Self-custody can be lost to your own slip. Neither is risk free, and the right answer depends on how much you hold and how confident you feel handling it.

This guide is general information, not financial or security advice. Rules on self-custody also differ by country, and some are tightening. Check what applies where you live before moving large sums.