Buying, storing and security · Step-by-step guide

Is it safe to keep Bitcoin on an exchange?
The case for self-custody.

READ6 min·UPDATED·APPLIES TOAny country·LEVELBeginner
For Bitcoin holders deciding exchange vs self-custody. Sources are listed at the bottom of the page; check their dates before acting.

"Not your keys, not your coins" is the most-repeated phrase in Bitcoin and the most under-explained. This page covers what self-custody means, what a seed phraseSeed phraseA wallet backup written as a list of words, usually 12 or 24, that can recreate the wallet's private keys. In a single-signature wallet, anyone who sees it can take the bitcoin unless a separate passphrase also protects it. Keep it offline and private; recovery may also need the passphrase and wallet setup details.Full definition is, the difference between hot and cold storagecold storageStoring Bitcoin on a device that's never connected to the internet, protecting it from online attacks.Full definition, and how to think about hardware wallets without getting lost in product comparisons.

Exchanges get hacked; self-custody doesn't (when done right). Mt. Gox lost about 650,000 BTCBitcoin (BTC)The ticker symbol for Bitcoin, used on exchanges and in price quotes.Full definition in 2014. A hardware wallet + seed phrase backup means your keys never touch the internet. The tradeoff: you are responsible. Lose the seed, lose the Bitcoin, no customer service line.

  • Exchange hacks have lost billions in aggregate: Mt. Gox (~650K BTC), Bitfinex (120K BTC), FTX (commingled customer funds).
  • A hardware wallet (Ledger, Trezor, Coldcard) stores keys offline. Transactions are signed on the device, never exposed.
  • Your seed phrase (12 or 24 words) is the master backup. Metal plate > paper. Never digital, never photographed.
  • Multisig (2-of-3 keys) eliminates the single point of failure without trusting a third party.
  • Start with a single-sig hardware wallet. Graduate to multisig when holdings justify the complexity.

References to FDICFederal Deposit Insurance Corporation (FDIC)The US agency that insures bank deposits if a bank fails. The standard insurance amount is $250,000 per depositor, per insured bank, for each account ownership category. Since January 1, 1934, no depositor has lost a penny of insured funds as a result of a failure. Bank money market deposit accounts are covered; stocks, bonds, mutual funds (money market funds too) and crypto are not, even when bought at an insured bank., SIPCSecurities Investor Protection Corporation (SIPC)When a member brokerage firm fails and customer assets are missing, most customers are protected up to $500,000, including $250,000 for cash. It does not cover a drop in a fund's value or any other market loss, and money market mutual funds count as securities, not cash., and US bankruptcy treatment are US-specific. Self-custody itself is jurisdiction-neutral.

Viewpoint. Besides explaining the topic, this page makes the site’s case on money and Bitcoin. The facts are sourced; that case is the site’s view. How pages are labeled.

This page covers self-custody basics: seed phrases, hot vs cold wallets and hardware wallets. Whether an exchange balance is actually safe is answered in Is Your Exchange Safe, and the move itself is in Exchange to Hardware Wallet.

Short answer

Owning Bitcoin means owning the private keys that control specific addresses. If a third party (an exchange, a custodian, an ETFExchange-Traded Fund (ETF)A basket of investments (stocks, bonds, or Bitcoin) that trades on a stock exchange like a single share.) holds the keys, you own a claim on that party, not Bitcoin. The 2022 collapses of Celsius, BlockFi, and FTX wiped out billions of dollars of customer Bitcoin claims. The base-layer coins still existed; the claims did not. Self-custody removes this risk by holding the keys yourself, typically using a hardware wallet that signs transactions without ever exposing the keys to an internet-connected device.

On this page
  1. What self-custody actually means
  2. Seed phrases: the actual key
  3. Hot wallet vs cold wallet
  4. Hardware wallets, briefly
  5. What this changes for tomorrow
  6. Continue the sequence

What self-custody actually means

When you "own" Bitcoin on Coinbase or in a Bitcoin ETF, you do not own Bitcoin. You own a claim on the custodian. The Bitcoin sits in addresses controlled by their keys, not yours. If they are solvent and operational, your claim is fungible with Bitcoin: you can withdraw and they will send. If they are not solvent (Celsius, BlockFi) or not operational (FTX), your claim becomes an unsecured creditor position in bankruptcy court, behind secured creditors and tax authorities ×DON'T TRUST, VERIFYClaim: The 2022 collapses of Celsius, BlockFi, and FTX resulted in billions of dollars of customer crypto assets becoming bankruptcy-estate claims.Verify at: SEC FTX charges ↗ · DOJ Celsius case ↗ Source 1 in the list belowCourt documents in each case treat customer claims as unsecured-creditor positions, repaid in petition-date dollars over years..

Self-custody means you hold the private keys. Your wallet software (or hardware wallet) generates and stores the keys; only you can sign transactions. There is no custodian to fail. There is also no customer-service line to call if you lose access. The trade-off is straightforward and irreducible.

Seed phrases: the actual key

Modern Bitcoin wallets generate a "seed phrase" of 12 or 24 words from a standardized list of 2,048 English words (BIP-39Bitcoin Improvement Proposal 39 (BIP-39)The standard that turns the secret code controlling your Bitcoin into a list of 12 or 24 ordinary English words you can write on paper.Full definition). This phrase is the master key from which all your private keys (and all your addresses) are derived deterministically. Anyone with the seed phrase has complete control of all the coins. Anyone without it has no way in, even if they have your wallet device.

Engraving-style illustration of a small hardware wallet lying beside a stainless-steel seed backup plate on a short chain.
The two objects self-custody rests on: a hardware wallet that signs transactions, and a steel copy of the seed phrase that survives fire and water. The device can be replaced from the backup; the backup cannot be replaced from nothing.

Practical implications:

  • Write the seed on paper or stamp it on metal. Two copies in two physically separate locations (home safe + bank deposit box, for instance).
  • Never type the seed into a phone, computer, or website. Phishing sites that ask you to "verify" your wallet by entering your seed are the most common loss vector.
  • Never store the seed in a password manager, email, photo, or cloud note. Any device connected to the internet is a target.
  • Test the recovery before transferring serious money. Wipe your wallet device and restore from the seed once. If it works, you're set. If it doesn't, you found out before it mattered.

Hot wallet vs cold wallet

  • Hot wallet: the keys live on an internet-connected device (a phone or computer). Convenient. Vulnerable to malware, OS exploits, and supply-chain attacks. Acceptable for small amounts you spend regularly, the way you'd carry cash in a wallet.
  • Cold wallet: the keys live on a device that has never touched the internet, typically a hardware wallet that signs transactions internally and only outputs the signed transaction. Resistant to remote attacks. Right for amounts you wouldn't be willing to lose to a phone hack.

A common pattern: small spending balance on a phone wallet (Phoenix, Muun, Wallet of Satoshi for Lightning), savings on a hardware wallet (Coldcard, Trezor, Ledger), seed phrase backed up to metal in two locations. Detail at Hardware Wallets and Cold Storage Guide.

Hardware wallets, briefly

A hardware wallet is a small device (often USB-stick sized) whose only job is to generate and store private keys, and to sign transactions when you press a physical button. The keys never leave the device. Even if your computer is compromised by malware, the malware cannot extract the keys; it can only see the signed transactions you explicitly approve on the device.

The popular options are Coldcard (Bitcoin-only, security-focused), Trezor, Ledger, and Foundation Passport. The choice matters less than the practice: get one, generate the seed on the device itself (not from a website), back up the seed to paper and metal, test recovery, then move funds. Detail at Sparrow Wallet Guide for the desktop software that pairs with most hardware wallets.

Bitcoin Custody Spectrum

More custodial More sovereign Exchange Custodian holds keys RISK High Most convenient Software wallet Keys on phone/PC RISK Med Daily-spend amounts Hardware wallet Cold storage RISK Low Most users land here Multisig 2-of-3 keys required RISK V. low Larger holdings Air-gapped multisig No network ever RISK Min Generational holdings Match the custody to the amount. Convenience and sovereignty are inversely related.

Methodology: convenience falls and key-holder count rises as you move right. The right answer depends on amount; daily-spend coins can sit in a software wallet, multi-year holdings should sit in cold storage at minimum.

What this changes for tomorrow

  • If you have meaningful Bitcoin on an exchange, the structural risk is the same as having uninsured cash at a bank during a panic. The fix: open a self-custody wallet and follow the step-by-step withdrawal walkthrough.
  • The first hardware wallet purchase is the highest-friction step. Once you've done it once, the workflow becomes routine. Order from the manufacturer directly, never from a third-party seller.
  • The seed-phrase-on-paper backup is the single most important step. Hardware breaks. Apps get deprecated. The 12 or 24 words are the immortal part.
  • For amounts under a few hundred dollars, a phone wallet is fine. Above that, the hardware-wallet workflow is worth the friction.
  • Pledging your coins as loan collateral hands the keys back to a third party, the same custody surrender (and rehypothecation risk) self-custody exists to avoid. See Borrowing Against Bitcoin.

Continue the sequence

→ Hardware Wallets, the detailed look at options and tradeoffs → Cold Storage Guide, end-to-end self-custody walkthrough → Sparrow Wallet Guide, the desktop app that pairs with most hardware → Bitcoin Scams, the loss vectors that have nothing to do with the protocol → Bitcoin for Beginners, the full intro → Quantum Computing, the quantum-computing risk to Bitcoin, assessed without hype

Where to go from here

Do next

Hardware Wallets

What to actually buy and how to set it up correctly.

Read next

Bitcoin Custody Levels

Five levels of custody, from exchange to multisig to full sovereignty.

Explore further

Sources

Verify badges in the text link to these sources. Figures, rates and rules change: check each source’s date before acting on it.

  1. SEC FTX charges · sec.gov ↩
  2. DOJ Celsius case · justice.gov

Last updated . Not financial advice. Self-custody carries operational risk; practice with small amounts first. Disclosures · How pages are reviewed

Subscribe via RSS for new articles.