Wallets and Custody

Hot vs. cold, custodial vs. self-custody — and what "not your keys" really means.

Share

A crypto wallet stores the private keys that control on-chain assets. The wallet doesn't hold coins — the blockchain does. You're holding the keys to authorize transactions.

Custody options

  • Custodial (exchange wallet): The exchange holds keys for you. Convenient, but you're trusting a counterparty (FTX-style risk).
  • Self-custodial hot wallet: Software wallet on phone/computer (MetaMask, Phantom, Trust Wallet). Convenient; exposed to malware.
  • Hardware wallet: Dedicated device that signs transactions offline (Ledger, Trezor). Best balance for most users.
  • Cold storage / paper: Keys generated and stored entirely offline. Maximum security; least convenience.

The seed phrase

A wallet's seed (typically 12 or 24 words) recovers all addresses. Anyone with your seed can drain everything. Store it offline, in multiple physical locations, and never enter it on a website or share it.

"Not your keys, not your coins" — coins held on exchanges are claims, not assets. Multiple exchange failures (Mt. Gox, FTX, Celsius) have wiped out depositor balances. For long-term holdings, self-custody is the default.

What a wallet actually stores

Crypto "wallets" don't hold coins. Coins exist on the blockchain. Wallets store the private keys that control them. Losing the keys means losing access to the coins, even though the coins themselves remain on the chain. Conversely, anyone with the keys can move the coins, regardless of whether they're the "rightful" owner.

The custody spectrum

TypeConvenienceSecurityBest for
Custodial (exchange wallet)HighestLowest (counterparty risk)Active trading; small amounts
Hot wallet (software, on connected device)HighMedium (malware risk)Daily use; modest amounts
Hardware wallet (Ledger, Trezor)MediumHighLong-term holds
Multi-sig walletsMedium-lowVery highLarge amounts; institutional
Cold storage (air-gapped, paper)LowHighestLong-term, maximum safety

The seed phrase — the single point of failure

A wallet's seed (typically 12 or 24 words) is the master key that derives all addresses. Anyone with the seed can drain everything. Lose the seed, lose access permanently. Almost every catastrophic crypto loss traces back to seed-phrase mismanagement.

  • Never type your seed phrase on a website. Real wallets only ask for it during initial setup or recovery, never during routine use.
  • Never store the seed in a cloud service. Email drafts, Notes apps synced to cloud, Google Drive — all routinely scanned by attackers.
  • Multiple physical copies in geographically separated locations. Fire-proof safe at home + safe deposit box.
  • Metal seed plates. Paper degrades; metal survives fire and flood.
  • Never share the seed even with family unless you've thought through inheritance carefully.

"Not your keys, not your coins"

The 2022 collapses of FTX, Celsius, and others wiped out billions in customer balances. These were custodial — users didn't hold their own keys. When the company failed, users became unsecured creditors. The lesson reinforced what crypto natives had long argued: coins held by a third party are claims, not assets.

The counter-argument: self-custody has its own risk surface — phishing, malware, lost seeds, signing malicious contracts. For most retail with modest amounts, a reputable exchange may be a defensible default.

Common wallet mistakes

  • Storing seed phrase digitally. Photos, password managers, cloud notes — all exploitable.
  • Approving unlimited token spending. Many DeFi protocols ask for "unlimited approval" — convenient but lets a malicious contract drain everything.
  • Signing transactions without reading them. Hardware wallets show transaction details on the device — read them.
  • Sending to wrong address or wrong chain. Irreversible. Always double-check, especially first time sending to a new address.
  • Not testing recovery before storing large amounts. Verify your seed works by recovering on a fresh wallet first.

Frequently asked questions

Hardware wallet — Ledger or Trezor?

Both are reputable. Ledger had a 2023 controversy around recovery service. Trezor is open-source. Either is a major upgrade over hot wallets.

What about MetaMask?

Convenient for DeFi/Ethereum. Browser-based makes it more vulnerable to phishing. Use with a hardware wallet for amounts you can't afford to lose.

Multi-sig — when?

Amounts > $50k. Requires multiple keys to authorize transactions. Reduces single-point-of-failure risk dramatically.

Putting this into practice this week

Concepts only matter if they change behavior. Pick the single most relevant action from the above and put it on your calendar — even 15 minutes of action beats hours of further reading without doing anything. The compound benefit of small consistent moves dwarfs the optimization gain from any single decision. Most people fail at finance not because they don't know what to do, but because they don't act on what they already know.

How this connects to the rest of your financial plan

Personal finance is a system, not a list of independent decisions. The choices you make in one area cascade into others: a tax-loss harvest affects your asset allocation, a 401(k) contribution affects your near-term cash flow, a Roth conversion in 2024 affects RMDs in 2050. Sophisticated financial planning is mostly about understanding these second- and third-order effects. The basics that everyone should master first: emergency fund in cash, capture the full 401(k) match, eliminate high-interest debt, max tax-advantaged accounts before taxable, write down a single-page financial plan and review it annually.

Key takeaways

  • Understand the mechanics before you optimize the edges. A solid 70% strategy beats a fragile 95% optimization.
  • Automate behavior so you don't depend on willpower. Set-it-and-forget-it is the highest-leverage financial habit.
  • Match the strategy to your actual situation, not the situation you wish you had or that influencers describe.
  • Review annually; ignore daily noise. The market's short-term moves rarely require a response.
  • Consistency over decades beats brilliance over months. Time in the market does the work; trying to time it usually destroys it.

The bottom line

The biggest financial wins come from doing the simple things consistently for decades — not from finding the cleverest single trick. Build the foundation first; the optimizations layer on top once the foundation is solid. The investors who end up wealthy aren't the ones who picked the best stocks. They're the ones who saved consistently, kept costs low, took appropriate risk for their horizon, and didn't sell during crashes. Everything else is detail.

Continue your learning at Krovea

Krovea exists to connect every concept on this page to the next one you should read. Use the site-wide search for any term you're unsure about. Run the relevant numbers on a Krovea calculator with your actual situation — projections beat speculation every time. Look up unfamiliar jargon in the A–Z dictionary. Most readers find their first session on Krovea answers one question and surfaces three more — that's how compounding knowledge works. Subscribe to the weekly briefing if you want the highest-impact one topic delivered without the noise of constant financial media.

A final note on financial decision-making

Every concept covered here exists because someone made a costly mistake first and the rule emerged from the consequences. The 401(k) match exists because Americans weren't saving enough. The Roth IRA exists because mid-century retirees got taxed twice on their nest eggs. The wash-sale rule exists because traders abused loss harvesting. Treat each piece of advice not as arbitrary rules to memorize but as the encoded lessons of prior generations of investors. The framework that survives recessions, regulatory changes, and market manias has been stress-tested in ways no individual could replicate. Following the boring conventional wisdom isn't unimaginative — it's the result of selecting for what actually works at scale across millions of investors and dozens of market cycles.

One last thing — when in doubt, do less

The average investor underperforms their own funds by 1–2% per year because of trading mistakes — entering after rallies, exiting after crashes, switching strategies after they stop working. Inaction has a cost, but action has a much bigger one. When you're not sure what to do, the right answer is usually nothing. Pick the next paycheck's contribution, automate it, and look away until tax season.

Ready to buy crypto?

Find a trusted crypto exchange

Compare exchanges by fees, security, and supported assets. US-regulated platforms only.

Free service. We may earn a referral fee from partners — never from you.

Frequently asked questions

What is wallets and custody?
Hot vs. cold, custodial vs. self-custody — and what "not your keys" really means.
How does wallets and custody affect long-term investors?
Understanding wallets and custody helps shape better long-term decisions around portfolio construction, risk management, and timing. See the article above for the specific implications.
Who should care about wallets and custody?
Anyone managing their own investments or planning for retirement benefits from understanding wallets and custody. This article covers what matters most.
Where can I learn more?
Browse the related articles in the sidebar, or check our financial dictionary for definitions of any term you encountered.

Questions & community

Be the first to ask a question about this page.

Ask a question

Your question will be reviewed before publishing. We don't share your email.

Found this useful?

Pass it on — someone you know is asking the same question.

Facebook Twitter LinkedIn Email
Educational content only. Not investment, tax, or legal advice. Verify current rules and consult a qualified professional for your situation.