"Not your keys, not your coins" is the most repeated phrase in crypto. Custody — who controls the private keys to your wallet — is the most important security decision you'll make.
What Custody Means
Every crypto wallet has a private key. Whoever controls that key controls the funds.
Self-custody: You control the private key (and its seed phrase). Full ownership, full responsibility.
Custodial: A third party (exchange, bank, broker) holds the private key on your behalf.
There's no middle ground. Someone holds the key.
Custodial Solutions
Centralized exchanges (Coinbase, Kraken, Binance) — The most common entry point. You deposit crypto, the exchange holds it, your account shows a balance.
Pros: Simple UX, easy account recovery, integrated fiat on/off ramps.
Cons: Exchange risk (FTX, Celsius, BlockFi, Voyager all failed with customer funds), KYC requirements, no DeFi access.
Hybrid custody (MPC wallets) — Multi-party computation splits the private key between you and the provider. Neither party has the full key alone. Used by exchanges and some consumer apps.
Self-Custody Solutions
Software wallets — Phantom (Solana), MetaMask (EVM), Rabby (multi-chain). You hold the seed phrase. Private key encrypted on your device. Not suitable for large holdings — device compromise can empty the wallet.
Hardware wallets — Ledger, Trezor, Coldcard. Private key never touches an internet-connected device. Signing happens on the device. Even malware on your computer can't steal the key.
Multi-sig wallets — Multiple keys required to sign (e.g., 2-of-3). Keys spread across devices and locations. Used by sophisticated self-custodians and treasuries.
Which Is Right for You?
| Scenario | Recommendation | |---|---| | First crypto purchase | Exchange (custodial) | | >$5,000 long-term | Hardware wallet | | Active DeFi, small amounts | Software wallet | | Business treasury | Multi-sig or institutional custody |
The Practical Split
Most users do both: keep small amounts on exchanges for trading, move the bulk to hardware wallets for long-term storage. This is the right balance.
The key mistake: keeping all holdings on an exchange indefinitely, especially offshore. US-regulated exchanges (Coinbase, Kraken) are materially safer than 2022, but exchange custody still isn't equivalent to self-custody.
DeFi Requires Self-Custody
DEXes, lending protocols, yield farming — all require a self-custody wallet. Exchanges can't connect to DeFi protocols; those interactions require signing with your own key.
Getting comfortable with Phantom (Solana) or MetaMask (Ethereum/Base) is a prerequisite for any on-chain activity.