Crypto Self-Custody: What It Is and How to Do It
What self-custody in crypto means, how to self-custody step by step, wallet types compared (hardware, mobile, multisig, MPC), seed phrase backup, treasury setups and leaving an exchange safely.
Last updated: 4 October 2026
What is self-custody in crypto? Self-custody means you hold the private keys (usually backed up as a seed phrase) that control your crypto, instead of leaving it on an exchange that holds the keys for you. Only your signature can move the funds: no company can freeze, lend out or lose them. The trade-off is that there is no password reset. To self-custody, you set up a non-custodial wallet, back up the seed phrase offline, test the recovery, and then withdraw from the exchange with a small test transaction first.
"Not your keys, not your coins" is the most repeated phrase in crypto and one of the least acted upon. Three exchange wind-downs in July 2026 made the point again: assets on a custodial platform are a claim against a company, and the company decides when you can act on it.
The phrase is right, but it is usually delivered without the part that matters. Self-custody transfers risk from a company to you, and you can lose funds through your own mistakes just as permanently as through someone else's insolvency. This guide covers how to do it properly: the wallet types, a step-by-step setup, how to get funds off a closing exchange without creating a new problem, and how teams and treasuries self-custody.
What self-custody actually means
Self-custody means holding the private keys that control your crypto, rather than holding an account balance with a company that controls those keys on your behalf. Under self-custody, moving your assets requires your signature and nothing else: no approval, no withdrawal limit, no account review.
The distinction is legal as much as technical. An exchange balance is an entry in a company's ledger representing what it owes you. A self-custodied balance is recorded on-chain and controlled by a key only you hold. In an insolvency, the first is a claim among many creditors; the second is unaffected. Proof of reserves can show whether an exchange holds enough assets, but it does not change who owns them if the company fails.
| Exchange custody | Self-custody | |
|---|---|---|
| Who controls the keys | The company | You |
| Failure mode | Insolvency, freeze, wind-down, hack | Lost seed phrase, signed a malicious transaction |
| Recourse if it fails | Creditor claim, sometimes partial | None |
| Recovery if you forget credentials | Support can reset | Funds are gone permanently |
| Counterparty risk | Full | None |
Read that table honestly. Self-custody does not reduce risk; it concentrates it in you and removes every safety net. That is a good trade for most people, but only if you take the operational side seriously.
The numbers back that up from both sides. Chainalysis counted 158,000 personal wallet compromises affecting at least 80,000 unique victims in 2025, with $713 million stolen from individuals, down from $1.5 billion in 2024 (Chainalysis, 18 December 2025). The same report attributes $1.5 billion of the year's $3.4 billion in thefts to a single custodial platform, the February 2025 Bybit hack. Neither model is risk-free; they fail in different ways.
Custody also covers data, not just coins. An exchange account ties your identity documents to your transaction history; our piece on the Revolut data handover covers that side of the trade-off.
Self-custody wallet types
Every self-custody wallet does the same job, holding keys and signing transactions, but where the key lives decides the risk. Our hot wallet vs cold wallet explainer covers the basic split; this table adds the options teams use.
| Wallet type | Where the key lives | Best for | Main weakness |
|---|---|---|---|
| Hardware wallet (cold) | Dedicated offline device | Long-term holdings, signing DeFi transactions safely | Supply-chain tampering if bought second-hand; still signs whatever you approve |
| Mobile or browser wallet (hot) | Your phone or computer | Day-to-day amounts, active DeFi | Malware, phishing, malicious approvals |
| Multisig wallet | Several keys, a set number must sign | Treasuries, families, large balances | Operational complexity; signers can all be tricked by the same interface |
| MPC wallet | Key split into shares held by different parties or devices | Institutions, some consumer apps | You often depend on the provider's software to sign or recover |
| Social-login or smart-account wallet | Key derived from or recoverable via a login or guardians | Beginners who would lose a seed phrase | Recovery depends on the login provider or guardians you chose |
For a brand-by-brand comparison, see our guide to the best self-custody wallets in 2026.
How to self-custody crypto: step by step
- Pick the wallet type for the amount. A hardware wallet for anything you would be upset to lose; a mobile or browser wallet for spending money.
- Buy hardware only from the manufacturer. Never second-hand, never from a marketplace reseller. A device that arrives with a seed phrase already printed is a theft in progress.
- Download software from the official source. Fake wallet apps and browser extensions are a leading way people lose funds before they even start; see fake wallet scams in 2026.
- Create a new wallet and write down the seed phrase. On paper or metal, in order, offline. Never a photo, screenshot or cloud note.
- Test the recovery. Wipe the wallet (or use a second device) and restore it from your written phrase. Confirm the same receiving address appears.
- Store the backup somewhere separate from the device. Ideally two copies in two physical locations.
- Copy your receiving address and check the network. Make sure the exchange withdrawal uses the same chain your wallet expects.
- Send a small test amount. Confirm it arrives in the wallet, then send the rest.
- Set up a second, separate wallet for DeFi. Keep only what is deployed in it, so a bad signature cannot reach your long-term holdings.
- Write an access plan for someone you trust. Explain where the backup is and how to use it, without putting the seed phrase itself in the instructions.
Self-custody on MultiversX, Sui and Radix
The same steps apply on the chains JewelSwap runs on, and all three support Ledger hardware wallets:
- MultiversX: the xPortal mobile app, the Web Wallet, the MultiversX DeFi Wallet browser extension and Ledger are listed in the MultiversX wallet documentation (checked October 2026).
- Sui: Slush, Mysten Labs' wallet formerly called Sui Wallet, runs on mobile and in the browser, and the Sui documentation describes connecting a Ledger device to it, with clear signing that shows readable transaction details on the device screen.
- Radix: the Radix Wallet mobile app can create hardware-wallet accounts on a Ledger Nano S, S Plus or X, signed through the Radix Connector browser extension (Radix Knowledge Base).
How to leave a closing exchange safely
With BitMart winding down and other venues following, this is the live question for a lot of people.
- Set up the destination wallet first. Do not start a withdrawal until the receiving wallet exists, is backed up, and you have confirmed you can restore it.
- Write the seed phrase on paper. Never a photo, never a password manager entry created by screenshot, never a cloud note. Paper or steel, stored physically.
- Test the restore before funding it. Wipe the wallet and restore from your written phrase. If you cannot, you have just discovered that at zero cost rather than after moving your savings.
- Send a small test transaction. A few dollars first. Confirm arrival. Then send the rest. The fee is trivial against the cost of a wrong-network transfer.
- Check the network, not just the address. Sending an asset over the wrong chain is one of the most common ways funds are lost permanently.
- Be ready to prove the wallet is yours. In the EU, the Transfer of Funds Regulation requires exchanges to check that a self-hosted wallet belongs to you for transfers above EUR 1,000 (Notabene summary of the TFR). Exchanges such as BSDEX do this with a signed message or a small "Satoshi test" transfer (checked October 2026). Our travel rule explainer covers the wider rules.
- Withdraw well before the deadline. Wind-down withdrawals often carry manual compliance review. A queue in the final weeks is predictable.
- Export your transaction history while the account still exists. You will need it for tax.
Choosing how to store keys
Hardware wallets
A hardware wallet keeps the private key on a dedicated device and signs transactions without the key ever touching an internet-connected computer. For any meaningful balance this is the baseline. Buy directly from the manufacturer: supply-chain tampering on resold devices is a documented attack, and a device that arrives with a pre-printed seed phrase is a theft in progress.
Software wallets
Browser and mobile wallets are appropriate for the amounts you actively use. They are convenient and genuinely fine for day-to-day activity, but the key sits on a general-purpose device with a large attack surface. Treat a software wallet the way you would treat cash in your pocket.
Multisig and shared control
Multisignature setups require several keys to authorise a transaction, removing any single point of failure. For treasuries and larger holdings this is standard practice. It adds operational complexity, so it earns its place above a certain amount rather than for everyone.
A practical structure
- Long-term holdings: hardware wallet, or multisig above a size where a single device worries you.
- Active DeFi positions: a separate wallet holding only what is deployed.
- Experiments and unknown protocols: a third wallet you would be willing to lose entirely.
Separating wallets by purpose limits the damage of any single mistake. A malicious approval signed in your experimental wallet cannot reach the hardware wallet holding everything else.
Self-custody for teams and crypto treasuries
A company, DAO or fund treasury has the same choice as an individual, plus a governance problem: no single employee should be able to move everything. The usual self-custody solutions are a smart-contract multisig (for example 3-of-5 signers) or an MPC wallet where key shares are split across people and devices.
The Bybit hack is the case study every treasury should read. According to the FBI (26 February 2025), North Korean actors stole about $1.5 billion on 21 February 2025. As CSIS (18 March 2025) describes it, Bybit used a multisig through Safe{Wallet}; attackers planted malicious code in the interface, so the signers approved what looked like a routine transfer while the underlying transaction handed over control of the wallet. The multisig worked exactly as designed. The weak point was that every signer trusted the same screen.
Practical rules that follow from it:
- Signers verify on the hardware device, not only in the web interface, and reject anything they cannot read.
- Keys sit with different people on different devices. Several signer keys on one laptop is a single point of failure dressed up as a multisig.
- Separate hot operating wallets from cold reserves, and give the hot wallet only the permissions it needs.
- Rehearse recovery and signer rotation before you need them, and document who can do what.
Treasuries that want yield without handing over keys can use non-custodial protocols; our piece on turning idle treasuries into productive capital covers one approach.
The mistakes that actually lose funds
Self-custody failures are rarely exotic. The recurring causes are boring and preventable.
- No backup, or a backup nobody can find. A seed phrase that exists only in your head or only in one place will eventually fail.
- Digital seed storage. Photographs, cloud notes and password managers put the phrase on a device that can be compromised.
- Signing without reading. Approvals and signature requests are where most on-chain theft happens. See our guide to wallet drainers and approval phishing.
- Entering the seed phrase into a website. No legitimate service ever needs it. Any request for it is theft, without exception.
- Fake "support" and recovery offers. After a loss, scammers pose as recovery services; see crypto recovery scams.
- Talking about your holdings. Chainalysis's mid-2025 update (17 July 2025) found "wrench" attacks, physical coercion of known holders, on track to roughly double the previous record year. Privacy is part of security.
- Untested inheritance plans. If nobody else can access the funds if something happens to you, the plan is incomplete.
Self-custody and DeFi
A common misconception is that using DeFi means giving up self-custody. It does not, provided the protocol is genuinely non-custodial. You connect a wallet, sign transactions, and the assets remain under keys you control throughout.
JewelSwap works this way across MultiversX, Sui and Radix. Liquid staking, yield farming and NFT-backed loans execute through smart contracts the user signs into; the protocol does not take custody. Liquid staking tokens such as JWLSUI, JWLEGLD and JWLXRD sit in your own wallet, and the S-variants that accrue value do the same.
Being non-custodial does not make a protocol safe, and it is worth being blunt about that. Smart contract risk, oracle failure and your own signing mistakes remain. What it removes is the specific risk that a company decides you cannot have your assets back. Before connecting a wallet anywhere, run through how to check a DeFi protocol is safe.
Frequently asked questions
What does self-custody mean in crypto?
Self-custody means holding the private keys that control your assets rather than trusting a company to hold them for you. You can move your funds at any time with your own signature, and no third party can freeze, delay or lose them on your behalf.
How do I self-custody my crypto?
Set up a non-custodial wallet (a hardware wallet for larger amounts), write the seed phrase on paper or metal, test that you can restore the wallet from it, then withdraw from the exchange with a small test transaction before moving the rest. Check the network as well as the address.
What does "not your keys, not your coins" mean?
It means that if someone else controls the private keys, the assets are effectively theirs and you hold only a claim against them. Exchange balances are entries in a company ledger; if that company fails, freezes withdrawals or winds down, your access depends on its decisions.
Is self-custody safer than an exchange?
It removes counterparty risk entirely but replaces it with personal responsibility. There is no password reset and no support desk. For most people it is the better trade, but only with a tested seed phrase backup and disciplined transaction signing.
What is the safest way to store a seed phrase?
Written on paper or stamped into metal, stored physically in a location only you can access, ideally with a second copy in a separate location. Never photograph it, never store it in cloud notes, and never type it into any website or application other than a wallet restore screen.
Do I need a hardware wallet to self-custody?
No. A mobile or browser wallet is already self-custody because you hold the keys. A hardware wallet keeps the key offline and is the sensible baseline for amounts you would be upset to lose.
How do I move crypto off an exchange that is closing?
Create and back up the destination wallet first, test that you can restore it from the seed phrase, send a small test transaction, confirm it arrives, then move the rest. Verify the network as well as the address, and withdraw well before the deadline to avoid compliance queues.
How should a company or DAO self-custody its treasury?
Use a multisig or MPC setup so no single person can move funds, keep signer keys with different people on different devices, verify every transaction on the hardware device rather than only in the web interface, and rehearse recovery and signer rotation in advance.
Can I use DeFi while keeping self-custody?
Yes, with genuinely non-custodial protocols. You connect a wallet and sign transactions while the keys stay with you. The risk shifts from counterparty failure to smart contract and signing risk, so use a dedicated wallet for active positions rather than your main holdings.
Keep reading
