Wallets and custody: who really holds your coins?
Keys, seed phrases, exchanges and self-custody, and the simple habits that prevent most crypto losses.
Here is the most important idea in crypto security: you never really hold coins. The coins exist as entries on a blockchain. What you hold is a private key, a secret number that proves you control those entries and lets you move them. Whoever has the key controls the coins. The blockchain has no help desk, no chargebacks and no "forgot password" link.
Keys, wallets and seed phrases
A crypto wallet is the software or device that stores your keys and signs your transactions. Think of your public address as an email address you can share freely, and your private key as the password that must never leave your control.
Most wallets back up your keys as a seed phrase: usually 12 or 24 ordinary words in a specific order that can rebuild your wallet on any compatible device. That makes the phrase powerful and dangerous:
- Anyone who sees it can take everything in the wallet.
- If you lose it and your device fails, your funds may be gone for good.
- No legitimate company, support agent or app will ever ask you for it.
Two ways to hold crypto
| Feature | Custodial | Self-custody |
|---|---|---|
| Who holds the keys | The exchange or app | You |
| Forgot your password? | Account recovery is usually possible | Only your seed phrase can save you |
| Main risk | The company is hacked, freezes withdrawals or fails | You lose your backup or are tricked into sharing it |
| Feels like | A bank or brokerage app | Cash in your own safe |
A custodial wallet is what you have when you buy crypto on most apps and leave it there: the company holds the keys for you. It is convenient and beginner-friendly, but you are trusting that company's security and honesty. When exchanges such as Mt. Gox in 2014 and FTX in 2022 collapsed, many customers had their funds frozen for years. Crypto held at an exchange is generally not covered by FDIC insurance, and SIPC protection typically does not apply either.
Self-custody means holding your own keys, either in a software wallet on your phone or computer ("hot," because it is online) or on a hardware wallet, a small device that keeps keys offline ("cold"). The crypto saying "not your keys, not your coins" captures the appeal: no company can freeze or lose your funds. The cost is that you become the bank and the security team.
A practical setup
Many people use both: a reputable exchange to buy and sell, and self-custody for amounts they plan to hold for years. The more money involved, the more it is worth learning self-custody properly. Whichever you choose:
- Lock down exchange accounts. Use a unique password and app-based two-factor authentication rather than text messages, which can be hijacked through SIM-swap attacks.
- Write your seed phrase on paper or metal, never in a screenshot, cloud note or email, and store it somewhere safe from fire and prying eyes.
- Send a small test transaction before moving a large amount, and double-check the first and last several characters of every address.
- Watch for phishing. Fake support accounts, lookalike websites and urgent messages are among the most common ways people lose crypto. Type web addresses yourself instead of clicking links.
- Plan for your heirs. If no one else can find or use your keys, your crypto could be lost forever.
Want to practice with none of this risk? The Lab lets you trade at live crypto prices with $100,000 of virtual cash, so nothing real is ever at stake. Next, we map the wider risks of the crypto market in Crypto risk.
Earn by doing · this week
Check your orbit · 3 questions
Answer all three to complete the lesson and earn 150 XP.