Understanding Crypto Custody: Self-Custody vs Third-Party

Losing a password is annoying. Losing the private key to a self-custodied wallet, with no backup, means the funds are gone permanently — there’s no customer support line, no password reset, no institution to appeal to. That asymmetry is what makes the custody decision one of the most consequential choices any crypto holder makes, and it comes down to a single question: who actually holds the private keys?

With self-custody, the answer is you. Keys typically live in a hardware wallet or a software wallet you control directly, giving you full control over the assets and, correspondingly, full responsibility for keeping the keys safe. With third-party custody, an exchange or institution holds the keys on your behalf — the arrangement in effect any time assets sit on a platform like Coinbase or Binance rather than being withdrawn to a personal wallet. That trades some control for convenience and, often, additional security infrastructure the average individual couldn’t replicate alone.

The crypto community’s shorthand for the risk in that trade-off is “not your keys, not your coins”: assets held by a third party are ultimately subject to that party’s solvency and decisions, not just the security of the underlying blockchain. FTX’s collapse in November 2022 is the clearest recent illustration — customer funds became inaccessible not because of any flaw in Bitcoin or Ethereum, but because of what happened at the custodian sitting between users and the blockchain.

Self-custody removes that counterparty risk but introduces a different one entirely: there’s no recovery mechanism if a seed phrase is lost or a hardware wallet fails without a backup. Multi-signature setups, metal seed-phrase backups, and inheritance planning have all become common tools for reducing that risk, precisely because the failure mode is unforgiving and permanent.

In practice, many holders split the difference: keeping smaller, active-trading balances on an exchange for convenience, while moving larger, long-term holdings into self-custody where a hack or insolvency at any single company can’t touch them. The right mix depends less on ideology and more on how much technical care someone is realistically willing to put into managing their own keys.