What Is Self-Custody (and Should You Use It)?

In November 2022, FTX was one of the largest crypto exchanges on the planet, with a billionaire founder and an arena named after it. Within a few days it froze withdrawals and collapsed, and billions of dollars of customers' crypto turned out not to be there. Its founder, Sam Bankman-Fried, was later convicted of fraud and sentenced to 25 years. Hundreds of thousands of people learned, all at once, a distinction most had never thought about: the crypto in their exchange account was not really theirs. It was an IOU, and the company writing the IOU had just gone under.

That distinction has a name, self-custody: the gap between holding your own crypto and trusting someone else to hold it for you, and one of the few genuinely big decisions a newcomer makes. This guide covers what it means, how an exchange actually holds your money, the real cost of each side, and how to work out which is right for you. It is educational, not financial advice, and it will not tell you there is one correct answer, because there is not.

What "custody" actually means

Custody comes down to one question: who holds the keys? A coin is controlled by a private key, a secret number that authorises spending it. Whoever holds the key controls the crypto, full stop. So behind every wallet and every exchange login sits the same question, whether you have ever asked it or not. Is it you holding the key, or someone else?

When a company holds it for you, that is a custodial wallet, and an exchange account is the obvious example. You sign in with a password, you see a balance, and it behaves like online banking. Underneath, the provider holds the keys and owes you the coins. When only you hold the key, through a non-custodial wallet, that is self-custody. Nobody stands between you and the funds, nobody can freeze them, and nobody can lose them for you.

Both are legitimate ways to hold crypto, they just fail in opposite directions, and that is what the rest of this article is about.

What an exchange actually does with your coins

When you buy crypto on an exchange and leave it there, you rarely get your own private key. Your balance is a number in the company's database, an entry in a spreadsheet it controls. The actual coins usually sit pooled together in a handful of the exchange's own wallets, mixed in with everyone else's, while the firm keeps the internal ledger of who is owed what. The industry word for this is an omnibus or pooled arrangement, and it is the same model a bank uses: your deposit is not a labelled stack of notes in a drawer with your name on it, it is a claim against a big shared pot. This is normal, and for active trading it is convenient. You can buy and sell in a tap because nothing actually moves on the blockchain, only the numbers in the database.

It also means a plain truth that the slick app design tends to hide: you are not the owner of those coins in the way you might assume. You are a creditor, the company owes you, and you are trusting it to actually hold what it says it holds, when it says it holds it.

That trust is not always rewarded: part of what sank FTX was that customer funds had been quietly funnelled to its sister trading firm, Alameda Research, and gambled, leaving a hole of around eight billion dollars when people tried to withdraw at once. The balances on the screen were real, the coins behind them were not. That is the failure mode of custody: you cannot see whether the vault is full until everyone reaches for the door at the same time, and by then it is too late to be first in the queue.

"Not your keys, not your coins"

The phrase gets repeated until it goes in one ear and out the other, which is a pity, because it might be the most useful five words in crypto. It means what it says: if you do not hold the keys, you do not really hold the coins. You hold a promise.

The graveyard of broken promises is long and well documented: Mt. Gox, which handled most of the world's bitcoin trades, collapsed in 2014 with roughly 850,000 coins gone, and its creditors waited more than a decade for partial repayment. QuadrigaCX, once Canada's biggest exchange, fell apart in 2019 after its founder died while travelling in India, reportedly the only person who held the keys. About 250 million Canadian dollars (around 190 million US dollars) of customer money was frozen, the cold wallets investigators expected to find full were later found empty, and an Ontario regulator concluded he had been running the place as a Ponzi scheme the whole time. Then FTX in 2022, different decades, different countries, the same lesson on a loop: a custodial balance is only as sound as the company holding it, and companies fail, sometimes through bad luck, sometimes through outright fraud, almost always at the worst possible moment.

None of this makes every exchange a villain. It makes the point that an exchange balance carries a risk a self-custodied coin does not: counterparty risk, the plain chance that the other side cannot pay what it owes you.

If you do keep funds on a platform, a few questions narrow the field. Is it regulated somewhere with real consumer protections, or registered offshore where the rules are thin? Does it publish proof of reserves, and does that proof cover liabilities as well as assets, since reserves mean little if the debts are larger? Is it dangling an unusually high yield, which has to be earned by taking risks with deposits somewhere out of view? None of these is a cast-iron test, FTX cleared some of them on paper right up to the end. But they tilt the odds, and they are worth asking before you leave more than pocket money sitting in someone else's database.

What "recovery" really looks like when an exchange fails

People hear "the exchange went bust" and picture an insurance payout, the way a bank deposit is covered up to a limit in many countries. With crypto, that picture is mostly wrong, and it is worth knowing before you find out the hard way.

When a custodial platform collapses, it usually enters bankruptcy, and your claim joins a long line of other claims. You are an unsecured creditor, often near the back. What you get back, if anything, depends on the jurisdiction, on how the firm held the funds, on how much was stolen or lost, and on years of lawyers picking over the wreckage, and Mt. Gox creditors are a case study in patience: ten years and counting. FTX customers have fared better than the early panic suggested, with a court-run estate clawing money back, but recoveries are valued in dollars at the old, depressed prices, not in the coins themselves, so anyone repaid misses every gain since. The blunt version is this: self-custodied coins are never part of a bankruptcy, because nobody else ever held them, and custodied coins can become an entry on a creditor list for half a decade. That gap is the whole argument in one paragraph.

The other side: when self-custody bites back

This is where most "take control of your keys" articles go quiet, because it spoils the sermon. Self-custody removes the company, and it also removes the safety net, completely.

Stefan Thomas, a programmer, holds 7,002 bitcoin he cannot reach. The keys sit on an encrypted hard drive and he forgot the password. The drive permits ten guesses before it scrambles itself for good, and he had burned eight of them by the time the story surfaced in 2021. Those coins were worth hundreds of millions of dollars then, and they are still sitting there: technically his, practically gone. He is not a careless man. He is an early adopter who made one ordinary human mistake with no undo button anywhere in sight.

That is the bargain in a sentence: with self-custody there is no support line, no password reset, no fraud team. Lose the keys, the coins are gone, send to the wrong address, gone. Fall for a scam and approve the transaction yourself, and nobody is reversing it. Researchers estimate that 3 to 4 million bitcoin, getting on for a fifth of all that will ever exist, are already lost this way for good, locked behind dead drives and forgotten phrases. The freedom and the hazard are the same feature, viewed from two sides.

Two myths worth dropping

The first myth is that a big, well-known exchange is automatically fine. FTX was big and well known, and so was Mt. Gox in its day, but size is not solvency, and reputation is not a guarantee of where your coins actually are. A regulated provider in a jurisdiction with real protections is a different proposition from an offshore one chasing the highest yield, and that difference is worth more than the brand on the door.

The second myth runs the other way: that self-custody is only for paranoids and hardcore types in basements. It is not: holding your own keys is the ordinary, intended way to use crypto, the "be your own bank" idea baked in from the very first block. It asks for a little discipline, not a tinfoil hat. Both myths push people into the wrong choice for the wrong reason, and both are worth dropping before you decide anything.

So which should you use?

The honest answer is that it depends on you, and anyone handing you a one-size rule is selling something.

A custodial account on a reputable, regulated platform is a fair place to start, and for some people a fair place to stay. If you are buying a small amount, still finding your feet, and you know in your gut you might lose a phrase scribbled on paper, then the counterparty risk of a solid provider may genuinely be smaller than the risk of locking yourself out. Convenience and a recovery option are real advantages, not a moral failing. The flip side is that you carry the risk the company itself fails, and you cannot see that coming from the outside.

Self-custody earns its keep as the stakes climb. If you are holding an amount you would be sick to lose, holding for the long term, or you value the idea that no company can freeze or fail with your money, then controlling your own keys stops being optional and becomes the entire point. The cost is that the responsibility lands entirely on you, with no one to call at 2am when it goes wrong. No fraud team, no chargeback, no helpline. That suits some people and frightens others, and both reactions are reasonable.

Picture the same person, 200 pounds of bitcoin, two different choices. Leave it on a regulated exchange and the realistic worst case is that the firm fails and you spend years as a creditor for a sum that was never going to change your life. Annoying, recoverable, a lesson. Move it to self-custody on day one, fumble the seed phrase backup, lose the phone, and the realistic worst case is that 200 pounds is gone for good with nobody to ask. Now run the same two choices with 50,000 pounds and the maths inverts. Suddenly the company failing is the nightmare and the discipline of holding your own keys is well worth the effort. The right answer is not fixed, it moves with the size of the stake and with how much you trust your own habits.

The middle path most people actually take

Framed as custodial against self-custody, it sounds like you must pick a tribe. In practice almost nobody does, the common, sensible setup is to split by purpose. Keep a small, active balance on a reputable exchange, the bit you might trade or spend, where convenience matters and the sum is small enough that a worst case would sting rather than ruin you. Move your longer-term holdings, the savings you do not intend to touch for years, into self-custody as the pile grows. Many do that onto a hardware wallet kept in cold storage: the keys held on a device that never connects to the internet, offline and out of reach of anyone working through a screen on the other side of the world.

Think of it the way you might think about cash and a bank. You carry a little in your pocket for the day, and you do not keep your life savings there. The exact split is yours to set, and it shifts as your holdings grow. The point is to choose it deliberately rather than letting an exchange default decide for you.

If you go self-custody, get the setup right

Self-custody is not difficult, but it is unforgiving, so the setup matters far more than anything you do afterwards. Use a reputable non-custodial wallet from a well-known maker, not the first link in a search result. Write down the seed phrase it gives you, the 12 or 24 words that can regenerate every key, on paper or stamped into metal, never as a screenshot or a note in the cloud, because anything online can be reached by someone who should not reach it. Keep more than one copy, in more than one physical place, so a single fire or flood does not end the story. For any meaningful amount, a hardware wallet takes your keys offline entirely and signs transactions without ever exposing them. And before you trust it with much, send a small test amount and practise wiping the wallet and restoring it from your phrase, so you find out the backup works while almost nothing is on the line. Better to learn that lesson over a few pounds than over your savings.

We cover each of these in its own guide: how to set up a wallet, how to back up a seed phrase, and how hardware and software wallets differ. Read them before you move a serious sum across, not after something has gone wrong.

Whichever side you come down on, the aim is the same. Know who holds your keys, and choose on purpose instead of by accident. Most people who lose crypto never made the decision at all. It was made for them by a default they never questioned. This is educational, not financial advice.