The basic idea
Control of the keys means control of the bitcoin
When bitcoin is held on an exchange or custodial platform, the company normally controls the private keys.
The user sees an account balance, but the provider controls the wallet infrastructure and authorises withdrawals.
With self-custody, the user controls the keys required to sign transactions directly.
This provides greater independence, but it also removes many of the recovery and support systems provided by custodial services.
Simple definition
Self-custody means personally controlling the private keys that authorise the spending of your bitcoin.
Custody models
Custodial and self-custody wallets
The main difference is who controls the private keys.
Custodial
A company or service controls the private keys and manages the bitcoin on the user's behalf.
Self-custody
The user controls the private keys and can authorise transactions without relying on a custodian.
A common Bitcoin phrase
“Not your keys, not your coins”
This phrase means that a person who does not control the private keys depends on someone else to honour their claim to the bitcoin.
A custodial provider may freeze withdrawals, experience a security breach, become insolvent or restrict account access.
Self-custody reduces these third-party risks because the user can authorise transactions independently.
However, self-custody introduces a different risk: mistakes by the user may be impossible for anyone else to correct.
Personal responsibility
What self-custody requires
Self-custody gives users greater control, but it also transfers important security responsibilities to them.
Protect private keys
Private keys must remain secret because they can authorise the spending of bitcoin.
Secure the recovery phrase
The recovery phrase can recreate the wallet and must be protected from theft, loss and damage.
Verify transactions
Addresses, amounts and fees should be checked carefully before approving a payment.
Maintain backups
Recovery information should remain available even if the original wallet or device is lost.
Avoid scams
Users must recognise fake support messages, phishing websites and fraudulent wallet software.
Plan for emergencies
A trusted recovery plan may be needed for illness, incapacity or death.
Wallet recovery
The recovery phrase is the master backup
Many Bitcoin wallets generate a sequence of words called a recovery phrase.
This phrase can recreate the wallet's private keys and addresses on a compatible wallet.
If the wallet device is lost or destroyed, the phrase may be the only way to restore access.
If another person obtains the phrase, they may be able to recreate the wallet and transfer the bitcoin.
Critical warning
Never share a recovery phrase with support staff, wallet companies, exchanges or people contacting you online.
Getting started
A careful self-custody setup
A safe setup should be tested before significant funds are transferred.
Choose a trusted wallet
Select established wallet software or hardware that suits the amount and intended use.
Download or purchase carefully
Use official sources and inspect packaging, website addresses and device authenticity.
Create a new wallet
Allow the wallet to generate private keys and recovery information securely.
Record the recovery phrase
Write it down accurately and keep it offline. Do not photograph or upload it.
Verify the backup
Check every word and confirm the correct order before depositing meaningful funds.
Test with a small amount
Receive and send a small transaction to confirm that the wallet works as expected.
Test recovery
Restore the wallet using the backup before relying on it for long-term storage.
Wallet environment
Hot wallets and cold storage
Hot wallet
A wallet used on an internet-connected device. It is convenient for regular payments but has greater exposure to malware and online attacks.
Cold storage
A setup designed to keep private keys offline or isolated from general internet-connected devices. It is commonly used for longer-term storage.
Dedicated signing devices
Hardware wallets support self-custody
A hardware wallet is designed to keep private keys separate from a general-purpose computer or phone.
Transactions are sent to the device, signed internally and returned without exposing the private key.
The device screen should be used to verify the destination address and amount before approval.
Hardware wallets can reduce some risks, but they do not remove the need for secure backups and careful use.
Backup security
Risks to recovery information
A backup must remain both secret and recoverable.
Theft
Someone who finds the recovery phrase may be able to recreate the wallet and spend the bitcoin.
Fire or water damage
Paper backups can be destroyed by environmental damage if they are not protected.
Loss
A well-hidden backup may become impossible to find later.
Incorrect words
Misspelled, missing or incorrectly ordered words can prevent successful recovery.
Digital exposure
Photos, screenshots, cloud backups and online notes can expose recovery information.
Single point of failure
Keeping only one backup in one location creates unnecessary recovery risk.
Optional protection
What is a wallet passphrase?
Some wallets allow an additional passphrase to be combined with the recovery phrase.
Each different passphrase can produce a different wallet, even when the same recovery phrase is used.
This can add protection if the recovery phrase is discovered, but it also creates another piece of information that must not be forgotten.
A lost or incorrectly remembered passphrase may permanently prevent access to the intended wallet.
Passphrases are an advanced feature. Beginners should not use one until they understand exactly how wallet restoration works.
Emergency access
Plan for inheritance and incapacity
A secure wallet may become permanently inaccessible if the owner dies or becomes unable to explain how it works.
A trusted person may need clear instructions about where backups are located and how recovery should occur.
These instructions should not expose all security information to one person unnecessarily.
Larger holdings may require professional legal and estate planning advice.
Security checklist
Good self-custody practices
Never share your recovery phrase or private keys.
Do not store recovery words in photos, emails or cloud documents.
Use official wallet software and carefully verify downloads.
Confirm transaction details on the hardware wallet screen.
Keep wallet devices protected by a strong PIN.
Maintain at least one reliable offline backup.
Test recovery before transferring significant funds.
Use smaller amounts when learning a new wallet.
Do not discuss the value or location of your holdings unnecessarily.
Create a clear inheritance or emergency-access plan.
Common mistakes
Self-custody failures to avoid
Treating the recovery phrase like a password
A password may protect an app, but the recovery phrase can recreate the entire wallet.
Keeping only one backup
One lost or damaged backup can permanently remove access to the wallet.
Storing the backup online
Digital copies can be exposed through malware, cloud breaches or account compromise.
Depositing too much too quickly
Large transfers should not be made before the setup and recovery process has been tested.
Ignoring inheritance planning
Bitcoin may become inaccessible if no trusted person knows how to recover it after an emergency.
Using a setup that is too complex
A complicated security system can create more risk if the user does not fully understand it.
A balanced approach
Self-custody is not automatically safer
Self-custody removes dependence on a custodian, but it does not remove risk.
A poorly managed self-custody wallet can be less secure than a reputable custodial service.
Security depends on the wallet, backup method, device security and the user's ability to recover the setup correctly.
The safest approach is one the user fully understands and has successfully tested.
Knowledge check
Before continuing
What is the difference between custodial and self-custody wallets?
What does the phrase 'not your keys, not your coins' mean?
Why is the recovery phrase so important?
What risks are reduced by using self-custody?
What new responsibilities does self-custody create?
Why should a wallet be tested with a small amount first?
What is the difference between a hot wallet and cold storage?
Why can a wallet passphrase increase both security and risk?
Why is inheritance planning important for self-custody?
Visual recap
A safe self-custody loop
Good custody is a repeatable process: secure the keys, test recovery and plan for loss or emergency access.
Create wallet
Back up
Verify recovery
Protect
Review plan
References
Further reading
From the 21Relay Library
Recommended reading for this lesson
Optional books selected to reinforce this topic or provide a useful second perspective.
Recommended nextCryptoasset Inheritance PlanningPamela MorganIntermediate · Medium · SpecialistLong-term self-custody and family planning
Another perspective21 LessonsGigiBeginner · Medium · RecommendedCurious newcomers who prefer short thematic chaptersLesson summary
Key takeaways
Self-custody means personally controlling the private keys used to spend bitcoin.
Custodial services hold private keys on behalf of users.
Self-custody reduces reliance on exchanges and other third parties.
The recovery phrase can recreate the wallet and must remain secret and recoverable.
A self-custody setup should be tested before significant funds are transferred.
Hot wallets favour convenience, while cold storage reduces online exposure.
Hardware wallets can isolate private keys but still require secure backups.
Passphrases can add protection but increase recovery complexity.
Inheritance and emergency-access planning are important parts of long-term custody.
Self-custody provides greater control but also greater personal responsibility.