A wallet holds authority, not a pile of coins
Bitcoin remains recorded on the Bitcoin blockchain. Ether remains in Ethereum’s shared state. A wallet manages the information needed to authorize changes to those records.
A public address can receive assets and be inspected by anyone. Spending requires a valid cryptographic signature. The private key creates that signature without being revealed to the network. Whoever controls the signing process has the practical power to move the assets.
Custody is therefore not mainly an interface choice. It decides who can sign, who can block a withdrawal, and which failure you must survive.
Custodians keep the keys and a separate ledger
When an exchange displays half a bitcoin in a customer account, it may not maintain one blockchain address containing exactly that amount for that person. Platforms often pool assets in shared wallets and assign balances in an internal database.
A custodial platform may pool assets on-chain while assigning individual customer balances in its own ledger.
Transfers between two customers of the same exchange can be database entries without a Bitcoin transaction. This is fast and cheap. The distinction appears during withdrawal.
Follow a withdrawal through the two systems:
- The customer supplies an address and amount and authenticates the request.
- The exchange checks its account records, limits, compliance rules, and available assets.
- If it approves the request, the exchange signs and broadcasts a blockchain transaction with its own keys.
The customer’s login authorized a request to the company. The company’s keys authorized the transaction on the network. Those are separate permissions, which is why successfully logging in does not itself guarantee a withdrawal.
A withdrawal moves assets to an address; control changes only when the destination’s signing keys belong to the user.
This arrangement can provide professional security operations, fraud monitoring, and familiar account recovery. It also creates a central failure point. The company can delay withdrawals, suffer a hack, become insolvent, face legal restrictions, or have poor internal records. A number on the screen does not prove that every customer can withdraw simultaneously.
Crypto assets held through a platform are not automatically equivalent to deposits in an FDIC-insured bank. The FDIC’s deposit-insurance explanation applies to eligible deposits at insured institutions under defined limits and rules, not to crypto merely because a company offers an account.
Self-custody changes both power and responsibility
A self-custody wallet generates or manages keys controlled by the user. After an exchange sends assets to that wallet’s address, the exchange no longer has the signing authority required to move them.
When the user makes a payment, the wallet constructs a proposed transaction and shows the address, amount, and fee. Approval causes the key to sign. A hardware wallet can keep the private key inside the device while returning only the signature. The network verifies it and updates the shared ledger without a company’s permission.
That independence removes account freezes and custodian solvency from the signing path. It does not create an undo button. The network generally cannot distinguish a legitimate owner from a thief who obtained valid keys.
A recovery phrase is especially sensitive because it can recreate signing authority in another compatible wallet. It is not a password-reset code that support can cancel. Typing it into a fake site can hand complete control to an attacker. Losing every valid copy can leave visible assets permanently inaccessible.
Transaction review becomes equally important. An incorrect address, wrong network, or malicious smart-contract approval can be final. A hardware device can prevent malware from extracting a key while still signing a harmful instruction the owner explicitly approves.
Hot, cold, custodial, and self-custodial are separate axes
A hot wallet uses keys in an internet-connected environment, which is convenient for frequent activity but exposed to compromised devices and phishing. A cold setup keeps key material away from ordinary internet-connected use.
A phone wallet can be self-custodial and hot at the same time because the two labels describe different properties.
A company can hold customer assets in cold storage and remain the custodian. An individual can control a mobile wallet and remain in self-custody. “Who controls the keys?” and “How exposed are the keys?” need separate answers.
Risk moves; it does not disappear
“Not your keys, not your coins” captures the cryptographic distinction but compresses the legal and practical ones. A custodial customer may have a contractual claim despite lacking the keys. A self-custody user may have direct control while relying on unsafe backups and untrustworthy software.
Multisignature wallets can require several keys. Smart accounts can add limits, backup mechanisms, or social recovery. These designs reduce some single points of failure while adding software, coordination, and governance risk.
Many users combine models: a small working balance with a custodian and longer-term assets under another arrangement. The right choice depends on which failure can be handled. With custody, investigate withdrawals, fees, commingling, platform failure, and legal terms. With self-custody, test recovery safely, protect secrets, verify transactions, and maintain access without exposing it.
Test the choice against two failures: the company refuses a withdrawal, or you lose the information needed to sign. Custody makes the first failure central; self-custody makes the second your recovery problem. A wallet’s label is less useful than knowing whose action would restore access in each case.
Visual guide
How the pieces fit together
