Self-custody means the key that can move your bitcoin sits on a device you control, and no company holds a copy. That is the whole definition. Everything below is vocabulary you need in order to act on it, and the last section is the part that introductions usually leave out.
Custody is a question about who holds a key
Your bitcoin is a set of entries in a public ledger. Moving an entry requires a valid signature, and producing that signature requires a private key. So there is only ever one question: who has the key?
- Custodial. A company has it. You have an account, a balance on a screen and a promise. If the company freezes your account, gets hacked or goes bankrupt, you are an unsecured creditor in someone else's insolvency. This is not hypothetical: Celsius froze withdrawals in June 2022 and FTX collapsed five months later, and in both cases the balance on the screen turned out to be a claim rather than a coin.
- Non-custodial. You have it. Nobody can freeze it, and nobody can help you if you lose your backup.
Self-custody is choosing the second one, with everything that follows.
The seed phrase is what you are actually protecting
A wallet does not store one key. It derives an entire tree of them from a single random starting value, which is why one backup covers every address the wallet will ever hand you. That is the picture at the top of this page: one root, and everything downstream of it.
A seed phrase is that starting value written in a form a human can copy down. The standard almost every wallet follows, BIP 39, encodes it as 12 or 24 words drawn from a fixed list of 2,048, with the last word carrying a checksum, so a single mistyped word is usually caught rather than silently sending you to an empty wallet.
Three things follow, and they are the whole of seed phrase practice:
- The words are the money. Anyone who reads them can take the coins, from anywhere, with no further step.
- Write them by hand on something durable. Paper survives most things; it does not survive a house fire or a flooded basement, which is why people stamp metal.
- Never let them touch an internet-connected device. Not a photo, not a password manager, not a notes app, not cloud storage. The moment they do, treat them as compromised.
And one that people skip: restore from the backup before you trust it. Wipe the device, type the words back in, confirm the same addresses appear. A backup nobody has tested is a belief.
Hot and cold describe exposure, not safety
A hot wallet keeps the key on a device that is online: a phone, a laptop. A cold setup keeps it on one that is not, usually a small dedicated signing device that holds the key and approves transactions on its own screen.
The distinction is about how many ways an attacker can reach the key, not about whether a wallet is good. Hot is convenient and shares the fate of the device it lives on. Cold is inconvenient and mostly at risk from physical loss and your own backup discipline. Most people who hold a meaningful amount end up with both, and choosing between them is its own subject.
Passphrase and multisig
A passphrase is an extra secret combined with the seed phrase, defined as an option in the same BIP 39 standard. It is often called the twenty-fifth word, which is misleading: it is not part of the word list, it is not checksummed, and a different passphrase over the same words derives a completely different wallet. That cuts both ways. Someone who finds your words still cannot spend without it, and if you forget it, neither can you, and no support line exists.
Multisig requires several keys to authorise a spend, typically two of three. An attacker who takes one key still cannot move anything. The price is complexity: more backups, more things to record, and a setup that your heirs have to be able to follow. What multisig fixes and what it breaks goes through it.
The tradeoff, stated plainly
Self-custody removes the exchange from your threat model and puts you in it instead. The failure modes are not exotic, and they are all yours:
- You lose the backup, or never wrote it correctly, and the coins are gone. There is no reset.
- The backup and the device sit in the same drawer, so one burglary takes both.
- You add a passphrase, tell nobody, and die. The words alone open nothing.
- Somebody who knows you hold bitcoin turns up in person. Cryptography has no answer to this, which is why not talking about your holdings is a security measure.
None of that is an argument against self-custody. It is the price, and a post that hides the price is selling you something. Weigh it honestly: a small amount on a reputable exchange while you learn is a defensible choice, and moving everything to a device you do not understand yet is not.
Where to start
Do the smallest complete version once. Install a well-regarded non-custodial wallet, move an amount you could lose without it mattering, write the words down, wipe the wallet, restore from the words, and check the funds are there.
That single exercise teaches more than any amount of reading, because it turns the abstract part into something you have actually done. From there, what self-custody requires at larger amounts and making sure it survives you are the two directions worth going.