Custody: what “not your keys, not your coins” really means
The slogan is technically correct and incomplete. Self-custody removes the risk of a company failing and replaces it with the risk of you failing — permanently, with no recourse. Both sides, stated honestly.
Not financial advice. This article is for informational purposes only.
The short version
An exchange balance is a claim on a company. A private key is direct control. The slogan is right that these are different things, and it usually stops before the important part: self-custody does not eliminate risk, it transfers it to you, and your mistakes are irreversible in a way an exchange’s usually are not. There is no safe option — only two different failure modes, and a sensible split between them.
“Not your keys, not your coins” is one of the few crypto slogans that is technically accurate. It is also usually deployed as though it settled the question, and it does not. It describes what you gain by holding your own keys and says nothing about what you take on.
What an exchange balance actually is
When you hold crypto at an exchange, the coins are not yours in the sense a slogan implies. The exchange controls keys to addresses holding assets in aggregate; your balance is an entry in its internal database representing a claim against the company.
In ordinary operation this is invisible and irrelevant — you can trade and withdraw, so it feels like ownership. It becomes very relevant in exactly two situations: if the company becomes insolvent, where you are a creditor and your recovery depends on the insolvency process and on whether assets were segregated; and if the company restricts your account, for compliance, sanctions, suspected fraud or error, where the balance is intact and you cannot reach it.
That is the real content of the slogan. Not that exchanges steal, but that an exchange balance is a claim, and claims can fail while the assets still exist.
What self-custody genuinely gives you
Holding the keys means controlling the addresses. No company can freeze it, no insolvency can capture it, no compliance decision can suspend it, and no counterparty can lend it out. For an asset whose entire proposition is that it does not require permission, this is the version that delivers on it.
Those are real, valuable properties. They are also the complete list — and each one has a mirror image.
What self-custody takes on
Every protection you removed was also a safety net.
No password reset. Lose the seed phrase and the assets are permanently unreachable. Not frozen, not disputed — gone, provably still sitting at an address nobody can open. A meaningful share of all bitcoin is estimated to be in exactly this state.
No reversals. Send to the wrong address and there is no support desk. The transaction was valid and executed as instructed.
No fraud protection. If you are deceived into authorising a transfer, that transfer is final. Card networks reverse fraudulent payments; blockchains do not.
You are now the target. Attacks shift from the exchange’s security team to you: fake wallet applications, malicious transaction approvals, clipboard malware that swaps addresses, and social engineering aimed at the phrase.
Inheritance becomes your problem. If you die without your family being able to reach the assets, they are lost. An exchange has a probate process, however tedious. A seed phrase only you know does not.
The comparison, without a winner
| Risk | At an exchange | In self-custody |
|---|---|---|
| Company failure | Real, and outside your control | None |
| Account frozen | Possible at any time | Impossible |
| You lose access | Recoverable via support | Permanent and total |
| Mistaken transfer | Sometimes recoverable internally | Never recoverable |
| Being personally targeted | Lower; the venue is the target | Higher; you are the target |
| Inheritance | A defined legal process | Entirely your arrangement |
Read down the two columns. Neither is safe. Exchange risk is someone else’s failure, generally with some recourse. Self-custody risk is your own failure, with none. Which you should prefer depends far more on your circumstances and habits than on any principle.
The custody options, briefly
Exchange account. Convenient, necessary for trading, and full exposure to one company.
Software wallet. Keys on a phone or computer that you control. Genuine self-custody, but the keys live on an internet-connected device that may already be compromised.
Hardware wallet. Keys generated and held on a dedicated device that signs transactions without exposing them. The practical standard for meaningful amounts. It protects the key from a compromised computer; it does not protect you from approving a bad transaction, and it does not protect the seed phrase you wrote down.
Multi-signature. Requires several keys to move funds, so no single loss or compromise is fatal. Genuinely more robust, meaningfully more complex, and the complexity is itself a risk if you do not understand it.
See cold storage and self-custody for the terms.
What the seed phrase is, and the mistakes that lose it
The phrase is not a password to a wallet — it is the mathematical source from which all your keys are derived. Anyone with it has your assets, from anywhere, forever. It is the only thing that matters.
Which means the two failure modes are opposites, and defending against one worsens the other. Store it in too few places and you risk losing it to a fire or a flood. Store it in too many and you multiply the chances someone finds it.
The mistakes that recur: photographing it, which puts it in cloud backups; typing it into anything, ever, other than restoring your own wallet; storing it in a password manager, which makes it as strong as that account; keeping the only copy where the device is, so one event takes both; and telling nobody it exists, which loses it on your death.
The single most important rule is short: no legitimate person or service will ever ask for your seed phrase. Not support, not a wallet developer, not a migration tool. Every request is theft.
What we would actually suggest
Not “self-custody everything”, and not “leave it on the exchange”. Split it by function.
Keep at an exchange what you are actively using — the amount you would trade or spend soon, sized so the venue’s failure would be a bad week rather than a catastrophe. Move the long-term holding to custody you control, and only after you have tested the recovery process.
That last part is the step people skip. Set up the wallet, write down the phrase, then wipe the device and restore from the phrase before sending anything meaningful to it. An untested backup is not a backup. Restoring successfully is the only evidence that the words you wrote are the words you need.
And write down, somewhere your family can find, that these assets exist and how someone competent could reach them. It is unpleasant to think about and it is the difference between an inheritance and a permanent loss.
None of this is advice about how much to hold or where. It is a description of two sets of trade-offs. See our disclaimer.
Key takeaways
- An exchange balance is a claim on a company, and claims can fail while the assets still exist.
- Self-custody removes company risk entirely and replaces it with your own error, which is permanent and unrecoverable.
- Lost seed phrases are not disputes — the assets sit at an address nobody can ever open.
- A hardware wallet protects the key from a compromised computer. It does not protect you from approving a bad transaction.
- Storing a seed phrase in too few places risks loss; too many risks theft. Both are real failure modes.
- No legitimate person or service ever asks for a seed phrase. Every such request is theft.
- Wipe and restore from your written phrase before trusting it with anything. An untested backup is not a backup.