Who Holds the Keys to Your Crypto?

Custodial, non-custodial, hot and cold describe two different choices—and understanding them reveals what you are really trusting when you store cryptocurrency.

You open a crypto app and see a balance. It looks reassuringly like a banking app: a number, a currency symbol, a button marked “Send.” Yet that familiar screen leaves the most important question unanswered: can you move those assets yourself, or are you asking a company to move them for you? A second, separate question lies behind it: are the secret keys that authorize those movements exposed to an internet-connected device, or kept offline?

Those two questions untangle four terms that often sound like competing products. Custodial versus non-custodial is about control. Hot versus cold is about how the keys are stored. Once you separate those ideas, the landscape becomes much easier to navigate.

The wallet that doesn’t hold your coins

A physical wallet contains cash. A cryptocurrency wallet generally does something different: it manages the secret credentials that let you authorize transactions.

Your crypto remains recorded on a blockchain, a shared digital ledger maintained by a network of computers. A private key is a secret used to authorize movements of assets associated with an address on that ledger. Your wallet uses it to sign a transaction—a form of digital authorization—without needing to reveal the key to the recipient.

Think of the wallet less as a purse and more as a key ring. The important thing is not which screen displays your balance, but who possesses the means to move it.

A receiving address, meanwhile, is something you can share so others can send you crypto. It is not the same as your private key. Confusing those two is rather like confusing your postal address with the key to your front door.

Who is looking after the keys?

With a custodial service, a company controls the private keys on your behalf. Crypto held in a Coinbase exchange account, for example, is custodial. You sign in to an account and request transactions; the company manages the underlying keys and processes withdrawals.

With a non-custodial wallet, you control the means of authorizing transactions yourself. Self-custodial means the same thing as non-custodial, not custodial. “Custody” means looking after something; self-custody means you take on that job.

A MetaMask wallet set up with your own recovery phrase is a familiar example. A recovery phrase, also called a seed phrase, is a list of words that can restore access to the wallet’s keys. Many self-custodial wallets use one, though some have different recovery arrangements.

The difference resembles keeping valuables in your own safe rather than having a company look after them. Your own safe gives you independence, but protecting the key becomes your responsibility.

Self-custody removes the company’s control over your keys. It does not remove the need to trust yourself.

That responsibility has two sharp edges. If someone obtains your recovery phrase, they can generally use it to take the assets it controls. If you lose every means of accessing or recovering the wallet, a support team generally cannot reset it for you.

Never give your recovery phrase to someone claiming to offer “wallet support.” It is not a customer-service verification code; it is a route to control of your assets.

There is also a naming trap worth noticing: a Coinbase exchange account and the self-custodial product known as Coinbase Wallet are different things. A brand name alone does not tell you who holds the keys.

Hot and cold describe a different axis

Now set ownership aside and ask where the keys live.

A hot wallet keeps its keys on an internet-connected device. MetaMask used as a phone app or browser extension is a typical non-custodial hot wallet. It is convenient for regular transactions, but its keys operate in an environment exposed to online threats.

A cold wallet keeps its private keys offline, reducing their exposure to those threats. A Ledger hardware wallet, used as intended to keep keys within the device rather than on your computer, is a common non-custodial cold-storage example.

A hardware wallet can authorize a transaction while keeping the private key inside the device. The signed transaction can then be transmitted to the network through connected software. “Cold” therefore does not mean the crypto can never move; it describes how the secret keys are protected.

The combinations matter:

• MetaMask with keys stored in the app: typically non-custodial and hot.
• A Ledger hardware wallet used for offline key storage: typically non-custodial and cold.
• A Coinbase exchange balance: custodial, while the company may use hot storage, cold storage or both behind the scenes.

An online account does not prove that all the custodian’s keys are online. Equally, storing assets in a company’s cold storage does not give you personal control of those keys.

Cold storage reduces a particular kind of exposure. It does not make every action safe: you still need to protect backups and understand what you are authorizing.

The convenience—and the bargain—of custody

Custodial storage is not automatically unsafe. Its appeal is straightforward: you do not have to manage private keys yourself, buying and selling can be convenient, and account-recovery procedures may help if you lose your login credentials.

For someone unfamiliar with backups and recovery phrases, that can remove a serious source of personal error.

But the risk has moved, not disappeared. Instead of depending entirely on your own key management, you depend on a company’s security, finances, conduct and willingness or ability to process withdrawals. A hack, shutdown or bankruptcy can become your problem even if you have done nothing wrong.

Custodial storage trades the risk of managing your own keys for the risk of relying on a company.

There is no single meaningful percentage that captures how dangerous custody is. Providers differ, as do their products and legal terms. You need to ask how assets are secured, whether customer assets can be lent or otherwise used, and what any claimed insurance actually covers.

Do not assume crypto has the same protections as money in a bank account. In the United States, FDIC deposit insurance does not cover crypto assets held on an exchange.

The crucial distinction is between a convenient balance display and an enforceable ability to access the assets behind it. Those can come apart.

When the withdrawal button stops working

The risks of custody are not merely theoretical. Several major failures show how different routes can lead to the same immediate experience: a balance you can see but cannot withdraw.

FTX demonstrated the danger of misuse of customer funds. When the exchange collapsed in November 2022, customers could no longer withdraw normally. Its founder diverted billions of dollars in customer deposits to his trading firm and other uses. Customers were left pursuing repayment through bankruptcy rather than simply moving their crypto elsewhere.

Mt. Gox illustrated the consequences of compromised exchange security. According to the U.S. Justice Department, attackers stole approximately 647,000 bitcoin from the exchange over several years between 2011 and 2014—most of the bitcoin belonging to its customers. Individual customers could not secure the exchange’s keys themselves.

Two other cases require an additional distinction: they involved lending products, not merely ordinary exchange storage.

Celsius halted withdrawals, transfers and swaps on June 12, 2022, then filed for bankruptcy the following month. Its terms allowed it to use customer assets. Depositing crypto there was therefore not simply paying someone to guard keys; it involved exposure to a lending business.

Gemini Earn customers faced a similar loss of access when its lending partner stopped redemptions in 2022. More than 200,000 customers were affected. The outcome also shows why “frozen” does not necessarily mean “permanently lost”: New York’s financial regulator reported that Gemini had restored 100% of the virtual currency owed to Earn customers by June 20, 2024. The wait and uncertainty were nevertheless real.

These examples are not interchangeable. Theft, misuse of funds and lending failures are different hazards. A product offering returns by lending your crypto introduces risks beyond the basic task of storing it.

You can hold your own keys and still cash out

Self-custody can sound like a one-way door: if your crypto is outside an exchange, how do you turn it into ordinary money?

You still can. Fiat currency means government-issued money, such as dollars or euros. Converting crypto into fiat requires a buyer or a service that arranges the exchange and payment; it does not require leaving your crypto with that service indefinitely.

One route is to hold crypto in your own wallet, transfer the amount you want to sell to an exchange such as Coinbase, sell it, then withdraw the fiat proceeds to your bank. The crypto becomes custodial while it sits on the exchange, but it did not have to be custodial throughout the period you owned it.

Another route is a peer-to-peer service, which coordinates a trade between individuals. Bisq, for example, facilitates bitcoin trades in which fiat payment happens separately, such as through a bank transfer. This avoids keeping bitcoin in an ordinary exchange account, but it introduces a process you must understand and counterparty risk—the risk that the person on the other side does not fulfil their obligations.

Some self-custodial apps offer a “cash out” button. A provider still handles conversion and payment behind the scenes. Dollars do not travel directly from a blockchain into your bank account.

The useful distinction is between where you store crypto and how you sell it. They do not have to be the same service.

Choose the responsibility, not just the label

There is no magic word among “custodial,” “non-custodial,” “hot” and “cold” that makes every risk disappear. Each describes part of an arrangement.

Before choosing, ask yourself two plain questions: Who can authorize a transfer, and where are the keys kept? Then ask a third: what happens if the company fails, your device disappears or your backup is lost?

The best-looking app cannot answer those questions for you. A crypto balance tells you what appears to be yours; the custody arrangement tells you what it will take to keep it—and whether you can move it when it matters.