Why self-custody matters

Keys, seeds and IOUs

Every bitcoin wallet is controlled by private keys. Modern wallets derive those keys from a seed phrase of 12 or 24 words. Whoever has the seed (plus the passphrase, if one is used) can spend the coins, from anywhere, at any time.

When your balance sits on an exchange, the exchange holds the keys and you hold a promise to be paid. Exchanges can pause withdrawals, be hacked, or fail. The best-known example is Mt. Gox, which collapsed in 2014 after reporting that hundreds of thousands of customer bitcoins were missing (WSJ).

Self-custody moves the risk to you

Holding your own keys removes the custodian, but it does not remove risk. There are two ways to fail:

• Theft: someone else gets your seed, your device and PIN, or tricks you into signing a transaction.
• Loss: you can no longer reach your keys (a lost backup, a forgotten passphrase, a fire, or dying without a plan).

A good setup balances both. Making your backup so secret that your family can never find it is just as dangerous as leaving it in a desk drawer.

What a hardware wallet does

A hardware wallet generates and stores keys on a dedicated device that never exposes them to your computer. It shows each transaction on its own screen for you to approve. Malware on your laptop can change what your laptop shows, but it cannot change what the device screen shows, which is why we verify everything on the device.

Write a one-page threat model

1. Note roughly what you are protecting, how often you spend, and who depends on these funds.
2. List realistic threats and rate each Low/Medium/High for you: phishing and fake apps, malware, SIM swaps, leaked customer data revealing your address, burglary, fire or flood, a tampered device, coercion, losing the backup, forgetting a passphrase, and vendor firmware bugs.
3. Pick a tier. A: one hardware wallet plus a seed backup. B: add a BIP-39 passphrase stored separately. C: 2-of-3 multisig across different vendors and locations.
4. Decide where backups will live (in general terms), and keep the page with your private papers, not online.

Golden rules for everything on this site: never type, photograph or cloud-store your seed; verify addresses and amounts on the device screen; test recovery with a small amount before trusting a setup.

Common mistakes

• Building something so complex you cannot recover it.
• Ignoring inheritance and loss.
• Talking publicly about your holdings.
• Waiting for a perfect setup while everything stays on an exchange.