Crypto Citizen 101 — The Citizen's Oath · Lesson 3 of 5

Self-custody vs custodial — who holds the keys?

4 min · interactive

There are only two answers to "who controls this wallet?": you or someone else. There is no third option. Every story you read about exchange collapses, frozen accounts, or hacked custodians boils down to a user who didn't understand which of the two boxes they were in.

The rule, in one line

Not your keys, not your coins.

If you don't hold the private key, you don't hold the asset — you hold a promise from someone who does.

Custodial — convenience, with counterparty risk

A custodial wallet (or exchange account) is run by a company that holds the keys on your behalf. You log in with email and password; the provider signs transactions internally.

What you get: password resets, 2FA recovery, regulated fiat on-ramps, professional security teams.

What you give up: the provider can freeze your funds, lose them, get hacked, get shut down by a regulator, or simply close your account. None of these are theoretical — every one of them has happened to large, well-known providers in the last decade.

A useful framing: a custodial account is a bank deposit denominated in crypto. You're a creditor of the provider. Treat your balance there the way you would treat money sitting in a bank account from a country whose politics worry you.

Self-custody — sovereignty, with responsibility

A self-custody wallet holds the keys on your device (or in your head, if you've memorised the seed). Gopnik's "imported wallet" path falls here, as does any hardware wallet you set up yourself.

What you get: nobody can freeze, censor, or seize your funds. Nobody can lose them on your behalf. The asset is yours in the literal sense.

What you give up: every safety net. There is no password reset. There is no support agent. If your phone dies and your written seed got wet, the funds are gone forever. Self-custody is a high-skill activity with a very steep penalty for forgetting one thing.

The pragmatic middle ground

Most experienced users run both, with different roles:

  • A small "hot" balance in a custodial account or a hosted wallet on a phone. Used for daily payments. The amount is bounded — you can afford to lose it.
  • A larger "cold" balance in a self-custody hardware wallet whose seed is written on metal, stored in two physical locations, and never typed into anything connected to the internet. Used for savings.

Gopnik supports both. The wallet tab shows you which kind each wallet is. If you can't tell at a glance, that's the bug to fix first.

The check that catches almost every mistake

Before you put more than a week's expenses into any wallet, answer two questions out loud:

  1. If the company hosting this wallet went bankrupt tomorrow, would the funds still be mine?
  2. If my phone fell in the ocean tonight, do I have everything I need to recover the funds without a single piece of paperwork from this company?

If both answers are yes, you're in self-custody. If either is no, you're a creditor. There's no shame in being a creditor — just know that you are one.