Custody 101 — Keys, recovery & passkey safety · Lesson 1 of 5

What self-custody actually means

3 min · read

In traditional banking, the bank holds your money. They have it. You have a claim on it. If you forget your password, they reset it. If you die, your heirs get it via probate. If the bank misbehaves, regulators step in.

In self-custody, you hold your money. There is no bank. There is no password reset. There is no probate. There is no regulator who can return your funds if you make a mistake. This is the trade you make for sovereignty: irreversible control in exchange for total responsibility.

This course is about taking that responsibility seriously, without making it scary.

What you actually hold

When the Gopnik wallet says you have 1,000 XRP, what does that mean?

Somewhere on the XRP Ledger — a public, append-only database replicated by hundreds of servers worldwide — there is a record that says "account rN7n…f29q holds 1,000 XRP." That record can only be modified by someone who proves they control the private key matching that account.

You don't hold XRP. You hold the private key that lets you spend the XRP. Lose the key, lose access — even though the XRP still exists on the ledger, sitting in your account, untouchable.

That distinction is the whole game.

Three things you actually need to protect

  1. The private key itself. In practice, this is your seed phrase (12 or 24 words) or your passkey biometric. We cover both in detail in lessons 2 and 3.

  2. Backup access to the key. If your phone is destroyed, your laptop is stolen, or you die — does someone you trust have access to the recovery material? This is the planning we cover in lesson 4.

  3. You yourself, from being tricked. The most expensive losses in crypto are not lost keys. They are users who voluntarily handed over their keys to attackers who looked friendly. Lesson 5 is the entire content of this threat model.

What Gopnik does and doesn't do for you

Gopnik does: - Hold your encrypted key material in your device's secure enclave (passkey path) or in a strongly-encrypted local file (seed path). - Never transmit your private key to our servers. We can't see it. We can't recover it. - Prompt you with confirmation screens for irreversible actions. - Refuse to display your seed phrase or passkey except behind an explicit unlock + cool-down.

Gopnik does not: - Reset your password. There is no password — there is a key. We cannot make a new copy of it. - Recover lost funds from a wrong-address send. The ledger is final. - Reverse a transaction you signed under duress or by mistake. - Identify you to law enforcement on request (your XRPL address is pseudonymous; we only know what you told us at sign-up, which can be minimal).

Notice what this means: in self-custody, the user is the bank. Most people grow into it. This course is one of the on-ramps.

What this course unlocks

Passing Custody 101 unlocks send up to €2,500/day in the Gopnik wallet. Below that limit, anyone can use the wallet at small amounts (the €25/day learn-by-doing tier). Above it, you need this cert.

For sends above €25,000/day, you need Custody 301 — Multisig Architect, which covers shared-key custody, recovery quorums, and lost-key playbooks at institutional scale.

Below: the seed phrase, the most important 12 words in your wallet's life.