Owning bitcoin and holding bitcoin are different things
When you buy crypto on an exchange, what you actually have is an IOU. The exchange holds the coins; your account is a promise that they'll hand them over when you ask. Most of the time that promise is kept. But the history of crypto is punctuated by moments when it wasn't — exchanges that froze withdrawals, got hacked, or simply vanished, taking customer balances with them.
The phrase you'll hear everywhere — not your keys, not your coins — is shorthand for this. Crypto on the blockchain is controlled by whoever holds the private keys. If an exchange holds the keys, the exchange holds the coins. Self-custody means holding those keys yourself, which makes you the only person on Earth who can move your funds. It also makes you the only person responsible for not losing them. That trade is the entire subject of this course.
The three places crypto lives
Every storage setup is some combination of three options. None is "the best" — they solve different problems.
| Where | What it is | Best for | Main risk |
|---|---|---|---|
| Exchange | A company holds your coins; you hold an account login. | Active trading, first purchases | The company fails, freezes, or is hacked |
| Hot wallet | An app on your phone or computer that holds your keys. "Hot" means connected to the internet. | Spending money, small amounts | Malware, phishing, a stolen or broken device |
| Cold storage | Keys generated and kept on a device that never touches the internet. | Savings you don't plan to touch | You, losing your own backup |
Notice the pattern in that last column. As you move down the table, the threats shift from other people to yourself. Cold storage removes hackers and failed companies from the picture almost entirely — and replaces them with one question: can you keep a backup safe for years? The rest of this course is about answering yes.
A common framing: keep on an exchange only what you're actively trading, in a hot wallet only what you'd carry as cash in your pocket, and everything else in cold storage. Where the lines fall is personal — the point is that the lines exist.
What "keys" actually means
A private key is just a very large random number. Whoever knows the number can sign transactions for the coins attached to it — that's the entire security model, with no password resets or support hotline behind it. Because giant random numbers are hopeless to write down accurately, modern wallets encode them as a sequence of ordinary words: a seed phrase (also called a recovery phrase), usually 12 or 24 words long.
This is the single most important idea in self-custody: the seed phrase is not a backup of your wallet — it is your wallet. The device or app is just a convenient interface. Devices break, apps get deleted, companies discontinue products; as long as those words survive, your crypto survives. Lesson 03 is devoted entirely to handling them.
A sane starting setup
For someone holding more than they'd be comfortable losing:
- Buy on a reputable exchange, but don't leave savings there indefinitely
- Get a hardware wallet from the manufacturer directly (Lesson 02 covers why)
- Record the seed phrase offline during setup — never typed, never photographed
- Upgrade that backup to metal so it survives fire, water, and time (Lesson 04)
- Send a small test amount first, confirm you can see it, then move the rest
That's it. Self-custody has a reputation for being technical, but the core moves fit on an index card. The difficulty isn't intellectual — it's discipline: doing a careful thing once, correctly, and then leaving it alone. If you want the deeper primer on the philosophy, our Self-Custody Basics guide pairs well with this lesson.
Key takeaways
- Crypto on an exchange is a claim on coins, not the coins themselves.
- Hot wallets are for spending; cold storage is for saving.
- The seed phrase is the wallet. Devices are replaceable; the words are not.
- Move serious holdings to cold storage with a small test transaction first.