There is a saying in crypto: "not your keys, not your coins." It refers to the split between custodial wallets, where an exchange holds your assets and manages security on your behalf, and self-custody wallets, where you alone control the private keys that give access to your funds. Neither option is universally "correct" — they trade off convenience against responsibility in opposite directions.
Custodial wallets: the exchange holds the keys
When you buy crypto on most major exchanges and simply leave it in your account, you're using a custodial wallet — the exchange holds the private keys, handles backups, and lets you log back in with a password and two-factor authentication like any other online account. This is the lowest-friction option and is generally fine for smaller amounts or assets you plan to trade actively, but it also means you are trusting that exchange's security and solvency.
Self-custody wallets: you hold the keys
A self-custody (or "non-custodial") wallet — software or a dedicated hardware device — gives you direct control of the private keys and, with them, direct control of your funds. Nobody can freeze or restrict access to a self-custody wallet the way an exchange or platform sometimes can. The tradeoff is that you become fully responsible for keeping your recovery phrase safe: if you lose it, there is no customer support line that can recover your funds.
How to decide which fits your situation
A common approach is a hybrid: keep smaller, actively traded amounts on a reputable exchange for convenience, and move larger, longer-term holdings into self-custody where you are not exposed to platform-specific risk. There is no universally right split — it depends on how much you are holding, how technically comfortable you are, and how much you trust the platform you are using.
Basic security habits either way
A short list of habits that matter regardless of which wallet type you choose.
- Never share your private key or recovery phrase with anyone, for any reason — no legitimate support team will ever ask for it
- Use a unique, strong password and hardware-backed two-factor authentication on exchange accounts
- Write down and physically secure a self-custody recovery phrase — do not store it as a plain text file or photo
- Double-check wallet addresses carefully before sending funds; crypto transactions cannot be reversed
This article is for general education only and is not financial or investment advice. Cryptocurrency prices are volatile and you can lose money, including your entire principal. Do your own research and consider talking to a licensed financial advisor before investing.