If you've spent any time in crypto, you've seen the phrase "not your keys, not your coins." It's repeated constantly. Like most repeated slogans, it stops carrying weight after the tenth time. So let's reset and explain what it actually means — and why the people repeating it are right to keep doing so.
The thing crypto can do that nothing else can
Most assets you can "own" — bank balances, stocks, gold in a vault — are held by an intermediary. The bank holds your dollars. The brokerage holds your shares. You have a claim on those assets, not the assets themselves. If the intermediary fails, you have a claim against a bankrupt institution.
Crypto does something different. It lets you hold the asset directly, with no intermediary involved. The token isn't a claim on someone else's promise. It's the thing itself.
The mechanism that makes this work is the private key. The key is a long string of random data. Whoever holds the key controls the coins. Not "owns a claim on the coins" — controls them, directly, from anywhere in the world, instantly. No intermediary needed to transact.
This is genuinely new. There has never before been a way for an individual to hold and transmit value globally, instantly, without permission. It's the most underrated thing crypto does.
What "self-custody" actually is
Self-custody means you hold the private key. Not an exchange. Not a custodian. Not a friend. You.
Three setups, in order of self-custody-ness:
-
Crypto on an exchange. Not self-custody. The exchange holds the key. You have a database entry saying you own some BTC. Functionally similar to a bank.
-
Crypto in a hot wallet (MetaMask, Phantom, Rabby, Trust Wallet) — software on your phone or browser. You hold the key. The wallet app is just a UI for managing it.
-
Crypto in a hardware wallet (Ledger, Trezor) — the key lives on a separate physical device. You hold it. Same as a hot wallet but with stronger isolation from your computer.
Options 2 and 3 are both self-custody. The difference between them is how well-protected the key is from the rest of your digital life.
Why people keep pushing self-custody
Because exchanges occasionally fail, and when they do, the people whose crypto was on them lose it. Not "lose access to it for a while." Lose it.
The list of failures is not short:
- Mt. Gox (2014). 850,000 BTC lost. Some recovered after a decade-long bankruptcy. Most never.
- QuadrigaCX (2019). $190M in customer funds gone with the founder's death.
- FTX (2022). $8 billion in customer funds missing. Customers still being made partly whole through liquidation.
- Various smaller exchanges (every year). Less famous, just as bad for users.
In none of these cases would a self-custodied wallet have been affected. The crypto on those exchanges was lost because the exchanges held the keys.
What self-custody costs you
This is rarely discussed honestly. Self-custody isn't free. The costs are:
- You have to manage the recovery phrase. Lose the 12 or 24 words that back up your wallet and the coins are gone forever. There is no customer service.
- You are your own bank's IT department. Phishing, malware, malicious browser extensions — all of these can drain a wallet if you click the wrong thing. The wallet itself is secure. The human in front of it is the soft target.
- Tax tracking is harder. Wallets don't generate 1099s. You'll need a tax tool to reconstruct activity at year-end.
- Some services don't work. Some yield products, some derivatives, some fiat off-ramps require crypto to be held on a centralized platform.
For someone with $200 in crypto, the cost of these tradeoffs is higher than the benefit. For someone with $20,000, the math flips hard.
A reasonable progression
- First few hundred dollars: Coinbase / Kraken. Convenient. Learn the basics.
- First few thousand: Add a hot wallet (MetaMask on Ethereum, Phantom on Solana). Move some out. Practice sending small amounts.
- First five-figure position: Hardware wallet. Move long-term holdings off-exchange entirely. Keep only trading float on the exchange.
- Six-figure+ position: Multiple hardware wallets. Maybe a multi-sig setup. Recovery phrases stored in geographically separated places. This is real responsibility.
The honest summary
The slogan "not your keys, not your coins" is correct. The reason people keep saying it is that the people who didn't listen lost money — sometimes a lot of money — to exchange failures that were not their fault but were also not their problem to solve.
You don't need full self-custody from day one. You do need to understand that crypto on an exchange is, fundamentally, a different thing than crypto in your own wallet. Both are fine for different reasons. Just don't confuse them.
Crypto is volatile. Even with perfect storage you can still lose money to price. None of this is financial advice.