Short answer: use a hardware wallet for anything you would be upset to lose, write the seed phrase on metal rather than paper, store it somewhere a burglar will not find and a fire will not reach, and keep a separate low-value wallet for connecting to websites. Most self-custody losses come from backup failures and signed approvals, not from broken cryptography.
What self-custody actually changes
With an exchange, the platform can be hacked, can freeze your account, or can fail — but it can also restore your access when you lose your password. With self-custody, none of those things happen: nobody can seize your coins, and nobody can help you recover them. You have swapped counterparty risk for operational risk. That is usually the better trade, provided you take the operational side seriously.
Choosing a wallet
| Type | Good for | Main weakness |
|---|---|---|
| Hardware wallet | Long-term holdings of meaningful size | Cost; requires disciplined backup |
| Mobile non-custodial wallet | Daily spending, small balances | Phone compromise, malicious apps |
| Browser extension wallet | Interacting with sites and protocols | Signature phishing, malicious approvals |
| Multisig setup | Large holdings, shared control, inheritance | Complexity, more ways to lock yourself out |
A practical structure for most people: a hardware wallet holding the bulk, a mobile wallet with spending money, and a throwaway browser wallet that only ever receives what it needs for a specific interaction. The third one is what keeps a bad signature from costing you everything — see address poisoning and signature phishing.
The seed phrase is the whole game
Your seed phrase is your coins. Anyone who reads it owns them; if you lose it and the device fails, they are gone permanently. Treat it accordingly:
- Never type it into anything. Not a website, not a support chat, not a photo, not a password manager, not a notes app, not cloud storage. Every one of these has produced real losses.
- Write it on metal. Paper survives neither fire nor water, and both are more common causes of loss than burglary.
- Store it where it is not obvious. A desk drawer next to a hardware wallet defeats the purpose. Geographic separation from the device is better.
- Consider a passphrase (the 25th word). It creates a separate wallet from the same seed, so finding the seed alone is not enough. It also means forgetting the passphrase loses that wallet forever — write it down separately, in a different location.
- Test the restore before you fund it. Restore the seed onto a second device and confirm the addresses match. An untested backup is a hypothesis, not a backup.
The threats that actually cause losses
- Signed approvals and phishing. The dominant loss category. Read what you sign; keep interaction wallets separate; revoke approvals when you finish with a protocol.
- Fake wallet apps and lookalike download pages. Download only from the project's official domain, verified via a bookmark, and check signatures where the project publishes them.
- Backup loss. Fires, floods, moves, and "I put it somewhere safe". Metal plus two locations solves it.
- Address substitution malware. Confirm the destination on the hardware wallet's own screen, which malware on your computer cannot alter.
- Physical coercion. Rare but real for known holders. Do not publicise holdings; a passphrase-protected hidden wallet exists for exactly this scenario.
Inheritance: the part everyone skips
If you were unavailable tomorrow, could someone you trust access these funds — and only under the circumstances you intend? Self-custody without an inheritance plan means your holdings die with your memory of them. Options range from a sealed instruction letter with a lawyer, to splitting a seed across trusted parties, to a multisig where family holds one key. What matters is that the plan is written, tested and understood by whoever will need it, not that it is clever.
When custody is the reasonable choice
Self-custody is not a moral obligation. If the amount is small, if you trade actively, or if you know you will not maintain a backup discipline, a reputable custodial platform may genuinely serve you better. The honest question is not "which is safer in principle" but "which failure mode am I more likely to cause". For swaps specifically, non-custodial instant exchangers give you a middle path: no account, no stored balance, funds in the service's hands only for the minutes the swap takes. Compare services on the exchangers list.
FAQ
Is a hardware wallet necessary?
For meaningful amounts, yes. Its main advantage is that private keys never touch an internet-connected computer and the destination address is confirmed on a screen malware cannot rewrite.
Where should I store my seed phrase?
On metal, in a location separate from the device, not obvious to a burglar and protected from fire and water. Never in any digital form.
What is a passphrase and do I need one?
An extra word that derives a different wallet from the same seed, so a found seed alone does not grant access. It adds protection and adds a way to lose funds permanently — use it only with a separate written backup.
Can anyone recover my wallet if I lose the seed?
No. That is the defining property of self-custody. No service, developer or support team can restore access.