Skip to content
GuideEvergreen guide

Self-custody is a skill, not a badge

Moving crypto off an exchange protects you from one risk and hands you three new ones. Here's how to tell which side of that trade you're on.

By Ray Okonkwo · Money & Business5 min read
Self-custody is a skill, not a badge

Quick answer: Move the amount you'd be sick to lose, once you can handle a recovery phrase without improvising. Leave the small stuff and the trading money where it is. And before either, make sure your spouse could find and access everything if you couldn't.

A man buys $300 of bitcoin on an exchange app on a Tuesday. By Friday, a podcast has convinced him it's all unsafe. By Saturday he's ordered a hardware wallet from a random seller, written his recovery phrase on a sticky note, and taken a photo of the sticky note "as a backup."

He's now less safe than he was on Tuesday.

That's the trap. "Not your keys, not your coins" is a good slogan and a half-finished lesson. Self-custody is real ownership, and it's the right call for a lot of people. It's also a skill with no customer service line. Plenty of people should do it. Plenty should wait.

What you actually own on an exchange

When you buy on an exchange, you hold a claim on the exchange's books. The company holds the keys. Most days that's invisible, and it's convenient. Passwords reset. Support answers the phone.

Then there are the days that aren't most days. Mt. Gox lost customer coins in 2014. FTX froze withdrawals and went into bankruptcy in November 2022, and its customers became creditors standing in line. Crypto sitting on an exchange isn't FDIC insured, and what happens to your balance in a bankruptcy depends on fine print most people never read. Read it. The habit in Read the filings before you buy the ticker applies to the company holding your coins, too.

That's the case for self-custody. You answer to nobody, and no one can freeze, lose or lend out what only you control. For a conservative reader, it's an easy idea to like. It's self-reliance applied to money.

The test: what would losing it cost your family?

Skip the percentages and the gurus' thresholds. Ask one question: if this balance vanished tomorrow, would it change a decision your household has made? Tuition, a down payment, a year of runway?

If yes, it's a candidate for self-custody. If it's money you'd shrug off, the exchange is fine, and the risk of botching your own setup may exceed the risk you're avoiding.

A rough way to sort it:

  • Move it: long-term holdings you don't plan to sell for years, and any balance that's grown large enough that one bad day at one company would hurt.
  • Leave it: money you trade or spend, small amounts, and anything you'd need to reach in an hour.
  • Wait: anything you'd move while rattled, tired or in a hurry. Those are the conditions under which mistakes get made.

None of that's individualized advice. A fee-only financial planner or a CPA can speak to your situation, especially on taxes. Moving coins between your own wallets generally isn't a sale, but your records still matter, and the filing system piece covers why.

The annoying part nobody mentions

Self-custody moves the risk from the company to you. The new ways to lose money are all boring.

The recovery phrase. Usually twelve or twenty-four words. Whoever holds them holds your coins, and if you lose them, nobody can recover your funds. Not the maker, not a lawyer, not a friend who's "good with computers." No photos. Nothing in cloud notes, email or a text to yourself. Write it on paper or stamp it in metal, and keep it somewhere that survives a fire and a burglar.

The fake device. Buy a hardware wallet only from the maker's own site, or an authorized reseller the maker lists. A cheap one from a marketplace seller is a bad bet. Ledger and Trezor are the best-known makers. Do your own checking before buying either, and never take a device that arrives pre-set-up or with a "recovery card" already filled in.

The helpful stranger. Fake support accounts, fake wallet apps and "verify your wallet" pop-ups catch careful people constantly. See the crypto scams that catch careful people too. Real wallet makers never ask for your recovery phrase. Anyone who does is robbing you.

How to do the first move without a heart attack

Go slowly. Slow is the entire method.

  1. Set up the wallet while you're alone, rested and unhurried. Not at midnight. Not on hotel Wi-Fi.
  2. Write down the recovery phrase by hand, then check it twice against the screen.
  3. Send a small test amount from the exchange. Copy the receiving address carefully and compare the first and last several characters on screen.
  4. Wait for it to arrive. Then send the rest in a second transfer, or in several.
  5. Test the recovery. Wipe the device or use a spare, restore from your written phrase, and confirm the balance shows up. If you've never recovered a wallet, you don't yet know that your backup works.

Step five is the one nearly everyone skips, and it's the one that matters most.

When to leave it alone

If the thought of misplacing a piece of paper makes your stomach drop, an exchange with tight security beats a sloppy self-custody setup. Turn on two-factor authentication with an authenticator app or a hardware security key, not text messages. Lock withdrawals to an approved address list if the exchange allows it. Use a password you've used nowhere else, and an email address with the same protection.

There's no shame in that. A well-run exchange account used carefully is safer than a recovery phrase in a desk drawer next to the takeout menus.

If you're still catching up on the basics, start with Bitcoin, explained for somebody who skipped the last decade and come back to this when it feels boring.

The part that outlives you

Here's the test almost everybody fails. If you were in a car accident this afternoon, could your wife get to the money?

With an exchange, there's an account, a login and a process, even if it's a painful one. With self-custody, there may be a small device in a drawer and a piece of paper nobody knows about. Without instructions, those coins are gone, and they're gone with no one to blame.

So write a one-page letter. Say what you own, where the device is, where the recovery phrase is, and who to call first, whether that's a lawyer, a planner or a tech-literate friend you trust. Don't put the phrase itself in the letter. Put the letter where your spouse can reach it and the phrase where a thief can't. Tell them it exists. Walk through it once.

That's the old rule applied to a new asset. Leave things better than you found them, and leave your family a map.

Own your keys if the stakes justify it. Just make sure the people you love can use them when you can't.

Ray Okonkwo

Money & Business

Former commercial banker turned small-business owner. Covers salary, credit, margins and the arithmetic nobody does before signing.

Watch

Watch how it's done

Picked for this article.

From channels we rate. Plays on YouTube.

Cyber Scrilla

Do You NEED a Cold Wallet? (Watch This First)

BeatTheBush

How Does a Crypto Hardware Wallet Work?