The Receipts Index
Self-Custody and Seed Phrases: How to Hold Crypto Safely
Crypto has one feature that surprises everyone at some point: there is no password reset. Lose the key and no company can unlock your coins. Let someone steal it and no bank can reverse the transfer. That sounds scary, and it should. But the rules for staying safe are short, they never change, and a normal person can learn them in ten minutes. Here they are, in plain English.
What self-custody actually means
When your crypto sits on an exchange, the exchange holds the keys. You have an account, like a bank account, and you trust the company to give you your money when you ask. Self-custody flips that. You hold the keys yourself, in a wallet you control, and no company sits between you and your funds.
The trade-off is honest and simple. More control: nobody can freeze your funds, lock your account, or go bankrupt holding your money. More responsibility: every mistake is yours, and no support line can undo one. Neither option is free of risk. They are different risks, and you should pick with your eyes open.
What a seed phrase is
When you create a self-custody wallet, it shows you a list of words, usually 12 or 24, in a specific order. That list is the seed phrase, also called a recovery phrase. It is not a backup detail. It is the master key. Anyone who has those words can rebuild your wallet on any device, anywhere in the world, and move everything out.
One rule matters more than all the others combined: the seed phrase is the only thing that can restore your funds, and anyone who gets it can take everything. Your phone can break and your app can be deleted. As long as you have the phrase, you can recover. Lose the phrase and the device, and the funds are gone. Let a stranger get the phrase, and the funds are theirs.
The hard rules
These are not tips. They are rules, and every major theft story breaks at least one of them.
- Write it on paper or metal. Never a photo, a cloud note, or a text. Anything digital can be copied by malware or leaked from an account.
- Never type it into a website. Not to claim a reward, fix an error, or verify anything. Real websites never need it.
- Never share it with any person, support agent, or app. No legitimate service ever asks for a seed phrase. Anyone who does is stealing from you.
- The wallet itself is the only place it ever goes. You type it into your own wallet during your own recovery. That is the full list of acceptable uses.
Hot wallets and cold wallets
A hot wallet is connected to the internet, usually an app on your phone or computer. It is convenient for small, frequent use, the way a physical wallet holds pocket money. Because it lives on a connected device, it is exposed to whatever that device catches.
A cold wallet keeps the keys offline, typically on a small dedicated device that never touches the open internet. It is slower to use, but far harder to rob remotely. Think of it as the safe at home.
The common-sense split: pocket money hot, savings cold. If losing an amount would genuinely hurt, it should not live on an internet-connected device.
How people actually lose funds
- Phishing sites. A lookalike website asks you to connect your wallet or enter your phrase. Defense: type addresses yourself or use your own bookmarks, and never enter a seed phrase online, ever.
- Fake support. Someone messages you first, claims to be help staff, and asks for your phrase or remote access. Defense: real support never contacts you first and never needs your phrase. End the conversation.
- Approving a malicious transaction. Some scams skip the phrase and ask you to sign a transaction that quietly grants access to your tokens. Defense: read what you are approving. If you do not understand a request, decline it.
- Losing the phrase. No thief required. A move, a flood, or a forgotten hiding spot does the job. Defense: store the phrase somewhere durable and check on it occasionally.
- Keeping everything in one place. One device, one location, one copy is one accident away from zero. Defense: no single point of failure holds your whole balance.
Self-custody or an exchange
An exchange account is convenient. Trades are easy, passwords can be reset, and you are not the last line of defense. The cost is trust: the company holds your keys, and its problems can become your problems. Accounts can be frozen, withdrawals can be paused, and companies can fail.
Self-custody removes the middleman and hands you the whole job. Nobody can lock you out, and nobody can rescue you either.
Neither answer is right for everyone, and this page recommends no product on either side. With an exchange you carry company risk. With self-custody you carry your own. Many people use both. What matters is knowing which risk you are holding, and holding it on purpose.
The screenshot checklist
Save this. Read it before you touch a wallet.
- My seed phrase exists on paper or metal only. No photos, no cloud, no texts.
- I never type it into any website, form, or app that is not my own wallet during my own recovery.
- Nobody gets it. Not support, not a helper, not anyone who asks.
- Serious money stays cold. Pocket money can stay hot.
- I reach wallet sites by my own bookmarks or typed addresses, never through sent links.
- I do not sign transactions I cannot explain.
- My phrase is stored somewhere durable, not all in one place with everything else.
- When in doubt, I stop. Nothing in crypto is so urgent it cannot wait a day.
Real numbers. No hype. Receipts.