Custodial vs Non-Custodial Wallets: Who Actually Holds the Keys

One question decides it

Ask: who can move these funds without asking me?

If the answer is “the company, when I log in and they approve it”, you are using a custodial arrangement. If the answer is “only someone who has my key”, it is non-custodial. Branding, app design and the presence of a recovery phrase do not change the answer.

Both models exist for good reasons, and the useful exercise is not picking a winner but understanding which failure you are exposed to.

Custodial: counterparty risk

A custodial provider holds assets on your behalf and records your entitlement in its database. Practically, this is how most exchange balances work, and it has real advantages: a lost password is recoverable, there is a support channel, and no backup procedure is required of you.

The risk you accept is that your access depends on the provider continuing to operate as promised. That risk has several distinct shapes:

• Operational failure — a hack, an internal error, or an inability to process withdrawals.
• Legal failure — assets frozen by a court, a regulator or a bankruptcy process.
• Terms failure — the agreement is changed, or an account is restricted under the provider’s own rules.

These are not hypotheticals, and they are not solved by the provider being large. The relevant reading is the terms of service: which entity holds the assets, whether they are segregated from the provider’s own, and what the agreement says about suspension.

Non-custodial: key-loss risk

A non-custodial wallet puts the key in your hands. Nobody can freeze it, and nobody can refuse a withdrawal. What replaces counterparty risk is the risk that you lose the ability to sign.

That risk is more mundane than people expect. It is rarely a sophisticated attacker. It is usually:

• A seed phrase written on paper that is thrown away during a move, or damaged by water or fire.
• A backup stored in a photo library or a cloud note, where account compromise reaches it.
• A passphrase written down separately from the phrase and then forgotten.
• An heir who cannot access anything after the owner dies.

Each of those has a straightforward mitigation, which is what our guide to seed phrase handling covers.

What a hardware wallet does and does not do

A hardware wallet keeps the key in a device that does not expose it to the internet, and it asks you to confirm transactions on the device itself. That addresses one specific problem: malware on your computer reading a key out of memory or a clipboard.

It does not address:

• Signing a malicious transaction. If you approve a transfer to an attacker’s address, the device confirms it faithfully. The device verifies that you authorised something; it cannot tell you that what you authorised was a mistake.
• Losing the device and the backup. A hardware wallet is replaceable. A seed phrase is not. The device is the inexpensive part.
• A compromised computer. A malicious interface can show you one address while the transaction sends to another; reading the destination on the device screen is the defence, and it only works if you actually look.
• Custody of the assets themselves. The device does not hold the assets. It holds a key. The assets are on the chain, and they move when the key signs.

Choosing between them

The honest framing is that you are choosing your exposure, not eliminating it:

A common arrangement is a split: an amount you are actively trading held at a provider for convenience, and a longer-term holding in self-custody. That is not a compromise so much as an admission that the two risks are different and can be sized separately.

What we are not saying

This article describes how custody models work. It does not recommend a product, and it does not tell you which arrangement suits your situation. No specific wallet is named here, so there is nothing to cite. Where an article on this site does describe a specific product’s behaviour, it cites that manufacturer’s own documentation, because the authoritative description of how a device handles keys is the one its maker publishes.

Risk note. This is an explanation of how custody arrangements work. It is not financial advice and not a recommendation of any wallet or provider. Crypto assets can fall in value sharply and without warning, and neither model removes the risk of loss: a custodial provider can fail, freeze withdrawals or become insolvent, and a key you hold yourself can be lost, destroyed or stolen along with everything it controls. The choice is which failure you are better placed to survive, not whether there is one. Only hold amounts whose loss you could absorb.