Enrollment is open. Already bought? Sign in with the email you used at checkout to open your lessons.
Catalysts Creative Crypto

Custodial vs. Non-Custodial Crypto Wallets: Who Really Holds Your Crypto?

"Where should I keep my crypto?" is one of the first real decisions a beginner faces, and the answer starts with a simpler question: who holds the keys? This guide explains custodial and non-custodial (self-custody) wallets, the trade-offs of each, and how to decide what fits you. It doesn't recommend any brand. We have no affiliate deals with exchanges or wallet makers.

Keys, not coins

Crypto doesn't sit inside a wallet. The SEC's investor education office explains that crypto wallets "store the 'private keys' or passcodes for your crypto assets," and that whoever controls those keys can authorize transactions (Investor.gov). So the custodial vs. non-custodial question is really about who controls the private keys.

Custodial wallets: a company holds the keys

When you buy crypto on an exchange or a payments app and leave it there, you usually have a custodial account. The company holds the private keys, and you log in with a username, password and two-factor code. The SEC calls this third-party custody and notes that custodians include crypto exchanges and dedicated custody providers.

Pros - Easy to start. No recovery phrase to manage on day one. - Password resets. Forget your login and there's usually a recovery process. - Convenient trading and selling, all in one place.

Cons - Company risk. The SEC bulletin warns: "If the third-party custodian is hacked, shuts down, or goes bankrupt, you may lose access to your crypto assets." - Not a bank deposit. The FDIC says deposit insurance doesn't apply to crypto assets and doesn't protect against the failure of non-bank crypto companies such as custodians, exchanges and wallet providers (FDIC). - Usually not SIPC-protected either. SIPC says it doesn't protect any digital or crypto asset that doesn't qualify as a "security" under its law, even at a SIPC-member firm (SIPC; see also SEC staff FAQ, Q7). - Rules you don't control. Withdrawals can be paused, accounts can be frozen, and some custodians may lend out or pool customer assets. The SEC suggests asking whether your custodian does this and whether it needs your consent.

Non-custodial (self-custody) wallets: you hold the keys

With a self-custody wallet (an app or a hardware device), the wallet creates keys that only you control, plus a recovery phrase that can rebuild them.

Pros - No company in the middle. No one can freeze or lend out your crypto. - You choose your own security, including offline storage.

Cons - No reset button. The SEC puts it plainly: with self-custody you have "sole responsibility for the security" of your keys, and if your wallets are lost, stolen, damaged or hacked, "you may permanently lose access." - Scams target you directly. Fake "wallet validation" sites and phony support agents try to get your recovery phrase. - More to learn: networks, addresses, fees and backups.

Hot vs. cold: a separate question

People often mix this up with custody. Hot vs. cold is about internet connection, not who holds the keys:

The SEC notes both hot and cold options exist for self-custody and third-party custody. A custodian may keep most customer assets in cold storage, for example, while your own phone wallet is a hot, self-custody wallet.

What "company risk" looks like in practice

When a crypto platform runs into trouble, the first sign is often a pause on withdrawals. Customers can still see a balance on screen but can't move it. If the company then enters bankruptcy, customers may become creditors waiting on a court process, and the SEC staff notes that non-security crypto assets "may not be protected by any other specific insolvency regime" (SEC staff FAQ, Q8). That's why the SEC's custody checklist asks what happens to your assets if the custodian fails, and whether it keeps customer assets separate from its own. A balance on a screen is a claim on the company, not keys in your hands.

Side-by-side comparison

Custodial (third-party) Non-custodial (self-custody)
Who holds the private keys The company You
Forgot your password? Usually recoverable Recovery phrase or nothing
If the company fails or is hacked You may lose access Not affected by that company
FDIC insured? No No
Main risk Company failure, freezes, hacks Your own mistakes, loss, phishing
Effort to set up Low Medium
Good for Learning, small amounts, frequent buying/selling People ready to manage keys and backups

How to decide: questions from the SEC's checklist

The SEC's custody bulletin offers questions for each path. Paraphrased:

If you're considering self-custody: 1. Am I comfortable setting up and maintaining a wallet myself? 2. Do I want sole responsibility for my keys and recovery phrase? 3. Hot or cold, given my convenience and security needs? 4. What does the wallet cost, and what are the transaction fees?

If you're considering a custodian: 1. Have I researched its background and complaints, and how it's regulated? 2. What happens to my assets if it fails? Is there insurance for loss or theft, and what are the terms? 3. How does it store and protect assets, and who has access? 4. Does it lend out or commingle customer assets, and does it need my consent? 5. What fees does it charge to hold, trade and withdraw?

A common middle path

Many beginners: 1. Start custodial with a small amount while they learn how buying, selling and fees work. 2. Practice self-custody with a small hot wallet, including writing down and confirming the recovery phrase and sending a test transaction. 3. Move larger holdings to self-custody (often a cold wallet) only once they're confident in their backups.

There's no single right answer. What matters is that you can say clearly who holds your keys and what you'd do if that person or company had a problem. Our step-by-step guide, How to set up a crypto wallet safely, covers the self-custody setup.

Whichever you choose: five habits

  1. Never share a recovery phrase, private key or two-factor code.
  2. Use the strongest two-factor login available, preferably an authenticator app or passkey rather than text messages.
  3. Keep your holdings private.
  4. Go to official sites and apps directly, never through links in messages.
  5. Keep records of every purchase and transfer for taxes. See Crypto taxes for beginners.

Learn it before you need it

The free 5-Day Crypto Safety Starter starts with exactly this topic on Day 1. The full Catalysts Creative Crypto course covers it in Module 2: Wallets: custodial vs self-custody, with a quiz at the end. See the curriculum.

FAQ

Is it safe to keep crypto on an exchange?

It can be convenient, but it carries company risk: if the exchange is hacked, freezes withdrawals or goes bankrupt, you may lose access. Crypto on an exchange isn't FDIC-insured and generally isn't SIPC-protected.

What's the main difference between custodial and non-custodial wallets?

Who controls the private keys. In a custodial wallet, a company holds them for you. In a non-custodial wallet, you hold them, and you alone are responsible for backing them up.

Is a non-custodial wallet the same as a cold wallet?

No. Non-custodial means you hold the keys; cold means offline. A phone wallet can be non-custodial and hot, and a custodian can keep customer assets in cold storage.

Can I switch from custodial to self-custody later?

Yes. You can withdraw crypto from a custodial account to a self-custody wallet address. Send a small test amount first, use the correct network, and expect a network or withdrawal fee.

What happens if I lose my phone with a self-custody wallet?

If you have your recovery phrase, you can restore the wallet on a new device. Without the phrase, the crypto usually can't be recovered.

Sources

Education only, not financial advice. Crypto is volatile and you can lose money. Catalysts Creative Crypto doesn't recommend specific wallets or exchanges.