Custodial vs non-custodial
The side-by-side, including where custody is the right answer.
Holding your own keys means no company can freeze your bitcoin, and no company can give it back. Both halves of that sentence are load-bearing. Here is what you are actually signing up for.
Your bitcoin is not in the wallet. It is on the Bitcoin blockchain — a public ledger replicated across thousands of independent machines, none of which is yours. What the wallet holds is a private key: the secret that produces a valid signature for moving coins that the ledger has assigned to your addresses.
That distinction is not pedantry, it is the whole model. Lose your phone and your coins are untouched; the ledger has not changed. Lose the key with no backup and the coins remain on the ledger forever, visible to everyone, spendable by no one. This is why the recovery phrase — twelve words that regenerate the key — is the only thing that genuinely matters to protect.
| If you use a custodian | If you self-custody |
|---|---|
| They get hacked and your balance goes with it | You lose the recovery phrase and the coins are unreachable |
| They become insolvent and you join the creditor queue | Someone obtains the phrase and empties the wallet instantly |
| They freeze the account pending a review that never ends | You sign a transaction to the wrong address and it is final |
| Recoverable: yes, in principle — that is what support is for | Recoverable: no, in any circumstance, by anyone |
The left column is other people’s decisions. The right column is yours. Self-custody is worth choosing precisely because your own diligence is a variable you can move, and a third party’s solvency is not.
Write the twelve words on paper, by hand. Store them somewhere a burglar would not look and a fire would not reach. Do not photograph them, do not type them into anything that syncs, and do not tell an app, a website, or a person who contacted you first. That is the substance of it — the rest is refinement.
Then test it before it matters. Restore the phrase into a second wallet app, confirm the same addresses come back, and delete that wallet. A phrase you have never restored is an assumption, not a backup.
The phrase is generated on your iPhone and never transmitted. It is encrypted with a key held in the Secure Enclave and stored in the Keychain as WhenUnlockedThisDeviceOnly, which Apple excludes from iCloud and iTunes backups — so a restored phone does not carry the wallet across, only the words do. The app makes you verify several words before it continues, and warns you the instant you take a screenshot of them.
We run no server for the app and have no account system, so there is no support action that involves us touching your money and no database of users to be breached or subpoenaed. Your phrase is standard BIP39, so it restores in other wallets and you are never locked in. See how the app works, or read what leaves your device.
One where the private key that authorises spending is generated on your device and stays there, so only you can move the coins. The wallet software is a tool for using that key. Nobody else holds a copy, which means nobody else can spend your bitcoin, freeze it, or give it back to you if you lose the key.
In practice the terms are used interchangeably. Non-custodial describes the software — it takes no custody of your funds. Self-custody describes your position — you are the custodian. If a wallet is genuinely non-custodial, you are in self-custody whether you feel ready for it or not.
Three tests. First: does it show you a recovery phrase you can write down, and does that phrase restore your funds in a different wallet app? If yes, you hold the key. Second: can support reset your access if you lose it? If yes, someone else holds a key too. Third: does it require an identity check to spend your own money? A wallet that can refuse you is not one you fully control.
It removes one category of risk and adds another. Gone: the exchange being hacked, becoming insolvent, freezing withdrawals, or locking your account over a compliance review. Added: you losing your recovery phrase, or someone getting it from you. Which is safer depends entirely on how well you handle the phrase — and that part is genuinely within your control, which is the point.
Storing the recovery phrase somewhere convenient: a photo in the camera roll, a note in a password manager they also use on the same phone, an email to themselves, a cloud document. Every one of those converts a hardware-protected secret into a secret that is only as strong as an account password. Second biggest: never testing the phrase, then discovering at the worst possible moment that a word was written down wrong.
Nobody can move your coins without the key, so there is no company to serve an order on. That is not the same as being beyond the law: you remain subject to the rules where you live, including tax obligations, and a court can compel a person directly. Self-custody removes an intermediary; it is not a jurisdiction.
The side-by-side, including where custody is the right answer.
Where to put twelve words, and where never to put them.
What no-account means, and what it does not hide.