Bitcoin Self-Custody

Start with a threat model

List what you protect, who might target it and which failures are most likely. A newcomer losing a backup is often more plausible than a movie-style physical attack. Security should address probable risks first.

Separate roles and amounts

Keep routine spending separate from savings. Larger holdings may justify multiple keys, geographic separation or documented inheritance, while small balances benefit from a setup you can reliably operate.

Name who controls the key. A wallet interface, an exchange account, and a recovery backup can expose different people to different failures.

Verify withdrawals

Generate the receive address in your own wallet, verify it on a trusted display and make a small withdrawal. Wait for confirmation before moving the remainder. Keep records that do not expose the seed.

What you are actually taking on

Self-custody means the only thing standing between your coins and loss is your handling of a secret. There is no password reset, no fraud department and no insurance. In return, no exchange failure, account freeze, withdrawal halt or hack of a third party can touch you.

The trade is worth making once the amount matters more than the convenience and once you have practised the procedures — backup, restore, send, verify — with amounts small enough that a mistake teaches rather than ruins. Many holders draw the line at a month's income; there is no right number.

A setup that scales with the amount

For everyday amounts, a reputable mobile wallet with the recovery phrase written down is enough. For savings, a hardware wallet with the phrase on metal in a separate location.

For amounts that would change your life, a two-of-three multisig: three keys on separate devices in separate places, any two of which can spend, so a lost, stolen or destroyed key is an inconvenience rather than a catastrophe. Write down how the setup works and where each part is, in language a family member could follow, and store that note with your other important papers.

Test the whole recovery once a year.

The traps that catch experienced holders

Consolidating years of small deposits into one transaction during high fees. Restoring a phrase into an unfamiliar wallet that uses a different derivation path and reports a zero balance, then assuming the coins are gone. Sending a test amount, seeing it arrive, and then sending the rest to an address copied a second time — from a clipboard that malware had rewritten.

Setting a passphrase, storing it nowhere, and losing it. Inheriting coins with a phrase but no idea which wallet or address type produced it. Each of these is recoverable with knowledge and unrecoverable without it, which is why the procedures matter more than the products.

Turn this into a recovery check

Write down who can authorize a spend, what must be backed up, and how recovery will be tested without exposing a seed phrase. Start with a small amount before relying on a new custody setup.