Self-Custody Wallets: How to Store Crypto Safely
Keys, seed phrases, hardware wallets and the backup plan most people skip until it is too late.
Self-custody means you hold the private keys. Nothing can be frozen, and nothing can be recovered. Both halves of that sentence are the whole subject.
Hot, cold and custodial
- Custodial — an exchange holds the keys. Convenient, recoverable, and dependent on the exchange remaining solvent and honest.
- Hot wallet — software on an internet-connected device. Suitable for small, active balances.
- Cold wallet — a hardware device that signs transactions offline. Appropriate for meaningful long-term holdings.
A common structure is a hardware wallet for the bulk of holdings and a small hot wallet for day-to-day activity, in the same way people separate a savings account from pocket cash.
The seed phrase is the asset
Twelve or twenty-four words regenerate every key in the wallet. Anyone who reads them controls the funds; anyone who loses them loses the funds permanently.
Rules that matter:
- Write it on paper or stamp it into metal. Never photograph it, never type it into any device, never store it in a password manager or cloud note.
- Keep at least two copies in separate physical locations, protected against fire and water.
- Never enter the phrase anywhere except the hardware device itself during recovery. Every "wallet validation" or "support" request for a seed phrase is a theft attempt without exception.
- Consider a passphrase (a 25th word) for an additional layer — but only if you can guarantee you will remember it, because it is not stored on the device.
Buying and setting up the device
Buy hardware only from the manufacturer or an authorised reseller. Never use a device that arrives with a pre-printed seed phrase; that is a known scam. Generate the phrase on the device itself, verify it, then send a small test transaction before moving anything substantial.
The transaction risks
- Address poisoning. Attackers send dust from lookalike addresses hoping you copy one from history. Verify the full address on the device screen, not the computer screen.
- Malicious approvals. Token approvals can grant unlimited spending rights to a contract. Review and revoke old approvals periodically.
- Wrong network. Sending an asset over an unsupported network is usually unrecoverable.
- Clipboard malware. Always confirm the first and last characters after pasting.
The inheritance problem
Self-custodied assets disappear when the holder does unless someone else can access them. Document the existence of the holdings and the location of the backups — separately from the phrase itself — and tell a trusted person or your estate representative where those instructions live.
Practical takeaways
- Keys held by you means responsibility held by you.
- The seed phrase lives offline, in duplicate, in separate places.
- Verify addresses on the device display every time.
- Write an inheritance plan before you need one.
LumosPay publishes general information only. Nothing here is personalised financial, tax or legal advice.
