What Is a Crypto Wallet? Custodial vs Self-Custody Explained

A crypto wallet is software or a device that stores the private keys that control your cryptocurrency, letting you receive, hold and send coins on a blockchain. Despite the name, a wallet does not hold coins. The coins live on the blockchain, and the wallet holds the secret keys that prove you are allowed to move them.

Key takeaways

• A wallet stores private keys; your balance is recorded on the blockchain.
• Custodial wallets (such as exchange accounts) mean a company holds the keys; self-custody means you do.
• Hot wallets are online and convenient; cold wallets are offline and harder to hack.
• A seed phrase of 12 or 24 words can restore every key in a wallet. Whoever has it owns the funds.
• Transactions are irreversible: always check the address and the network before sending.

Keys, addresses and signatures

Every wallet is built on a pair of keys:

• A private key is a large secret number. It signs transactions, which proves to the network that the owner approved them.
• A public key is derived from the private key. It can be shared freely.
• An address is a shorter form of the public key that other people send funds to, similar to an account number.

When you send crypto, your wallet signs the transaction with your private key and broadcasts it. Nodes check the signature without ever seeing the private key. This is how a blockchain lets strangers verify ownership without a bank.

Custodial vs self-custody wallets

The most important question about any wallet is who holds the private keys.

	Custodial wallet	Self-custody wallet
Who holds the keys	A company, such as an exchange	You
Account recovery	Usually possible through support	Only with your seed phrase
Risk of the provider freezing or losing funds	Yes	No
Risk of you losing access	Low	Yes, if you lose the seed phrase
Needed for	Trading on a centralized exchange	Using DEXs and DeFi apps directly
Typical examples	Exchange accounts	Mobile apps, browser extensions, hardware wallets

With a custodial wallet, your balance is an entry in the company's database, backed by coins the company controls. That is convenient and supports features like password resets, but it adds counterparty risk: if the exchange is hacked, becomes insolvent or blocks withdrawals, you depend on it to make you whole. The phrase "not your keys, not your coins" describes this risk.

With self-custody, no company stands between you and your funds. You can connect directly to decentralized exchanges and other DeFi apps. The trade-off is that security is entirely your responsibility.

Many traders use both: custodial accounts for active trading, where speed matters, and self-custody for longer-term holdings.

Hot vs cold wallets

Self-custody wallets differ in how the keys are stored:

• Hot wallets keep keys on an internet-connected device, for example a phone app or a browser extension. They are convenient for frequent use but exposed to malware and phishing.
• Cold wallets keep keys offline. A hardware wallet is a small device that signs transactions internally, so the private key never touches your computer. Cold storage suits larger balances you rarely move.

Seed phrases: what they are and how to protect them

Most wallets generate a seed phrase (also called a recovery phrase or mnemonic), usually 12 or 24 words from a standard list of 2,048 words. From this phrase, the wallet can regenerate every private key and address it has created. If your phone breaks, you can restore the wallet on a new device with the phrase alone.

Worked example: why a random 12-word phrase cannot be guessed.

• Each word is one of 2,048 options, which is 2^11, so each word carries 11 bits.
• 12 words × 11 bits = 132 bits. Four of those bits are a checksum, leaving 128 bits of randomness.
• That is 2^128 possible phrases, about 3.4 × 10^38. Even trying a trillion (10^12) phrases per second, checking them all would take around 10^19 years.

So the realistic threat is not guessing. It is someone seeing or copying your phrase. Safety rules:

1. Write it down offline, on paper or a metal backup. Do not store it in screenshots, email, cloud notes or password-sharing chats.
2. Never type it into a website or share it with anyone. No legitimate support team, exchange or wallet provider will ask for it.
3. Keep more than one copy in separate secure places, so a fire or flood does not destroy your only backup.
4. Only use the phrase when restoring a wallet, in the official wallet app you installed yourself.
5. Use a new wallet if you think the phrase has been exposed, and move funds to it.

Sending funds safely

Blockchain transactions cannot be reversed. Before sending:

• Check the full address, not just the first and last few characters. Some malware replaces copied addresses.
• Match the network. The same token can exist on several chains. If you withdraw from an exchange on one network and the receiving wallet or exchange does not support it, funds can be lost or require a lengthy recovery.
• Send a small test transaction for large or first-time transfers. For example, before moving $20,000, send $50 first. If the network fee is assumed to be $1, the test costs $1 in fees and protects the remaining $19,950.
• Review token approvals. DeFi apps ask for permission to spend your tokens. Unlimited approvals to a malicious or hacked contract can drain a wallet.

Common mistakes

• Storing the seed phrase as a photo on a phone that syncs to the cloud.
• Entering the seed phrase on a site found through an ad or a direct message.
• Keeping all funds on one exchange without considering counterparty risk.
• Choosing the wrong network when withdrawing.
• Forgetting that the self-custody wallet needs a small balance of the chain's native coin to pay gas fees.

How ArbTide helps

Arbitrage traders often keep balances on several exchanges at once, which is a custody decision as much as a trading one. The exchanges page lists the venues ArbTide tracks, and the live arbitrage scanner shows where price gaps exist so you can decide where capital actually needs to sit.