Self Custody: Part 1

With great power comes great responsibility.

This adage captures the essence of self-custody in cryptocurrency.

While it gives you direct control over your digital assets, it also demands careful attention to security and responsibility for safeguarding your access credentials.

What is Self-Custody?

Non-custodial wallets are accounts built directly into a blockchain, with a key difference from a bank account: you alone control access to your funds, with no bank or institution acting as an intermediary.

This direct control rests on three components: addresses (where you receive funds), private keys (what authorizes spending), and the recovery phrase (the seed from which your keys are derived).

The Power of Direct Control

Traditional financial systems require trusted intermediaries like banks to manage your assets.

Self-custody removes this requirement, enabling you to:

• Maintain direct control over your assets
• Execute transactions without permission from any institution
• Access your funds from anywhere in the world
• Protect against institutional failure or asset seizure

Real-World Impact: Global Remittances

The case for self-custody becomes concrete when examining global remittances.

Remittances to low- and middle-income countries reached roughly $600 billion in 2021, and the World Bank put average fees around 6% - tens of billions of dollars a year in fees, in the same league as the entire US non-military foreign aid budget.

Self-custody lets workers send money home directly over blockchain networks, cutting out institutional barriers.

Two honest caveats: sending crypto is only cheap on low-fee networks (an Ethereum transfer at busy times can cost more than a wire), and the crypto still has to become local cash on the other end, which adds cost and friction that on-chain fees don't capture.

Understanding the Technical Components

Addresses: Where You Receive Funds

An address works like an email address for receiving digital assets - a string of letters and numbers such as 0x47bb...84CeD (derived from your public key).

While these may initially seem intimidating, modern wallets provide features like address books and even human-readable domain names to make them more manageable.

However, accuracy is essential - sending assets to the wrong address usually means permanent loss.

Private Keys: Your Digital Signature

A private key is a long secret number - in Ethereum's case, 64 hexadecimal characters - that your wallet uses to sign transactions.

You rarely handle private keys directly, and you should never type one into anything: the wallet signs on your behalf.

The Recovery Phrase: The Seed Everything Grows From

The recovery phrase (also called a mnemonic or seed phrase) is a sequence of 12-24 common English words that your wallet generates once, offline. It is not a password you choose - it encodes the seed from which every private key in the wallet is derived.

Whoever holds it can:

• Regenerate all your private keys
• Restore access to all your wallet accounts
• Take complete control over your assets

That's why no example is shown here: a recovery phrase is never something to copy, type, screenshot, or reuse. If you can read one on a screen, so can malware.

Critical Security Principles

The security of self-custody relies on protecting your recovery phrase and being deliberate about what you sign. Essential rules include:

1. Never store your recovery phrase digitally (no screenshots, cloud storage, or digital documents)
2. Write it down physically or etch it in metal for durability
3. Store copies in secure, private locations
4. Never share it with anyone or enter it on websites
5. Be vigilant against phishing attempts that try to steal it
6. Review token approvals before signing - a malicious "approval" can let a contract drain an asset later, without ever seeing your phrase
7. Check full addresses, not just the first and last characters - "address poisoning" seeds your history with lookalike addresses hoping you copy the wrong one
8. Remember that anything you do through a smart contract carries that contract's bugs and permissions with it
9. Plan for inheritance - keys die with their holder unless someone you trust can find and use them

Real-world consequences of poor security are numerous: phishing scams have emptied prominent collectors' wallets (actor Seth Green's NFTs, in a widely covered later-2022 incident), and authorities have recovered stolen cryptocurrency by finding recovery phrases stored in cloud services.

These cases demonstrate both the importance of proper security and the risks of careless storage.

Looking Forward

The technical demands of self-custody are real, and pretending otherwise helps no one. The honest framing: self-custody trades institutional risk for personal responsibility, and the tooling - hardware signers, multi-party wallets, better approval interfaces - keeps lowering the cost of taking that responsibility.

In Part 2, we'll explore the broader implications of self-custody, including digital identity, security best practices, and the balance between control and responsibility in the evolving crypto ecosystem.