Self-custody, part 1: Wallet control and security

Self-custody gives a user direct control over signing keys and blockchain accounts. It also makes the user responsible for securing and recovering those credentials.

What self-custody means

Non-custodial wallets are applications or devices that let users control their own signing keys. The relevant accounts exist on the blockchain, not inside the wallet application.

This direct control rests on three components: addresses (where you receive funds), private keys (what authorizes spending), and recovery material, often a mnemonic phrase from which a seed and keys are derived.

The power and limits of direct control

Traditional financial systems require trusted intermediaries like banks to manage your assets.

Self-custody removes this requirement, enabling you to:

• Maintain direct control over your keys and accounts
• Submit transactions without approval from an account custodian
• Restore access through compatible software when the network is available
• Reduce exposure to an institution's insolvency or account restrictions

Remittances and the last mile

The case for self-custody becomes concrete when examining global remittances.

The World Bank estimated that officially recorded remittances to low- and middle-income countries reached $589 billion in 2021. Its global average cost of sending $200 was about 6%.

Self-custody can let workers send digital assets directly over a blockchain, reducing some correspondent and settlement steps.

Two limits affect the cost. Transfers are inexpensive only on low-fee networks; an Ethereum transfer during a busy period can cost more than a wire. The recipient might also need to convert the asset into local currency, which adds cost and friction beyond the on-chain fee.

Technical components

Addresses receive assets

An address works like an email address for receiving digital assets, a string of letters and numbers such as 0x47bb...84CeD (derived from your public key).

While these may initially seem intimidating, modern wallets provide features like address books and even human-readable domain names to make them more manageable.

However, accuracy is essential; sending assets to the wrong address usually means permanent loss.

Private keys authorize transactions

A private key is a secret number. Ethereum software commonly displays the 32-byte value as 64 hexadecimal digits, excluding an optional 0x prefix.

You rarely handle private keys directly. Do not paste one into a website, message, or support form. Importing a key should happen only through a trusted wallet's documented recovery flow.

A recovery phrase can derive a seed

A BIP-39 mnemonic phrase is usually a sequence of 12 to 24 words that encodes entropy and a checksum. A key-derivation function combines it with an optional passphrase to produce a seed, from which a compatible wallet derives keys.

For compatible wallets and derivation paths, whoever holds the phrase and any required passphrase can:

• Regenerate the derived private keys
• Restore the corresponding accounts
• Authorize transactions from those accounts

No example is shown here because publishing realistic recovery material teaches unsafe handling. A wallet may display a new phrase during setup, but users should not copy it into websites, messages, screenshots, or untrusted devices.

Security principles

The security of self-custody relies on protecting your recovery phrase and being deliberate about what you sign. Essential rules include:

1. Keep the primary recovery backup offline unless a documented threat model supports an encrypted digital method.
2. Record the phrase on paper or metal for durability.
3. Store each copy in a secure, private location.
4. Do not share the phrase or enter it on a website.
5. Document an inheritance or recovery plan when another person might need access.
6. Treat unsolicited requests for the phrase as phishing attempts.
7. Review token approvals before signing. A malicious approval can let a contract drain an asset without obtaining the phrase.
8. Verify the full destination address. Address poisoning places similar addresses in transaction histories to encourage a mistaken copy.
9. Review a smart contract's permissions and risks before using it.

Self-custody shifts risk to the user

The technical demands of self-custody are real, and pretending otherwise helps no one. The honest framing: self-custody trades institutional risk for personal responsibility, and the tooling, including hardware signers, multi-party wallets, and better approval interfaces, may lower the cost of taking that responsibility.

Part 2 examines physical recovery, identity, and the range between individual and institutional custody.