Skip to main content
Zachary Roth

crypto

Self-custody, part 2: Recovery and inheritance

Compares custody models, physical backups, recovery methods, and inheritance planning, and the costs each adds, in part 2 of a self-custody series.

Updated 3 min read

Building on the fundamentals covered in Part 1, we'll explore the broader implications of self-custody: its role in digital identity, the security trade-offs, and where custody tooling is heading.

The stakes of self-custody

The crypto adage "Not your keys, not your crypto" captures one custody tradeoff: keeping assets on an exchange means giving the exchange direct on-chain control and accepting a contractual claim against the custodian.

Exchange failures before this essay's March 2022 publication showed several risks of this approach:

  • Exchange insolvencies can freeze withdrawals and leave customers with bankruptcy claims
  • Government actions can freeze exchange accounts
  • Platform policies can restrict access to your funds

These risks explain why some users accept the operational burden of holding their own keys.

Physical backups and their risks

Physical storage protects a recovery phrase from remote attackers:

  • Etching into metal plates for durability
  • Using more than one secure location for redundancy
  • Avoiding any digital record of the phrase

Physical storage replaces remote attack risk with physical risk. Every additional copy is another place a burglar, family member, or landlord can find it. A copy that nobody else can find might also be unavailable to your heirs.

A workable setup addresses four risks:

  • Remote theft: keep the phrase off computers
  • Loss and disaster: use more than one location
  • Discovery: use locations you control
  • Death: ensure that a trusted person can eventually find and use one copy

A cautionary tale from the month before this essay: in February 2022, the US Department of Justice announced the seizure of cryptocurrency then valued at more than $3.6 billion after investigators decrypted a cloud-storage file that contained private keys.

The event demonstrates the risk of exposed digital key storage and the value of a traceable public transaction history to investigators.

From addresses to identity

Blockchain addresses can act as persistent identifiers across compatible applications.

Confirmed transactions create a durable public history, subject to the network's finality model and any later chain reorganization.

This transparency, combined with pseudonymous addresses, can support:

  • Reputation systems based on signed activity
  • Verifiable transaction history for financial applications
  • Separate addresses for reducing casual linkage between activities

The same transparency cuts both ways: once an address is linked to you, so is its entire history.

Domain name services like ENS (Ethereum) and Bonfida (Solana) make addresses easier to live with, converting 0x329a...082f to name.eth, supporting Unicode names, and giving people consistent identities across apps. In March 2022 these services were still maturing, and many centralized exchanges did not support sending to domain names. Human-readable names also create impersonation and Unicode homograph risks, so users still need to verify the resolved address.

Custody is a spectrum

Self-custody's key challenge is balancing security with usability. A basic externally owned account has no password reset, while smart-contract and multi-party wallets can add recovery at the cost of more code, signers, or service dependencies.

The practical answer is a spectrum rather than a single "right" custody model:

  1. Single-signer self-custody: direct control with one key and one primary recovery path.

  2. Hybrid setups: smart-contract wallets with social recovery (Argent was an early example) and multi-signature arrangements (then Gnosis Safe, now Safe). These designs can remove a single signing key as the point of failure, but they add more components and dependencies.

  3. Custodial services: managed security and regulatory compliance, at the price of reintroducing a trusted intermediary.

Which tier fits depends on technical comfort, transaction frequency, the amount at stake, recovery needs, and the failure modes of each provider or signer.

Recovery adds cost and dependencies

Self-custody offers direct control over signing authority, with added security, recovery, and usability costs.

Smart-contract wallets, social recovery, and hardware signers can reduce parts of that cost, but no custody model eliminates it.

Part 1 explains wallet control, signing, threat models, and the security responsibilities that come before recovery design.