Custodial vs non-custodial wallets: who holds your keys?
Custodial wallets let an exchange or custodian hold your crypto keys; non-custodial wallets leave them with you. Compare risks, recovery and who each one suits.
CryptoGroup Newsroom · · 7 min read
Quick verdictUse a custodial account for convenience and fiat on-ramps, a non-custodial wallet for coins you plan to keep, and a hardware wallet once the amount would hurt to lose.
Jump to the verdict ↓On this page
Every crypto wallet answers one question: who controls the private keys? A private key is the secret that authorises spending from a blockchain address. Whoever holds it can move the coins, and the network does not care who the "owner" is on paper. A custodial wallet means a company, usually an exchange or a specialist custodian, holds the keys for you. A non-custodial (or self-custody) wallet means you hold them yourself, typically backed up as a seed phrase. This guide explains how each model works, what can go wrong, and how to choose.
What a custodial wallet is
When you buy crypto on an exchange such as Coinbase, Kraken or Binance and leave it there, you are using a custodial wallet. The platform keeps the keys, often pooling many customers' coins in its own wallets, and shows your share as a balance in its database. Transactions between customers often never touch the blockchain at all until someone withdraws.
The benefits are familiar from banking: a username and password, two-factor authentication, password resets, customer support and an easy link to your bank card. Institutions use a professional version, qualified custodians, which hold keys in audited cold storage. Many US spot bitcoin ETFs, for example, use Coinbase Custody, and banks are moving in too, as with Standard Chartered's deal to buy Zodia Custody.
The cost is counterparty risk: you are trusting that the company is solvent, honest, well secured and willing to let you withdraw. Mt. Gox lost customer bitcoin in 2014, and in 2022 FTX collapsed and Celsius froze withdrawals. In January 2023 a US bankruptcy judge ruled that coins in Celsius' "Earn" accounts belonged to the company's estate under its terms of use, not to customers. The fine print matters.
What a non-custodial wallet is
A non-custodial wallet is software or hardware that generates and stores keys on your device. Examples include browser and mobile apps such as MetaMask, Phantom or Trust Wallet, and hardware devices such as Ledger or Trezor. When you set one up, it shows you a 12- or 24-word recovery phrase, which can recreate every key in the wallet on another device. Our guide to what a seed phrase is explains why those words are the real vault.
Nobody can freeze a self-custody wallet or block a withdrawal, and you can connect it straight to DeFi apps and decentralized exchanges. The flip side is that there is no help desk. Lose the phrase and the device, and the coins are gone. Type the phrase into a fake website, and a thief can empty the wallet in minutes. Sign a malicious approval, and the wallet will do exactly what you told it to.
Side-by-side comparison
| Custodial wallet | Non-custodial wallet | |
|---|---|---|
| Who holds the keys | The exchange or custodian | You, on your device or hardware wallet |
| If you forget your login | Account recovery through the provider | Only your recovery phrase can restore access |
| Main risks | Hacks, insolvency, frozen withdrawals | Lost phrase, phishing, malicious approvals |
| Access to DeFi and DEXs | Limited to what the platform offers | Direct, from the wallet |
| Identity checks | Usually required (KYC) | Not required to create a wallet |
Pros and cons of custodial wallets
+ Pros
- Easy to start and familiar, with password resets and support
- Built-in bank and card on-ramps for buying and selling
- Regulated providers must follow licensing and safekeeping rules
- Nothing to back up on paper
− Cons
- You rely on the company's security, solvency and honesty
- Withdrawals can be paused and accounts frozen
- In some insolvencies, customer coins have been treated as company assets
- Your activity is linked to your identity and account history
Pros and cons of non-custodial wallets
+ Pros
- Only you can move the coins; no withdrawal limits or freezes
- Works with any compatible app, DEX or network
- { "Portable": "restore the same wallet in another app with your phrase" }
- No counterparty can lose or lend out your funds
− Cons
- Losing the recovery phrase can mean losing everything
- Phishing and fake apps target self-custody users constantly
- Mistakes, such as a wrong address or network, are usually final
- You pay network fees yourself and need to understand them
Middle-ground options
The line between the two models has blurred. Multisignature wallets require, for example, two of three keys to sign, so you can spread keys across devices or share one with a trusted service. MPC wallets split a key into shares held by you and a provider, so neither can spend alone. Smart-contract wallets on Ethereum and its layer-2 networks can add social recovery, spending limits or passkey logins. These options can reduce the "one lost paper means total loss" problem, but each adds its own provider or software risk, so read how recovery actually works before relying on one.
How to choose
Ask three questions. How much is at stake? Small sums for trading can sit on a reputable, licensed exchange; larger long-term holdings deserve self-custody, ideally on a hardware wallet. How often do you transact? Frequent traders benefit from exchange liquidity; long-term holders rarely need it. How confident are you with backups? If you cannot store a recovery phrase safely offline, a custodian may honestly be the lower-risk choice for now.
Many people use both. A common setup is to buy on a regulated exchange, withdraw holdings you plan to keep to a self-custody wallet, and leave only what you are actively trading on the platform. In the EU, licensed providers under MiCA must keep client crypto separate from their own, but that does not protect against hacks or your own account being compromised. Our step-by-step guide on how to store crypto safely covers backups and security settings for both setups.
Our verdict
Custodial for convenience, non-custodial for anything you keep
Use a custodial exchange account to buy, sell and trade with support on hand, and keep only what you need there. Move savings to a non-custodial wallet you control, and upgrade to a hardware wallet with a carefully stored recovery phrase once the amount would really hurt to lose.
Frequently asked questions
Is a custodial wallet safe?
It can be, if the provider is licensed, well secured and solvent, but you are trusting that company. Exchange hacks, insolvencies and withdrawal freezes have cost customers money in the past.
Is MetaMask custodial or non-custodial?
MetaMask is non-custodial: the keys are created and stored on your device and backed up by your recovery phrase. The company cannot reset your password or recover your funds.
Are crypto exchange wallets custodial?
Yes. Crypto left in an exchange account, such as Coinbase, Kraken or Binance, is held by the exchange, which controls the private keys until you withdraw to your own wallet.
What happens to my crypto if an exchange goes bankrupt?
It depends on the terms of service and local law. Some customers have recovered funds after years; in the Celsius case, a US court ruled that coins in Earn accounts belonged to the company's estate.
Can I move from a custodial to a non-custodial wallet?
Yes. Create a self-custody wallet, write down its recovery phrase offline, send a small test amount from the exchange to its address on the correct network, then move the rest.
This article is for information only and is not financial advice. Crypto assets are volatile; do your own research. Read our disclaimer
More from Security
View all →Read next
South Korea crypto law near final as tax delay gains weight
Korea's FSC says talks on the Digital Asset Basic Act are in the final stage, as officials signal a rethink of the 22% crypto tax due on Jan. 1, 2027.
Bitcoin slides toward $82,000 as China stocks enter bear market
China's CSI 300 fell into a bear market and Asian indexes lost about 3% as Brent topped $112. Bitcoin gave up its gains above $84,000 and slipped toward $82,000.
AI 'meme games' could be crypto's next memecoin-style mania
Illuvium's co-founder says AI can build a speculative crypto game in days for about $1,000 and expects up to 100,000 of them in a year. Most will be short-lived.