Custody guide

Crypto wallets and self-custody, for people who just bought their first coins

The step after buying is the one nobody explains properly. Not because it is difficult, but because the honest version includes a sentence most guides avoid: if you lose the recovery phrase, the money is gone and nobody can help you.

Our starting point is a platform holding an active Washington money transmitter licence (550-MT-117925) and a FinCEN-registered MSB filing. You can verify both yourself before depositing a cent.

Reviewed and re-checked August 2026

A single bitcoin token photographed in close-up on a bed of other coins

Why this step exists at all

When you buy crypto on an exchange, you own an entry in that company's database. The company holds the actual asset. In normal operation the distinction is invisible and irrelevant. In abnormal operation — insolvency, freeze, hack, dispute — it is the only thing that matters, and several years of failures have made that concrete rather than theoretical.

It is worth being precise about what protections do and do not apply. Crypto balances on an exchange are not covered by FDIC deposit insurance , whatever a marketing page implies with phrases like "bank-level security". Some platforms carry private insurance on portions of their holdings, which is not the same thing and is rarely as broad as it sounds.

None of that means everybody needs a hardware wallet immediately. It means the decision should be deliberate and proportionate rather than a default. A licensed, well-run platform with a verifiable Washington money transmitter licence is a reasonable place for a modest balance. It is a poor place for money you cannot replace.

Four kinds of wallet, and what each is actually for

Types of crypto wallet compared
Type Who holds the keys Right for Main risk
Exchange account The platform Trading, small balances, convenience Company failure, freeze, account takeover
Mobile hot wallet You Spending money, small amounts, frequent use Phone malware, phishing, losing the recovery phrase
Hardware wallet You Savings, larger amounts, infrequent access Losing the recovery phrase; buying from a reseller
Multi-signature setup You, distributed Large holdings, shared control, estate planning Complexity; losing track of the recovery scheme

We do not recommend specific wallet brands, because the right answer changes and a stale recommendation is worse than none. Buy hardware only from the manufacturer directly.

The single most useful mental model: a hot wallet is a wallet, a hardware wallet is a safe. You would not keep your savings in your back pocket, and you would not open a floor safe to buy a coffee. Using both, for different purposes, is not over-engineering — it is the normal arrangement.

Choosing by amount, not by enthusiasm

Wallet advice online tends to be written by people who find this interesting. Most people do not, and the correct amount of effort scales with what is at stake. Our rough thresholds, offered as a starting point rather than a rule:

  • Under a few hundred dollars. A licensed exchange account with app-based two-factor authentication is fine. The friction and network fees of self-custody are a meaningful share of the balance at this level, and the risk being managed is small.
  • A few hundred to a few thousand. Install a reputable mobile hot wallet and move most of it there. Write the recovery phrase on paper. This is the point at which learning self-custody is genuinely worth an evening.
  • A few thousand to tens of thousands. A hardware wallet, bought direct from the manufacturer, with two physical copies of the recovery phrase in separate locations. Keep a small hot wallet balance for anything you actually spend.
  • Above that. Consider a multi-signature arrangement, and treat it as an estate-planning question as much as a security one. At this level the failure mode is rarely theft — it is a recovery phrase nobody can find.

The seed phrase problem, which is the real problem

A recovery phrase — twelve or twenty-four words — is the wallet. The hardware is a convenience; the phrase is the asset. Whoever has it controls the funds, and whoever loses it loses the funds permanently. There is no reset, no support line, no identity check that recovers it. That is not a gap in the product; it is the product.

What works, in descending order of practicality:

  1. Write it by hand, twice, on paper. Two copies. Check each against the device before you put anything of value in.
  2. Store the copies in genuinely separate places. Two drawers in the same apartment is one location as far as a fire is concerned. A home safe and a safe deposit box is two.
  3. Consider a metal backup for larger holdings. Stamped steel plates survive fire and water. Paper in a Seattle basement does not necessarily survive water.
  4. Never photograph it, never type it anywhere. Not a cloud note, not a password manager, not an email to yourself, not a screenshot. Photographs sync automatically to cloud services, which is exactly the exposure you are trying to avoid.
  5. Never enter it anywhere except the wallet itself, during recovery. Any website, support agent, app or person asking for your phrase is stealing from you. There are no exceptions and no legitimate reasons.
  6. Tell one trusted person that it exists and where. Not the phrase — its existence and location. Otherwise your holdings die with you.

The test transfer, which takes ten minutes and prevents disasters

Before you move a meaningful balance, run the whole process with a trivial amount. This is the highest-value ten minutes in this entire guide.

Send a small amount from your exchange to your new wallet. Confirm it arrives. Then send it back. That exercise surfaces every surprise at a point where a mistake costs a few dollars instead of a few thousand: whether you picked the right network, whether the address format was correct, whether there is a minimum withdrawal, whether a withdrawal hold applies to your funding method, how long confirmation actually takes.

The network-selection error deserves specific mention because it is the most common irreversible mistake in crypto. Sending a stablecoin on one chain to a wallet expecting another can put the funds beyond recovery. There is no undo, and support cannot help. Test first.

One more habit worth building: after you set up a hardware wallet, wipe it and restore it from your written phrase before you deposit anything substantial. It proves the phrase you wrote down is the phrase that works. A surprising number of people discover a transcription error years later, at the worst possible moment.

Three mistakes we see specifically in Seattle

  1. Using an address someone else provided at a kiosk. This is how a large share of local kiosk fraud completes: the victim is walked through a purchase and told to scan a QR code the caller sends. Always generate a fresh receiving address in your own wallet, on your own device. Our scam guide covers the surrounding scripts.
  2. Photographing the recovery phrase "temporarily". In a city where essentially everyone has automatic cloud photo backup enabled, a temporary photograph is a permanent copy on someone else's server. There is no version of this that is safe.
  3. Withdrawing tiny amounts on-chain and losing most of it to fees. A ten-dollar on-chain bitcoin withdrawal during a congested period can lose a large fraction of its value to network fees. For small amounts, either wait and batch, or use a platform supporting cheaper settlement — our timing guide covers the network options and their real costs.

What happens to your crypto if you die

Unromantic and important, and the reason multi-signature setups exist beyond the security argument. Self-custodied crypto with no accessible recovery plan is simply destroyed on the owner's death — no probate process can recover it, because there is nothing to recover.

A workable minimum for most people: a sealed written record of what exists and where the recovery material is stored, held with your will or by an attorney, with the actual phrase stored separately so no single document is both the map and the key. For larger holdings, multi-signature arrangements let you distribute control so that a defined combination of parties can recover the funds without any one of them being able to take them.

This is also a tax planning point. Records of what was acquired when, and at what cost, matter enormously to heirs — and Washington's capital gains excise tax adds a state-level dimension that our tax guide covers. Speak to a professional licensed in this state if the amounts are significant. This is one of the few places where crypto and conventional estate planning genuinely have to meet.

Wallet and custody questions

Do I need a crypto wallet if I buy on an exchange?

Not technically — the exchange holds the asset for you. But a balance on an exchange is a claim on that company rather than coins you control, and it is not covered by FDIC deposit insurance. The reasonable approach is proportionate: amounts you would shrug at can stay on a well-run licensed platform; amounts that would genuinely hurt to lose belong in a wallet where you hold the keys.

What is the safest crypto wallet?

For meaningful amounts, a hardware wallet from an established manufacturer, bought directly from that manufacturer, with the recovery phrase written on paper or steel and stored somewhere fire and flood cannot reach it. The wallet hardware is rarely the weak point — the recovery phrase and the human handling it almost always are.

What happens if I lose my seed phrase?

The funds are gone permanently. There is no reset, no support line and no recovery process — that is the entire design of self-custody. Which is why the recovery phrase deserves more planning than the wallet: two physical copies in separate locations, never a photograph, never a cloud note, never typed into anything.

Should I use a hot wallet or a hardware wallet?

Both, for different jobs. A mobile hot wallet is right for spending money — small amounts you move often, where convenience matters and the loss would be tolerable. A hardware wallet is right for savings — larger amounts you rarely touch. Splitting them is not paranoia; it is the same logic as not carrying your entire net worth in your pocket.

Can I withdraw crypto from a Bitcoin ATM to my own wallet?

Yes, and you should. Kiosk purchases are sent to a receiving address you provide, so have your own wallet installed and a fresh address ready before you travel. Never use an address someone else supplied — that is the mechanism by which a large share of kiosk fraud completes.

Is a wallet address the same as a private key?

No, and confusing them is dangerous. A wallet address is like an account number: safe to share, used to receive funds. A private key or recovery phrase is the thing that controls the funds. Anyone who obtains it can move everything, immediately and irreversibly. No legitimate person or service ever needs it.