Self-custody means holding the private keys that control a crypto wallet directly. Whoever holds the private key can move the funds it controls; a self-custodied wallet has no third party standing between the holder and that authority, which is the source of both its main advantage and its main risk.
A private key is a piece of cryptographic data that authorizes a transaction on a blockchain; a wallet is the software or hardware that stores that key and constructs transactions with it. On a custodial platform, the exchange holds the keys on the customer's behalf and the customer's balance is an entry in the exchange's own database, redeemable on request. On a self-custodied wallet, the keys sit with the holder, and the balance shown is the blockchain's own record of what that key controls — there is no intermediary account to freeze, and no intermediary to appeal to if a transaction is sent to the wrong address. The same principle extends beyond a single wallet: a trader can hold funds across multiple self-custodied wallets for different purposes, with no central ledger tying them together unless the trader chooses to link them.
A hot wallet keeps the private key on an internet-connected device — a phone, a browser extension or a desktop application — which makes it convenient for frequent transactions but exposes the key to any malware or phishing attack that reaches that device. A hardware wallet stores the key on a dedicated, offline device and signs transactions without ever exposing the key to an internet-connected computer, which removes most remote-attack vectors at the cost of convenience: a transaction requires physically connecting and confirming on the device itself. A middle category has emerged in recent years: wallets that use a phone's or laptop's own secure hardware enclave to isolate the key from the general operating system without requiring a separate physical device, narrowing but not eliminating the gap between a pure hot wallet and a dedicated hardware wallet.
A multi-signature wallet requires more than one private key to authorize a transaction — commonly two of three, or three of five — which removes the single point of failure a standard wallet has: losing one key does not lose the funds, and a single compromised device does not authorize a transfer on its own. This structure is common for funds controlled by more than one person, such as a trading team or a shared treasury, where no single member should be able to move funds alone, but it also suits an individual who wants to split key storage across two devices or two locations as protection against a single point of physical loss or theft. A smart-contract wallet extends the same idea programmatically, allowing rules such as spending limits, time locks or designated recovery addresses to be encoded directly into how the wallet approves a transaction.
A perpetual exchange built on smart contracts typically holds margin in a contract the trader's wallet interacts with directly — the trader retains custody of any balance not currently locked as margin for an open position, and the smart contract executes liquidations and settlements according to its own code. That differs from a centralized exchange, where every balance, open or not, sits in the exchange's own custody until withdrawn. Interacting with a smart contract typically requires granting it an approval to move a specific token from the wallet, and an approval left active after a trader stops using a protocol is a common source of loss if that contract is later exploited — reviewing and revoking unused approvals is a maintenance task self-custody adds that a custodial account does not require. See how on-chain settlement works for what happens to a position at the smart-contract level.
A self-custodied wallet's private key is typically generated from, and recoverable through, a seed phrase — a sequence of words that reconstructs the key on a new device. There is no password-reset process for a seed phrase: anyone who has a copy of it controls the wallet, and anyone who loses the only copy loses access to the funds permanently, with no support desk able to intervene. That trade-off is the direct cost of removing the third party a custodial account relies on for account recovery. Because a seed phrase is only as durable as whatever it is written on, many holders keep more than one copy in separate physical locations, and some transfer the phrase from paper to a fire- and water-resistant metal backup specifically to survive the kind of damage a house fire or flood would inflict on paper alone. Bank deposits and, in some jurisdictions, funds held at a regulated broker are covered by a government or industry deposit-insurance scheme up to a stated limit, which reimburses a depositor if the institution fails; no equivalent scheme exists for funds held in a self-custodied wallet, since there is no institution to fail in the same sense and no fund standing behind a lost key. The protection self-custody offers against a platform's own failure is real, but it does not substitute for the protection a deposit-insurance scheme provides against a trader's own error.
Holding a wallet's own keys does not, on its own, determine whether an identity check applies to using it: a self-custodied wallet can connect to a fully KYC-gated platform, and a KYC-free platform can still require a hosted, non-self-custodied account. The two are frequently paired — most no-KYC perpetual trading happens through self-custodied wallets — and the pairing is a design choice most protocols make. See how KYC requirements work for the identity side of the same distinction.
Self-custody is holding the private keys to a crypto wallet directly. It gives the holder sole control over the funds the keys authorize, with no third party able to freeze, reverse or recover a transaction on their behalf.
Custody options are the different ways a trader can hold crypto: a hot wallet on an internet-connected device, a hardware wallet that signs transactions offline, a multi-signature setup requiring several keys, or a custodial account where an exchange holds the keys instead of the trader.
A hardware wallet is a dedicated offline device that stores a private key and signs transactions without exposing that key to an internet-connected computer. It reduces exposure to remote malware and phishing attacks compared with a software wallet, at the cost of requiring the physical device to approve each transaction.