Qualified custodian vs self-custody: how to choose

Custody comes down to a single question: who controls the private keys to your Bitcoin. Whoever holds the keys can move the Bitcoin. Everyone else is trusting that keyholder.

Bitcoin custody is often framed as a binary, exchange versus hardware wallet, but it is really a spectrum. At one end, an exchange holds everything and you hold an account login. At the other, you hold every key yourself and no one else can touch your Bitcoin. Between those ends sit several arrangements that mix control and convenience in different proportions.

The phrase you will hear most is “not your keys, not your coins.” It captures a real principle: if someone else holds your keys, you are exposed to their failure. But it is only half the picture. Holding your own keys removes that exposure and replaces it with a different one, your own ability to keep those keys safe and accessible for years or decades. Choosing custody means deciding which of those risks you would rather carry.

Four arrangements cover almost every holder’s situation. Each one is a different answer to the question of who holds the keys.

Exchange custody

The exchange where you bought your Bitcoin (Coinbase, Kraken, and others) holds the keys. You have an account and a login, not direct control of the Bitcoin itself. Moving or selling happens through the exchange’s permission.

This is the most convenient arrangement and the one most new holders start with. It is also the one with the most counterparty risk. If the exchange is hacked, becomes insolvent, freezes your account, or restricts withdrawals, your access depends entirely on the exchange resolving it. Exchange custody suits small amounts, active trading, and holders who are not yet ready to manage keys.

Qualified custodian

A qualified custodian is a regulated institution (such as Coinbase Custody, BitGo, or Anchorage) that holds Bitcoin on your behalf in an account legally identified as yours. This is the model most Bitcoin IRAs use, where regulation requires a qualified custodian to hold the assets.

The distinction from exchange custody is legal and structural. A qualified custodian typically holds your Bitcoin in segregated custody, separate from the institution’s own assets. That separation is what determines whether your Bitcoin survives the custodian’s failure, the same distinction that matters when you evaluate a Bitcoin-backed lender. Qualified custody suits retirement holdings and holders who want institutional custody with regulatory oversight rather than self-management.

Collaborative custody

Collaborative custody uses a multi-signature arrangement where the keys are split between you and a provider (such as Unchained or Casa). A typical setup requires two of three keys to move Bitcoin: you hold one or two, the provider holds one, and no single party can move the Bitcoin alone.

This is the middle path. You retain meaningful control, the provider cannot unilaterally access your Bitcoin, and the provider’s key acts as a recovery backstop if you lose one of yours. It removes the single point of failure of basic self-custody while avoiding full custodial counterparty risk. Collaborative custody suits serious holders with meaningful amounts who want self-custody’s protections without carrying every key alone.

Self-custody

In self-custody, you hold all the keys. A hardware wallet (such as a Trezor or Ledger device) stores the keys offline, and a written backup of the seed phrase is the ultimate recovery method. No exchange, custodian, or provider is involved. No one can freeze, lose, or rehypothecate your Bitcoin, because no one else can touch it.

Self-custody itself has two forms. Single-signature (single-sig) uses one key, backed up by one seed phrase. It is the simplest setup and the most common, but it has a single point of failure: lose the seed phrase with no backup, and the Bitcoin is gone permanently. Multi-signature (multisig) splits control across several keys, for example requiring two of three, removing the single point of failure at the cost of more setup and operational complexity. Self-custody suits holders who are comfortable taking full responsibility for securing and backing up their keys.

There is no single best custody model. The right one depends on your situation. Four questions narrow it down.

Start with your threat model

Different custody arrangements defend against different threats. Decide what you are actually protecting against. External theft by a hacker? Custodian failure, the scenario several Bitcoin lenders created in 2022? Your own error, like a lost key or no inheritance plan? Coercion or physical theft? Regulatory seizure?

Self-custody defends strongly against custodian failure and seizure but exposes you to your own error and coercion. Custodial arrangements defend against your own error, because the custodian handles recovery, but expose you to counterparty failure. No arrangement defends against everything. Naming your real threats tells you which exposures you can accept.

Match the security to the amount

The right answer scales with what is at stake. A few hundred dollars of Bitcoin on an exchange for convenience is a reasonable choice. A life-changing sum on the same exchange is a concentration of counterparty risk most holders would not accept if they thought about it directly.

A common approach is tiered: a small amount in convenient custody for spending or trading, the bulk in cold storage or collaborative custody. The amount you would be devastated to lose belongs in the most secure arrangement you can confidently operate.

Be honest about your technical comfort

Self-custody done well requires real operational discipline: securing the hardware, backing up the seed phrase in more than one place, protecting against fire and loss, and never exposing the keys. Done poorly, it is more dangerous than a custodian, because there is no one to recover from your mistake.

This is the hardest question to answer honestly. The failure mode of self-custody is rarely a sophisticated hacker. It is a holder who lost a seed phrase, kept the only backup in one place, or never tested recovery. If you are not confident you can operate self-custody correctly, collaborative or qualified custody is genuinely safer than botched self-custody.

Plan for inheritance

Keys that only you can access become a problem the moment you cannot access them. If you self-custody and die without a plan your heirs can follow, the Bitcoin is likely lost permanently. Custody choice and inheritance planning are the same decision viewed from two angles.

Collaborative custody and qualified custody both provide a recovery path that survives the holder. Self-custody requires you to build that path yourself: documented instructions, accessible backups, and often a multisig arrangement where a trusted party or service holds a key. Whatever model you choose, the keys need a route to your heirs that does not depend on you being there to explain it.

The strongest principle in Bitcoin custody is also the most misused. “Not your keys, not your coins” is true: custodial holdings carry counterparty risk that self-custody eliminates. But it is often repeated as if self-custody were costless, and it is not. The risk does not disappear when you take your keys off an exchange. It moves to you.

For most holders with meaningful amounts, the honest answer is a mix. Keep a small, convenient balance where you can spend or trade it. Hold the bulk in the most secure arrangement you can confidently operate and recover, whether that is a hardware wallet you know how to back up, a multisig setup, or collaborative custody with a provider. Match the model to your threat model, the amount, your technical discipline, and your inheritance plan.

The worst custody model is the one you do not fully understand. Do not leave a life-changing sum on an exchange because moving it feels intimidating. And do not move it into self-custody you cannot operate, because the failure there is just as permanent and far more common. The right choice is the one whose risks you have looked at directly and decided you can carry.