What does 'not your keys, not your coins' mean?

It means that if a third party holds the private keys to your crypto, you do not have direct control of it — you hold a claim against that party. If the provider freezes accounts, is breached, or becomes insolvent, your access depends on them. Only holding the keys yourself gives unmediated control.

Is a custodial exchange account a wallet?

Functionally it stores crypto, but custody sits with the exchange, which holds the keys. It behaves more like an account at a financial institution than a self-custody wallet. You can transact through it, but the provider ultimately controls whether and when funds move.

Can funds in a non-custodial wallet be frozen?

Not by a provider, because no provider holds the keys — spending requires your key. That is the core appeal for censorship resistance. It also means there is no one to appeal to if you make a mistake, lose the seed phrase, or are targeted by a scam.

How can I tell if a wallet is really non-custodial?

Apply one test: if you lost your login, could the company restore access to your funds? If yes, it can reconstruct or holds your keys, so it is at least partly custodial. Genuine self-custody has no such recovery path — only your seed phrase restores access.

Is one option safer than the other?

They are safe against different risks. Custody protects you from losing a seed phrase but exposes you to the provider failing. Self-custody removes provider risk but relies entirely on your own security. Which is 'safer' depends on whether you trust an institution or your own practices more.

What are MPC and social-recovery wallets?

They are approaches that split or delegate key control — for example across multiple parties (MPC) or trusted guardians (social recovery). They change the failure modes rather than fitting neatly into custodial or non-custodial. Evaluate each by asking who could move or restore the funds without you.

Custodial vs Non-Custodial Wallets Explained

Custody comes down to one question: who holds the private keys. Everything else — recoverability, counterparty risk, freezes — follows from the answer.

The question is: who holds the key

Custody in crypto is decided by one thing — who controls the private keys that authorise transactions. In a custodial arrangement, a third party (typically an exchange or a hosted-wallet service) holds the keys on your behalf and moves funds when you instruct it through an account. In a non-custodial arrangement, you hold the keys yourself, usually in the form of a recovery phrase, and no one else can move the funds. The familiar phrase “not your keys, not your coins” is a blunt statement of this distinction.

This is not a difference in blockchain technology; on-chain, funds simply sit at addresses. It is a difference in who has the authority to spend from those addresses, and therefore in who you are trusting.

What you gain and give up with custody

A custodial service behaves like a bank account: you log in with a username and password, you can reset access if you forget your credentials, support can sometimes intervene, and you never handle a seed phrase. For many people that recoverability is the entire appeal — there is no single piece of paper whose loss is catastrophic.

In exchange, you accept counterparty risk. The provider can freeze your account, be compelled by law or regulation to restrict access, suffer a breach, become insolvent, or mishandle the assets. Because the keys are theirs, your claim is on the company, not directly on the coins. Custodial services also typically require identity verification and can apply withdrawal limits. Whether that is acceptable depends on how much you trust the specific provider and jurisdiction — which is a judgement, not a technical guarantee.

What you gain and give up with self-custody

Non-custodial wallets give you direct, unmediated control. No one can freeze the funds, no company failure touches them, and you can transact without asking permission. This is the property that makes self-custody attractive for censorship-resistance and for removing counterparty risk.

The cost is that you inherit all of the responsibility that a custodian would otherwise carry. There is no password reset. If you lose the recovery phrase, the funds are gone; if someone else obtains it, the funds are theirs; if you approve a malicious transaction, no support desk can reverse it. Self-custody moves the risk from “will the company fail me?” to “will I fail to secure and operate this correctly?” Neither risk is zero, and pretending otherwise is how people lose money in both directions.

Side-by-side

Dimension	Custodial	Non-custodial
Who holds the keys	The provider	You
Access recovery	Password/2FA reset via provider	Only via your seed phrase — no reset
Counterparty risk	Yes — breach, insolvency, freezes	None from a provider
Can funds be frozen or seized?	Yes, by the provider or by order	Not by a provider; keys control spending
Identity verification	Usually required	Usually not required to hold a wallet
Consequence of user error	Often recoverable	Often permanent and irreversible
Who you must trust	The company and its jurisdiction	Yourself and your own security practices

Hybrids and the grey area

The line is not always clean. Some “wallets” are custodial despite feeling like self-custody, because a company can restore your account — a sign that it, not you, holds or can reconstruct the keys. Others use techniques such as multi-party computation (MPC) or social recovery, where the key is split among parties or guardians; these change the failure modes but do not automatically make an arrangement fully self-custodial or fully custodial. Smart-contract wallets can add recovery features while keeping the user in control. The practical test is always the same: if you lost your credentials, could a company restore access? If yes, custody is at least partly with them.

These hybrids exist because the raw trade-off is uncomfortable: pure custody asks you to trust a company completely, while pure self-custody offers no safety net at all. MPC and social recovery try to soften both extremes — removing a single seed phrase as the one fragile secret, while avoiding a single company as the one point of trust. They can be genuinely useful, but they add their own complexity and new questions: who the parties or guardians are, whether they can collude, and what happens if enough of them become unavailable. The honest way to assess any such product is to ignore its label and trace, concretely, every party who could either move your funds or block you from them.

Reading a provider’s own description carefully

Marketing language often blurs custody. “Your funds are safe with us” describes a custodial promise; “only you control your keys” describes self-custody. Look for concrete statements: does the service hold the keys, can it recover your account, and does it publish how assets are held? A service that can email you a password reset for your funds is custodial, whatever it is called.

How custodial “recovery” actually works

The recoverability that makes custody appealing is not magic — it exists precisely because the provider holds or can reconstruct the keys. When you reset a password or pass an identity check to regain access, you are asking the custodian to re-authorise you against funds it already controls. That is genuinely useful: it means a forgotten password is an inconvenience, not a loss. But it is also the exact mechanism that lets the same provider freeze the account, comply with an order to restrict it, or lose the funds in a breach. You cannot have provider-side recovery without provider-side control; they are two faces of the same arrangement.

This is why the presence of a “forgot password” flow for your actual crypto is the clearest signal of custody. A true non-custodial wallet cannot offer it, because the provider has nothing to reset — only your seed phrase can restore access.

Reducing the risk in whichever model you choose

Neither model is used safely by default. If you rely on a custodial service, you can reduce exposure by choosing established providers, enabling strong authentication that is not SMS-based where possible, and not treating an exchange as a long-term vault for more than you would accept losing to a freeze or failure. Some custodians publish attestations about how assets are held; these are informative but are not a guarantee, and evaluating them is a judgement about that specific company.

If you self-custody, the risk shifts entirely onto your practices: a genuine wallet, a recovery phrase kept off every networked device, and the discipline to read transactions before approving them. The failure modes are different but equally consequential — a custodial user is undone by trusting the wrong institution, a self-custody user by a single lapse in their own handling of the phrase.

Choosing without a universal answer

There is no single correct choice, and reputable users of crypto sit on both sides. Custody can be reasonable for funds you actively trade, for people who realistically will not manage a seed phrase safely, or for amounts small enough that provider risk is acceptable to you. Self-custody tends to suit longer-term holdings, larger amounts, and anyone whose primary concern is removing dependence on a third party. Many people split the difference: a custodial account for active use and a self-custody wallet for savings. The decision is a trade between two different kinds of risk — trusting an institution versus trusting your own operational discipline — and only you can weigh which you would rather carry. What matters is making the choice deliberately, understanding which risk you are accepting, rather than drifting into one because it was the default the software presented.

Sources

Note: CamoCrypt is security & education only — no prices, no predictions, no investment advice. Verify every address and contract yourself; we cannot recover lost funds and neither can anyone who contacts you claiming they can.

Custodial vs non-custodial custody