Custody Ladder

Hook

“Where do I keep bitcoin?” is really two questions: who holds the keys, and how much convenience are you trading for that control? The answers sit on a ladder—not a moral ranking.

One idea

Custody means who can authorize a spend: on an exchange you usually have a balance IOU (they hold the keys); in a software or hardware wallet you hold the keys; multisig (later) spreads control across several keys—each step trades convenience against independence and operational burden.

Plain walkthrough

Custodial vs keys you control. If a service shows “0.05 BTC” in your account but you never held a seed phrase for those coins, you typically have a claim on that company’s books—an IOU—not keys that spend on the open Bitcoin network by themselves. They can freeze, delay, or lose access under their rules, outages, or legal process. That can feel familiar (like a bank balance). It is not the same as self-custody.

In self-custody, you hold the private keys (backed up by a seed phrase—Chapter 7). Your wallet talks to the network; leaving the company does not strand the coins if your backup is intact. Chapter 6 already separated wallet app from coins; this chapter adds the ladder of who holds the keys.

A simple ladder (tradeoffs only).

Step	What it usually means	You gain	You take on
Exchange / custodial account	Company holds keys; you log in	Familiar UX; recovery via their account policies	Counterparty risk; you cannot independently move coins on-chain without withdrawing
Software wallet (hot)	Keys on a phone/computer you control	Direct network spend; you own the backup	Device malware, phishing, and “I lost the seed” risk
Hardware wallet (colder)	Keys on a dedicated device you confirm with	Harder for remote attackers to empty savings	Setup and physical care; you still need a solid seed backup
Multisig (later)	Spend needs M-of-N keys (e.g. 2-of-3)	No single seed or device is enough alone	More moving parts; inheritance plans get harder—save for after basics

You do not “graduate” by climbing as far as possible on day one. Many people mix rungs: a small hot balance for practice, colder storage for amounts they rarely move, and sometimes a custodial account only as a temporary on-ramp or off-ramp. This page does not tell you which mix is “right,” which company to use, or whether you should buy bitcoin at all.

IOU vs keys—one sentence. Custodial balance = trust their ledger entry; self-custody = control of keys that unlock outputs on Bitcoin’s shared ledger.

Withdrawing is the bridge. Moving from custodial to self-custody means sending on-chain to an address your wallet generated (Chapters 8–9). Moving the other way is depositing to their address. Each hop is a real transaction with fees and confirmation waits—not a file rename inside an app.

Hardware is still keys + UX. A hardware device does not store “the coins”; it helps keep private keys offline and signs spends you approve. Lose the device with a good seed backup and you can restore elsewhere. Lose seed and device with no other backup, and spend ability is gone. Multisig changes the backup story again; treat it as a later chapter of life, not beginner homework.

No product picks here. We name categories so you can ask better questions. We do not recommend exchanges, wallet brands, or purchase timing. Educational clarity only.

Watch-outs

• “Wallet” on an exchange — Marketing often says wallet when they mean account balance. Ask: whose keys?
• Leaving coins on an exchange forever “for convenience” — Convenience is real; so is dependency on that company. Decide with eyes open—no cheerleading either way.
• Hardware without seed discipline — A fancy device does not save a photographed or cloud-synced seed (Chapter 7).
• Multisig before basics — Extra keys without a recovery plan can lock you out as effectively as a thief.
• Nobody reputable needs your seed to “upgrade custody” — Moving rungs means transactions and backups you control—not typing words into a stranger’s form.

You now can…

• Separate a custodial IOU from keys you control.
• Describe the ladder exchange → software → hardware → (later) multisig as tradeoffs, not a scoreboard.
• Explain that climbing or mixing rungs is an operational choice—not financial advice from this site.