Bitcoin Self Custody Setup From Zero to Cold Wallet

Written by Mohamed Habbat · Author

I work in the crypto self-custody space. I have set up every wallet in this guide on a clean Linux box at least once. The Bitcoin you do not hold on a device you keyed yourself is Bitcoin somebody else owns.

TL;DR

Self-custody means you hold the private keys. No exchange. No IOU. When FTX collapsed in November 2022, holders who had already moved their coins to their own wallets had nothing stuck on the exchange. The rule has not moved in 2026. A hardware wallet (Ledger, Trezor, BitBox02, Coldcard, Jade) plus a seed phrase only you hold. Withdraw after every buy. Not your keys, not your coins.

What happened when FTX collapsed

In November 2022, FTX stopped customer withdrawals and filed for bankruptcy. The claims process still values every customer account at its balance on November 11, 2022, the petition time (FTX claims portal). The US Attorney for the Southern District of New York said Sam Bankman-Fried stole over $8 billion of his customers' money. A jury found him guilty on seven counts, and on March 28, 2024 a court sentenced him to 25 years in prison (US Attorney SDNY).

The holders who lost nothing that day had one thing in common. Their Bitcoin was not on FTX. It sat in their own wallets, under their own keys.

That is Bitcoin self-custody. In 2026 it is still, in my view, the most important thing you can do to protect coins you already own.

What self-custody means

Private keys control Bitcoin. Whoever holds the key controls the coin. Full stop.

When your Bitcoin sits on Coinbase, Kraken, Binance, or any other exchange, the exchange holds the key. You hold a balance in a database. That balance is a claim on the exchange. Claims can freeze.

Self-custody means you generate and hold the key yourself. No third party can freeze the balance, file for bankruptcy with your funds inside it, or hand the coins to a regulator on demand. The key is yours. The Bitcoin is yours.

The phrase has carried this principle since the earliest days of Bitcoin: not your keys, not your coins.

Why custody risk did not go away

FTX was not a black swan. It was a pattern. Why Bitcoin matters makes the case for sovereign money clearer every time another custodian fails.

In 2022 a sequence of exchanges and lending platforms went down:

Celsius froze customer withdrawals on June 12, 2022 and filed for bankruptcy on July 13, 2022 (CFTC)
Voyager filed for bankruptcy on July 5, 2022 (CFTC)
FTX collapsed in November 2022; prosecutors put the theft of customer money at over $8 billion
BlockFi filed for bankruptcy on November 28, 2022, two weeks after FTX (case information)

Each one held customer coins on the customer's behalf. None of them returned those coins on demand. Customers became creditors and waited months, in some cases years, for bankruptcy courts to decide what they would get back. The self-custodied holders who had already moved their coins off these platforms walked away untouched.

Switzerland has a partial answer. Since August 1, 2021, a customer can claim crypto back from a bankrupt custodian if the custodian promised to keep it available at all times and it is attributable to that customer (SchKG Art. 242a). The bankruptcy office decides first, and the customer pays the cost of the surrender. That beats the US experience above. It still means waiting on an office while your own wallet would let you move the coins today.

Bankruptcy is not the only failure mode. Governments compel exchanges to freeze accounts. KYC reviews lock balances for weeks. A wallet you control has no account to freeze and no custodian to compel.

Four hardware wallets worth buying in 2026

A hardware wallet is a dedicated physical device that holds your private keys offline, away from any computer that can be compromised. Wallets and staying secure covers the broader landscape of wallet types.

Coldcard Q

My long-term stack lives on a Coldcard Q. In my view it is the most security-hardened Bitcoin hardware wallet you can buy. Bitcoin-only firmware, fully airgapped signing over QR codes or microSD (it runs on AAA batteries, so no USB connection is required), and two secure elements from different vendors. Coinkite lists it at USD 319. The learning curve is the point. If you want the highest assurance for a serious stack, this is the device.

Jade Plus

Blockstream's Jade Plus ships fully open-source firmware and supports air-gapped transactions. Blockstream lists the Plus at USD 169.99 and the Jade Core, which lacks the air-gapped mode, at USD 99. Jade supports Bitcoin and Liquid, so it is not strictly Bitcoin-only. If you are starting out and want serious self-custody without overspending, Jade Core is a sensible first device.

Trezor Safe 5

Trezor Safe 5 ships with a colour touchscreen and stays one of the most approachable devices for first-time users. Trezor lists it at CHF 119. Firmware is open source under GPL-3.0 in the public trezor/trezor-firmware repository. Safe 5 and Safe 3 ship with an EAL6+ certified secure element. The older Trezor One and Model T did not. A clean choice for straightforward self-custody.

Ledger Flex

The Ledger Flex ships a 2.8-inch touchscreen, and Ledger says it has sold more than 8 million signers. Ledger has had two notable incidents. In 2020, about 1 million customer email addresses leaked, and for a smaller group also names, postal addresses and phone numbers; Ledger says no payment data, passwords or crypto funds were exposed (Ledger). On December 14, 2023, an attacker published a malicious version of the Connect Kit library to npm and tricked EVM dApp users into signing draining transactions (Ledger incident report). Neither incident exposed keys stored on the hardware. Ledger Recover drew sharp criticism from the Bitcoin community for its key-sharding model, though you opt in to it. If you want the most mainstream device and you understand the tradeoffs, the Flex works.

One rule across all four: buy direct from the manufacturer. Never a reseller, never secondhand. A pre-seeded device is a compromised device.

Getting started in three steps

Three steps. That is it.

Step 1. Buy a hardware wallet. Pick one of the devices above. Order from the manufacturer's website. Verify the tamper-evident packaging when it arrives.

Step 2. Generate your seed phrase. The device generates a list of 12, 20 (SLIP-39 Single-share), or 24 words depending on the model and backup scheme you choose. The BIP-39 spec lives at bitcoin/bips BIP-39 with the 10 supported wordlists here. Trezor sets up the Safe 7, Safe 5, and Safe 3 (since June 2024) with a 20-word SLIP-39 Single-share Backup by default, and you can pick 12 or 24 BIP-39 words instead. Ledger and BitBox02 use BIP-39 words. Write the words on paper. Do not photograph them. Do not type them into any device. Do not put them in the cloud. Paper, somewhere physically secure.

Your seed phrase is your Bitcoin. Anyone who reads it takes everything. Treat it that way.

For the full deep dive on seed phrase security, BIP-39 mechanics, and brute-force risk, read our dedicated piece on BIP-39 seed phrases and Bitcoin wallet security.

Step 3. Transfer your Bitcoin off the exchange. On the hardware wallet, navigate to a receive address. Copy it carefully. On the exchange, initiate a withdrawal to that address. Send a small test transaction first. Verify it landed on-chain. Then move the rest.

Once the on-chain confirmation lands, your Bitcoin is in self-custody. The exchange no longer holds it.

Multisig for larger holdings

Single-key self-custody has one weak spot, that single key. Lose the seed and the Bitcoin is gone. Compromise the device and the seed at once, and the funds are at risk.

My rule of thumb: above roughly 0.5 to 1 BTC, or wherever your personal threshold sits, multisig earns its added complexity.

A 2-of-3 multisig setup creates three separate keys and requires any two to sign a transaction. You can lose or compromise one key without losing the Bitcoin. The single point of failure is gone.

Sparrow Wallet (free, desktop) and Specter Desktop support multisig directly, and you run them yourself. Casa offers managed multisig if you want guidance. Unchained also sells assisted multisig, but it lists no availability outside the United States (Unchained vs Casa), so a Swiss resident cannot use it.

Where most people lose their Bitcoin

The top loss is the seed phrase itself. You can replace a hardware wallet. You cannot replace a seed. If it is lost, the Bitcoin is gone for good. Store it in more than one secure physical location.

A close second is buying hardware secondhand. A used device may have been tampered with. Buy new, buy direct.

App stores have hosted counterfeit wallet apps that steal seeds on first install. Only download companion software from the manufacturer and verify GPG signatures where the vendor publishes them.

And the persistent one is typing the seed into a computer. Once your coins sit on a hardware wallet, its seed belongs only on that device and on your paper or steel backup. Any website, support agent, or "verification" app that asks for the full seed is a scam.

Self-custody is Bitcoin working as designed

If you have not bought Bitcoin yet, start with how to buy Bitcoin in Switzerland. Once you own coins, self-custody is the next move. The wallets that make it possible are open source by design. Browse the open-source Bitcoin projects that hold keys, run nodes, and route payments.

Satoshi designed Bitcoin so individuals could hold their own money without permission. That design only delivers if you hold the keys. An exchange balance is not Bitcoin ownership. It is a claim on Bitcoin held by a third party, with all the counterparty risk that goes with it.

FTX customers believed their Bitcoin was safe. They had delegated control to someone else. The self-custodied holders who watched the collapse from a hardware wallet were not lucky. They were using Bitcoin the way it was designed.

Self-custody is Bitcoin working as Satoshi designed it. Trustless. Uncensorable. Yours.

This post is educational information about Bitcoin self-custody for Swiss and global holders, not investment or security advice. Hardware-wallet firmware and feature sets change. Test every recovery flow on a dedicated device before depositing significant Bitcoin, verify the open-source status of any wallet firmware against the vendor's current public repository, and treat any unsolicited "wallet recovery" or "seed verification" service as a scam. When in doubt, consult a Swiss-licensed security advisor before depositing material capital into a setup you cannot independently verify.

Why this site exists? My Bitcoin journey, five years from zero to writing the BTC2H book.

New to Bitcoin? Start with Chapter 1.

Want the full picture? Read all 19 chapters free or order the physical book.

Frequently Asked Questions

What is Bitcoin self-custody?

Self-custody means you control the private keys to your Bitcoin, usually as a 12, 20 (SLIP-39 Single-share), or 24-word seed phrase depending on the wallet model and backup scheme chosen. No exchange, broker, or custodian can freeze, seize, or lose your funds because no one else holds the keys.

Hardware wallet vs hot wallet, which should I use?

Hardware wallets (Ledger, Trezor, BitBox02) keep private keys on a dedicated offline device, the only safe choice for amounts you cannot afford to lose. Hot wallets (mobile / desktop apps) sign with keys on an internet-connected device and suit small spending balances only.

When does multisig make sense?

My rule of thumb: multisig (a 2-of-3 or 3-of-5 quorum across multiple devices and locations) is worth the operational overhead above roughly 0.5 to 1 BTC, for inheritance setups, or for any holdings you would be unwilling to lose to a single seed-phrase compromise. Tools: Sparrow and Specter Desktop for self-run setups, Casa for managed multisig. Unchained lists no availability outside the United States.

What happens if I lose my seed phrase?

The Bitcoin is unrecoverable. There is no password reset and no support channel. The seed is the wallet. Store at least two physical copies in geographically separated, fire-resistant locations. Consider a steel backup (Cryptosteel, Blockmit, SeedOR) instead of paper alone.

Is Bitcoin self-custody legal in Switzerland?

Yes. No Swiss law requires you to hold Bitcoin through a bank or broker, so keeping it in your own wallet is allowed. For tax, Bitcoin is part of your private wealth, valued at the ESTV Kursliste rate on December 31. Self-custody does not exempt you from the Vermögenssteuer declaration covered in our Bitcoin tax guide.

What is a BIP-39 passphrase and should I use one?

A BIP-39 passphrase (sometimes called the 25th word) is an extra string that combines with your seed phrase to derive a different wallet. A thief with only the seed sees an empty or decoy wallet. Recommended for any holding above casual spending size, but lose the passphrase and the funds are gone.

Should I keep coins on a regulated Swiss platform?

Use Swiss platforms to buy or DCA, then withdraw to your own hardware wallet. Since August 2021, Swiss law lets you claim crypto back from a bankrupt custodian if it was held for you and attributable to you (SchKG Art. 242a), but you still wait for the bankruptcy office and pay the cost of the surrender. In 2022, FTX, Celsius, BlockFi and Voyager all froze or lost customer funds. Withdrawing after each buy removes that wait.