Bitcoin Self Custody Setup From Zero to Cold Wallet

I work in the crypto self-custody space and I have set up every wallet in this guide on a clean Linux box at least once. None of this is theoretical. The Bitcoin you do not control on a hardware wallet you set up yourself is Bitcoin you do not own.

TL;DR

Self-custody means you control the private keys to your Bitcoin. No exchange, no third party, no IOU. When FTX collapsed in November 2022, the only Bitcoin holders who lost nothing were self-custodied. The principle is unchanged in 2026. Hardware wallet (Ledger, Trezor, BitBox02) plus a seed phrase you alone hold, plus no exchange custody beyond a brief test purchase. The phrase that defines this: not your keys, not your coins. Withdraw to your own wallet immediately after every buy.

What happened when FTX collapsed

On November 8, 2022, FTX, the world's third-largest cryptocurrency exchange, froze customer withdrawals overnight. Within 72 hours, it filed for bankruptcy. Customers who had trusted the platform with their Bitcoin lost over $8 billion. Sam Bankman-Fried, once the golden boy of the crypto industry, was later convicted of fraud.

The Bitcoin holders who lost nothing that day had one thing in common. Their Bitcoin was not on FTX. It was in their own wallets, under their own control.

That is bitcoin self custody. Three years later in 2026, it remains the single most important thing you can do to protect your Bitcoin.

What self custody actually means

Bitcoin is controlled by private keys, cryptographic secrets that authorise every transaction. Whoever holds the private key controls the Bitcoin. Full stop.

When your Bitcoin sits on an exchange (Coinbase, Kraken, Binance, any of them) that exchange holds the private keys. You hold a balance in their database. An exchange balance is an IOU. Promises break.

Bitcoin self custody means generating and controlling your own private keys. No third party holds them. No third party can freeze your balance, go bankrupt with your funds, or hand your Bitcoin to a regulator on demand. The private key is yours. The Bitcoin is yours.

The phrase that has defined this principle since Bitcoin's earliest days: not your keys, not your coins.

Why custody risk did not go away

FTX was not a black swan. It was a pattern. Why Bitcoin matters, the case for sovereign money, is clearer every time a custodian fails.

Between 2022 and 2024, a string of Bitcoin exchanges and lending platforms collapsed in sequence:

• Celsius froze withdrawals June 2022, filed for bankruptcy in July
• BlockFi suspended withdrawals November 2022, filed for bankruptcy within weeks
• Voyager filed for bankruptcy July 2022
• FTX collapsed November 2022 with $8B+ in customer funds lost

Every single one of these platforms held customer Bitcoin on their behalf. Every single one failed to return it. The customers who practiced bitcoin self custody, who had already moved their coins off these platforms, were untouched.

The risk is not only exchange bankruptcy. It is also regulatory seizure where governments compel exchanges to freeze or confiscate accounts, and it is arbitrary account locks for KYC failures, jurisdictional issues, or policy decisions. A wallet you control cannot be frozen by a third party. There is no account to restrict. There is no custodian to compel.

Four hardware wallets worth buying in 2026

The most practical way to practice bitcoin self custody is a hardware wallet, a dedicated physical device that stores your private keys offline, away from internet-connected computers that could be compromised. Wallets and staying secure covers the full range of wallet types and how to choose the right one.

Coldcard Q

I keep my long-term stack on a Coldcard Q. It is the most security-hardened Bitcoin hardware wallet available, Bitcoin-only, with fully airgapped operation (signing transactions via QR codes or SD card, no USB connection required) and dual secure elements. This is the device for serious long-term Bitcoin holders who want the highest possible assurance. There is a learning curve and that is the point.

Jade Plus

The Jade from Blockstream is open source firmware and airgap capable. Blockstream Jade Plus retails around $150 USD (standard Jade is around $65). Jade supports Bitcoin and Liquid Network, not strictly Bitcoin-only. Backed by one of the most respected Bitcoin infrastructure companies in the industry. If you are starting out and want serious self-custody without overspending, the standard Jade is the natural first choice.

Trezor Safe 5

Trezor Safe 5 features a colour touchscreen and is one of the most approachable hardware wallets for first-time users. The firmware is open source GPL-3.0 from the public trezor/trezor-firmware repository. Trezor Safe 5 and Safe 3 both ship with an EAL6+ Secure Element. Earlier Trezor models (Trezor One, Model T) shipped without an SE. The Czech company has a long track record for transparency. A solid trusted device for straightforward self-custody.

Ledger Flex

The Ledger Flex features an e-ink touchscreen and is the most widely sold hardware wallet brand globally with millions of units shipped. Ledger has had two major incidents: a customer-data leak in July 2020 (names, addresses, phone numbers, not seeds), and the December 2023 Ledger Connect Kit npm supply-chain compromise that briefly drained ETH wallets connecting through compromised dApps. Neither incident compromised hardware-stored keys. The Ledger Recover feature drew criticism from the Bitcoin community for its key-sharding model, though it is opt-in. For users who want the most mainstream widely-supported device and understand the tradeoffs, the Flex is a capable option.

One rule across all four: buy directly from the manufacturer. Never buy a hardware wallet from a third-party reseller or secondhand. Supply chain integrity matters. A pre-seeded device is a compromised device.

Getting started in three steps

Three steps. That is it.

Step 1. Buy a hardware wallet. Pick one of the devices above. Order directly from the manufacturer's website. When it arrives, verify the packaging is sealed and intact.

Step 2. Generate your seed phrase. When you initialise the device, it will generate a seed phrase, a list of 12, 20 (SLIP-39 Single-share), or 24 words depending on the wallet model and backup scheme chosen. The spec for the BIP-39 list is published at bitcoin/bips BIP-39 with the 10 supported wordlists registered here. Trezor Safe 3 defaults to a 20-word SLIP-39 Single-share Backup with 12 or 24 BIP-39 available in advanced setup; Ledger and BitBox02 default to 24-word BIP-39. Write it down on paper. Do not take a photo. Do not type it into any device or app. Do not store it in a cloud service. Write it on paper and store that paper somewhere physically secure.

Your seed phrase is your Bitcoin. Anyone who obtains it can take everything. Handle it accordingly.

For a full guide to seed phrase security, including BIP-39 mechanics and brute-force risk, read our dedicated article on BIP-39 seed phrases and Bitcoin wallet security.

Step 3. Transfer your Bitcoin off the exchange. On your hardware wallet, navigate to the receive address. Copy it carefully. Go to your exchange account, initiate a withdrawal to that address. Start with a small test transaction. Verify it arrived on-chain. Then transfer the remainder.

Once confirmed, your Bitcoin is in self-custody. The exchange no longer holds it.

Multisig for larger holdings

Single-key self-custody has one remaining vulnerability, that single key. Lose the seed phrase and the Bitcoin is gone. If the device is stolen and the seed phrase compromised, funds are at risk.

For holdings above approximately $10,000, or wherever your personal threshold sits, multisig is worth the added complexity.

A 2-of-3 multisig setup creates three separate keys and requires any two to authorise a transaction. One key can be lost or compromised without losing your Bitcoin. It eliminates the single point of failure inherent in any single-key setup.

Sparrow Wallet (free, desktop) and Specter Desktop support multisig directly. Unchained Capital and Casa offer assisted and managed multisig setups for those who want guidance. Sparrow + Specter is the canonical self-hosted route for significant Bitcoin holdings.

Where most people lose their Bitcoin

The most common loss is the seed phrase itself. The hardware wallet can be replaced. The seed cannot. If it is lost, the Bitcoin is permanently inaccessible. Store it in more than one secure physical location.

A close second is buying hardware second-hand. A used hardware wallet may have been tampered with. Always buy new, always direct from the manufacturer. App stores have also hosted counterfeit wallet applications that steal seed phrases on first install, so only download software from official manufacturer websites and verify GPG signatures where available.

And the persistent one is entering the seed phrase on a computer. Your seed phrase should only ever be entered on the hardware wallet itself. Any software asking for your full seed phrase on a phone or PC is a scam.

Self-custody is Bitcoin working as intended

If you are still deciding whether to buy Bitcoin in Switzerland, start with our guide on how to buy Bitcoin in Switzerland. Once you own it, the move to self-custody is the natural next step.

Bitcoin was designed to give individuals direct uncensorable control over their own money. That design only delivers on its promise if you hold the keys. An exchange balance is not Bitcoin ownership. It is a claim on Bitcoin held by a third party with all the counterparty risk that implies.

FTX customers believed their Bitcoin was safe. They were wrong because they had delegated control to someone else. The self-custody users who held through that collapse, unchanged and unaffected, were not lucky. They were using Bitcoin correctly.

Self-custody is Bitcoin working exactly as Satoshi designed it. Trustless. Uncensorable. Yours.

This post is educational information about Bitcoin self-custody for Swiss and global holders, not investment or security advice. Hardware-wallet firmware and feature sets change. Test every recovery flow on a dedicated device before depositing significant Bitcoin, verify the open-source status of any wallet firmware against the vendor's current public repository, and treat any unsolicited "wallet recovery" or "seed verification" service as a scam. When in doubt, consult a Swiss-licensed security advisor before depositing material capital into a setup you cannot independently verify.

Why this site exists? My Bitcoin journey, five years from zero to writing the BTC2H book.

New to Bitcoin? Start with Chapter 1. It takes 8 minutes.

Want the full picture? Read all 19 chapters free or order the physical book.