In this article
- TL;DR
- What happened when FTX collapsed
- What self-custody actually means
- Why custody risk did not go away
- Four hardware wallets worth buying in 2026
- Coldcard Q
- Jade Plus
- Trezor Safe 5
- Ledger Flex
- Getting started in three steps
- Multisig for larger holdings
- Where most people lose their Bitcoin
- Self-custody is Bitcoin working as designed
I work in the crypto self-custody space. I have set up every wallet in this guide on a clean Linux box at least once. The Bitcoin you do not hold on a device you keyed yourself is Bitcoin somebody else owns.
TL;DR
Self-custody means you hold the private keys. No exchange. No IOU. When FTX collapsed in November 2022, the holders who lost nothing were self-custodied. The rule has not moved in 2026. A hardware wallet (Ledger, Trezor, BitBox02, Coldcard, Jade) plus a seed phrase only you hold. Withdraw after every buy. Not your keys, not your coins.
What happened when FTX collapsed
On November 8, 2022, FTX, the third-largest cryptocurrency exchange in the world, froze customer withdrawals overnight. Inside 72 hours it filed for bankruptcy. Customers lost over $8 billion in Bitcoin they thought was theirs. Sam Bankman-Fried was later convicted of fraud.
The holders who lost nothing that day had one thing in common. Their Bitcoin was not on FTX. It sat in their own wallets, under their own keys.
That is Bitcoin self-custody. In 2026 it is still the single most important thing you can do to protect coins you already own.
What self-custody actually means
Private keys control Bitcoin. Whoever holds the key controls the coin. Full stop.
When your Bitcoin sits on Coinbase, Kraken, Binance, or any other exchange, the exchange holds the key. You hold a balance in a database. That balance is an IOU. IOUs break.
Self-custody means you generate and hold the key yourself. No third party can freeze the balance, file for bankruptcy with your funds inside it, or hand the coins to a regulator on demand. The key is yours. The Bitcoin is yours.
The phrase has carried this principle since the earliest days of Bitcoin: not your keys, not your coins.
Why custody risk did not go away
FTX was not a black swan. It was a pattern. Why Bitcoin matters makes the case for sovereign money clearer every time another custodian fails.
Between 2022 and 2024 a sequence of exchanges and lending platforms went down:
- Celsius froze withdrawals in June 2022 and filed for bankruptcy in July
- BlockFi suspended withdrawals in November 2022 and filed weeks later
- Voyager filed for bankruptcy in July 2022
- FTX collapsed in November 2022 with over $8B in customer funds lost
Each one held customer Bitcoin on the customer's behalf. Each one failed to return it. The self-custodied holders who had already moved their coins off these platforms walked away untouched.
Bankruptcy is not the only failure mode. Governments compel exchanges to freeze accounts. KYC reviews lock balances for weeks. A wallet you control has no account to freeze and no custodian to compel.
Four hardware wallets worth buying in 2026
A hardware wallet is a dedicated physical device that holds your private keys offline, away from any computer that can be compromised. Wallets and staying secure covers the broader landscape of wallet types.
Coldcard Q
My long-term stack lives on a Coldcard Q. It is the most security-hardened Bitcoin hardware wallet you can buy. Bitcoin-only firmware, fully airgapped signing over QR codes or SD card (no USB required), and dual secure elements. The learning curve is the point. If you want the highest assurance for a serious stack, this is the device.
Jade Plus
Blockstream's Jade Plus ships open-source firmware and supports airgap signing. The Plus retails around $150 USD, the standard Jade around $65. Jade supports Bitcoin and Liquid, so it is not strictly Bitcoin-only. Blockstream has one of the strongest reputations in Bitcoin infrastructure. If you are starting out and want serious self-custody without overspending, standard Jade is the natural first device.
Trezor Safe 5
Trezor Safe 5 ships with a colour touchscreen and stays one of the most approachable devices for first-time users. Firmware is open source under GPL-3.0 in the public trezor/trezor-firmware repository. Safe 5 and Safe 3 ship with an EAL6+ Secure Element. The older Trezor One and Model T did not. The Czech team has a long record on transparency. A clean choice for straightforward self-custody.
Ledger Flex
The Ledger Flex ships an e-ink touchscreen and sits inside the most widely sold hardware wallet brand on earth, with millions of units in circulation. Ledger has had two notable incidents: a July 2020 customer-data leak (names, addresses, phone numbers, no seeds), and the December 2023 Connect Kit npm supply-chain compromise that briefly drained ETH wallets connecting through compromised dApps. Neither touched keys stored on the hardware. Ledger Recover drew sharp criticism from the Bitcoin community for its key-sharding model, though you opt in to it. If you want the most mainstream device and you understand the tradeoffs, the Flex works.
One rule across all four: buy direct from the manufacturer. Never a reseller, never secondhand. A pre-seeded device is a compromised device.
Getting started in three steps
Three steps. That is it.
Step 1. Buy a hardware wallet. Pick one of the devices above. Order from the manufacturer's website. Verify the tamper-evident packaging when it arrives.
Step 2. Generate your seed phrase. The device generates a list of 12, 20 (SLIP-39 Single-share), or 24 words depending on the model and backup scheme you choose. The BIP-39 spec lives at bitcoin/bips BIP-39 with the 10 supported wordlists here. Trezor Safe 3 defaults to a 20-word SLIP-39 Single-share Backup with 12 or 24 BIP-39 available in advanced setup. Ledger and BitBox02 default to 24-word BIP-39. Write the words on paper. Do not photograph them. Do not type them into any device. Do not put them in the cloud. Paper, somewhere physically secure.
Your seed phrase is your Bitcoin. Anyone who reads it takes everything. Treat it that way.
For the full deep dive on seed phrase security, BIP-39 mechanics, and brute-force risk, read our dedicated piece on BIP-39 seed phrases and Bitcoin wallet security.
Step 3. Transfer your Bitcoin off the exchange. On the hardware wallet, navigate to a receive address. Copy it carefully. On the exchange, initiate a withdrawal to that address. Send a small test transaction first. Verify it landed on-chain. Then move the rest.
Once the on-chain confirmation lands, your Bitcoin is in self-custody. The exchange no longer holds it.
Multisig for larger holdings
Single-key self-custody has one weak spot, that single key. Lose the seed and the Bitcoin is gone. Compromise the device and the seed at once, and the funds are at risk.
For holdings above roughly $10,000, or wherever your personal threshold sits, multisig earns its added complexity.
A 2-of-3 multisig setup creates three separate keys and requires any two to sign a transaction. You can lose or compromise one key without losing the Bitcoin. The single point of failure is gone.
Sparrow Wallet (free, desktop) and Specter Desktop support multisig directly. Unchained Capital and Casa offer assisted and managed multisig if you want guidance. Sparrow plus Specter is the canonical self-hosted route for a serious stack.
Where most people lose their Bitcoin
The top loss is the seed phrase itself. You can replace a hardware wallet. You cannot replace a seed. If it is lost, the Bitcoin is gone for good. Store it in more than one secure physical location.
A close second is buying hardware secondhand. A used device may have been tampered with. Buy new, buy direct.
App stores have hosted counterfeit wallet apps that steal seeds on first install. Only download companion software from the manufacturer and verify GPG signatures where the vendor publishes them.
And the persistent one is typing the seed into a computer. Your seed phrase only ever belongs on the hardware wallet itself. Any software that asks for the full seed on a phone or PC is a scam.
Self-custody is Bitcoin working as designed
If you have not bought Bitcoin yet, start with how to buy Bitcoin in Switzerland. Once you own coins, self-custody is the next move. The wallets that make it possible are open source by design — browse the open-source Bitcoin projects that hold keys, run nodes, and route payments.
Satoshi designed Bitcoin so individuals could hold their own money without permission. That design only delivers if you hold the keys. An exchange balance is not Bitcoin ownership. It is a claim on Bitcoin held by a third party, with all the counterparty risk that goes with it.
FTX customers believed their Bitcoin was safe. They had delegated control to someone else. The self-custodied holders who watched the collapse from a hardware wallet were not lucky. They were using Bitcoin the way it was designed.
Self-custody is Bitcoin working as Satoshi designed it. Trustless. Uncensorable. Yours.
This post is educational information about Bitcoin self-custody for Swiss and global holders, not investment or security advice. Hardware-wallet firmware and feature sets change. Test every recovery flow on a dedicated device before depositing significant Bitcoin, verify the open-source status of any wallet firmware against the vendor's current public repository, and treat any unsolicited "wallet recovery" or "seed verification" service as a scam. When in doubt, consult a Swiss-licensed security advisor before depositing material capital into a setup you cannot independently verify.
Why this site exists? My Bitcoin journey, five years from zero to writing the BTC2H book.
New to Bitcoin? Start with Chapter 1. It takes 8 minutes.
Want the full picture? Read all 19 chapters free or order the physical book.
