Choose a crypto custody arrangement by finding out who can authorize a transfer, what happens if the provider fails, and how you can withdraw. Self-custody gives you control of the private keys and responsibility for protecting them; third-party custody puts key access under a provider’s control. Neither label, nor the words “hot” and “cold,” tells the whole story.
Start with the question of control
Ask who holds or controls the key material, who can authorize a transfer, and whether another party has a technical means to move or block your assets. A provider’s promise not to exercise control is not the same as lacking the ability to do so. Shared-key and multisignature arrangements need the same scrutiny: determine who can combine the required authority or otherwise initiate a transfer.
“Hot” and “cold” describe connectivity or storage approaches, not who controls the assets. Either can be used in self-custody or third-party custody. A cold-storage claim therefore does not, by itself, establish that you control the keys or can withdraw on demand.
Compare the main custody models
| Arrangement | Who controls transfer access? | Responsibility and trade-offs |
|---|---|---|
| Self-custody | You control the private keys and authorize transfers. | You are responsible for setup, security, backups and recovery. Losing or exposing keys or recovery information can mean permanent loss of access. A physical cold-wallet device may have an upfront purchase cost. |
| Exchange-based custody | The exchange manages key access; account rules and controls affect transfers. | It may simplify access for trading, but you depend on the exchange’s security, asset-use policies, account controls and withdrawal process. |
| Dedicated third-party custody | A specialist provider holds or administers assets for a client; the contract and technical setup determine the details. | Review the provider’s controls, service terms and exit process. Calling a provider “professional” does not establish its legal status, solvency protection, insurance or withdrawal quality. |
| Shared-key or multisignature arrangement | Authority is distributed, but the parties able to combine it determine who can move assets. | Assess the actual signing and recovery process. A partial key shard or multisig label alone does not establish whether the arrangement is self-custody or third-party custody. |
The SEC’s investor bulletin distinguishes self-custody from third-party custody and suggests asking, “What happens if the custodian fails?” and how the custodian uses crypto assets. It is educational staff material, not a rule, regulation or Commission statement: SEC investor bulletin on crypto asset custody.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Assess security and how the provider uses assets
Do not stop at a security badge or a claim that assets are “insured,” “segregated” or held in cold storage. Ask for operational detail and read the terms that determine what the provider may do with assets and what you can recover after an incident.
- Key access and storage: Where are keys held? Which employees, vendors or other parties can access them? Does the provider use hot wallets, cold wallets or both, and does it subcontract storage?
- Security controls: What physical and cyber procedures protect keys and assets? Ask how the provider handles incidents, account freezes and customer support.
- Asset use: Can it lend, pledge, rehypothecate or commingle customer assets? Is explicit customer consent required? The SEC bulletin specifically prompts investors to ask how a third-party custodian uses crypto assets.
- Insurance: What risks and assets does coverage include? What are the limits and exclusions, and does coverage apply to your loss scenario? Do not treat a general insurance claim as proof that your balance is protected.
- Privacy: What identity and holdings information does the provider collect, and how is it protected or used?
- Track record and status: Check the provider’s background and whether it is regulated for the relevant service in the applicable jurisdiction. A label such as “regulated” does not, on its own, establish insolvency protection or insurance for your holdings.
Proof-of-reserves by itself does not establish a provider’s liabilities, your legal ownership rights or insolvency protection. Evaluate those questions separately through the governing terms and applicable law.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Check ownership and insolvency treatment under the relevant law
What happens if a custodian becomes insolvent depends on the service, contract and jurisdiction. Do not assume a rule that applies to one provider type or country applies to every exchange or custody service.
European Union: MiCA requirements for covered providers
Under MiCA, covered crypto-asset service providers must have client agreements that describe the service, custody policy, authentication, security systems, fees and applicable law. Article 75 also requires a client position register, procedures to safeguard assets or access means, position statements at least quarterly and on request, procedures to return assets or access means as soon as possible, and legal and operational segregation of client assets from the provider’s holdings. Article 70 requires adequate arrangements to safeguard client ownership rights, especially in insolvency, and to prevent use of client crypto-assets for the provider’s own account. Applicability depends on the provider, service and law.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Sources: ESMA MiCA Article 75 and ESMA MiCA Article 70.
United Kingdom: assess technical control and withdrawal friction
The FCA Handbook’s PERG 18 describes control in terms of whether a firm can, by any means, bring about a transfer of the benefit of the asset. A firm presenting a solution as self-custody must genuinely lack that means; a contractual promise not to exercise control does not settle the technical question. This is UK guidance: FCA Handbook PERG 18.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
The FCA’s GC26/2 is consultation guidance, not a global rule. In its UK context, it identifies hidden fees, complex withdrawal processes and opaque extended holds as poor practices, and discusses access to private keys, transaction records, switching and withdrawal to self-custody: FCA GC26/2 consultation guidance.
United States: distinguish proposals from current rules
As of October 7, 2026, the SEC’s October 1, 2026 entry describes proposed amendments for investment advisers and regulated funds, including conditional options for adviser or fund self-custody and custody by state trust companies. These were proposals, not final rules, and concern the specified adviser and fund context. They do not establish the insurance or insolvency status of a retail customer’s exchange balance: SEC Crypto@SEC updates.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Verify that you can withdraw and leave
An account balance or display of assets does not guarantee that you can withdraw promptly. Before depositing, find the actual exit process and check each asset and network you intend to use.
- Supported assets and withdrawal networks, including whether the exact network you need is available.
- Authentication steps, address allowlisting, minimums, limits and transfer charges.
- Typical processing times, any lockups, and staking redemption periods.
- Whether the provider can delay or restrict withdrawals, what triggers a hold, and how it explains the decision.
- How to escalate a delayed withdrawal or account freeze, and what records you can export if you switch providers.
Ask the provider to explain the complete exit path before funding the account. The UK FCA consultation guidance specifically flags barriers such as hidden fees, complex processes and opaque extended holds; its guidance should not be treated as a rule for other jurisdictions.
Calculate total cost and operational fit
Compare the costs that apply to your intended use, not just a headline custody fee. Check asset-based charges, transaction and transfer fees, setup costs and account-closure fees. Then consider whether supported assets and networks match your needs and whether customer support can help during an incident, withdrawal hold or recovery problem.
For self-custody, a hardware wallet is one possible physical device for cold storage, but buying a device does not remove the responsibility to secure keys and recovery information. Choose that route only if you can manage the setup, backup and recovery process yourself.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Quick Recap
A practical decision checklist
- Map control: Identify who holds key material, who can authorize transfers, and whether any provider can technically move or block assets.
- Test your own capability: For self-custody, make sure you can set up the wallet and protect and recover its keys. For provider custody, understand what the provider controls.
- Review security and asset use: Get clear answers on storage, access, subcontractors, physical and cyber controls, commingling, lending and insurance exclusions.
- Read the failure and ownership terms: Find out what happens after a hack, shutdown or insolvency, and identify the governing law and any applicable customer-asset protections.
- Walk through withdrawal: Confirm supported networks, fees, limits, delays, lockups and escalation steps before transferring funds in.
- Compare total cost and support: Include all relevant fees and judge whether the provider’s service and incident support fit your needs.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
