What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Digital asset custody is the control and protection of the private keys or signing authority that can move your assets. The assets remain recorded on a blockchain; a wallet or custodian manages the credentials and procedures used to authorize transactions. The right setup depends on how much you hold, how often you transact, who needs access, and whether you can safely manage recovery.
There are three broad approaches: control the keys yourself, use a professional custodian, or combine the two. None removes every risk. Self-custody shifts responsibility to you; third-party custody adds counterparty and account-access risks. A hybrid arrangement can keep reserves in more controlled storage while leaving a limited amount available for routine use.
What digital asset custody protects
A crypto wallet does not contain Bitcoin, ether, or other tokens in the way a physical wallet holds cash. The blockchain records balances and transactions. A wallet manages the keys or credentials used to prove authority to make a transaction, as the SEC’s investor bulletin on crypto-asset custody explains.
- Address: A public identifier used to receive assets. It is not a password and does not by itself authorize transfers.
- Private key or signing shares: Cryptographic authority used to authorize a transaction. Some systems distribute that authority rather than storing one complete key in one place.
- Recovery or seed phrase: A human-readable backup that can restore access in many wallet designs. Anyone who obtains it may be able to control the assets.
- Wallet device or software: The interface and signing environment used to view balances and approve transactions. A hardware device cannot protect a recovery phrase that has been copied or exposed elsewhere.
- Custody account: The contractual relationship with a provider, including its rules for access, withdrawals, asset use, and recovery.
Whoever can authorize a valid transaction generally has practical control of the assets, subject to network rules and any smart-contract restrictions. The key question is therefore not just where assets are stored, but who can approve transfers, under what controls, and what happens if access is lost or a provider fails.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Compare the main custody models
| Model | Who controls signing authority | Advantages | Trade-offs |
|---|---|---|---|
| Self-custody | The owner, or people the owner designates through a wallet design such as multisignature | Direct control, portability, privacy, and no dependence on a custodian’s withdrawal policy or solvency | The owner must protect credentials, approve transactions safely, maintain backups, and plan for recovery and inheritance |
| Exchange custody | The exchange or related service provider, under the account terms | Convenient for trading and may combine custody with other account services | Trading, lending, staking, payments, and custody may be bundled; terms determine whether assets can be used, pledged, or restricted |
| Dedicated professional custody | A custodian or its custody system, often with institutional approval workflows | May offer role-based permissions, reporting, transaction policies, and support for organizations | Introduces provider, legal-entity, insolvency, operational, fee, and withdrawal risks |
| Bank or trust-company custody | The relevant bank or trust entity, subject to its service terms and controls | May fit organizations seeking a regulated financial-institution relationship | Bank status does not establish that every asset is insured or that every product has the same legal treatment |
| Hybrid custody | Split between the owner and one or more providers | Can balance direct access for operations with more controlled custody for reserves | Requires clear allocation, reconciliations, recovery plans, and oversight across systems |
Self-custody avoids dependence on a custodian for access, but the owner bears the consequences of lost credentials, device compromise, phishing, mistaken approvals, and inadequate estate planning. Third-party custody can reduce the operational burden while adding counterparty risk, account restrictions, provider security risk, and possible insolvency exposure. The SEC warns that customers may lose access if a third-party custodian is hacked, shuts down, or becomes bankrupt.
Hot, warm, and cold storage
Hot wallets
A hot wallet is connected to the internet or readily available for frequent transactions. That convenience makes it useful for spending or operational liquidity, but increases exposure to online attacks and compromised devices or accounts.
Warm storage
Warm storage is a practical middle category: systems may be partly connected or use controlled, semi-online signing procedures. The label is not standardized, so ask what connectivity, approvals, and recovery controls the provider actually uses.
Cold storage
Cold storage keeps keys or signing systems offline or isolated from ordinary network access. This can reduce some remote attack paths but tends to make transactions slower and procedures more demanding. It does not prevent stolen or duplicated backups, physical damage, forgotten passphrases, insider access, human error, or malware on a computer used to prepare or verify a transaction.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Ask a provider to describe its actual storage and signing process rather than relying on labels such as “cold” or “institutional-grade.”
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Multisignature and MPC are different approaches
Multisignature
A multisignature wallet requires a threshold number of distinct keys to approve a transaction—for example, two of three or three of five. The design is only as independent as its signers and recovery arrangements.
- How many signatures are required, and who controls each one?
- Are signers located in separate places and managed by separate people or teams?
- Can a signer be replaced if a device is lost or an employee leaves?
- Is there a documented emergency recovery process?
- Are the rules enforced by the wallet itself or only by an administrative dashboard?
Multi-party computation
MPC divides signing authority into cryptographic shares so that a complete private key need not exist on a single device or at a single location. Its actual security depends on how shares, administrators, endpoints, policies, and recovery procedures are arranged.
MPC does not stop an authorized user from approving a fraudulent transfer, and attackers may succeed if they compromise enough endpoints or administrators to meet the signing threshold. Ask who holds each share, how key resharing and recovery work, and what happens if the technology provider is unavailable. Multisignature and MPC address related key-management problems, but they are not interchangeable architectures. BitGo describes both approaches in its institutional custody offering; that is a provider description, not independent proof of security.
Transaction controls matter as much as storage
A secure storage arrangement can still lose assets through a compromised account, a mistaken transfer, or a transaction that a user knowingly or unknowingly authorizes. Useful controls include:
- Separate transaction initiation and approval roles, with more than one approver for material transfers.
- Address allowlists, withdrawal delays, transaction and velocity limits, and out-of-band confirmation.
- Destination-address screening, chain and token verification, and clear transaction previews.
- Protection against address poisoning and blind signing, where a user approves a transaction without being able to understand its meaningful details.
- Emergency account lockdown, independent balance reconciliation, immutable audit logs, and regular access reviews.
Smart-contract permissions deserve particular care. A wallet or platform may be operating as designed while a user approves a malicious contract call or grants a token-spending permission that later allows assets to be transferred. Review what a transaction authorizes, not only the destination address.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Regulatory status is not the same as security or insurance
“Qualified custodian” is a legal and regulatory term, not a synonym for a secure wallet. The SEC’s general custody framework for registered investment advisers describes qualified custodians such as eligible banks and broker-dealers, subject to applicable requirements. Whether a particular entity qualifies for a particular digital-asset arrangement can require entity-specific and facts-and-circumstances analysis; do not assume every crypto company qualifies automatically. See the SEC’s custody rule investor bulletin and Anchorage’s discussion of qualified custody for digital assets, which represents Anchorage’s legal and policy position.
In the United States, the OCC has said national banks and federal savings associations may provide certain crypto-asset custody and execution services, subject to safe-and-sound operations, legal compliance, and third-party-risk management. Its 2025 guidance addresses these activities and outsourcing: see the OCC’s 2025 announcement and Bulletin 2025-17. This does not make every crypto platform a bank, make customer crypto balances FDIC-insured, or give every asset the same legal status as a traditional security.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Check the exact legal entity, jurisdiction, product, and activity. These statuses or controls are distinct and should not be treated as substitutes for one another:
- Federal bank or trust-company status, state trust-company status, or money-transmitter licensing.
- New York Department of Financial Services authorization, SEC registration, or investment-adviser status.
- Commodity or derivatives regulation, SOC 1 or SOC 2 reporting, or an independent audit.
- Qualified-custodian status for a specific regulatory purpose, insurance coverage, and the legal treatment of customer assets in insolvency.
For an institutional customer, the relevant questions are which entity holds the assets, which regulator supervises that entity and activity, and what rights the contract gives the customer. An audit report or license can provide useful evidence without proving that assets are recoverable in every scenario.
Insurance and insolvency need separate scrutiny
Ask what an insurance policy covers
“Insured” is not a guarantee of repayment. Ask for the policy type, insurer, limits, deductibles, exclusions, and claims process. Determine whether coverage applies to theft by hackers, employees, or both; whether it covers hot wallets, cold wallets, or specified assets; and whether the customer is directly protected or depends on a shared aggregate limit.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Also ask whether customer credential loss, smart-contract exploits, forks, governance failures, depegging, market losses, or provider insolvency are excluded. A policy may cover only specified events and may be excess over other insurance.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Read the insolvency and asset-use terms
A technically sound wallet does not establish who owns assets in law or what happens when a provider fails. Review the agreement and ask:
- Are assets held in the customer’s name, in an omnibus wallet, or through a combination of wallet-level and ledger-level records?
- Does the customer have a property interest in assets or only a contractual claim? Are assets legally segregated from the provider’s corporate property?
- Can the provider lend, pledge, stake, rehypothecate, or otherwise use assets? Can it net balances or exercise setoff?
- Which legal entity holds the assets, which law governs, and which sub-custodians or technology providers are involved?
- What happens during a withdrawal freeze, and what priority do customers have over general creditors?
These details determine legal and operational exposure; the word “custody” alone does not answer them.
Check asset, network, staking, and protocol support
Support for one coin does not mean a provider supports every token, network, or activity associated with it. Confirm whether the exact asset and network are supported for custody, deposits, withdrawals, trading, or staking; these may differ. Native and wrapped assets may also be treated differently.
- Confirm the exact blockchain network, token contract, and any memo or tag requirement before sending. A wrong-network deposit may be unrecoverable or require provider assistance.
- Ask what happens during a hard fork, chain reorganization, network outage, or token migration, and whether unsupported deposits can be recovered.
- For staking, ask who selects validators, whether assets are locked, how long unbonding takes, and who bears slashing, smart-contract, and operational risks.
- For DeFi, consider protocol exploits, bridges, oracles, governance attacks, liquidity problems, and token permissions separately from key custody.
- For stablecoins, custody does not remove issuer, reserve, redemption, depegging, regulatory, or blockchain risk.
- NFTs and tokenized securities may have distinct transfer restrictions, issuer dependencies, contract controls, legal rights, and valuation issues.
How to evaluate a custody provider
Use the provider’s legal documents and operational evidence, not just its feature list or brand. The SEC’s custody bulletin advises investors to investigate regulation, supported assets, storage, access controls, insurance, and fees.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsBest Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
| Area | Questions to ask | Why it matters |
|---|---|---|
| Legal entity and geography | Which entity holds assets? Where is it authorized, and which customers and products are covered? | A brand name does not identify the contracting entity or applicable protections. |
| Segregation and insolvency | How are assets recorded and held? What are the customer’s rights if the provider fails? | Operational separation does not by itself establish bankruptcy treatment. |
| Key architecture and recovery | Does the system use a single key, multisignature, MPC, threshold signing, or hardware security modules? How are signers replaced? | Architecture reveals concentration, recovery, and provider-dependence risks. |
| Approvals and withdrawals | Can one person move assets? Are there allowlists, delays, approval thresholds, and emergency controls? | Limits insider, account-takeover, and rushed-transfer risks. |
| Insurance | What events, assets, wallets, and limits are covered? What are the exclusions and deductibles? | The word “insured” is otherwise too vague to assess. |
| Asset and activity support | Are the required assets, networks, staking arrangements, and withdrawal routes supported? | Prevents unsupported deposits and unexpected restrictions. |
| Subcontractors and resilience | Who are the subprocessors and sub-custodians? What are the incident, business-continuity, and disaster-recovery plans? | Outsourcing can add dependencies and recovery points. |
| Auditability and compliance | Are SOC reports, audits, logs, access reviews, sanctions screening, and transaction monitoring available? | Evidence helps evaluate controls and investigate incidents. |
| Availability and service | What are support hours, escalation paths, service levels, and withdrawal times during disruptions? | Access can matter most during market or network stress. |
| Fees and portability | What are custody, implementation, transfer, staking, account-closure, and foreign-exchange fees? Can assets be moved elsewhere? | Headline fees can omit material costs, while portability reduces lock-in. |
Institutional buyers should also assess know-your-customer and anti-money-laundering procedures, sanctions screening, Travel Rule handling where applicable, data residency, employee background checks, penetration testing, incident response, service-level agreements, and subprocessor oversight. OCC guidance for banks providing or outsourcing crypto safekeeping emphasizes risk management and third-party oversight; the 2025 bulletin is relevant to U.S. national banks and federal savings associations, not a blanket endorsement of any provider.
A practical setup for an individual
- Keep only a limited operating balance in an exchange account or hot wallet; decide how much you could tolerate losing or being unable to access temporarily.
- If using a hardware wallet for longer-term holdings, buy it from the manufacturer or an authorized channel and initialize it yourself.
- Never accept a device with a prewritten recovery phrase. Record the phrase offline; do not photograph it, email it, or upload it to cloud storage.
- Use a passphrase only if you understand that losing it may make recovery impossible and can manage it reliably.
- Test the recovery process with a small amount before transferring a larger balance. Send a small test transaction to a new address before making a significant transfer.
- Verify the destination address and network on the trusted device display, not only on the computer or phone used to prepare the transaction.
- Keep backups in separate, secure locations and document how a trusted person can find recovery instructions without exposing the phrase itself.
- Use strong account passwords and multifactor authentication for services, watch for phishing, keep holdings private, and follow official procedures for firmware and companion-software updates.
- Review token permissions and revoke approvals you no longer need. Plan for incapacity, inheritance, and device failure.
The SEC likewise advises protecting seed phrases, using strong passwords and multifactor authentication, keeping holdings private, and watching for phishing attempts in its investor bulletin.
A governance-first approach for a business or fund
- Define which assets need custody and which need operational liquidity; identify the legal entity that owns them.
- Approve the assets, networks, counterparties, transaction limits, and activities the organization will permit.
- Choose an architecture—professional custodian, MPC platform, multisignature, or hybrid—based on operating needs and legal requirements, not a security label alone.
- Separate initiation, approval, settlement, and reconciliation. Require at least two authorized approvers for material transfers.
- Obtain the custody agreement, fee schedule, insurance summary, control reports, supported-asset list, and continuity documentation.
- Have counsel review segregation, insolvency, lending, staking, rehypothecation, setoff, and sub-custody provisions.
- Test account recovery and incident response before funding; maintain independent balance and transaction records.
- Review access regularly, remove departing employees promptly, and consider a second-provider or emergency-access plan where practical.
Choose based on the risks you can manage
A small retail holder who is comfortable protecting a recovery phrase may prefer self-custody for long-term assets and keep only a limited amount readily accessible. Someone who cannot reliably secure and recover keys may prefer a reputable provider, while recognizing the account, legal, and provider risks. A business with multiple users, payment needs, or governance obligations will usually need documented roles, approval rules, reconciliation, and tested recovery, whether it uses a custodian or a hybrid model.
Before moving assets, check the provider’s current legal agreement, supported-asset and network list, withdrawal rules, fee schedule, insurance terms, and recovery process. Availability, regulatory treatment, and protections vary by jurisdiction and product. For material holdings or institutional arrangements, obtain legal, tax, and financial advice suited to the relevant jurisdiction.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
