The key difference is who controls the private keys. With a custodial wallet, a provider manages access to the keys; with a non-custodial wallet, you control the keys and are responsible for securing them and keeping recovery information safe. Neither arrangement is automatically safer: custody shifts risk between your own key management and reliance on a provider.
Hot versus cold describes whether a wallet is connected to the internet—not who controls its keys. The SEC’s December 12, 2025 investor bulletin on crypto asset custody explains these distinctions. It reflects SEC staff views and is not a binding rule or regulation.
What does a crypto wallet actually hold?
A crypto wallet does not literally store coins or tokens. It stores or manages private keys that let someone access and authorize transactions involving assets recorded on a blockchain or similar network. A public key can be used to receive assets; it does not authorize spending. The private key is what authorizes transactions. The SEC explains how keys relate to crypto wallets and assets.
Custodial vs. non-custodial wallets at a glance
| Decision | Non-custodial (self-custody) | Custodial (third-party custody) |
|---|---|---|
| Who controls the private keys? | You control them. | The provider manages and controls access to them. |
| Where does the main security responsibility sit? | You must protect the keys, recovery phrase, and device. | You must assess the provider, account security, terms, fees, and withdrawal access. |
| What does recovery depend on? | Keeping the key or seed phrase safe and usable. | Provider operations and account recovery procedures; intermediary arrangements can also affect access. |
| Core tradeoff | More direct control, with responsibility for your own key security. | The provider handles key management, but you depend on that provider. |
How non-custodial wallets work
In a non-custodial wallet, you control the private keys directly. That gives you direct control over signing transactions, but it also makes you responsible for keeping the keys and recovery information secure. The SEC states that self-custody means you have “sole responsibility for the security of your crypto assets’ private keys.” Its custody bulletin also cautions that losing or compromising keys or a seed phrase can mean losing access to assets.
Recommended Free Tools
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Recovery phrase and device loss
A seed phrase is a sequence of words that can restore a wallet if a key, device, or wallet software is lost or damaged. The SEC advises users never to share private keys or seed phrases. Anyone who obtains them may be able to access the wallet, so treat them as sensitive recovery credentials rather than ordinary account details. SEC wallet security guidance.
How custodial wallets work
With a custodial wallet, a third-party provider manages and controls access to the private keys. The provider may make using or recovering an account more familiar, but access then depends partly on the provider’s systems, policies, and continued operation. The SEC warns that if a custodian is hacked, shuts down, or goes bankrupt, users may lose access to their crypto assets. This is a possible risk, not a guaranteed outcome. SEC custody bulletin.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Withdrawal and insolvency risk
Intermediary arrangements can create uncertainty about ownership or return of assets if withdrawals are suspended or a provider enters bankruptcy. The SEC’s 2023 Investor Bulletin: Holding Your Securities discusses this risk for customers holding crypto assets through intermediaries. It does not mean every custodial wallet will experience suspended withdrawals or bankruptcy, and the result depends on the particular arrangement and applicable terms.
Is custodial or non-custodial safer?
There is no universal winner. Self-custody avoids depending on a custodian to control your keys, but mistakes, theft, or loss of your recovery information can leave you unable to access assets. Custody transfers key management to a provider, but introduces provider and account-access risks. Your choice depends on which responsibilities and risks you can manage reliably.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Do not assume that custodial crypto balances have bank-deposit protections or that every provider’s insurance covers customer assets. Check the specific provider’s terms and any insurance policy, including what it covers and excludes. The SEC recommends asking about safeguards and insurance rather than assuming protection applies. SEC guidance on evaluating custody arrangements.
Hot and cold wallets are a separate choice
Hot and cold describe internet connectivity, not custody. A hot wallet is connected to the internet and may be a desktop, mobile, or web application. A cold wallet is generally offline and is typically a physical device. Either can be used with self-custody or third-party custody.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
| Type | Typical benefit | Key tradeoff |
|---|---|---|
| Hot wallet | Convenient for transactions. | More exposed to online threats. |
| Cold wallet | Generally less exposed to cyberthreats. | Less convenient and vulnerable to loss, damage, or theft. |
These are general characteristics, not a guarantee of security. The SEC describes cold wallets as generally more secure against cyberthreats than hot wallets, while also noting their physical risks and lower convenience. SEC hot- and cold-wallet overview.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to choose between the two
Self-custody may suit you if
- You are comfortable setting up and maintaining a wallet.
- You can protect private keys and recovery information against loss, theft, and disclosure.
- You understand that a lost or compromised key or seed phrase may mean losing access.
Third-party custody may suit you if
- You prefer a provider to manage key access.
- You are willing to rely on its account procedures, operations, and withdrawal policies.
- You can review its custody practices, fees, terms, and what happens if it fails.
The SEC frames the decision with two useful questions: “Are you comfortable setting up and maintaining your crypto wallets?” and “What happens if the custodian fails?” SEC investor bulletin.
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Custodian due-diligence checklist
Before entrusting a provider with custody, review the arrangement rather than relying on a general claim that assets are “secure” or “insured.” Ask and verify:
- How the provider is regulated, and which legal entity will hold or manage assets.
- Which assets it supports and how private keys are held, who can access them, and whether custody is subcontracted.
- What security controls apply and how the provider handles account access and recovery.
- Whether customer assets may be used, lent, or commingled, and what the terms say about ownership and withdrawals.
- What privacy practices apply and what transaction, transfer, account, or closure fees may be charged.
- What happens if withdrawals are paused, the provider shuts down, or it becomes insolvent.
- Whether any insurance applies to your assets, and the policy’s limits, exclusions, and conditions.
Provider features, protections, and fees vary by provider, asset, and jurisdiction. Read the current terms and applicable protections for the specific service you plan to use. The SEC’s custody bulletin lists questions for evaluating providers and their arrangements.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
