Crypto custody is fundamentally about who can authorize a transfer and who is responsible for protecting that authority. A wallet generally manages access credentials rather than holding coins or tokens themselves: the private key authorizes transactions, while a public address can be shared to receive assets. For financial advisers, that distinction matters because custody questions can turn on authority and access—not only on who physically possesses a device. Self-custody, third-party custody, and hot or cold storage describe different parts of the arrangement and should be evaluated separately.
What a private key controls
A blockchain records transactions and balances. A wallet is software, a device, or a service that manages credentials used to interact with that record; it does not literally contain the crypto asset. The key question is who has the ability to authorize a transaction that changes control of the asset.
As an Amazon Associate I earn from qualifying purchases.
Private key, public key, and address
A private key is a cryptographic credential used to authorize a transaction. A public key or address is used to receive assets or verify transactions and is generally safe to share for that purpose. Sharing a receiving address does not give someone authority to spend the assets associated with it. Someone with sufficient signing control, by contrast, can authorize a transfer.
Seed phrases and recovery
Some wallets use a seed phrase to regenerate or restore wallet access. Treat that phrase as a high-value credential: anyone who obtains it may be able to gain control of the wallet, and losing it can make recovery impossible. The SEC’s December 12, 2025 investor bulletin warns investors not to share private keys or seed phrases and explains that loss or theft may permanently remove access. An adviser, custodian, vendor, or support representative should not ask a client to disclose a seed phrase.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Because blockchain transfers may be irreversible, a mistake or compromise can have consequences that are difficult or impossible to undo. The SEC Division of Investment Management’s March 12, 2019 staff discussion identifies key pairs, blockchain-based transfers, and the inability to recover assets once lost as digital-asset custody considerations. That discussion is background, not legal advice about a particular asset or advisory arrangement.
Self-custody and third-party custody allocate control differently
In self-custody, the owner—or an adviser or designated operator acting for the owner—manages the keys and bears the work of protecting access, backups, approvals, and recovery. In third-party custody, a provider manages access to keys and the adviser must assess that provider’s controls, contractual obligations, and ability to deliver or transfer assets.
| Question | Self-custody | Third-party custody |
|---|---|---|
| Who manages key access? | The owner, adviser, or designated operators. | The custodian or service provider. |
| Main operational burden | Key generation, access controls, backups, recovery planning, and transaction approvals. | Provider diligence, contract rights, operational oversight, monitoring, and exit or failure planning. |
| Risks to examine | Lost or stolen keys, compromised devices or credentials, insider access, and failed recovery. | Provider breach or outage, insolvency or withdrawal restrictions, subcontractor exposure, and unclear asset rights or use. |
| Questions to ask | Who can sign? Are multiple people required to approve a transfer? How does recovery work, and who can access backups? | Who holds or controls keys? Are assets segregated, lent, or reused? What does insurance cover? What happens at failure or termination? |
| Possible storage methods | Hot, cold, or a combination. | Hot, cold, or a combination. |
Neither model eliminates risk. Self-custody puts more key-management responsibility on the owner and its operators. Third-party custody shifts some operational work to a provider but creates a need to understand the provider’s access, asset treatment, controls, and failure arrangements. The SEC investor bulletin describes these trade-offs and recommends asking detailed questions about a provider rather than assuming that the label “custodian” answers them.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Hot and cold describe storage method, not custody ownership
Hot and cold storage are a second axis. Hot storage refers broadly to keys or signing arrangements connected to online systems, which can make transactions more convenient but can increase exposure to cyber threats. Cold storage uses an approach intended to keep key material disconnected from online systems. Actual implementations vary, and storage labels alone do not establish the quality of the safeguards.
Either self-custody or third-party custody can use hot storage, cold storage, or a mix. A third-party custodian may keep some assets in cold storage and use hot or warm arrangements for transactions; a self-custody arrangement can also combine methods. Do not infer who controls the keys from the word “cold.” Instead, ask who can authorize transactions, how access is controlled, and how the arrangement works when a transfer is needed.
A consumer crypto hardware wallet is one possible cold-storage device, not a complete custody program. A device alone does not establish institutional suitability, adviser compliance, secure governance, or a workable recovery plan. The SEC’s October 2026 proposed text discusses security practices such as air-gapped storage, hardware security modules, and cold storage as possible approaches; it does not mandate one technical method. It also recognizes that more frequent trading may require hot or warm storage with other mitigations. “Cold is always safer” is therefore not a sufficient custody policy.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Custody is about authority and access, not just possession
For advisers, custody analysis may involve authority to obtain or move client assets, not simply whether the adviser holds a wallet or device. An SEC staff discussion from 2019 describes custody as potentially including arrangements that give an adviser authority or permission to withdraw client funds or securities on instruction to a custodian. Whether a particular asset or arrangement falls within applicable requirements depends on its facts and governing law; not every crypto asset is a security, and legal treatment is not identical for every adviser relationship.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →The SEC’s October 1, 2026 release, “Adviser and Regulated Fund Custody Rules; Crypto Custody Rules,” is a proposed rule—not final law. The SEC identifies it as release IA-7023 / IC-36353, file S7-2026-35, and lists December 7, 2026 as the public-comment deadline. The proposal would create crypto-specific custody provisions, including a conditional framework for adviser and regulated-fund self-custody and provisions for use of state trust companies under conditions. Those proposed provisions should not be described as current binding crypto-specific requirements.
The proposal is relevant to planning, but it does not replace analysis of existing obligations or the facts of a specific relationship. The 2019 staff discussion is also not a substitute for current legal advice. Advisers should determine how applicable rules treat the assets, authority, entities, contracts, and operational arrangement at issue with qualified counsel.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
What the proposed adviser self-custody safeguards would involve
The proposed rule would permit adviser self-custody only conditionally. Among the proposed elements, an adviser would document at least quarterly that a qualified custodian is unavailable for the crypto asset and satisfy expertise and safeguarding conditions. The proposal describes these elements as requirements of a proposed framework; they are not adopted crypto-specific rule requirements as of October 13, 2026.
Proposed controls and governance
- Systems and procedures for managing private keys, including limiting access to designated supervised persons.
- Joint authorization of transactions by at least two persons.
- Segregation by client-specific blockchain addresses.
- Cybersecurity controls and measures to protect backup key material against unauthorized or accidental use.
- An annual internal-control report prepared by an independent public accountant.
- For a regulated fund, board oversight and designation provisions also appear in the proposal.
The proposal discusses secure key generation, backups, air-gapped storage, hardware security modules, and cold storage as possible safeguards rather than prescribing a single device or storage design. Advisers should distinguish the proposed control objectives from the technical tools that might support them. Choosing a storage device does not, by itself, satisfy governance, access, audit, recovery, or legal requirements.
Recommended Free Tools
How to evaluate a third-party crypto custodian
Use the following questions as a practical diligence framework. They are not a claim that the SEC investor bulletin is a legal checklist for every adviser. Ask for specific explanations and relevant contractual or control documentation rather than relying on broad assurances.
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Assets, networks, and transaction support
- Which crypto assets and blockchain networks does the provider support?
- Can it support the client’s intended activity, including the particular transfers or other transactions contemplated?
- Are there asset-specific limits, withdrawal conditions, or operational dependencies that could affect access?
Key access and transaction approval
- Who holds or controls the private keys, and which employees or other parties can access signing systems or backups?
- How are approvals authenticated, and does the provider require multiple people or independent approvals for transactions?
- What does the provider mean by hot, warm, and cold storage, and how is the allocation made?
Security, continuity, and subcontractors
- What physical, cybersecurity, insider-risk, business-continuity, and incident-response controls apply?
- Does the provider use subcontractors or sub-custodians? Where are key materials and records managed, and who is accountable for their controls?
- How will the adviser be notified of an incident, outage, or material change, and what access or transfer options are available during disruption?
Asset rights and use
- Are client assets held in individually identified addresses, pooled, or otherwise commingled?
- Can assets be lent, used as collateral, or rehypothecated? If so, what consent is required, and what rights does the client retain?
- What records show the assets attributable to the client, and how are discrepancies handled?
Failure, insurance, privacy, and fees
- What happens if the custodian is hacked, becomes insolvent, shuts down, suspends withdrawals, or terminates the relationship? What contractual rights and procedures apply?
- Is insurance available? Which assets and risks are covered, and what exclusions, limits, conditions, or claim procedures apply? Do not treat the existence of an insurance policy as a guarantee that a particular loss will be reimbursed.
- What personal data is collected, shared, or sold, and what privacy protections apply?
- What asset-based, transaction, transfer, setup, and closure fees apply? Ask how charges are calculated and when they are assessed.
These questions track the SEC investor bulletin’s consumer-facing prompts about supported assets, storage and access, security, subcontractors, asset use and rehypothecation, commingling, failure, insurance, privacy, and account fees. For an adviser, the responses also need to be assessed against the client’s needs, contractual rights, operational design, and applicable legal obligations.
Bank authority does not answer every custody question
On May 7, 2025, the Office of the Comptroller of the Currency stated that national banks and federal savings associations may buy and sell assets held in custody at a customer’s direction and may outsource bank-permissible crypto custody and execution activities. The OCC qualified that position by reference to appropriate third-party risk management, safe-and-sound operation, and applicable law. It should not be generalized to every bank, nor does OCC authority by itself settle whether a provider qualifies as a qualified custodian under every SEC provision.
A practical decision process for advisers
- Map the authority. Identify who can initiate, approve, and sign a transfer; who can access keys or backups; and whether the adviser has authority or permission to withdraw client assets.
- Separate the custody model from the storage method. Record whether the arrangement is self-custody or third-party custody, then separately document hot, cold, or combined storage and the purpose of each component.
- Match controls to the transaction pattern. Consider access approvals, recovery, availability needs, and safeguards for the actual activity. Do not assume one storage method fits every asset or trading frequency.
- Test recovery and failure plans. Establish who can restore access, how a provider relationship can be exited, and what procedures apply during an outage, withdrawal suspension, compromise, or termination.
- Review rights and economics. Confirm segregation, permitted use of assets, subcontracting, insurance terms, privacy practices, and all applicable fees in the governing documents and provider materials.
- Reassess when facts change. Changes to assets, networks, signing authority, provider, subcontractors, transaction patterns, or applicable rules can change the custody analysis and the adequacy of controls.
In an October 1, 2026 statement about the proposal, SEC Chairman Paul S. Atkins said: “Since the advent of Bitcoin in 2008, the crypto asset market has grown from a niche curiosity into a multi-trillion-dollar asset class to which investors actively seek exposure.” That is the Chairman’s characterization in a statement, not an independently verified statistical series. The custody decisions advisers face are more concrete: who can sign, what happens if access fails, and which protections and legal duties apply to the specific arrangement.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
