Choose a crypto custody arrangement by finding out who can authorize a transfer, what happens to your assets if a provider fails, and how quickly you can withdraw. Self-custody gives you control of the keys and responsibility for protecting them; third-party custody shifts key access to a provider. Neither option is risk-free, and “hot” or “cold” storage describes how a wallet is connected—not who controls it.
Start with the control question: who can move the crypto?
Identify who holds or controls the key material and who can authorize, block, or override a transfer. A provider’s label for its service is not enough: examine the technical setup and the contract. In a shared-key or multisignature arrangement, ask who can combine the required authority or otherwise cause a transfer. A partial key shard or “multisig” label alone does not establish that an arrangement is self-custody.
In the UK, the FCA Handbook’s control test asks whether a firm can, by any means, bring about a transfer of the benefit of an asset. Its guidance says a firm presenting a solution as self-custody must genuinely lack that ability; a contractual promise not to use control does not settle the technical question. FCA Handbook PERG 18 (UK; sections 6.2–6.3, marked 16 September 2026).
Compare the main custody models
| Arrangement | Who controls access? | Responsibility and trade-offs |
|---|---|---|
| Self-custody | You control the private keys and authorize transfers. | You must set up and maintain the wallet, protect keys and recovery information, and plan for device loss or damage. Losing or compromising the keys can permanently remove access. |
| Exchange-based custody | The exchange manages key access for assets held through its service. | This can make assets convenient to access for trading, but adds exposure to provider failure, account controls, withdrawal restrictions, and the provider’s security and asset-use practices. Verify the specific service rather than assuming exchanges operate alike. |
| Dedicated third-party custody | A specialist provider holds or administers assets for a client. | Review its controls, contract, legal status, asset-use policies, fees, and withdrawal process. The phrase “professional custodian” by itself does not establish solvency protection, insurance, or withdrawal quality. |
| Shared-key or multisignature setup | Authority is distributed, but the practical answer depends on who can assemble the required approvals or otherwise initiate a transfer. | Assess the actual technical control and recovery arrangement. Do not classify it by its label or by the fact that one party holds only part of a key. |
Hot and cold describe a wallet’s connectivity or storage approach. Either approach can be used in self-custody or by a third-party custodian, so it does not answer who controls the assets. A cold-wallet device may have an upfront purchase cost, but owning one does not remove the need to protect keys and recovery information. The SEC’s Crypto Asset Custody Basics for Retail Investors (December 12, 2025) explains the distinction and cautions about key loss and provider failure.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Choose based on your ability to carry the responsibility
Self-custody may fit if you can manage recovery
Before choosing it, be confident you can securely set up and maintain the wallet, keep recovery information protected and available when needed, and handle device failure or replacement. A device is not the recovery plan by itself. If nobody else can restore access and you lose the keys or recovery information, the assets may become inaccessible.
Third-party custody may fit if you accept provider dependence
A provider can handle key-management operations, but you then depend on its account controls, security, policies, and ability to return assets. Determine what powers the provider retains and what happens during an account freeze, security incident, shutdown, or insolvency. Convenience for trading does not guarantee prompt withdrawal or a particular legal claim to assets.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Evaluate a provider before depositing
Use the SEC investor bulletin’s due-diligence prompts as a starting point. Ask for clear, written answers about the service and check them against the contract and applicable law.
- Background and status: Is the provider regulated for this service in the relevant jurisdiction? What is its background? Do not treat words such as “regulated” or “qualified” as having a universal meaning or effect.
- Assets and networks: Does it support the exact crypto-assets and withdrawal networks you intend to use?
- Keys and security: Where is key material held, who can access it, and does the provider use hot wallets, cold wallets, or both? Does it subcontract storage? What physical and cyber controls protect keys and assets?
- Use of customer assets: Can the provider lend, pledge, rehypothecate, or commingle them? Is customer consent required? Read the account terms rather than inferring the answer from the custody label.
- Failure and insurance: What happens if the provider is hacked, shuts down, or becomes insolvent? Is insurance available, what does it cover, and what limits or exclusions apply? Do not assume an insurance claim covers every loss or customer balance.
- Privacy: How does the provider handle information about your identity and holdings?
- Fees and support: What are the asset-based, transaction, transfer, setup, and closure fees? How can you reach support during a freeze or incident, and what escalation process is available?
“Cold,” “insured,” “segregated,” and “self-custody” can describe materially different arrangements. Ask what each term means in the provider’s actual service and contract. A proof-of-reserves statement alone does not establish liabilities, ownership rights, or insolvency protection.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Check withdrawal access and the exit process
Test the withdrawal terms on paper before funding the account. A visible balance is not the same as an assured ability to withdraw promptly. Confirm the steps, restrictions, and costs involved in moving assets to a wallet you control or to another provider.
- Which networks are supported for each asset, and can you withdraw on the network you need?
- Are authentication steps or address allowlisting required? How long do they take to set up or change?
- What minimums, limits, transfer charges, and typical processing times apply?
- Are there account holds, lockups, or staking redemption periods? What triggers them, and how long can they last?
- What is the escalation path if a withdrawal is delayed, blocked, or affected by an incident?
- Can you export transaction history and close the account, and what fees or procedures apply?
For the UK context, FCA consultation guidance GC26/2 discusses access to private keys and transaction history, switching, and withdrawal to self-custody. It identifies hidden fees, complex withdrawal processes, and opaque extended holds as poor practices. This is UK consultation guidance, not a global rule or a guarantee of immediate withdrawal from every provider. FCA GC26/2, section 4.44.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Understand legal protections where the service operates
Ownership, segregation, and insolvency treatment depend on the provider, service, contract, and applicable law. Do not assume protections in one jurisdiction apply to an account elsewhere.
European Union: MiCA requirements for covered providers
For covered crypto-asset service providers, MiCA Article 75 requires a client agreement describing matters including the service, custody policy, authentication, security systems, fees, and applicable law. It also provides for a client-position register, safeguards for assets or access means, position statements at least quarterly and on request, procedures to return assets or access means as soon as possible, and segregation of client assets from the provider’s holdings, including legal and operational segregation. Article 70 requires adequate arrangements to safeguard client ownership rights, especially in insolvency, and to prevent using client crypto-assets for the provider’s own account. Applicability depends on the provider, service, and law; these are not universal protections. See ESMA’s MiCA Article 75 and Article 70.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteBest Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
United Kingdom: assess technical control and exit friction
The FCA Handbook’s PERG 18 control test focuses on whether a firm can bring about a transfer of an asset’s benefit, including through technical means. Separately, GC26/2 is consultation guidance on withdrawal friction and customer access. Neither should be presented as a rule for other jurisdictions.
United States: distinguish investor education from proposed rules
The SEC investor bulletin is educational staff material; it expressly is not a rule, regulation, or Commission statement. As of the SEC page dated October 1, 2026, amendments concerning investment advisers and regulated funds—including conditional options for adviser or fund self-custody and state trust company custody—were proposed, not final rules. Those materials do not establish that a retail user’s exchange balance has a particular insurance or insolvency status. See the SEC Crypto@SEC proposal entry.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
