Free tools Windows power users keep installed
One-click scans. No signup required.
To evaluate a crypto custodian, verify who can control the keys and authorize transfers, how your assets and ownership are recorded, which legal rules apply to the exact service, and what the insurance policy and contract actually let you recover. Treat security claims, regulatory status, and insurance limits as separate questions: none alone proves that your assets are protected.
Start by identifying who controls the assets
“Custody” can describe different arrangements. Before comparing providers, identify the legal entity providing your service, any sub-custodian, and who holds or can access the private-key material. Ask for a plain-language description of how a transfer moves from request to approval to signing.
Map key access and transaction approval
- Who generates and stores the keys or key shares, and which people or entities can access them?
- How many independent approvals are required for a withdrawal? Are duties divided so that one person cannot request, approve, and execute a transfer alone?
- What transaction limits, address controls, delays, or additional checks apply, and can the customer configure any of them?
- How quickly can compromised access be revoked, and what happens if a key, device, employee account, or service provider is compromised?
- How are keys recovered after a failure, and who can authorize recovery? Ask how the provider prevents a recovery process from becoming a way to bypass normal approvals.
Get answers for the particular product and assets you would use. A provider’s description of one custody model does not establish that every product, wallet, or sub-custody arrangement uses it. The SEC’s October 2026 proposal treats possession of any portion of a client crypto asset’s key materials as self-custody for purposes of its proposed adviser rule; that is a proposal-specific treatment, not a statement of current law.
Verify ownership, segregation, and records
Ask what rights you have to the assets under the custody agreement—not just what balance appears in an app. Find out whether assets are held in individually identified accounts or addresses, or in an omnibus arrangement, and how the provider records each customer’s beneficial ownership in either case.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
- Does the agreement restrict lending, rehypothecation, pledging, or other use of customer assets? Identify any exceptions and whether the customer must opt in.
- How are customer balances reconciled against wallet addresses and blockchain activity? How often does reconciliation occur, and how are discrepancies investigated?
- What records and statements can you access, and do they show transactions, fees, asset movements, and the relevant account or address identifiers?
- What does the contract say happens to customer assets if the provider or a sub-custodian becomes insolvent? Do not infer insolvency treatment from the words “segregated” or “custodial”; review the contract and the legal entity holding the assets.
Look for evidence that the provider can connect your customer record to the relevant on-chain addresses and explain how it verifies that those records remain accurate. A public blockchain balance, by itself, does not establish who legally owns the assets or whether the provider’s customer records are complete.
Assess security evidence and operational readiness
Ask for the independent control report, audit, or examination relevant to the service. Check its scope and reporting period, the systems and locations included, the auditor’s independence, any exceptions, and whether stated remediation is complete. Confirm whether the report covers the assets, wallets, affiliates, and material subcontractors involved in your arrangement; a certification label alone does not answer those questions.
Check the response to failure and compromise
Request the provider’s written approach to incident response, business continuity, disaster recovery, and key recovery. Ask how customers are notified, how withdrawals may be paused or resumed, and what evidence the provider preserves after an incident. Also ask which third parties support custody, signing, storage, or transaction processing, and what happens if one of them is unavailable or compromised.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Operational resilience includes the networks and assets the service supports. Establish whether withdrawals can be delayed or restricted during a chain disruption, a security incident, or maintenance, and what controls apply when service resumes. These are product-specific questions; a general security statement does not establish withdrawal availability for a particular asset or event.
Determine which rules apply to the exact service
Regulatory status is relevant, but it is not a security rating or a guarantee of customer recovery. Identify the precise legal entity named in your service agreement, its regulator and jurisdiction, the activity it is authorized to conduct, and any sub-custodian involved. Confirm that the stated authorization covers the service you are considering rather than a different affiliate or activity.
U.S. adviser custody framework
For SEC-registered investment advisers with custody, the current Advisers Act custody framework generally includes use of a qualified custodian, required notices, a reasonable basis for believing clients receive quarterly account statements, and independent-verification requirements, subject to exceptions. Which requirements apply depends on the adviser, asset, and custody arrangement. The SEC’s investor bulletin describes these safeguards and says the custody rule is intended to reduce the risk of theft or misappropriation by registered advisers; it does not mean every crypto provider is covered by the rule.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Keep the October 2026 SEC proposal separate from current requirements
On October 1, 2026, the SEC issued a proposal addressing custody of crypto securities and similar investments by regulated investment companies, as well as client crypto funds and securities held by registered investment advisers. As of October 7, 2026, it is a proposal, not an effective rule. Its status, comment period, and any later Commission action may change.
Among the proposed controls for adviser self-custody are an annual cybersecurity review, internal-control reports initially within six months and annually thereafter, and quarterly client statements identifying crypto addresses. The proposal also discusses segregation and comparing statement activity with on-chain address activity. Do not treat these proposed controls as requirements already in force.
Bank authority is not an endorsement of a provider
The OCC says national banks and federal savings associations may offer crypto-asset custody and execution services and may outsource bank-permissible crypto activities, subject to appropriate third-party risk management and applicable law. That authority does not establish that a particular bank’s controls are effective or that a sub-custodian is safe. A July 14, 2025 interagency statement from federal banking agencies explains how existing laws, regulations, and risk-management principles apply to bank crypto-asset safekeeping; it says it creates no new supervisory expectations.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Read insurance terms instead of relying on a headline limit
FDIC insurance is not crypto custody insurance
FDIC insurance covers eligible deposits at an insured bank if that bank fails. It does not insure crypto assets, assets issued by non-bank crypto companies, theft or fraud losses, or losses caused by a non-bank crypto custodian’s insolvency. If an arrangement includes both cash and crypto, establish which legal entity holds each and whether the cash is an eligible deposit at an insured bank.
Find out what private insurance actually covers
A custodian’s private commercial policy is governed by its terms. Ask for the policy or a sufficiently detailed certificate, then check:
- Who is insured, which customer assets and custody locations are covered, and whether your product and assets fall within that scope.
- Which events trigger coverage, and which are excluded. Ask specifically about employee misconduct, compromised credentials, social engineering, smart-contract exploits, chain events, insolvency, and losses involving third-party services.
- What aggregate and per-loss limits, sublimits, and deductibles apply, and whether another claim can reduce the remaining coverage.
- Who controls a claim, who receives any payment, and whether customers have direct rights under the policy or must rely on the custodian to pursue and distribute a recovery.
There is no universal private crypto-custody insurance amount or standard policy wording established by the official sources reviewed. A provider’s headline limit is not proof that your assets or a particular type of loss are covered. If the provider will not supply enough policy detail to verify the scope, treat the coverage as unverified.
Best Value
- All your digital assets in one place. You can manage thousands of crypto including Bitcoin, Ethereum, Solana, Tether and more.
- Defend your identity against hackers: secure your online accounts with passwordless, hardware backed, 2FA logins for all your favorite apps and websites.
- Connectivity: USB-C cable connection only. No Bluetooth.Compatible with the Ledger Wallet crypto app, both desktop (Windows, macOS, Linux) and mobile (Android only). Not compatible with iOS.
- Protect your digital assets with the industry's best security: keep your private keys offline in your private signer, battle-tested by the Donjon's white hat hackers, CC EAL 6+ certified Secure Element, constantly updated Ledger OS.
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
Compare providers using the same evidence
Build a side-by-side record for each provider rather than ranking them by marketing terms such as “institutional,” “regulated,” or “insured.” For each item, record the document or written answer that supports the claim, and mark it unverified if the provider has not substantiated it.
- Legal entity and service: Record the contracting entity, jurisdiction, regulator, permitted activity, and every sub-custodian.
- Key control: Document key generation and storage, signing thresholds, separation of duties, withdrawal approvals, revocation, and recovery.
- Customer asset rights: Record how beneficial ownership is maintained, whether accounts or addresses are omnibus or individually identified, what use of assets is allowed, and what the agreement says about insolvency.
- Records and reconciliation: Check the statements provided, the link between customer balances and addresses, the reconciliation method, and how discrepancies are handled.
- Independent assurance: Note the report type, auditor or examiner, period and systems covered, exceptions, remediation, and subcontractors included.
- Insurance and recourse: Note policy scope, covered events, exclusions, limits, deductibles, claims control, customer rights, and the contract’s liability and recovery terms.
- Resilience: Compare incident disclosure, continuity and recovery plans, third-party dependencies, and withdrawal controls during disruption.
Do not treat an unavailable document as evidence that a control or coverage exists. If an answer is incomplete, ask the provider to identify the exact contract clause, report section, policy term, or written procedure that supports it.
Use a document-first decision rule
Before relying on a custody claim, obtain the legal entity and sub-custodian details, written key-control and segregation descriptions, relevant independent reports, customer statements and reconciliation information, the custody agreement, and policy evidence. Also get written answers on incidents, third parties, continuity, and complaint or recovery routes. Confirm that each item applies to the exact product, customer type, asset, wallet, and legal entity you are evaluating.
If the provider cannot establish who controls transfers, how your ownership is recorded, what the agreement permits, or whether an insurance policy covers the relevant loss, do not fill the gap with a regulatory label or a headline coverage figure. The U.S. federal baseline does not resolve every state, trust-company, non-U.S., securities-classification, or product-specific issue; those can change the analysis for a particular provider.
Recommended Free Tools
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
