Deciphr Academy
Track 2 · Module 8 · Lesson 1 of 6 · 6 min read

What does "not your keys, not your coins" mean?

Short answer

A crypto wallet holds private keys, the secret codes that approve transactions, so whoever controls the keys controls the crypto.1 Leave the keys with an exchange and you rely on its security and honesty; hold them yourself and keeping them safe is your job alone.2,1

Third-party custodySelf-custodyYoulog inExchangeholds the keyssignsYou trust the companyYouhold the keyssignYou keep the keys safeWhoever holds the keys can move the coins
Fig. 1. Two ways to hold crypto. A company can hold the keys for you, or you can hold them yourself. Either way, the keys decide who can move the coins.

What a wallet really holds

A crypto wallet doesn't store crypto. It stores private keys, the secret codes that let you approve transactions.1 The US Securities and Exchange Commission (SEC) compares a private key to a password for your wallet.1

There is one big difference from a password. Once a private key is made, it can't be changed or replaced. If you lose it and have no backup, such as a recovery phrase, you lose access to the crypto in that wallet for good.1 Lesson 3 covers backups.

Two ways to hold crypto

The SEC describes two choices. You can hold your own keys, which is called self-custody. Or a company can hold them for you, which is called third-party custody.1

Self-custody Third-party custody
Who holds the keys You do1 An exchange or custody firm1
Who keeps them safe Only you1 The company1
A forgotten password Very limited ways to recover it2 Can be recovered "in a traditional way"3
The main danger Your wallet is lost, stolen, damaged or hacked1 The company is hacked, shuts down or goes bankrupt1

Trusting someone else with your keys

Bitcoin.org puts the trade-off plainly. When a third party controls your keys, you rely entirely on its security and honesty.2 It adds that exchanges and online wallets have been hacked, have failed, and have frozen access to funds.2

ethereum.org says the same about exchanges: if one has financial trouble, your funds there are at risk.3 The US Federal Trade Commission (FTC) adds that crypto held in accounts isn't insured by the government. Money in an insured US bank account is.4

Two exchanges that failed

FTX. Samuel Bankman-Fried founded and ran FTX, a crypto exchange. He told customers their deposits were held safely and kept apart from the company's own money.5 In December 2022, US regulators charged him with fraud.6,7 The Commodity Futures Trading Commission (CFTC) also filed a complaint. It said the defendants caused the loss of over $8 billion of customer deposits.7

After a one-month trial, he was found guilty of fraud and conspiracy charges. In March 2024, he was sentenced to 25 years in prison.5

QuadrigaCX. In January 2019, the crypto trading platform QuadrigaCX said its CEO, Gerald Cotten, had died the month before.8 Over 76,000 clients were owed C$215 million, and together they lost at least C$169 million.8

It was widely guessed that most of the losses came from coins locked away by his death. Staff at the Ontario Securities Commission, a Canadian regulator, concluded that most of the shortfall came from his fraud instead.8,9 Their report notes these are staff views, not findings tested by a tribunal or court.8

Holding your own keys

With self-custody, you have sole control of your keys, and sole responsibility for keeping them safe.1 As ethereum.org puts it, there's no customer support in crypto.3

If your wallet is lost or stolen, the FTC says you're likely to find that no one can step in to help.4 The SEC suggests asking yourself two questions first. Are you comfortable setting up and looking after a wallet? And do you want sole responsibility?1

Our viewNeither choice removes risk. It moves it. With an exchange, you trust a company. With self-custody, you trust yourself, your backups and your habits.
WatchSelf-custody in about two minutes: keys, devices, backups and heirs. Captions are built in. Sources are listed at the end.
Sources
  1. Crypto Asset Custody Basics for Retail Investors – Investor Bulletin. US Securities and Exchange Commission, Office of Investor Education and Assistance (Investor.gov), 12 December 2025.
  2. Securing your wallet. Bitcoin.org, checked 22 October 2026.
  3. Ethereum wallets explained. ethereum.org, page updated 24 February 2026.
  4. What To Know About Cryptocurrency and Scams. US Federal Trade Commission, Consumer Advice (read via the Internet Archive copy of 18 October 2026, as the live page refused automated access), checked 22 October 2026.
  5. Samuel Bankman-Fried Sentenced To 25 Years In Prison. US Attorney's Office, Southern District of New York, US Department of Justice, 28 March 2024.
  6. SEC Charges Samuel Bankman-Fried with Defrauding Investors in Crypto Asset Trading Platform FTX (press release 2022-219). US Securities and Exchange Commission, 13 December 2022.
  7. CFTC Charges Sam Bankman-Fried, FTX Trading and Alameda with Fraud and Material Misrepresentations (release 8638-22). US Commodity Futures Trading Commission, 13 December 2022.
  8. QuadrigaCX: A Review by Staff of the Ontario Securities Commission. Ontario Securities Commission, published 11 June 2020.
  9. OSC publishes investigative report of QuadrigaCX. Ontario Securities Commission, 11 June 2020.
← Module overviewNext: Hardware wallets →

General education built from the publicly available sources listed above. Not financial, legal, tax or investment advice. Naming a company, project or regulator is not an endorsement either way. Last checked 2026-10-22. Terms and disclaimer.