Non-custodial wallet

A non-custodial wallet is software or hardware that stores keys locally and builds transactions locally; the network, not a firm, settles them. There is no account to open, no password reset, and no support desk holding a spare copy. That removes counterparty risk completely and replaces it with the risk that you lose your own backup.

How it works

Setting up a non-custodial wallet generates randomness, not an account. On first run the wallet gathers entropy, derives a master key from it, and shows you the words that encode it. No server is contacted, no email is verified, and the wallet exists whether or not anyone else ever hears about it. Two wallets created a second apart on opposite sides of the planet will not collide, because the number of possible keys is far beyond any counting.

Receiving is a local calculation too. The wallet walks its derivation path, produces the next unused address, and shows it to you. Bitcoin sent to that address is recorded by every node on the network regardless of whether your phone is switched on, which is why a wallet can be uninstalled and restored months later with the balance intact.

Spending is where the keys are used, and only there. The wallet assembles the inputs it controls, adds outputs for the payment and the change, signs each input with the relevant key, and hands the finished transaction to a few peers, who relay it onward. The signature proves authority without revealing the key, so the secret never leaves the device that made it.

One part is not automatic. To know your balance, the wallet has to ask something about the chain. It queries the vendor's servers, a public Electrum server, or a node you run yourself. That connection does not endanger your coins, since it never sees a key, but it does see which addresses you care about. Running your own node, or connecting through Tor, is how people close that gap.

Why this matters when you buy bitcoin

Self-custody is legal in every country whose page appears on this site, including the ones where exchanges are restricted. Holding your own keys is not what regulators target; the on-ramp is. What has changed is the friction at the boundary. In the European Union, the recast Transfer of Funds Regulation has required originator and beneficiary information on crypto transfers since 30 December 2024, and platforms increasingly ask you to name and sometimes prove ownership of a self-hosted destination before releasing a withdrawal. Expect a form, not a refusal.

The practical decision is when to move, and the honest answer depends on the amount. Coins you will trade next week can sit where you bought them. Coins you intend to hold for years should be behind keys you generated. Between those, the deciding factor is usually whether losing the balance would change your life; if it would, the exchange is the wrong place for it, and so is a phone wallet you have never restored from a backup.

Fees are small enough that they should not drive the choice. A common single-input, two-output native SegWit spend weighs about 141 vbytes, so at a fee rate of 5 satoshis per vbyte it costs a little over 700 satoshis to move. Exchange withdrawal fees vary far more than on-chain fees do, which is a reason to withdraw in fewer, larger movements rather than to postpone withdrawing at all.

Your first withdrawal to your own keys

Make the first withdrawal to your own keys once, deliberately, with an amount you would shrug at.

Install one well-reviewed wallet and write its recovery words on paper by hand as it displays them. Do not photograph the screen. Confirm the words when it asks, then close the app and reopen it to check that it still loads.

Copy a receiving address from the wallet and paste it into the exchange's withdrawal form. If you are using a signing device, confirm the address on the device screen character by character rather than trusting the computer, since clipboard-swapping malware exists precisely for this step. Send a small test amount first.

Watch the transaction on a block explorer until it has a confirmation, then check that the wallet shows the same balance. Only after that round trip works should you move the rest. Finally, wipe the wallet and restore it from your written words while the balance is still small. A backup you have never tested is a hypothesis.

Non-custodial wallet vs hardware wallet

Non-custodial describes who holds the keys; hardware describes where the keys live. Every hardware wallet is non-custodial, but the reverse does not hold: a mobile wallet with your words written on a card is fully non-custodial while keeping the keys on a general purpose computer that also runs a browser. The hardware version narrows one specific attack, malware on the machine you use every day, by keeping the secret inside a chip that only ever emits signatures.

Non-custodial wallet vs cold storage

Non-custodial is about ownership; cold storage is about exposure. A wallet on your phone is non-custodial and unmistakably hot, because the keys sit on a device that is online all day and installs software from an app store. Cold storage means the signing key has never met an internet-connected machine. Many people hold both, using a hot non-custodial wallet for spending money and a cold setup for savings, and the two roles are worth keeping in separate wallets rather than one.