"Wallet" is the most overloaded word in crypto. It's used for at least four different things, two of which actually let you control your funds and two of which don't. The marketing rarely makes the difference clear; the user agreement usually does, after the fact.
This is the second article in the Self-Custody Fundamentals series. The first one, not your keys, not your coins, made the case for why this distinction matters. This one is about how to actually tell the difference.
TL;DR
- A non-custodial wallet is one where you (and only you) hold the private keys that authorize transactions. Examples: SSP, MetaMask, Rabby, Phantom, hardware wallets.
- A custodial wallet is one where someone else holds the keys and authorizes transactions on your behalf when you ask. Examples: exchange "wallets" (Coinbase, Binance), payment apps with crypto support (Cash App, Venmo, PayPal), most "wallet" features inside neobanks.
- A surprising amount of crypto-handling apps that call themselves wallets are quietly custodial. The word doesn't tell you which.
- The cleanest test: if you reset the app on a new device, do you need a 12+ word seed phrase, or just a username and password? Seed = non-custodial. Login = custodial.
- Neither model is universally better. The right model depends on what you're using crypto for.
The cleanest definition
A wallet is the thing that produces signatures on transactions. Whoever can produce those signatures controls the funds. So:
- Non-custodial: the signing keys live on devices you control (your phone, your laptop, a hardware wallet, an SSP browser-extension/mobile-app pair). Software you run requests your approval, then signs. The custodian — there isn't one — doesn't exist as a separate party.
- Custodial: the signing keys live on the custodian's servers. When you "send crypto", you're asking the custodian to send some of theirs (technically, to update internal balances, often without an on-chain transaction). They can refuse. They can be told by a court to refuse. They can also lose the keys.
Everything else flows from this distinction.
Wallets that are quietly custodial
Most users think of "exchange" and "wallet" as different categories. The exchanges blur this on purpose, because "wallet" sells better than "balance on our server".
Apps that present themselves as wallets but are actually custodial:
- Exchange wallets. When you have crypto on Coinbase, Binance, Kraken, etc., that's custodial — even if the exchange's UI calls it your "wallet" and shows you a deposit address. The deposit address is one of theirs; transferring to it transfers ownership to them.
- Payment app crypto features. Cash App, Venmo, PayPal, Revolut and similar apps that let you "buy crypto" almost universally hold the crypto on your behalf. Many of them historically did not even allow on-chain withdrawal.
- Neobank crypto. Some neobanks have added a "crypto wallet" tab. It's a custodial balance.
- "Earn" or "stake" features inside any of the above. Even if the underlying wallet is non-custodial, depositing assets into an in-app earn product almost always transfers control to the operator. The Celsius bankruptcy turned on exactly this distinction.
The signal isn't the word "wallet". It's the password reset flow.
The 12-word test
The cleanest test for whether something is non-custodial:
If you uninstall the app, install it on a new device, and try to access your funds — do you need a 12+ word seed phrase, or just your username and password?
- Seed phrase needed → non-custodial. The phrase regenerates your private keys. The app on the new device proves it knows the keys by signing locally. No server intervention.
- Username and password → custodial. The custodian is matching credentials against their database, then unlocking access to a balance they control. Your funds didn't go anywhere; they were always on the custodian's server.
Variants of this test:
- 2FA/email recovery → custodial. Non-custodial wallets can reset on a new device because they have your seed; they don't need email or SMS to unlock funds. If "forgot password" can recover access to crypto, the operator has the keys.
- Withdraw button → custodial. A non-custodial wallet doesn't need a "withdraw" because you already have the funds. A custodial wallet needs one to release control to an external address.
SSP's 2-of-2 setup is non-custodial in a stronger form: there's no single seed because there are two keys, one per device. Recovery is via a combination of devices and seed phrases, not a server.
The trade-offs
People often present this as "self-custody is morally superior". That's not the right frame. Each model has real strengths.
What custodial gives you:
- Recovery without a seed. Forget your password? Reset by email + 2FA. The custodian holds the keys; they can grant you access again. No phrase to lose.
- Friction-free trading. Buying, selling, swapping, lending — all instant, all cheap, because nothing goes on chain. Custodian moves rows in a database.
- Simpler tax surface. A regulated custodian gives you a single 1099 / annual statement. Self-custody requires you to track every transaction.
- Insurance, sometimes. Some custodians carry crime insurance against internal hot-wallet theft. None insure you against the custodian's bankruptcy.
What custodial costs you:
- You don't actually own the crypto on chain. You own a claim against the custodian. See the Mt. Gox / Celsius / FTX case studies.
- Withdrawals can be paused, frozen, or denied. Regulators, courts, AML triggers, internal liquidity issues — many things can sit between you and an outbound transaction.
- You can't use the crypto natively. No DeFi, no on-chain games, no governance voting, no peer-to-peer transfers without first withdrawing.
- Tax treatment can be worse in some jurisdictions. Tokens held in a custodial product can be treated as a security, a debt, or a derivative — none of which are usually as favorable as direct holding.
What non-custodial gives you:
- Actual ownership. You can sign a transaction at any time. No one between you and the chain.
- DeFi and dApp access. Sign in to anything that asks for a wallet signature.
- Permissionless transfers. Send to any address, any time. No KYC limits between addresses you control.
What non-custodial costs you:
- Operational responsibility. You back up the seed (or in SSP's case, the device pair). You manage opsec. You don't get a password-reset link. The next article in this series, what self-custody actually requires of you, spells out the bill in detail.
- Steeper learning curve. Gas fees, signing prompts, transaction confirmations are real concepts you need to understand.
- No built-in recovery. This is the one that bites people. Hardware fails, devices get lost. A non-custodial wallet's recovery story is your responsibility — though SSP's 2-of-2 model gives you more rungs than the single-seed model.
Who each is for
Custodial is the right model when:
- You hold small enough amounts that the convenience-vs-risk math favors convenience.
- You need execution speed, depth, or specific order types only an exchange can give you.
- You're comfortable with the regulatory regime governing the custodian (FDIC-insured cash, regulated crypto exchange in your jurisdiction, etc.).
- You explicitly want a simpler tax / recovery surface and you've accepted the trade-offs.
Non-custodial is the right model when:
- You hold meaningful amounts that you don't intend to actively trade.
- You want to use DeFi, on-chain governance, NFTs, peer-to-peer transfers, or any application that requires signing.
- You don't want to be exposed to the failure modes of any single venue.
- You've thought through what you'd do if you lost the device, and have a plan you're comfortable with.
The honest answer for many users is both, allocated by purpose: a custodial account on a regulated exchange for fiat-on-ramp and active trading, plus a non-custodial wallet for long-term holdings and on-chain activity. The mistake isn't using either model — it's defaulting to one without knowing which you're in.
What this means for you
Three things to take away:
- Read your wallet's password-reset flow before you trust it. That's the easiest signal of which model you're actually using.
- Don't conflate "regulated" with "safe". A regulated custodian can still go bankrupt; the regulation governs how the bankruptcy proceeds, not whether it happens.
- Pick deliberately, not by drift. The most common failure mode isn't picking the wrong model — it's never having picked.
The next article looks at what self-custody actually requires of you — the full list of responsibilities you take on, with no marketing softening.
