"Not your keys, not your coins" is the most repeated sentence in crypto, and the most ignored one. Most people who say it are reciting a slogan. Most people who hear it nod and then leave their funds on an exchange.
This post pulls the slogan apart. Where it came from, what it actually means in 2026, the case studies that turned it from a t-shirt line into news, and — the part most explainers skip — when ignoring it is the right call.
This is the first article in the Self-Custody Fundamentals series. The next post on custodial vs. non-custodial wallets builds on the framing here.
TL;DR
- The phrase comes from Andreas Antonopoulos, popularized after Mt. Gox collapsed in 2014.
- It refers to a real legal and technical fact: when an exchange holds your private keys, your coins are an IOU on the exchange's balance sheet, not your property.
- The 2022 collapses (Celsius, FTX) made this concrete for hundreds of thousands of users who learned the difference in bankruptcy court.
- "Your keys" doesn't mean a single mnemonic on a sticky note. In 2026 it can mean a 2-of-2 multisig split across two devices.
- Self-custody isn't always the right call — for small balances, frequent trading, or specific tax structures, custody can be the rational choice. The point is that you should choose, not drift.
Where the phrase came from
Andreas Antonopoulos, the educator who has done more to teach crypto self-custody than anyone, started saying "your keys, your bitcoin; not your keys, not your bitcoin" around 2016, in the post-Mt. Gox aftermath. Mt. Gox had been the largest Bitcoin exchange in the world. In February 2014 it filed for bankruptcy after losing about 850,000 BTC of customer funds — initially blamed on transaction malleability, later understood to be a slow-motion theft compounded by negligence.
Customers found out their bitcoin had been gone for years. The exchange had been operating insolvent the whole time, allowing withdrawals from a shrinking pool until it ran out. Court-supervised distributions began in 2024 — a decade after the collapse. Some creditors were paid; many had stopped waiting.
The phrase landed because it was a clean technical claim. If your private key is in a wallet you control, your bitcoin is yours: a signed transaction is the only way to move it, and only you can produce that signature. If your key is on someone else's server, your bitcoin is whatever they say it is.
The real version of the slogan
The legal mechanic is more specific than the slogan suggests. When you deposit crypto on an exchange, the exchange typically commingles it with other users' funds. Your "balance" is a database entry that the exchange owes you. In a bankruptcy, that entry is an unsecured claim — the same legal status as money owed to a vendor or a contractor. You stand in line behind secured creditors and, in many jurisdictions, behind employee wage claims.
That's not a doomsday scenario. Most exchanges don't go bankrupt. But it's the actual position you're in when you "have" crypto on one. The slogan compresses this to a sentence small enough to fit on a sticker.
Three case studies that turned slogan into news
Mt. Gox (2014)
Largest BTC exchange in the world; ~850,000 BTC of customer funds gone. The bankruptcy estate took ten years to begin paying out. Even creditors who got something out received it as bitcoin priced at the 2014 collapse value, denominated in yen. The story is the canonical reference for "what happens when an exchange fails and you weren't the one holding the keys."
Celsius (2022)
Celsius marketed itself as a high-yield crypto lender. It paused withdrawals on June 12, 2022, and filed for Chapter 11 a month later. The bankruptcy court ruled that funds in Celsius's Earn program were the property of the bankruptcy estate, not the depositors — the user agreement said so, and depositors had effectively lent the assets to Celsius. Custody-account funds were treated separately. About 600,000 accounts were affected.
The ruling crystallized a distinction that the slogan elides: not all crypto-on-an-exchange is the same legally. Earn depositors had transferred ownership; custody depositors had not. Most users didn't know which kind of account they were in.
FTX (2022)
Five months after Celsius, FTX — then the second-largest crypto exchange — collapsed in a week. The shortfall was estimated at $8 billion at filing. Founder Sam Bankman-Fried was convicted on seven counts of fraud in 2023. The collapse was not technical theft; it was customer funds being treated by the exchange as a treasury for an affiliated trading firm.
FTX users, like Celsius users, became unsecured creditors. Distributions began in 2025. Many users were paid in dollars at the 2022 collapse price — meaning they missed the subsequent crypto recovery despite "getting their money back."
These three cases share one trait: in every one, the users had no technical ability to move their funds at the moment they most wanted to. The keys were not theirs.
What "your keys" actually means in 2026
The slogan is older than most current self-custody options. In 2014 "your keys" meant a single private key (or a 12-word seed phrase) sitting on your laptop or — if you were careful — a hardware wallet. That model is still around, but it has known failure modes: lose the seed, lose the coins; expose the seed once, lose the coins.
Modern self-custody can mean several things:
- Single-key software wallet. One key on one device. Convenient, but a single point of failure.
- Hardware wallet. Key generated and held inside a dedicated device. Removes most online attack surface; doesn't help if the seed phrase is lost.
- Multisig. Two or more keys, of which a defined subset must sign to move funds. Spreads the risk.
- Account abstraction wallets. Smart-contract accounts on Ethereum-style chains where the rules of "what counts as a valid signature" are programmable.
SSP sits in the multisig camp. Its 2-of-2 multisig means a transaction requires a signature from your browser extension AND a signature from your phone. Either one alone is useless. That's "your keys" in 2026 form: not one secret you can lose, but a setup that requires you to lose two things at once before your funds move without your consent.
The point isn't that multisig is the only valid answer. It's that "have your own keys" is a shape, not a single product.
When self-custody is the wrong call
Honest version: self-custody isn't free. It costs you in responsibility, opsec, and the possibility of irreversibly bricking your access to your own money. The next article in this series, what self-custody actually requires of you, is about that bill in detail.
Cases where keeping crypto on an exchange may be the rational choice:
- You're holding very small amounts where the cost of a mistake exceeds the value at risk.
- You actively trade and need execution speed, depth, and order types an exchange provides.
- You're using a regulated venue for tax reporting reasons, and self-custody complicates your filings.
- You're new to crypto and not yet comfortable with the responsibilities — get good before you take them on, not the reverse.
The point of the slogan is not "self-custody now or never." It's "decide what you're doing." Most people who lose crypto on exchanges didn't make a deliberate decision to leave it there; they just never moved it.
What this means for you
Three things to take away:
- The phrase is technical, not tribal. It describes a property of how the system works, not a value judgment about exchanges.
- The 2022 collapses turned the abstract risk concrete. If you've never walked through a Celsius- or FTX-shaped scenario in your head, do it now. What would happen to the crypto you're holding right now if the venue paused withdrawals tomorrow? If the answer is "I'd be unhappy," that's the signal.
- "Self-custody" is a spectrum, not a switch. If a single seed phrase on a sticky note feels like the only option, you're looking at the 2014 menu. The 2026 menu has more rungs.
The next article looks at the actual difference between custodial and non-custodial wallets — including the surprising number of "wallets" that are quietly custodial.
