Brian Armstrong is co-founder and chief executive of Coinbase, a company offering trading and other digital-asset services. For many people, this kind of service is an entry point to Bitcoin: they sign into an account and submit an instruction instead of managing their own keys. A convenient interface does not change who holds those keys. Armstrong’s company provides a useful example of the difference between running an exchange, owning its stock and controlling bitcoin independently.
Armstrong founded Coinbase with Fred Ehrsam. The 2026 proxy statement says he has served as chief executive and board member since the company began in May 2012, and as board chairman since February 2021. The current company profile confirms his executive role at review. He therefore leads a business providing digital-asset services to individuals and institutions. That is an important position in the Bitcoin economy, but a different role from developing the protocol or running a personal node. [1] [2]
Shares need not carry equal voting rights. Coinbase’s 2026 document assigns one vote to a Class A share and 20 to a Class B share. Armstrong has majority voting control, giving him substantial influence over corporate governance. These numbers belong to company decision-making. They are not votes cast by Bitcoin users and cannot change the rules nodes use to verify transactions. Leading a large exchange and controlling the Bitcoin protocol are different kinds of authority. [2]
If you buy bitcoin on Coinbase.com and leave it there, your account shows a balance. The help documentation says the platform holds assets for you and manages the private keys of hosted wallets. A private key is the information needed to sign a transaction spending coins. When you request a withdrawal, you ask the platform to carry it out; your account password alone does not let you sign a bitcoin transaction outside it. Legal entitlement to assets and the practical ability to move them with your own keys are separate things. [3]
A forgotten Coinbase account password can be addressed through the platform’s recovery process. Self-custody makes the user responsible for the keys. In a recovery-phrase wallet, those words form a backup from which the keys can be restored. If you lose access to the wallet and have no usable backup, support may have no way to help and the bitcoin may remain inaccessible. An app’s brand therefore tells you too little: find out who holds the keys and exactly how that particular wallet can be recovered before relying on it. [4]
Coinbase stock trades under the ticker COIN. Buying a share gives you equity in the company, not a specific quantity of BTC to withdraw to a wallet. Assets-on-platform figures also need careful reading: they include customer holdings, so they do not describe Armstrong’s personal bitcoin wealth. The company’s name can therefore appear alongside quite different numbers. It helps to ask whether a figure concerns shares, assets owned by the company or assets it holds for clients. [1] [2]
On February 27, 2025, the SEC, the US securities-market regulator, announced the agreed dismissal of its civil enforcement action against Coinbase. It explained this through a change in regulatory approach and work on a new framework for digital assets. It explicitly said the decision was not based on an assessment of the merits of the allegations and did not express its position on other cases. Ending the dispute therefore cannot be treated as a court vindication of every earlier company action or approval of all its products. [5]
On May 15, 2025, Coinbase announced that attackers had bribed some support workers and obtained customer information, including personal data and account snapshots. The company said private keys and login credentials were not exposed. A risk nevertheless remained: a scammer could use genuine customer details to impersonate support and persuade someone to transfer money. This is Coinbase’s own account, not an independent audit. The incident shows why protecting bitcoin also involves protecting personal information and checking payment requests. [6]
Imagine a caller who knows your name and balance and says you must urgently move your money somewhere safe. Knowing those details does not prove who they are. In the same notice, Coinbase says it does not ask for passwords, 2FA codes or transfers to a supposedly safe wallet. 2FA is an additional login check, such as a code or security key; that code is not for a caller either. End the call and check any problem independently through the official app or website, not through contact details supplied by that person. [6]
For the clearest picture, read this entry together with Larry Fink, Custodial Exchange, Self-custody. The reverse links also lead from Changpeng Zhao.