Self-custody does not prescribe one device or backup format. Control may use one key, a hardware signer or multisig, but the complete system matters: descriptor, seed, optional passphrase, device integrity, independent address verification and tested recovery.
A balance at an exchange or other custodial service is a claim in its internal ledger. Self-custody begins only when the user controls the keys to UTXOs and can create a valid transaction without the custodian's approval.
Bitcoin does not know an owner's name; nodes verify signatures and script conditions. Single-key wallets, multisig and timelocked branches are different spending policies that must be described precisely and remain recoverable.
A seed can restore derived keys but may not by itself contain the descriptor, cosigner order, derivation paths, labels or passphrase. A backup is reliable only after a safe recovery test reproduces the expected addresses.
A hardware wallet separates a signing key from a general-purpose computer but does not remove malicious-firmware, false-address or bad-backup risk. Multisig reduces a single point of failure while increasing operational complexity and metadata.
Verify receiving addresses on a trusted display, inspect outputs, amounts and fee before signing, and observe state through a full node or a clearly understood data source. Updates, inheritance and emergency procedures belong in the threat model.
Possessing a seed phrase alone does not prove working self-custody: a copy can be compromised, incomplete or belong to another policy. A practical audit checks keys, descriptor, backups, recovery, addresses, a small test transaction and inheritance plan.
Rehearse recovery safely outside the production wallet: recreate the descriptor or policy from verified backups, derive the expected addresses and complete a small test transaction. Emergency and inheritance instructions must transfer both secrets and metadata, but not before the intended conditions are met.
Satoshi Nakamoto — Bitcoin: A Peer-to-Peer Electronic Cash System · BIP 32 — Hierarchical Deterministic Wallets · BIP 39 — Mnemonic code for generating deterministic keys · BIP 174 — Partially Signed Bitcoin Transactions · BIP 380 — Output Script Descriptors General Operation · Bitcoin Core — Managing wallets · Bitcoin Core — External signer
For the clearest picture, read this entry together with Bitcoin, Private Key, Seed Phrase, Bitcoin wallet, Hardware Wallet, Multisig. The reverse links also lead from Cold Storage, Lightning Watchtower, KYC, Custodial Exchange.
01Does self-custody mean keeping bitcoin on a phone?+
Not specifically. It means you control the keys required to spend. The keys may be coordinated by mobile software, dedicated hardware, an offline setup or a multisignature policy.
02What should I verify before a large withdrawal?+
Verify the receive address on the signing device, send a small test, confirm it independently, understand the backup and rehearse recovery before moving the remaining balance.