Skip to main content

Custody Models

The spectrum of bitcoin custody ranges from full self-custody to fully custodial exchange wallets. The right model depends on technical ability, threat model, and need for inheritance or recovery.

Self-Custody (Sovereign)

You hold all private keys. No third party can freeze, seize, or lose your funds.

  • Single-sig — One seed, one hardware wallet. Simplest, but single point of failure.
  • MultisigMultisig with multiple keys you control. Removes single point of failure at cost of complexity.

Best for: Technically proficient users, long-term HODLers, privacy maximizers.

Collaborative Custody

You hold the majority of keys; a service holds one. You retain spending sovereignty, but the service can help with recovery if you lose a key.

  • Unchained Capital — You hold 2 keys, they hold 1 (2-of-3)
  • Casa — Fee-based plans with 2-of-3 or 3-of-5

Best for: Users who want recovery guarantees without full third-party trust.

Semi-Custodial / Assisted

A third party holds one or more keys and provides ongoing security services. You can still spend unilaterally in some configurations, or the provider co-signs.

Best for: High-net-worth individuals, businesses, those prioritizing convenience.

DIY Signing Devices

Open-source, self-built signing devices offer a lower-cost, fully inspectable path to self-custody. They trade tamper-resistant hardware for transparency - every layer can be audited and rebuilt by the user.

  • Krux - Open-source firmware for K210-based microcontrollers
  • SeedSigner - Raspberry Pi Zero-based air-gapped signer
  • Jade DIY - Blockstream Jade firmware on generic hardware
  • Specter DIY - Specter DIY air-gapped hardware wallet

Inheritance Planning

  • Create a written inheritance plan with key locations and recovery instructions
  • Use key shares or a trusted provider as a backup
  • Avoid cloud storage or third-party dependence for seed backups
  • Revisit setup yearly, patch firmware, verify backups

Comparison

ModelKey ControlRecovery HelpComplexityPrivacy
Single-sig self100%NoneLowHigh
Multisig self100%NoneHighHigh
CollaborativeMajorityYesMediumMedium
Semi-custodialMinorityYesLowLow

Resources