Wallets and Self-Custody

If you have bought bitcoin on an exchange, what you have is a balance in someone else’s system. A wallet is how you take direct control of it. This page explains what a wallet really is, the choices in front of you, and how to move your first coins without losing them.

What a wallet really holds

A bitcoin wallet does not hold bitcoin the way a leather wallet holds cash. Your bitcoin lives on the blockchain, the shared public ledger that every Bitcoin node keeps a copy of. What the wallet holds is a private key: a very large secret number that proves you are allowed to spend a particular set of coins.

From that key the wallet creates addresses, the strings of letters and numbers you give to someone who wants to pay you. Anyone can send bitcoin to an address. Only the holder of the matching private key can spend from it.

So “holding bitcoin” really means “holding the key.” Lose the key and the coins are frozen forever. Let someone copy the key and they can spend the coins as freely as you can.

Custodial or self-custody?

There are two ways to hold a key. With a custodial wallet, a company (usually the exchange where you bought the coins) holds the key for you. You log in with a password and they sign transactions on your behalf. With self-custody, you hold the key yourself, in an app or a device that only you control.

Bitcoiners sum this up as “not your keys, not your coins.” When an exchange holds your bitcoin, you have a claim on the exchange, not the bitcoin itself. If the exchange is hacked, freezes withdrawals, or goes bankrupt, as FTX did in 2022, that claim can be worth far less than your balance.

That said, self-custody is a responsibility, and it is only fair to say when the custodial route is reasonable. If you hold a small amount, a few hundred dollars, on a large US-regulated exchange with strong security settings turned on, the risk of losing it through your own mistake is probably higher than the risk of the exchange failing. Many people start there and move to self-custody as the amount grows.

A rough rule: once your bitcoin is worth more than you would be upset to lose, or more than a month of your expenses, it is time to learn self-custody.

A few services skip the custodial stage altogether and send each purchase straight to a wallet you control. They are listed under exchanges that never hold your coins, and all of them need you to have a wallet first.

Hot wallets and cold wallets

Wallets are also sorted by whether their keys touch the internet. A hot wallet keeps the key on an internet-connected device such as your phone or laptop. It is convenient for spending, and it is exposed to whatever malware reaches that device.

A cold wallet keeps the key on something that never connects to the internet, usually a dedicated hardware device. It is slower to use and much harder to rob remotely. Most experienced holders use both: a hot wallet with spending money and a cold wallet for savings.

Software wallets

A software wallet is an app. It is free, takes five minutes to set up, and is the right first step for most beginners. The key lives on your phone or computer, so this is a hot wallet. Three well-regarded, open-source options that are actively maintained as of 2026:

• BlueWallet (iPhone, Android, Mac). Simple, bitcoin-only, and a good first wallet.
• Muun (iPhone, Android). Self-custodial, and it handles regular and Lightning payments from one balance. Its fees can run higher than average when the network is busy.
• Sparrow (Windows, Mac, Linux desktop). A power-user wallet with full control over every transaction. It pairs well with a hardware wallet and is the one to grow into.

Whichever you pick, download it only from the developer’s own website or the app-store listing that site links to. Fake wallet apps that quietly steal seed phrases are a common scam.

Hardware wallets

A hardware wallet is a small device, about the size of a USB stick or a credit card, that generates your private key and never lets it leave the device. When you send bitcoin, the unsigned transaction goes to the device, you confirm it on the device’s own screen, and only the signed result comes back. Malware on your computer cannot spend what it cannot see.

Well-known makers, all shipping current products as of 2026:

• Coldcard (Coinkite, Canada). Bitcoin-only and built for security-first users. One caution: in July 2026 Coinkite disclosed that a firmware bug, present since version 4.0.1 in March 2021, made some Coldcard-generated seeds far weaker than intended, and it published fixed firmware in August and September 2026. Seeds generated on the fixed firmware, or with at least 50 of your own dice rolls, are not affected. If you generated a seed on an older Coldcard, read Coinkite’s advisory: its advice is to update, generate a new seed, test it, and then move your coins. Coinkite does not sell through Amazon at all, and its own FAQ says you should never buy a “used” COLDCARD from eBay or another online store, because a genuine one arrives “sealed in a special tamper-evident bag” whose number you check during first use. Buy it from Coinkite, where the Mk5 was $219 and the Q $319 as of September 2026, both shown as reduced.
• Trezor (Czech Republic). The original hardware wallet, open-source hardware and software, with the newer “Safe” line of models. Trezor runs its own stores on Amazon and says stock sold there is “supplied by us directly and kept separate so devices are not mixed with other goods”, and is “safe to use as long as they pass standard security checks”. Other sellers list the same models, so check that the seller name is Trezor Company before you pay. The Safe 5 was $129 on Trezor’s own store as of September 2026.
• Ledger (France). The biggest seller, and it supports many coins besides bitcoin. Its companion software is not fully open source, which some bitcoiners hold against it. Read Ledger’s own warning before you buy anywhere: “numerous unauthorized third-party resellers operate across online marketplaces, including Amazon”, and buying from them “introduces a number of supply chain vulnerabilities and security risks”. Ledger says buying from Ledger, from an official Ledger or Authorized Reseller storefront on Amazon, or from an Authorized Reseller “is safer when combined with the Genuine Check”, the built-in cryptographic test that “confirms that the device contains a genuine secure element”. If you buy on a marketplace, the seller line must read Ledger Official, and you still have to run the Genuine Check yourself in Ledger’s own app. The Nano X was $99 on Ledger’s own store as of September 2026.
• Bitkey (Block, the company behind Cash App and Square). A beginner-friendly device paired with a phone app. It uses a 2-of-3 multisig design: one key on the device, one on your phone, and one held by Block purely for recovery. Block sells it from its own site, where it was $250 as of September 2026.
• Tangem (card format, many coins). A card you tap against your phone instead of a device with a screen. There is no seed phrase by default: your backup is the second and third card in the pack, which is simpler to look after and means that losing the whole set loses the coins. Tangem names its “Official Tangem Amazon e-shop” as one of its three official channels, alongside tangem.com and its own resellers. A two-card pack was $59.90 and a three-card pack $69.90 on Tangem’s own store as of September 2026.
• Foundation Passport (Foundation Devices, United States). Bitcoin-only, and sold only by Foundation itself: we found no Amazon listing for it, and the maker’s site points you at its own shop. Passport Prime was $349 there as of September 2026, the most expensive device on this list, and the page says it is “Assembled in the USA”. Foundation’s own store.

Buy from the maker, or from the maker’s own storefront on a marketplace where the maker names one and you have checked the seller line. Never buy second-hand. On the makers’ own stores in September 2026 these ranged from about $60 for a pack of Tangem cards to $349 for a Passport Prime, with most of the familiar devices between $99 and $219.

Hardware security keys

A hardware security key is a different thing from a hardware wallet, and the names confuse almost everyone. A hardware wallet holds the key to your bitcoin. A security key holds no bitcoin at all: it guards the accounts around your bitcoin, the exchange login and the email address that login recovers to. You plug it in or tap it to log in, and it defeats phishing because it will only answer the real website. Kraken puts the reason plainly: the standard these keys use “prevents phishing by verifying the legitimacy of the website you use the Hardware Security Key for”.

Of the services this site covers, these say on their own pages that they take a security key, checked in September 2026: Kraken (“Sign-in 2FA and the Master Key support Hardware Security Keys that use the FIDO2 protocol”), Coinbase (its security page lists “2 factor-authentication (with security key support)”), Gemini (“You can now use USB security keys (e.g., Yubikeys, Feitian keys, Trezor and Ledger hardware wallets, etc.)”), and Shakepay, which takes a key as a passkey holder (“Physical FIDO security keys require a pin to be used as a passkey”) and warns that “Android support for passkeys is limited at this time”. Crypto.com is a partial yes: it describes a key as somewhere to keep a passkey, and its page never uses the words FIDO2, WebAuthn or U2F. Strike and Newton have been reported to support keys, but their help pages would not open for us when we looked, so we cannot confirm it here. For River, Swan, Uphold, CoinZoom, NDAX and Bull Bitcoin we found nothing either way: the pages we could open described an authenticator app and nothing else, and several would not open for us at all. If you use one of those, ask their support before you buy a key for it.

Your Google account and your Apple account both take one, and that matters more than it sounds, because the email account is how an attacker resets everything else. Buy two keys and register both, one to carry and one kept at home. That is not our idea: Apple requires it, in its own words, “You must add and maintain at least two security keys.”

The makers we looked at in September 2026, the ones with a United States presence first. Prices are the makers’ own, from their own stores on the day we checked, and they move.

• YubiKey (Yubico). The Security Key NFC was $29 and the YubiKey 5 NFC $58, in USB-A or USB-C, both with NFC for tapping a phone. Not open source. The $29 key does the job an exchange login needs and nothing else; the $58 one adds older protocols an ordinary reader will never use, so buy it only if you know you want them. Yubico’s store says “Free shipping: US/CA orders of $100+”, so a single $29 key will carry postage. Yubico’s own store.
• Google Titan. Google’s own store lists the “Titan Security Key – FIDO2 USB-A/USB-C + NFC” at “From $30” with free shipping; it did not show us a price for a single key rather than the pair. USB-A, USB-C and NFC, no Lightning. Not open source: Google publishes neither the schematics nor the firmware, so you are trusting the company rather than checking the work. Google’s own store.
• Thetis. The FIDO2 Security Key with USB-A was $26.99 and the PRO, which adds USB-C and NFC, was $32.99, with the PRO’s specification table listing “FIDO2 L1” certification. Not open source. The catch is the model names: Thetis also sells cheaper keys that are U2F only and not FIDO2, so read the full name before you buy. Thetis’s own store.
• Kensington VeriMark Guard. $49.99 for the USB-A model, “FIDO2 and FIDO U2F certified” in Kensington’s own words, and the only one here with a fingerprint reader on the key. Not open source, and the most expensive of the group. A fingerprint is convenience, not a backup: lose the only key and the enrolled finger goes with it, so you still need a second key. Kensington also sells an older plain VeriMark that is U2F only, which is not the same product. Kensington’s own store.
• Hirsch (formerly Identiv). USB-A at $29 and USB-C at $35, and the FIDO Alliance’s own certified showcase lists them, under their old uTrust name, as FIDO2 and says they “are made in the U.S.A.” You cannot buy one: all three of its FIDO2 keys were marked “Sold out” on its own store when we looked in September 2026, and the old shop.identiv.com address now redirects to the Hirsch shop. We list it because it is a real option if stock returns, not because you can act on it today. Hirsch’s own store.
• Feitian. The cheapest FIDO2 key, the A4B with USB-A only, showed at $28 reduced from $40, and the rest of the line ran from about $36 to $57. The line covers USB-A, USB-C, NFC and one model with USB-C and Lightning together, which is the widest connector spread here. Not open source. One oddity to watch: the store showed its prices in Canadian dollars when we looked, even on its .us address, so check the currency before you pay. Feitian’s own store.
• Token2 (Geneva, Switzerland). The cheapest keys were under $25 and a FIDO2 card, the shape of a credit card rather than a dongle, was $17.19, prices shown including VAT. Not open source. Read its certification claim carefully: the shop says Token2 is “a member of the FIDO Alliance”, which is a fact about the company and not a certificate for the key in your hand. It ships from Switzerland or the EU, so allow for postage and customs. Token2’s own shop.
• Nitrokey (Germany). The Nitrokey Passkey was 32 euros, USB-A only with no NFC. This one is genuinely open source, in its own words “Trustworthy thanks to open source; quality made in Germany”, so the implementation can be checked by anyone. Two cautions: the shop prices in euros only, and it ships from Germany, so a North American buyer should look hard at the shipping charge before ordering a single cheap key. Nitrokey’s own shop.
• SoloKeys. The Solo 2C+ with USB-C and NFC was $46, and the product page says “Open source hardware and software. Made and programmed in Europe.” Be clear about what you are buying: the current model is not FIDO2 certified. Its page claims only that it works with “anything that supports FIDO2 or FIDO U2F”, and in June 2026 the team wrote on its own GitHub that it had just finished interoperability testing and would “be able to announce the certification in the near future”. Development has been slow, with a long quiet stretch the team put down to supply-chain trouble and too few developer hours. It works, but it is a small project next to Yubico or Google. SoloKeys’ own store.

For Canadian readers: Yubico ships from its own store and its free-shipping line covers “US/CA orders of $100+”, though it prices in US dollars only. Feitian’s store was quoting Canadian dollars when we looked. The European makers all ship across the Atlantic, at a cost worth checking at the checkout rather than after.

A security key costs less than any hardware wallet on this page, and it protects the thing beginners actually lose. Far more people are robbed through a phished exchange login or a hijacked email account than through a stolen seed phrase.

The seed phrase

When you set up any self-custody wallet, it shows you a seed phrase: 12 or 24 ordinary English words, in a fixed order, drawn from a standard list of 2,048. Those words encode your private key. Anyone who has them can rebuild your wallet on any device and spend everything.

That is the point. If your phone dies or your hardware wallet is lost in a move, the words get your bitcoin back. How to back them up:

• Write the words on paper immediately, then check your copy by reading it back against the screen.
• For any amount you would hate to lose, stamp or engrave the words into a metal plate. Kits cost a few tens of dollars and survive fire and flood; paper does not.
• Keep at least two copies in two separate places, for example a safe at home and a bank safe-deposit box or a trusted relative’s safe.
• Never photograph it. Never type it into a website, an email, a notes app, a password manager, or a cloud drive. Photos get synced and clouds get breached.

And never share it. No wallet company, exchange, or support agent will ever need your seed phrase. Anyone who asks for it is robbing you.

On the metal plate, you can buy one ready-made or make your own. Ready-made, on the makers’ own stores as of September 2026: Cryptotag’s Loki, titanium, $89; the Billfodl, stainless steel with letter tiles you slot in, $99; and Coinkite’s SEEDPLATE, steel cut and etched in Canada, $59.97 reduced from $69.99. None of these is necessary. A letter-stamp punch set and a blank steel plate do the same job for a good deal less, and the words are just as unreadable to fire either way. Whichever you use, a small fireproof document bag is a cheap place to keep it.

Two things you will see recommended that a beginner does not need. A Faraday bag blocks wireless signals reaching a phone or a key fob; it does nothing about a phishing page, a weak second factor on your exchange login, or a seed phrase you never wrote down properly, which are the three ways people actually lose money. A phone or laptop kept only for bitcoin is a real step for someone holding a great deal or facing a specific threat, and for everyone else it is one more device to buy, patch and lose, addressing none of those same three risks. Spend the money on a security key and a metal plate first.

Multisig and collaborative custody

Multisig, short for multi-signature, means a wallet that needs more than one key to spend. A common setup is “2-of-3”: three keys exist, and any two of them can move the coins. One lost key is survivable; one stolen key is not enough to rob you.

Collaborative custody services package this up for you. Casa and Unchained, both US companies operating as of 2026, set up a multisig vault in which you hold two keys (typically on two hardware wallets) and the company holds the third. The company cannot spend your coins on its own, but it can help you recover if you lose one key, and it can help your heirs. Both charge an annual fee.

This is a good fit for larger holdings or for anyone who wants inheritance planning. It is overkill for a first $500.

How to move bitcoin from an exchange to your wallet

1. Set up your wallet and back up the seed phrase first. Do not skip this. If the phone breaks tomorrow, the seed is the only way back.
2. In the wallet, tap Receive and copy the address, or show its QR code. Bitcoin addresses start with “bc1”, “3”, or “1”.
3. On the exchange, choose Withdraw or Send, pick bitcoin, and choose the Bitcoin network (not Lightning or any other network unless your wallet supports it). Paste the address, then compare its first and last several characters with what your wallet shows.
4. Send a small test amount first, say $10 to $20 worth. The exchange charges a withdrawal fee, which covers the network fee, the small payment to miners for including your transaction in a block. Check the fee before you confirm.
5. Wait for confirmations. Your wallet will usually show the payment as pending within a minute, then as confirmed once a block includes it, about 10 minutes on average. Each later block adds another confirmation; most wallets and exchanges treat one to six as final. To watch it yourself, paste the transaction ID into a block explorer.
6. Once the test arrives, send the rest the same way. Use a fresh receive address if your wallet offers one; most do, for privacy.

Some exchanges hold withdrawals for a day or more after a new deposit or a security-settings change. That is normal, and it protects you if your account is ever taken over.

Books

Nothing on this page needs a book to understand. But if you want to go further than a web page can take you, these are the ones worth your time, easiest first. Two of them, the last two, are written for technical readers.

• The Little Bitcoin Book (the Bitcoin Collective). Short, plain and written by several people rather than one enthusiast. The closest in tone to this site, and the first one to hand someone who is curious but not sold.
• Inventing Bitcoin (Yan Pritzker). Builds bitcoin up one idea at a time until the design makes sense. Short, clear, and about why it works rather than how to buy any.
• The Bitcoin Standard (Saifedean Ammous). The best-known bitcoin book, and a readable history of money. It argues a strong position rather than describing a neutral one, so read it as one economist’s case, not as settled fact.
• 21 Lessons (Gigi). Essays on what the author learned going down the rabbit hole. Philosophical and personal rather than instructional, and it suits someone who already has the basics.
• Broken Money (Lyn Alden). A history of money and payment systems in which bitcoin is the last chapter of a much larger argument. Long, well sourced, and not a how-to.
• Mastering Bitcoin (Andreas M. Antonopoulos and David A. Harding, third edition). The technical reference: keys, transactions, scripts and the code behind them. For a reader who wants to know how it works, not how to buy it. The full third edition is free to read in the authors’ own repository, under a Creative Commons licence, so you do not have to buy it to start.
• Grokking Bitcoin (Kalle Rosenbaum). The other technical one, heavily illustrated, covering mining, scripts and running a node. Gentler than Mastering Bitcoin, still well past what buying your first bitcoin requires.

Next

• Keeping your bitcoin safe: the scams and mistakes that actually cost people money, and how to avoid them.
• Avoiding bitcoin scams: including the checklist for keeping a recovery phrase safe.
• Bitcoin price alerts: including how to be warned if your own wallet ever moves.
• How to buy bitcoin: if you have not bought your first coins yet.
• The Lightning Network: fast, cheap payments on top of Bitcoin.