Storing crypto safely is arguably a more consequential skill than choosing which asset to buy, because a security mistake — a lost seed phrase, a phished approval, a compromised exchange account — can erase gains or savings regardless of how well the underlying investment performs. This guide covers the practical decisions and habits that reduce avoidable losses. It assumes you already understand the basics of what a wallet is; if not, start with our guide on crypto wallets explained.
Step one: decide how much control you actually need
Not everyone needs the same storage setup. Someone actively trading benefits from quick exchange access; someone holding for years with no near-term plan to sell may prefer the added security of self-custody, accepting the trade-off of full personal responsibility. Being honest with yourself about how you actually use crypto, rather than what setup sounds most sophisticated, is the right starting point.
Leaving funds on an exchange
Keeping crypto on an exchange is the simplest option and can be reasonable for smaller amounts or funds you expect to trade actively. The trade-off is counterparty risk: you are trusting that platform’s security practices and financial solvency, and exchange history includes real cases of hacks, insolvency, and frozen withdrawals that left customers unable to access funds they believed were theirs outright. If you choose this route, at minimum enable two-factor authentication using an authenticator app rather than SMS where possible, since SMS-based codes are more vulnerable to interception and SIM-swapping attacks.
Moving to self-custody
Withdrawing crypto to a wallet you control removes exchange counterparty risk but makes you solely responsible for security. Within self-custody, the practical choice is generally between:
- Hot wallets — connected to the internet, convenient for regular use, but more exposed to remote attacks such as phishing or malware.
- Cold wallets — keep the private key offline on a dedicated device, requiring physical confirmation to sign a transaction, which makes remote theft substantially harder at some cost to convenience.
A common, practical pattern is splitting holdings: a small amount in a hot wallet for regular use, and the bulk of longer-term holdings in cold storage that is rarely touched.
Backing up your seed phrase correctly
Your seed phrase is the single most important piece of information in self-custody — whoever has it controls the funds, permanently, with no recourse. A few durable habits matter more than any specific product:
- Write it down physically rather than storing it digitally. A photo on a phone, a note in a cloud-synced app, or a password manager entry can be exposed if that device or account is ever compromised.
- Store copies in more than one secure physical location to protect against fire, flood, or theft at a single location, while limiting exactly who knows where those copies are.
- Never enter your seed phrase into a website, app, or message under any circumstances. No legitimate wallet provider or support team will ever ask for it, and any request for it should be treated as a scam by default.
- Consider a metal backup for larger holdings, since paper can degrade or burn, while purpose-built metal plates are more resistant to fire and water damage.
Security and convenience trade off directly, and there is no configuration that maximizes both at once. A setup that is inconvenient enough that you avoid using it defeats its own purpose just as thoroughly as a setup that is so convenient it leaves you exposed. Choose the point on that trade-off that you will actually maintain consistently.
Multisig and passphrase options for larger holdings
For meaningfully large holdings, single-key self-custody has a structural weakness: one lost or stolen seed phrase compromises everything. Two options address this. A multisignature setup requires more than one separate key to authorize a transaction, so a single compromised key alone cannot move funds. Some hardware wallets also support an additional passphrase on top of the standard seed phrase, functioning as an extra word that, if forgotten, is just as unrecoverable as the seed phrase itself — a genuine added layer of security, but also a genuine added way to lock yourself out if it is mismanaged. Both options add real protection and real complexity, and are generally worth adopting only once you are comfortable with the fundamentals.
Recognizing common attack patterns
| Attack | How it typically works |
|---|---|
| Phishing | A fake website or message mimics a legitimate wallet or exchange to trick you into entering your seed phrase or credentials. |
| Malicious approvals | A deceptive transaction grants a smart contract ongoing permission to move your tokens, exploited later. |
| SIM-swapping | An attacker takes control of your phone number to intercept SMS-based two-factor codes. |
| Fake support | Someone posing as customer support asks for your seed phrase or remote access to “help” resolve an issue. |
A basic security routine worth adopting
- Use a dedicated, updated device for significant crypto activity where practical, and keep its software current.
- Use a hardware wallet for meaningful holdings rather than relying solely on a browser extension or mobile app.
- Double-check withdrawal addresses character by character before confirming, since transactions cannot be reversed.
- Periodically review and revoke smart-contract approvals you no longer actively use.
- Treat unsolicited contact about your crypto holdings — by email, message, or phone — with default suspicion.
Planning for the unexpected
Beyond day-to-day security, it is worth thinking through what happens to your holdings if you become unable to access them yourself, whether through an accident, illness, or simple forgetfulness. Because there is no institutional recovery process in self-custody, some form of secure, trusted succession planning — sharing access instructions with a trusted party through a secure method, for instance — is worth considering for meaningful holdings, even though it is an uncomfortable thing to plan for.
This guide is educational and is not financial advice. Cryptocurrency prices are volatile and you should never risk money you cannot afford to lose. Always do your own research before acting.
Frequently asked questions
Is it safer to keep crypto on an exchange or in my own wallet?
Each carries different risks -- an exchange has counterparty risk, self-custody shifts full responsibility to you. Many people use both for different purposes.
What should I do if I think my wallet has been compromised?
Move any remaining funds to a new wallet with a freshly generated seed phrase as quickly as possible, then work out how the compromise happened.
Is a hardware wallet worth it for a small amount of crypto?
It depends on your risk tolerance. Hardware wallets add a meaningful security layer at modest cost, and many find the habit worth building even for smaller holdings.
Should I split my crypto across multiple wallets?
Many people do, using a small hot wallet for spending and cold wallets for long-term holdings, which limits exposure from any single point of failure.