2.6[Crypto Investing for Beginners](https://wealtii.com/learn) # How to Store Crypto Safely: Wallets, Backups and Custody By [Zayd Ahmed](https://wealtii.com/editorial-policy#zayd-ahmed), Founder & CEO, Wealtii · Published 12 February 2026 · Last reviewed 21 October 2026 To **store crypto safely**, decide who holds the private keys (you, or a custodian you have checked), keep long-term holdings on a hardware wallet or other offline setup, back up the seed phrase on paper or metal stored offline, protect accounts with authenticator-app 2FA, and test your recovery before you move large amounts. ## Who should hold your private keys? Every storage decision starts with custody. Crypto wallets do not hold coins; they hold the private keys that can move coins recorded on the blockchain. Whoever controls those keys controls the crypto. - **Self-custody:** you hold the keys. Nobody can freeze or lose your funds on your behalf, but if your device and backups are lost, stolen or hacked, nobody can restore them. - **Third-party custody:** an exchange, broker, fund or specialist custodian holds the keys. You can usually reset a password, but you depend on the custodian's security, solvency and honesty. The US SEC's December 2025 investor bulletin on crypto custody suggests asking any custodian: how is it regulated, what happens if it fails, is there insurance, where and how are assets stored and who can access them, does it lend or reuse (rehypothecate) client assets, and what fees does it charge? A provider that will not answer those questions clearly is a warning sign. ## Which storage setup fits how much you hold? | Your situation | Common setup | Why | | --- | --- | --- | | Small amounts you trade or use in apps | A reputable exchange account or a software (hot) wallet, protected with authenticator-app 2FA | Convenient, and the amount at risk if a device or account is compromised stays small | | Long-term savings you rarely move | A hardware (cold) wallet, with the seed phrase backed up offline | Private keys never sit on an internet-connected device | | Large holdings or shared control | A multi-signature wallet, for example 2-of-3 keys held on separate devices in separate places | Losing or leaking one key is not enough to lose the funds | | Exposure without managing keys | A custodial product such as an ETP, a fund or an exchange account | No seed phrase to protect, but you rely on the custodian | Many people combine these: a hot wallet with a small balance for day-to-day use and a hardware wallet for savings. Our [hot wallet vs cold wallet comparison](https://wealtii.com/learn/hot-wallet-vs-cold-wallet) covers the trade-offs in detail, and the guide to [multi-signature wallets](https://wealtii.com/learn/what-is-multi-sig-wallet) explains how shared-key setups work. ## How should you back up a seed phrase? Most self-custody wallets create a 12- or 24-word seed phrase (the BIP-39 standard) that can rebuild every key in the wallet. The backup is therefore as valuable as the coins themselves. The essentials: - Write the words by hand on paper, or stamp them into a metal plate that survives fire and water. - Never photograph the phrase, store it in cloud notes or email, or type it into a website or chat. - Keep it somewhere secure that you control, and consider a second copy in a separate location. - Consider an optional BIP-39 passphrase, an extra word only you know, so a stolen paper backup alone is not enough. Losing the passphrase, though, locks you out too. - Test a restore with a small amount before you rely on the backup. For storage options, splitting methods and inheritance planning, see [how to store a recovery phrase](https://wealtii.com/learn/safe-storage-of-recovery-phrases). ## How do you protect crypto accounts and devices? - **Use app-based 2FA.** Authenticator apps or hardware security keys resist SIM-swap attacks better than SMS codes. CISA recommends turning on multifactor authentication for any account that offers it. - **Use unique passwords** stored in a password manager, and a separate email address for crypto accounts if you can. - **Bookmark official sites** and reach them from the bookmark, not from ads, emails or direct messages. - **Check addresses on the device screen.** Clipboard malware can swap a pasted address; a hardware wallet shows the real destination before you approve. - **Review token approvals.** On Ethereum-style chains, revoke smart-contract permissions you no longer use. - **Keep quiet about holdings.** Publicising balances invites phishing and physical threats. Our [crypto wallet security checklist](https://wealtii.com/learn/wallet-security-best-practices) goes further, including passphrases and air-gapped signing. ## What are the most common ways people lose crypto? - Entering a seed phrase on a fake website or giving it to a fake "support agent". - Losing the only backup, or a device failing before the backup was tested. - Custodian failure, as with Mt. Gox in 2014 and FTX in 2022. - Sending funds to a wrong address or on a network the recipient does not support. - Signing a malicious approval that lets a "drainer" contract empty a wallet. **If you hold a Wealtii fund:** you are using third-party custody and do not manage keys to the fund assets. Applying the SEC's questions, Wealtii holds fund assets 1:1 in a Gnosis Safe vault on BNB Smart Chain that needs all three of its three signatures to move funds; assets are not lent, staked or rehypothecated; there is no insurance or compensation scheme; and Wealtii is not regulated. Vault balances are public, and you can check them yourself using our guide on [how to verify Wealtii's reserves](https://wealtii.com/learn/how-to-verify-wealtii-reserves) or the [Transparency page](https://wealtii.com/transparency). ## Frequently Asked Questions ### What is the most secure way to store crypto? For long-term holdings, most security guides recommend a hardware wallet bought directly from the manufacturer, with the seed phrase written on paper or metal and kept offline in a secure place. No method removes every risk: devices fail, backups can be lost or stolen, and a seed phrase typed into a phishing site exposes everything. ### Is it a good idea to leave crypto on an exchange? Leaving crypto on an exchange means trusting it to stay solvent, secure and willing to process withdrawals. The failures of Mt. Gox in 2014 and FTX in 2022 left customers unable to reach their assets. If you do leave funds there, check how the exchange is regulated where you live and whether it keeps client assets separate. ### Should I keep my seed phrase in a password manager or cloud storage? Most wallet makers advise against it, because a breach of that account or device would expose the seed phrase and every coin it controls. Keep the phrase offline, on paper or a metal plate, in at least one secure location that you control. ### What happens to my crypto if I die? Without the keys or access to the custodial account, heirs may be unable to recover the assets. Self-custody holders often leave sealed recovery instructions with their will or use a multi-signature setup, and custodial account holders should check the provider's process for handling estates. ## 📚 Sources & References 1. [U.S. SEC, Investor.gov — Crypto Asset Custody Basics for Retail Investors (12 Dec 2025)](https://www.investor.gov/introduction-investing/general-resources/news-alerts/alerts-bulletins/investor-bulletins/crypto-asset-custody-basics-retail-investors-investor-bulletin-0) (accessed 21 Oct 2026) 2. [Bitcoin.org — Secure your wallet](https://bitcoin.org/en/secure-your-wallet) (accessed 21 Oct 2026) 3. [BIP-39 — Mnemonic code for generating deterministic keys (seed phrases)](https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki) (accessed 21 Oct 2026) 4. [ethereum.org — Ethereum security and scam prevention](https://ethereum.org/en/security/) (accessed 21 Oct 2026) 5. [U.S. CISA — Turn On Multifactor Authentication](https://www.cisa.gov/secure-our-world/turn-mfa) (accessed 21 Oct 2026) Disclaimer: This content is for educational purposes only and does not constitute financial, tax, or legal advice. Digital assets are volatile and you can lose some or all of the money you invest. Never share your private keys or seed phrase with anyone, including people claiming to be support staff. Wealtii is not registered or licensed with any financial regulator; see our [Regulatory Status](https://wealtii.com/regulatory-status) page. ## Further reading from official sources - [NIST: Blockchain Technology Overview](https://csrc.nist.gov/pubs/ir/8202/final) - [Bitcoin white paper](https://bitcoin.org/bitcoin.pdf) [Zayd Ahmed](https://wealtii.com/editorial-policy#zayd-ahmed) Founder & CEO, Wealtii Computer Science Engineer | 5+ Years in DeFi & Digital Assets