Bitcoin

Self-custody in plain English: setting up your first bitcoin wallet safely

8 September 2026

Most people’s first bitcoin sits on the exchange where they bought it - a reasonable place to start, but not ownership in the way most people assume. This post explains what self-custody means, how to set up a wallet properly, and how to avoid the mistakes that get coins lost or stolen.

This is education, not financial advice.

What self-custody actually means

Bitcoin on an exchange is an IOU. The exchange holds the private keys - the secret numbers that control the coins - and you hold a promise that they’ll let you withdraw when you ask. You’re relying on their security, their solvency, and their honesty.

Self-custody means holding those keys yourself. In practice the keys live inside wallet software on your phone, computer, or a dedicated hardware device. Whoever controls the keys controls the coins. The phrase “not your keys, not your coins” isn’t a slogan - it’s a description of the mechanism.

The trade-off is responsibility. There is no password reset, no support line, and no way to reverse a mistake. Self-custody done carefully is very robust. Done carelessly, it’s unforgiving.

Hot wallets vs hardware wallets

Hot wallets

A hot wallet is an app on an internet-connected device - your phone or computer. It’s convenient, usually free, and quick to set up, which makes it the right starting point for learning and for small amounts you might actually spend.

The weakness is the device itself: phones and computers can be compromised by malware. A hot wallet is like cash in your pocket - fine for everyday amounts, not where you’d keep significant savings.

Hardware wallets

A hardware wallet is a small dedicated device that stores keys offline and signs transactions internally, so keys never touch your internet-connected computer. It’s a one-off purchase and the standard choice for larger amounts or long-term holdings.

Plenty of people end up with both: a hot wallet for small, active amounts and a hardware wallet for savings.

Setting up your first wallet

Take your time with this. One unhurried hour prevents most of the ways people lose coins.

1. Choose reputable wallet software. Look for a long public track record, open-source code, active development, and independent security reviews. Download only from the official website or verified app-store listing and check the publisher carefully - impersonator apps are common.
2. Create a new wallet. The software generates a seed phrase: usually 12 or 24 ordinary words that encode your keys. Anyone who has these words has your coins.
3. Write the seed phrase on paper. Not a photo, not a notes app, not a text file, not cloud storage, not an email to yourself. Paper, in your handwriting, stored somewhere private and protected from fire and water. Some people add a second copy in a separate location, or stamped metal for durability.
4. Verify the backup. Good wallets ask you to re-enter the words to confirm you recorded them correctly. Don’t skip this.
5. Check the receive address carefully. If you’re using a hardware wallet, confirm the address on the device’s own screen, not just the computer screen - malware on a compromised machine can swap addresses.
6. Test with a small amount first. Send a small amount in, wait for it to confirm, then send a little back out - proof you can both receive and spend. Only then think about moving anything larger.

The scams that target beginners

Scammers know new holders are unsure of themselves. The common patterns:

• Fake support. You post a question publicly or search for a help number, and a “support agent” messages you offering to fix your wallet. Real wallet projects rarely offer live support and will never contact you first.
• Phishing sites and apps. Lookalike websites and app-store clones that harvest whatever you type in. Navigate from a bookmark or the official domain, never from ads or unchecked search results.
• “Verification” requests. Messages claiming your wallet must be verified, synced, or upgraded by entering your seed phrase on a website. This is always theft - wallet software never needs your seed phrase for an update.
• Too-good offers. Anyone promising to double your coins, or asking for a fee to release a “prize”, is stealing from you.

One rule covers nearly all of it: nobody legitimate ever asks for your seed phrase. Not support staff, not the wallet maker, not me, not anyone. The seed phrase is the money.

Backups and inheritance

Your backup should survive the two scenarios people forget: your house burning down, and you not being around.

Keep at least one copy of the seed phrase in a second physical location. Then write a simple letter - stored with your will or other important documents - telling a trusted person that a wallet exists, roughly what recovery involves, and where the recovery information is kept. They don’t need the phrase itself in advance; they need to know the plan exists.

Learn it hands-on

Reading only gets you so far - the confidence comes from doing it. In a one-on-one session, in person in Sydney or virtually, we set up a wallet on your own device, practise receiving and sending with small amounts, and test that your backup actually works. Read more about bitcoin education at TLDR or book a session.

This article is general education only - it is not financial, investment, or legal advice.

Want this applied to your situation? I run 1:1 bitcoin sessions - virtual across Australia, in-person in Sydney. Learn more or book a time.