Crypto Custody: Separate Access, Control and the Legal Claim

A balance on a screen answers one question: what does this interface say you hold? It does not, by itself, answer who can move the asset, what happens if.

Overview

A balance on a screen answers one question: what does this interface say you hold? It does not, by itself, answer who can move the asset, what happens if access fails, or what claim you have against a service provider. A useful custody review keeps those questions separate.

Start with the person who can authorise movement

The SEC’s custody bulletin explains the distinction between holding your own private keys and relying on a third party. Losing keys, exposing recovery information or choosing an unsuitable custodian creates different risks. A wallet application and the assets it helps you access should not be treated as the same object. These are basic custody considerations, not a recommendation for one custody model.

Write a failure scenario before comparing features

Consider a hypothetical owner who can log into an exchange but cannot withdraw during an outage. The interface remains available while the action that matters is unavailable. Ask the provider how withdrawals are authorised, what recovery requires and which conditions can delay access. Keep the answers with the date and the exact legal entity providing the service. A recognisable brand is not a substitute for those particulars.

A recovery plan must work for someone else

Imagine that the usual operator is temporarily unavailable. Can a properly authorised successor identify the account, locate the relevant instructions and understand what must remain secret? A recovery document that only its author understands is an incomplete operational arrangement. Never put recovery phrases or private keys into an ordinary shared document or a chat. Plan the process without exposing the credential itself.

Choose responsibilities you can actually sustain

Self-custody and third-party custody distribute responsibilities differently. The practical decision is whether your arrangements match your competence, availability and tolerance for failure. Review access, authority and legal documentation as separate items rather than giving the whole arrangement a single reassuring score. For a further operational question, read the companion guide on wallet permissions. Good custody begins with a precise account of what could stop working.