To keep digital assets safe yourself, split them by purpose: a small hot wallet for everyday use and a cold, offline wallet, usually a hardware device, for anything you would be upset to lose. Back up the recovery phrase offline in two places, verify every address on the device screen, never sign what you cannot read, and leave your family a plan to find it all. Self-custody removes the risk of a platform failing, but it moves every other responsibility onto you.
That trade-off is the heart of this guide. Leaving assets on an exchange is convenient and recoverable if you forget a password, but you depend on that company staying solvent and honest. Holding your own keys removes that dependency and adds new ways to lose everything by your own mistake. Below is a practical path through the choice, the setup, daily habits and the less discussed questions of inheritance and shared control. Nothing here is a recommendation to buy or hold any asset.
Custodial or self-custody: who actually holds the keys?
Every digital asset is controlled by a private key. The only real question is who holds that key. On an exchange or a custodial app, the company holds it, and you hold an account with a username, password and two-factor code. In self-custody, you hold the key yourself through a wallet app or device, and no company can freeze, lend or lose your assets, but no company can help you either.
Each model fails differently. Custodial platforms fail when the company is hacked, goes bankrupt, misuses customer funds, or is shut down by regulators; customers then wait in line, sometimes for years, with no guarantee of getting much back. Self-custody fails when the owner loses the backup, is tricked into revealing it, signs a malicious transaction, or dies without leaving instructions.
There is no universally right answer. A person who is careless with paperwork and easily rushed by messages may honestly be safer on a large, regulated platform for small amounts. A person who is organised and patient can remove a whole category of risk by holding keys. Many people end up using both, deliberately, for different purposes.
Whatever you choose, be clear-eyed that "my keys" also means "my responsibility". The rest of this guide assumes you have decided to hold at least part of your assets yourself and want to do it properly.
Wallet types compared
The table is a simplified map. Individual products vary, so check the manufacturer's own documentation before relying on any feature.
| Type | Who holds the keys | Suits | Main risk |
|---|---|---|---|
| Exchange account | The exchange | Buying, selling, small balances | Platform failure, frozen withdrawals, account takeover |
| Mobile hot wallet | You, on your phone | Small everyday amounts, trying apps | Phone malware, theft, phishing signatures |
| Browser extension wallet | You, in the browser | Using web applications | Fake extensions, drainer sites, malicious approvals |
| Hardware wallet | You, on a dedicated offline device | Larger, long-term holdings | Lost backup, fake or tampered devices, blind signing |
| Multi-signature wallet | Several keys, held by several people or devices | Companies, families, large amounts | Complex setup, losing too many keys, coordination mistakes |
| Paper wallet (single printed key) | You, on paper | Mostly outdated; not recommended for beginners | Printer and computer exposure, damage, misuse when spending |
A sensible pattern for many people is two tiers: a hot wallet holding only what you are prepared to lose to a mistake, and a hardware or multi-signature wallet for the rest.
Choosing a setup that fits how you actually live
Start from behaviour, not from technology. How often do you move funds? Do you use applications that need signatures, or do you mostly hold? Who else in your household should be able to reach the assets if something happens to you? Answering these questions honestly prevents the most common mismatch: a complicated vault set up by an enthusiastic beginner who then keeps everything in a phone wallet because the vault is annoying to use.
A simple rule of thumb is to think in tiers by consequence. Money you would shrug off losing can live in a convenient hot wallet. Money whose loss would hurt belongs on a hardware wallet, with a properly stored backup. Money whose loss would change your life, or that belongs to a business, deserves multi-signature control, written procedures and probably professional advice.
Location matters too. In a humid climate, paper backups mould and fade. In flood-prone neighbourhoods, ground-floor hiding places are risky. In a busy family home with guests and helpers, "hidden in the drawer" is not hidden. Adjust the plan to the house you live in, not to an imaginary ideal.
Setting up a hardware wallet safely, step by step
The aim is a device that only you have ever controlled, a backup only you have seen, and proof that the backup works before significant money depends on it.
- Buy from the manufacturer or an authorised reseller. Avoid marketplaces, second-hand listings and "pre-configured" offers. A device that someone else has handled can be tampered with.
- Inspect the packaging and the device. Follow the manufacturer's published checks. If a recovery phrase is already printed inside the box, stop: someone else knows it.
- Install the companion app from the official source. Type the manufacturer's address yourself. Fake companion apps and fake update prompts are a known trap.
- Initialise as a new device and set a PIN. Choose a PIN that is not your birthday or phone number. The device will wipe itself after repeated wrong attempts.
- Write down the recovery phrase on the device screen. Follow the storage rules in our guide to storing a seed phrase safely: paper or metal, two places, never photographed.
- Update the firmware through the official app. Only accept updates offered by the official app, never through links in emails or messages.
- Receive a small amount and verify the address on the device. Compare the address on the device screen with the one shown on your computer. Malware can change what the computer shows, but not what the device shows.
- Test a recovery before moving the rest. Reset the device or use a spare, restore from your written phrase, and confirm the balance appears. Only then move larger amounts.
Expect the whole process to take an unhurried hour or two. If you feel rushed, stop and finish another day; most setup mistakes come from impatience.
Daily habits that keep a self-custody setup safe
Verify every address on the device screen. Check the full address, or at least several blocks from the start, middle and end, on the hardware wallet itself before approving.
Keep the hot wallet small. Top it up from the vault when you need to, rather than leaving large balances where a single bad signature can reach them.
Refuse blind signing. If the device or wallet cannot show what a transaction does in readable form, do not approve it. Most legitimate operations can be displayed clearly.
Use a separate device for important wallets if you can. An older laptop or a phone used only for finances, kept updated and free of games and random apps, removes much malware risk.
Protect the accounts around your wallet. Use an authenticator app or a security key for exchange and email accounts rather than text messages, which can be hijacked through SIM swaps.
Review token approvals every few months. Revoke permissions you no longer need, especially unlimited approvals from apps you have stopped using.
Keep simple records. Note dates, amounts and purposes of significant transfers. They help with tax questions, disputes and inheritance.
Never discuss holdings publicly. Posting balances or wins in social media invites targeted phishing and, in the worst cases, physical threats.
A realistic example: moving from an exchange to self-custody
Picture a café owner in Da Nang who has kept a modest amount of digital assets on an exchange for a couple of years. News of a platform freezing withdrawals makes them uneasy, so they decide to move most of it to a hardware wallet. Their first instinct is to buy the cheapest device on a marketplace and finish the job the same evening.
A friend who works in IT persuades them to slow down. They order the device from the manufacturer's own site, wait for delivery, and set it up on a Sunday morning with the phone on silent. They write the phrase on paper, then copy it again to a second sheet that goes into a document safe at their parents' house. They send a small test amount from the exchange, check the receiving address on the device screen, and wait for it to arrive.
The test reveals a problem: the exchange offers withdrawals on several networks, and they had first selected one their wallet did not support for that asset. Because it was only a test amount, the mistake cost a small fee and a lesson rather than their savings. They choose the correct network, confirm, and move the rest in two batches over two days.
Finally, they keep a small balance in a phone wallet for the few apps they use, write a sealed letter for their spouse explaining where the backups are, and set a calendar reminder to review approvals and the letter every six months. None of this required technical brilliance. It required refusing to rush.
Common self-custody mistakes
Treating the hardware wallet as the backup. The device is replaceable; the recovery phrase is not. Lose the phrase and break the device, and the assets are gone.
Storing the phrase in the same box as the device. One theft or one fire takes both. Keep them in different places.
Connecting the vault wallet to every new application. The vault should rarely sign anything. Use the small hot wallet to experiment.
Following "support" instructions from strangers. As our guide to technical scam red flags explains, fake support is one of the most common routes to an emptied wallet.
Skipping the test transaction. Network mismatches, wrong memos and mistyped addresses are cheap to discover with a small amount and expensive to discover with everything.
Ignoring firmware and app updates for years. Updates fix vulnerabilities. Apply them through the official app, after confirming the update is genuine.
Assuming family will "figure it out". Without instructions, heirs may not know the assets exist, or may hand the backup to the first person who offers help.
Over-engineering. Splitting the phrase into many pieces, adding a passphrase you will forget, and hiding copies in five places creates more ways to lose access than to be robbed.
Shared control and inheritance: multisig and the sealed letter
For a business or for a family pooling significant assets, a single key held by one person is a fragile arrangement. A multi-signature wallet requires several keys to approve a transfer, for example two out of three. One key can be lost or stolen without disaster, and no single person can move funds alone. That protects against both accidents and the uncomfortable possibility of an insider acting badly.
Multi-signature setups are more complex. Each key needs its own backup, and losing more keys than the threshold allows locks the funds forever. Document the setup carefully: which wallet software, which devices, who holds which key, and how to rebuild the wallet from the backups. Practise a recovery with a small amount before relying on it.
For individuals, the sealed letter described in our seed-phrase guide remains the simplest inheritance tool: where the backups are, which wallet they belong to, and whom to ask for help, without the words themselves. If the amounts are large, discuss with a lawyer how digital assets can be reflected in a will under current Vietnamese law, which is still developing.
When to ask a professional or the authorities
Ask a lawyer when digital assets are part of an estate, a divorce, a business partnership or any contract, and before relying on assumptions about their legal status in Vietnam. Ask a qualified accountant or the tax authority about any obligations arising from your transactions; rules change, and platform statements are not tax advice.
Bring in an independent security professional if you manage funds for a company, if you suspect a device has been compromised, or before setting up multi-signature control for significant amounts. Choose someone through a trusted referral, and never give anyone your recovery phrase, even a professional.
If assets are stolen, report to the police immediately with transaction IDs, addresses and screenshots, and notify your bank if any bank account or card was involved. Ignore unsolicited offers to "recover" funds for a fee; they target victims precisely at this moment.
Frequently asked questions
Is a hardware wallet safe if it is stolen?
A thief still needs your PIN, and the device wipes after repeated wrong guesses. Restore your wallet from the backup onto a new device and move funds to new keys to be safe.
What happens if the hardware wallet company goes out of business?
Your assets are on the blockchain, not in the company. With your recovery phrase you can restore them in other compatible wallets, which is exactly why the backup matters more than the device.
Should I keep everything off exchanges?
That depends on how you use the assets and how confident you are managing keys. Many people keep only what they actively trade on a platform and the rest in self-custody; this is a risk decision, not investment advice.
Is multisig worth it for a family?
For significant shared amounts, it can prevent one lost key or one bad decision from emptying the wallet. It adds complexity, so document the setup and practise recovery before relying on it.
Can I use the same recovery phrase on two devices?
Yes, restoring the same phrase on a second device creates a duplicate of the same wallet, which some people keep as a spare. It also doubles the places that must be protected.
Who do I tell if I suspect my wallet is compromised?
First move remaining assets to a new wallet with a new phrase from a clean device. Then report to the police with records, and inform your bank if bank accounts were linked.
