Intro to Self Custody
Create a wallet, back it up, prove you can recover it, and only then receive bitcoin.
Setup walkthroughs for every device and wallet, withdrawal guides for Canadian platforms, and advanced material worth a read.
Tell us what you are doing. Answer one question or all three, and the library below narrows as you go — clear it at any point.
Nothing matches that combination yet. Clear an answer or your search, or ask for the guide and it moves up the queue.
The vocabulary and the decisions everything else assumes you have already made.
These guides were last reviewed Aug 17, 2026 – Sep 7, 2026
Create a wallet, back it up, prove you can recover it, and only then receive bitcoin.
Self-custody does not just remove the middleman. It removes the work the middleman was doing, and hands you the job. Here is exactly what that job is.
Six habits that look harmless, are extremely common, and are the reason most self-custody losses happen. None of them involve being hacked.
A beginner's breakdown of what your wallet actually holds. There are no coins anywhere — and once that clicks, most of bitcoin's odder behaviour starts making sense.
Most people ask which wallet is best. The useful question is how much you are protecting, from what, and who else needs to be able to recover it — which has a different answer.
It has been hours, the explorer still says unconfirmed, and the money has left your balance. Nothing is lost. Here is how to tell whether it is genuinely stuck, the two ways to push it through, and the kind of help that will cost you everything.
A backup you have never restored is a guess. Here is how to prove it works, including which method to use when you only own one device and it already holds funds.
Before you move the balance, move five dollars along exactly the same route and watch it arrive. It is the cheapest way to find out that something in the chain is wrong.
Every setup guide says to check the signature and then moves on. This is the part they skip: the three files, the three commands, and the alarming warning that appears when everything has in fact gone right.
Buying an ETF or leaving your first purchase on an exchange is a reasonable place to start, and being told otherwise is why people stall for years. Here is the road out, why it takes time, and how to tell you are ready for the next step rather than guessing.
Pick your device for a focused walkthrough, then return for the features worth turning on once the basics work.
These guides were last reviewed Aug 17–18, 2026
Unbox and check the tamper evidence, set a PIN, generate a seed on the device, and take a backup you have verified. One path, with the handful of places the two models differ called out as you reach them.
Trick PINs, duress wallets, the brick-me PIN, and the login countdown. What each one actually does, and the honest accounting of which of them can cost you your own coins.
Camera-based air-gapped signing, a backup system that moved to Keycards and SeedQR, and a device that now does considerably more than bitcoin — which is a decision you make during setup.
Jade protects your PIN differently from every other device on this site, and that choice shapes your backup plan. Understand it first, then set the thing up.
The microSD backup is what makes this device fast to set up and the part worth thinking hardest about. Here is how to use it without ending up with one fragile copy of everything.
Why the device arrives with no firmware on it, how to record a backup you can actually restore, and which of the extras to leave switched off.
Assembling the hardware, verifying and flashing the image, and the stateless signing model that deliberately keeps nothing on the device. Including the part that is genuinely yours to get right, because nobody sealed this one in a bag.
Krux is firmware, not a device. Choosing hardware to put it on, verifying and flashing the release, generating a seed from dice or a photograph, and the storage feature its own documentation tells you is not a backup.
Why the box seal proves nothing, what the genuine check actually verifies, the one optional service to think hard about, and the phishing every Ledger owner should expect.
A wallet with no recovery phrase to write down, because the company holds a third key you can call on. Setting it up, and the honest accounting of what that recovery service can and cannot do.
Creating wallets, pairing hardware, verifying addresses, and the features past the send button.
These guides were last reviewed Aug 17, 2026 – Sep 7, 2026
Create a watch-only wallet from your signing device, check an address on the device screen, and sign a first transaction.
Your balance is not a number, it is a pile of separate chunks — and which ones you spend together tells anyone watching that they belong to the same person.
A phone app that coordinates multisig, including wallets shared with another person. What to build first, what to back up beyond the keys, and which features quietly add a dependency.
A Bitcoin-only phone wallet that can hold a little money itself or drive a hardware signer over QR and NFC. Setting up both, and being clear about which screen you are actually trusting.
Turn two ordinary computers into cold storage — one that watches the blockchain and one that holds the keys and never goes online. Plus why this is the most impersonated wallet in bitcoin.
Import a public key and your phone can see the balance but never spend it. What that genuinely costs you, and the one thing you should not use the phone for — which is the thing it makes most tempting.
How a collaborative transaction breaks the link between your coins and your history, what it cannot undo, and why the piece that makes it work is also the piece that has already collapsed once.
Specter is a face for your own Bitcoin Core node and nothing else, which matters more for multisig than for any other wallet. Building a wallet from three different manufacturers, and collecting signatures across three different transports.
Core's wallet does not hand you twelve words, and the file everyone argues about on the internet is no longer the file Core writes. What is actually in it now, how to make one, and how to load a wallet.dat the Entropy Workshop produced from a seed you already have.
Platform-specific withdrawal walkthroughs and the Canadian recordkeeping around them.
These guides were last reviewed Aug 17, 2026
Earn this section. Every option here adds a way to lose access as well as a way to protect it.
These guides were last reviewed Aug 17–27, 2026
How an unsigned transaction reaches an offline signer and a signature comes back, by microSD, QR, or NFC. What the file actually contains, why your device can be lied to, and the one output people never think to check.
Running a node and using it are two different achievements. The index layer nobody mentions, connecting each wallet to it, reaching it from outside your house, and proving your wallet is not quietly still using somebody else's server.
Every wallet rests on one unguessable number, and the one tool that cannot produce it is the one you were born with. What people get wrong, how it has been measured, and what it cost the ones who tried.
One octal die and two hex dice throw exactly eleven bits — one recovery word, with nothing hashed and nothing to trust. The method, the arithmetic, and the one detail that quietly ruins it.
Make your wallet's secret from dice you rolled yourself, instead of trusting the device to pick it. What to do, in plain terms, and the three mistakes that ruin it.
The Workshop turns coin flips, dice rolls or a shuffled deck into a wallet you can hold against your device. What it does with what you give it, what it refuses to do, and how to check it before you believe a word of it.
Three keys, any two can spend. The real work is not the setup — it is the wallet configuration everybody forgets to back up, and the rehearsal that proves the whole thing works.
Three keys in three places is easy to say and easy to get wrong. The locations that only look independent, the window when your keys travel together, and an honest account of what a safe deposit box and a trusted friend each actually do.
A passphrase is not a password on your wallet. It is a switch that selects a different wallet entirely — which is why a single wrong character shows you an empty balance and no error message.
One seed can generate an unlimited supply of ordinary, independent wallets on demand — so you protect one backup instead of six. The catch is a bookkeeping obligation nobody warns you about, and a master seed that is now worth six times as much to a thief.
Paper survives everything except the events your backup exists for. What metal actually buys you, the four-letter shortcut that halves the work, and the mistakes that quietly ruin a plate.
Instructions someone can follow while grieving, that are not enough to steal with while you are alive. Why your will is the wrong place for any of it, and the failure that loses more coins than any other.
The attack that ignores your cryptography and comes for you instead. Why decoy wallets are weaker than they sound, why being genuinely unable to comply beats lying convincingly, and the arrangements that make a bad situation worse.
You cannot read the silicon, and you did not watch the parcel. Three different problems hide under one heading — the intercepted package, the patient maintainer, and the vendor who simply changes — and only one defence survives all three.
Further reading rather than instructions. Nothing here asks you to change your setup — it explains why the setup looks the way it does.
These guides were last reviewed Aug 17, 2026 – Sep 7, 2026
Cattle, salt, glass beads, limestone discs the size of a small car — plenty of things have done the job, and nearly all of them stopped. They stopped for the same reason every time, and it is the reason a hard cap exists.
Digital money was considered impossible for thirty years, and the obstacle was not cryptography. It was getting strangers who cannot trust each other to agree on what happened first.
What actually happens between pressing send and seeing a confirmation — the signature, the nonce that must never repeat, the waiting room nobody owns, and the moment your own node decides the payment is real.
Your seed words are not a wallet. They are the root of a tree, and finding your money means knowing which branch to walk down — which is why the same words can restore perfectly and still show a balance of zero.
How a wallet turns twelve words into a private key — the checksum, the 2,048 rounds of hashing, and the apostrophe in the derivation path that quietly decides whether an xpub can betray you.
Some start with 1, some with 3, some with bc1q and some with bc1p. They are not cosmetic variants — they commit to different spending rules, cost different amounts to use, and are not equally supported.
You are not paying for the amount you send. You are bidding for physical room in the next block, priced by the size of your transaction — which is why a payment of ten dollars can cost more to send than one of ten thousand.
The number is not a policy anyone chose to announce and cannot be raised by agreement. It falls out of a halving schedule, and it holds because every node independently refuses to accept a block that breaks it.
Without one, your wallet is asking a stranger's computer what you own and believing the answer. A node is how “don't trust, verify” stops being a slogan and becomes something you actually do.
Bitcoin is not anonymous and never was. It is a permanent public ledger with pseudonyms attached, and most of what links those pseudonyms to you is done by ordinary arithmetic anyone can perform.
Everyone knows spending two coins together links them. That is one of about eight inferences an analyst makes, and your wallet software has an accent that identifies it. Plus the two defences that work at the protocol level rather than the habit level.
Bitcoin can enforce far more than “whoever holds this key may spend”. It can enforce quorums, deadlines, and conditions that change over time — and Miniscript is what made writing those safely something other than a specialist art.
Bitcoin has no board, no vote, and no procedure for changing itself — yet it changes. How that works, why the block size war ended as it did, and what a failed fork in August 2026 demonstrated in under eight hours.
Not your keys, not your coins is the conclusion. These are the cases it was drawn from — four failures with four different mechanisms, none of which announced itself in advance, and one of which was Canadian.
Every device guide on this site says the PIN protects the device rather than the seed. This is the part underneath that sentence — what a secure element is, what happened to the devices that did not have one, and the two things that actually survive someone holding your hardware.
"Crypto" is a category label rather than a description of how anything works. These are the structural questions that separate the things inside it: who can change the rules, who was allocated what, and what it would cost them. Bitcoin's answers are the worked example.
Check how your device turns physical randomness into a wallet, using a test sequence rather than the rolls behind a wallet you use. The tool is experimental, and meant for exactly that check.
Enter your dice rolls, coin flips or drawn cards and see the recovery words and first addresses they convert to — then compare that against what your device showed you. If the two disagree, your device uses a different conversion, which is common and worth knowing before you trust a column of rolls as a backup.
Enter a test sequence, not the rolls behind a wallet you use. Roll the dice explains the procedure and the rules that matter more than the tool does.
Also worth a minute: the guessing machine in Why you cannot think of a random number. It calls your next tap before you make it and seals the guess so it cannot cheat, and it explains faster than any article can why nobody should invent their own randomness.
The library is still being written, and requests decide what gets written next. If your device, platform, or situation is not covered yet, say so.