The term describes an architecture, not just a wallet feature: authority over the assets lives entirely in cryptography that the user generates and keeps, rather than in an account relationship with a company. A private key, usually backed up as a seed phrase, is generated on the user's own device and never transmitted to a server. Every outgoing transaction is signed locally and then broadcast to the network, so the wallet provider never has custody of funds and cannot move, freeze, or restore them on the user's behalf.
This stands in direct contrast to a custodial wallet, where an exchange or platform holds the keys and simply credits an account balance. The 2022 collapse of FTX became the defining case study for the difference: customers whose crypto sat on the exchange became unsecured creditors when it went bankrupt, while anyone holding the same assets in a non-custodial wallet was unaffected, since the exchange never had access to those keys in the first place. This experience popularized the phrase "not your keys, not your coins."
Non-custodial setups take several forms, each with a different security and convenience trade-off:
- Hardware wallets, which keep keys on an offline physical device
- Software wallets and browser extensions, convenient for frequent use but exposed to internet-based threats
- Paper wallets, an older offline method now largely superseded by hardware devices
Self-custody is also the entry point to permissionless finance: connecting a non-custodial wallet is required to trade on a decentralized exchange or interact with smart contracts directly. The responsibility is total, though. There is no password reset: losing the seed phrase, or exposing it to a thief or phishing site, means the funds are gone permanently, with no company or support desk able to intervene.