What Self-Custody Actually Requires, Year After Year
Not buying hardware. A standing commitment that decays without deliberate maintenance.
Holding your own keys is the right default for a long position, and the failures are operational rather than technical.
What it requires
A recovery procedure that has been tested, not written.
Backups in separate locations, each of which you have verified independently.
A plan for your own unavailability, which for a long-held position is a realistic consideration rather than a morbid one. The published version of what follows is at an institutional crypto wallet.
Documentation good enough that someone else could follow it.
And periodic maintenance, because software formats change and backups made years ago may not restore into current tools.
The failure that is not a hack
The most common way a self-custodied position becomes inaccessible is not compromise.
It is that the procedure was never tested, the software has changed, a derivation path was not recorded, or the person who understood the arrangement is unavailable. Past a certain balance the arrangement changes, and a provider serving funds and family offices becomes the relevant option.
The annual rehearsal
Restore from a backup onto a device that has never seen the wallet, following only the written procedure.
If it works, the procedure is real. If it does not, you found out at a moment of your choosing.
People who do this find something roughly every other year: a changed format, a missing parameter, a backup stored somewhere no longer accessible.
What a good backup contains
The recovery material itself. The derivation path. The wallet software and version that created it. And enough context that someone who did not set it up can follow it.
Most backups made following a provider’s own documentation are missing at least one of these.
The unavailability plan
For a position of any size, someone needs to be able to reach it if you cannot.
That requires either a documented arrangement with a trusted person, or a threshold scheme where several parties jointly hold access, or a regulated custodian.
Whichever is chosen, it needs to have been tested. An arrangement described in a letter that nobody has ever executed is a plan rather than a capability.
Where a provider becomes the better answer
When the honest assessment is that the maintenance will not happen.
An arrangement that decays has the appearance of control without the operation of it, which is worse than a simpler arrangement maintained properly. Verify rather than assume. the list of countries covered is on a public register, and the check takes five minutes.
This is a personal account of holding through market cycles. It describes what one person did and why. It is not a recommendation, and past cycles do not predict future ones.