Not your keys, not your coins

What does "Not your keys, not your coins" mean?

The phrase “Not your keys, not your coins” captures a core tenet of cryptocurrency ownership — it draws a sharp line between self-custody and third-party custody. It means that without direct control of the private keys to your digital assets, you don’t truly own or govern them.

The role of private keys

Understanding the phrase comes down to separating storage from access.

On the blockchain, cryptocurrencies aren’t stored inside a wallet at all. The ledger simply tracks which addresses hold which assets. What the wallet actually keeps is your private key — the digital authorization needed to move or spend funds tied to a blockchain address.

That key is what gives you the full power to sign transactions. As Andreas Antonopoulos, a well-known industry educator, put it: “Your keys, your Bitcoin. Not your keys, not your Bitcoin.”

Risks of third-party custody

When you leave crypto on a centralized exchange (CEX) or in a custodial wallet, the third party holds the private keys for you. That setup carries real downsides.

Your balance in such a system isn’t the asset itself — it’s a claim on the crypto held by the platform. If the exchange fails or gets hacked, users may not be able to recover their funds. The platform may also pause withdrawals, change the rules for accessing your assets, or freeze funds if required by regulators.

The principles of self-custody

Adopting the “Not your keys, not your coins” mindset means taking self-custody seriously — keeping your keys under your own control.

Hardware wallets, such as Ledger or OneKey, are a common choice: they keep private keys offline on a secure chip, shielding them from online threats like malware. These devices work as “signers,” cryptographically proving your intent to transact without ever exposing the keys to the internet.

But self-custody demands discipline. It gives you stronger security and greater financial autonomy, yet it also puts the burden squarely on you. Lose your private key or seed phrase, and there’s no help desk to reset it — the loss of funds can be permanent.

At its heart, the phrase is a reminder that trusting a third party with safety clashes with blockchain’s decentralized spirit. Control of the private key is what ultimately decides who controls the coins.