Not Your Keys, Not Your Coins: A Plain-English Guide to Actually Holding Crypto

"Not your keys, not your coins" is the most repeated phrase in crypto, and also one of the least explained. People say it, nod gravely, and then leave everything on an exchange anyway. Let's actually unpack what it means and what to do about it — without assuming you already know what a private key is.

What you actually own on an exchange

When you buy crypto on an exchange and leave it there, you don't hold the coins. The exchange does. What you have is an entry in their database that says they owe you that amount — an IOU. As long as the exchange is solvent, honest, and operational, that IOU is as good as the real thing. The problem is all three of those conditions have failed, spectacularly and repeatedly, wiping out people who thought "it's on a big reputable platform" was the same as owning it. When an exchange freezes, gets hacked, or collapses, your IOU is worth exactly what the bankruptcy process eventually pays out — which can be pennies, years later.

Keys, wallets, and seed phrases — decoded

Real ownership means controlling the private key — a secret string that proves the coins are yours and authorizes moving them. Whoever holds the private key controls the coins, full stop. On an exchange, they hold the key. Self-custody means you hold it.

A wallet is just the tool that stores and uses your keys. A seed phrase (usually 12 or 24 words) is the human-readable master backup of those keys — anyone with your seed phrase can recreate your wallet and take everything, from anywhere in the world. That's the whole security model in one sentence: protect the seed phrase, and you protect the coins.

Hot wallets vs. hardware wallets

A hot wallet is software on your phone or browser — convenient, connected to the internet, and therefore reachable by malware and phishing. Fine for small amounts you're actively using, like the cash in your pocket. A hardware wallet is a small physical device that keeps your keys offline; you plug it in to approve a transaction, and the keys never touch the internet. For meaningful long-term holdings, this is the standard — think of it as the safe, versus the wallet in your pocket.

The rules that actually keep you safe

Keep on exchanges only what you're actively trading. Move long-term holdings to a hardware wallet. Write the seed phrase on paper (never a photo, never a note in your phone, never typed into any website), and store it physically — ideally in more than one location. Nobody legitimate will ever ask for your seed phrase. Not support, not a giveaway, not an "account recovery" — every single request for it, without exception, is someone trying to rob you. Use app-based two-factor authentication, not SMS, on every exchange account you keep open.

Self-custody comes with real responsibility — lose your seed phrase and there's no support line to call, no password reset, the coins are simply gone forever. That weight is exactly why exchanges are so convenient and so popular. But convenience is the trade you make for handing someone else control, and history has been brutally clear about how that trade can end. Owning your keys is owning your money. Everything else is trust.