Which Crypto Custody Solution Should I Use?

Crypto Custody Decision Guide

Crypto custody is the single most consequential infrastructure decision you make as a holder, business, or fund. The wrong choice exposes you to theft, regulatory liability, or operational lockout. The right choice depends on how much you hold, what regulations apply to you, how many people need signing authority, and whether you prioritize sovereignty or institutional safeguards.

This guide covers three custody tiers: self-custody with hardware wallets, shared custody through collaborative multisig services, and institutional custody via qualified custodians. Each tier serves a different user profile, and the boundaries between them are shifting as products like MPC wallets and cooperative custody blur traditional categories.

Custody Tiers at a Glance

The following table maps custody approaches to the user profiles they best serve. Asset thresholds are rough guidelines: your regulatory obligations and operational complexity matter more than the dollar figure alone.

For a side-by-side feature comparison of specific custody providers, see our custody comparison tool.

Self-Custody: Hardware Wallets

Hardware wallets store private keys on a dedicated device that never exposes them to an internet-connected computer. They are the foundation of cold storage for individuals. The three dominant manufacturers are Ledger, Trezor, and Coldcard, each with distinct security architectures.

Ledger offers the broadest asset support and Bluetooth connectivity, but its closed-source operating system (BOLOS) is a trust assumption that some users reject. Trezor's open-source firmware is independently auditable, and the Safe 3 was the first Trezor to include a dedicated Secure Element. Coldcard is purpose-built for Bitcoin maximalists: fully air-gapped, no USB data connection required, and Bitcoin-only by design.

Self-custody puts full responsibility on you. If you lose your seed phrase and your device fails, your funds are gone permanently. For a deeper look at hardware wallet options, see our hardware signer comparison.

Collaborative Multisig: Unchained, Casa, and Nunchuk

Collaborative multisig services occupy the middle ground between full self-custody and institutional custody. In a typical 2-of-3 setup, you hold two keys (on separate hardware wallets) and the service provider holds one. You can always spend without the provider's permission, but the provider can assist with recovery if you lose a key.

This model eliminates single points of failure on both sides: you can't be locked out by the provider, and a single compromised key cannot move your funds. The trade-off is operational complexity: you need to store multiple hardware devices securely and participate in key ceremonies to set up or rotate keys.

Unchained positions itself as a financial services platform built around multisig, offering trading, lending, and Bitcoin IRAs alongside custody. Casa focuses on key management UX and offers a 3-of-5 setup at higher tiers for users who want even more redundancy. Nunchuk provides a software-first multisig coordinator with optional assisted custody through its Honey Badger tier.

Collaborative multisig is particularly well-suited for inheritance planning: the provider can serve as a recovery path without ever having unilateral control of the funds. For more detail, see our research on Bitcoin custody solutions compared.

Institutional Custody: Qualified Custodians

Registered investment advisors, hedge funds, ETF issuers, and corporate treasuries typically require a qualified custodian under SEC Rule 206(4)-2 of the Investment Advisers Act. A qualified custodian is a bank, trust company, or broker-dealer that meets specific capital, auditing, and segregation requirements.

The four largest crypto-native institutional custodians are Anchorage Digital, BitGo, Coinbase Prime, and Fireblocks. Each has a different regulatory posture and technology stack.

Anchorage is the only federally chartered digital asset bank in the US, giving it the broadest banking powers among crypto-native custodians. BitGo reports over $90 billion in assets under custody as of 2026 and offers the highest published insurance limit. Coinbase Prime bundles custody with trading and prime brokerage, making it convenient for funds that want a single counterparty. Fireblocks is best understood as a custody infrastructure platform: it provides the MPC signing layer, but qualified custodian status flows through its banking partners.

Institutional accounts typically require minimum balances of $500K to $1M+, onboarding KYC/AML processes, and legal agreements that can take weeks to finalize. Pricing is usually basis-point fees on assets under custody, often in the range of 25 to 75 bps annually, with volume discounts for larger allocations.

Decision Framework: Choosing Your Custody Model

Use the following decision tree to narrow your options. Start with your entity type and regulatory requirements, then factor in asset size and operational needs.

Individual holders:

• Under $10K: a single hardware wallet with a securely stored seed phrase is sufficient
• $10K to $500K: consider a collaborative multisig service (Unchained, Casa) for key redundancy and inheritance planning
• $500K+: multisig with geographically distributed keys, possibly with a dedicated security review of your backup strategy

Businesses and treasuries:

• Under $1M: multisig with internal key holders across multiple executives
• $1M to $50M: evaluate institutional custodians if you need audit trails, SOC 2 reports, or insurance for board-level comfort
• $50M+: qualified custodian is likely a regulatory requirement, especially if you manage client funds

Funds and RIAs:

• SEC-registered advisors must use a qualified custodian under the Custody Rule
• Evaluate whether the custodian supports all assets in your strategy (Anchorage supports ~60 curated assets, BitGo and Fireblocks support hundreds)
• Confirm the custodian's SOC 2 Type II report covers controls relevant to your audit requirements

Key Decision Factors

Insurance Coverage

Crypto custody insurance covers losses from theft, hacking, and internal fraud. Coverage varies widely: BitGo advertises up to $250M through Lloyd's of London syndicates, Coinbase Prime offers roughly $320M across its program, and Anchorage negotiates coverage terms under NDA with each institutional client. Fireblocks carries approximately $30M in direct coverage. Always request the actual policy wording: marketing figures often represent aggregate program limits, not per-client coverage.

SOC 2 and Audit Standards

A SOC 2 Type II report verifies that a custodian's security controls have been tested over a sustained period (typically 6 to 12 months) by an independent auditor. All four major institutional custodians publish SOC 2 reports, but the scope of controls covered varies. During due diligence, request the full report rather than relying on the marketing claim of "SOC 2 certified."

Geographic Jurisdiction

Your custodian's jurisdiction determines which regulatory framework protects you. US-chartered custodians (Anchorage, BitGo, Coinbase) fall under federal and state banking regulators. Fireblocks routes qualified custody through US banking partners but is itself headquartered in New York with a Texas trust subsidiary. For EU-based entities, the Markets in Crypto-Assets (MiCA) regulation imposes additional requirements on custodians operating in Europe.

Key Architecture

The underlying key management architecture determines your security guarantees. Multisig requires multiple independent keys to sign a transaction: if one is compromised, the attacker still cannot move funds. MPC splits a single key into shares distributed across multiple parties, then reconstructs the signature without ever assembling the full key. Both approaches eliminate single points of failure, but they differ in on-chain footprint, cost, and recovery procedures.

Spark: Self-Custodial Bitcoin and Stablecoins

Spark offers a different custody model for Bitcoin and stablecoin users. As a Bitcoin Layer 2 protocol, Spark enables self-custodial ownership of both BTC and stablecoins like USDB without requiring a third-party custodian to hold your keys. Users maintain full control of their funds while benefiting from instant transfers and low fees.

For users who want dollar-denominated savings alongside their Bitcoin holdings, Spark eliminates the need to choose between self-custody and stablecoin access. Traditional custody solutions force you to bridge to Ethereum or Solana for stablecoins, introducing counterparty risk at the bridge layer. Spark keeps everything on Bitcoin's security model. For more on how this works, see our research on Spark's self-custodial regulatory compliance.

Frequently Asked Questions

What is the difference between self-custody and institutional custody?

With self-custody, you hold your own private keys and are solely responsible for securing them. No third party can freeze, seize, or lose your funds, but no third party can help you recover them either. Institutional custody means a regulated entity holds your keys on your behalf, providing insurance, audit trails, and regulatory compliance, but introducing counterparty risk. Collaborative multisig sits between the two: you hold the majority of keys while a service provider holds a minority key for recovery assistance.

How much crypto do I need before using an institutional custodian?

Most institutional custodians impose minimum balance requirements ranging from $500,000 to several million dollars. Coinbase Custody has published a $500,000 minimum, while BitGo and Anchorage typically require $1M+ and negotiate terms individually. If you manage client funds as a registered investment advisor, the SEC's Custody Rule may require a qualified custodian regardless of the amount.

What is a qualified custodian for crypto?

A qualified custodian is a financial institution that meets the SEC's requirements under Rule 206(4)-2 of the Investment Advisers Act. For crypto, this typically means a state-chartered trust company, a federally chartered bank (like Anchorage), or a broker-dealer that can demonstrate adequate segregation and safekeeping of client assets. The SEC issued guidance in 2025 clarifying conditions under which certain state-chartered trust companies qualify.

Is multisig safer than a single hardware wallet?

A multisig setup with a 2-of-3 or 3-of-5 threshold eliminates the single point of failure inherent in a single-key wallet. If one key is stolen or lost, your funds remain safe. The trade-off is operational complexity: you need to manage multiple devices, store them in separate locations, and coordinate signing ceremonies when spending. For most individuals holding significant value, the added security of multisig outweighs the inconvenience.

Do I need insurance on my crypto custody?

Insurance is not legally required for most holders, but it is a practical necessity for institutions managing client funds. Fiduciary obligations and board governance standards often mandate some form of loss coverage. Individual holders typically self-insure by accepting the risk of loss in exchange for full custody control. If you choose an institutional custodian, ask for the specific per-client coverage limit, not just the aggregate program figure.

What is MPC custody and how does it compare to multisig?

Multi-party computation (MPC) distributes key shares across multiple parties so no single party ever holds the complete private key. Unlike multisig, MPC operates off-chain and produces a standard single-signature transaction, which reduces on-chain fees and works across blockchains that lack native multisig support. The trade-off is that MPC implementations are proprietary and harder to audit. Multisig, by contrast, uses native Bitcoin Script (or similar on-chain constructs), making its security properties independently verifiable.

Can I use multiple custody solutions at the same time?

Yes, and many sophisticated holders do. A common pattern is to keep operating funds in a hot wallet or on an exchange for daily use, hold the majority of assets in cold storage via multisig or institutional custody, and maintain a small allocation in a self-custodial Layer 2 like Spark for instant payments. Diversifying across custody providers reduces concentration risk and gives you fallback options if one provider has an outage or policy change.

This tool is for informational purposes only and does not constitute financial advice. Custody pricing, insurance coverage, and regulatory status change frequently. Always verify current terms directly with each provider and consult a qualified professional for compliance guidance before making custody decisions.