A non-custodial wallet is a crypto wallet where you, not a company, hold the private keys and recovery phrase that control your funds. It gives you full control of the crypto you buy and full responsibility: if you lose both the keys and the recovery phrase, you may lose access for good.
How a non-custodial wallet works
A non-custodial wallet, also called a self-custody wallet, keeps your private keys on a device you control, such as a phone or a hardware wallet. The private key approves transactions, and your public address lets others send you crypto. The company that makes the wallet does not hold your funds. Most wallets also give you a recovery phrase: a list of words that can restore your keys on a new device.
Example
Say you set up a non-custodial wallet on your phone. You write the recovery phrase on paper and keep it offline. If the phone breaks, the phrase restores the wallet on a new device. If the phrase is lost too, the funds may be gone for good.
Why it matters when you buy crypto
A non-custodial wallet keeps the crypto you buy under your sole control. Back up its recovery phrase first, and read how to send Bitcoin to a wallet for the address steps. Crypto is delivered to the wallet address you provide, so check the address and network before you buy crypto on Coinmama.
Non-custodial vs custodial wallet
| Feature | Non-custodial wallet | Custodial wallet |
|---|---|---|
| Who holds the private keys | You | A company holds them for you |
| Who keeps the keys safe | You alone | The company; you protect your login |
| Main risk | Lost or stolen keys or recovery phrase | The company is hacked, shuts down or goes bankrupt |
As of September 2026, the U.S. SEC notes that hot and cold wallets exist for both kinds of custody.
Risks and red flags
No help desk can reset a lost recovery phrase, and anyone who has the phrase can take your funds. Watch for:
- Anyone who asks for your recovery phrase or private key, including people who pretend to be Coinmama staff.
- A website or email asking you to enter your phrase, a common phishing attack.
- A hardware wallet sold with a recovery phrase already filled in, a known counterfeit trick.
- A pasted address that differs from the one you copied, a sign of clipboard malware.
Go deeper: read our beginner’s guide to crypto wallets.
