Self-custody, explained

Web3 Wallets: from 12 magic words to smart accounts

A wallet does not "store coins." It stores keys that prove you may move coins recorded on a blockchain. Everything else — seed phrases, hardware devices, smart accounts — is engineering around one question: how do you keep a secret without ever losing it?

The Custody Model Explorer

The golden octahedron is your signing authority. Drag to rotate. Switch custody models and watch how the structure — and the failure math — changes.

Drag to rotate
Single point of failure?
Keys to steal funds
Losses you survive
Recovery path

Worked Example: why 12 words is enough

A BIP-39 seed phrase draws each word from a fixed list of 2048 words. Each word therefore encodes log2(2048) = 11 bits.

12 words × 11 bits = 132 bits = 128 bits of entropy + a 4-bit checksum. That means 2^128 ≈ 3.4 × 10^38 possible phrases.

If an attacker checked one trillion phrases per second on a billion machines, expected time to hit yours is about 5 × 10^12 years — roughly 350× the age of the universe. Guessing is not the threat.

The real threats are human: phishing pages that ask you to "verify" your phrase, malware reading a phrase stored in your notes app, and plain loss. An estimated 13–18% of all Bitcoin is considered permanently stranded, largely from lost keys.

How Self-Custody Evolved

2009 — Raw keys

wallet.dat and paper keys

Early Bitcoin users guarded raw private keys in a local file. Delete the file, lose the coins. No recovery, no second chance.

2013 — BIP-32/39

The seed phrase era

Hierarchical deterministic wallets let one human-readable phrase regenerate every key you will ever derive. Backup became writable on paper — a massive usability leap with the same brutal rule: whoever holds the phrase holds everything.

2016 — Multisig matures

M-of-N signing

Contracts like Gnosis Safe require, say, 2 of 3 keys to move funds. Compromise of one key is survivable. Great for teams and treasuries; still clunky for individuals.

2023 — ERC-4337

Smart accounts / account abstraction

Your account becomes a programmable contract: social recovery via guardians, spending limits, session keys for games, gas paid in stablecoins or sponsored by apps, passkey (Face ID) signing. Self-custody keeps the control and finally sheds the single-scrap-of-paper fragility.

Three Ideas To Take Away

Keys sign, chains verify

A transaction is a message signed with your private key. The network verifies the signature against your public address. The "wallet" is just a signing UI.

Custody is a spectrum

Exchange account (they hold keys) → seed-phrase wallet (you hold one secret) → multisig/smart account (control is distributed and programmable). Each step trades convenience differently.

Recovery is the frontier

The unsolved UX problem of crypto is not speed or fees — it is letting normal humans recover from mistakes without reintroducing a trusted middleman. Smart accounts are the current best answer.

Safety note: no legitimate app, support agent, or website will ever ask you to type your seed phrase "to verify your wallet." That request is the single most reliable scam signal in crypto. This page is educational and not financial advice.

Enjoy this tool? Build your own with Super