Buying Bitcoin is the easy part. Custody — actually owning it instead of holding an IOU — is where most people get tripped up. Here's the complete picture, in the order I'd want a friend to learn it.
If you don't hold the private keys, you don't own the Bitcoin. You own a promise from whoever does.
That promise can be broken. It has been broken many times. Mt. Gox in 2014. Celsius, BlockFi, Voyager, FTX in 2022. Every cycle produces a new wave of platforms that seemed safe right up until they weren't. The cardinal rule that survives every cycle:
Not your keys, not your coins.
Self-custody isn't paranoia. It's the actual completion of your purchase. The exchange step is a temporary holding pattern — you bought the IOU. Withdrawing to a wallet you control is when the IOU becomes Bitcoin.
Five tiers, from convenient-but-risky to maximally-sovereign. Most people graduate up the spectrum as their position grows.
Your BTC sits on Coinbase, Kraken, etc. Convenient. You don't actually own it. Acceptable for short-term holding only.
Strike, Cash App, etc. Marginally better than exchange. Still custodial. Fine for small spending balances.
Sparrow, Phoenix, BlueWallet on your phone or laptop. You hold keys. Vulnerable to malware on the device.
Coldcard, Trezor, Ledger. Offline device that signs transactions. Immune to remote attacks. The standard for any meaningful holding.
Requires multiple keys to spend. Lose one, the others still work. Institutional-grade. Worth the setup at ~$50k+ positions.
For 95% of people with meaningful BTC, a hardware wallet is the right setup. Three options I'd recommend, with honest tradeoffs:
~$160. Bitcoin-only. The most paranoid option, built by people who think a lot about supply-chain attacks. Air-gapped (signs via SD card or QR — never plugs into your computer). My pick if you take this seriously.
~$170. Open-source firmware. Touchscreen interface that's easier for non-technical family members to use. Good middle-ground between security and friendliness.
~$150. Most popular, slickest UX. The 2023 "Recover" controversy raised legitimate questions about closed-source firmware. Still secure if you decline the recovery service. Fine choice with caveats.
Buy direct from the manufacturer's official website. Verify the tamper-evident packaging on arrival. The $20 you'd save on Amazon is the worst trade in Bitcoin.
The hardware wallet generates a 12 or 24-word "seed phrase" the first time you set it up. Those words ARE your Bitcoin. The hardware wallet itself is just a convenient way to use them. If your wallet breaks or gets lost, you can restore everything from those words on any other compatible wallet.
So: how you store those words is more important than which hardware wallet you bought.
Multi-signature ("multi-sig") setups require multiple keys to spend, typically 2-of-3 or 3-of-5. Lose any single key, the others still work. No single device or location can be compromised to drain you.
When it's worth the complexity: generally at ~$50k+ positions, or any amount you absolutely cannot afford to lose. The setup is more involved (multiple devices, multiple seed phrases, more careful inheritance planning), but the security upgrade is meaningful.
Three approaches:
If only you know how to access your Bitcoin, your family doesn't inherit it — they inherit nothing. This is the biggest unforced error in Bitcoin and almost no one talks about it.
The core tension: you want your heirs to be able to access the BTC after you die, but you don't want anyone (including them) to be able to access it while you're alive. Solving this requires deliberate planning.
If you're starting fresh today, this is the order: