The Self-Custody Spectrum: From Exchange to Air-Gapped Cold Storage
Self-custody is not binary. There are six distinct points on the spectrum, each with different security and convenience trade-offs. Here is how to choose.
Crypto storage is usually presented as a binary — 'on the exchange' or 'in self-custody'. The reality is a six-point spectrum from maximum convenience to maximum security. The right strategy is rarely to pick one point; it is to allocate different sized balances across multiple points based on how often you need to access them. Here is the spectrum, with practical thresholds.
Point 1: Centralised Exchange
- Convenience: maximum — instant trade, fiat rails, recoverable password
- Security: lowest — full counterparty risk on the exchange's solvency and competence
- Suitable for: trading capital you intend to deploy this week, fiat in/out flows
- Cap: the smallest amount you actively need on-exchange — typically <5% of total crypto holdings
Point 2: Smart-Account Wallet (Hot, On Mobile)
- Convenience: very high — sign in seconds, account abstraction makes recovery and session management practical
- Security: high — keys never leave the device, social recovery available, biometric signing
- Suitable for: daily DeFi activity, swap/stake/perps, the Steyble Card spend balance
- Cap: depends on your risk tolerance — typical comfortable range is 10-30% of holdings
Point 3: Hardware Wallet (Hot, Plugged In)
- Convenience: medium — sign on-device, requires the hardware wallet to be available
- Security: very high — keys never leave the secure element, immune to most malware on the host
- Suitable for: large-balance DeFi positions, occasional on-chain interactions
- Cap: most of the balance you actively use — typically 30-60% of total holdings
Point 4: Multi-Signature Vault (2-of-3 or 3-of-5)
- Convenience: medium-low — every transaction requires the threshold of signers to coordinate
- Security: very high — no single key compromise can move funds, geographic distribution practical
- Suitable for: family savings, treasury balances, long-term holdings >$100k
- Cap: as high as you want — multi-sig is the institutional default for material balances
Point 5: Hardware Wallet (Cold, Powered Off)
- Convenience: low — physical access required, plug-in time is an explicit step
- Security: extreme — even online malware cannot reach a powered-off device
- Suitable for: long-horizon savings you do not intend to touch for months
- Cap: as much as you want to truly set aside
Point 6: Air-Gapped Cold Storage
- Convenience: very low — signing requires a separate device, QR codes, manual transaction construction
- Security: maximum — the signing key has never touched a network-connected machine
- Suitable for: generational wealth, pre-publication holdings, the absolute long-tail of savings
- Cap: as much as you want — limited by your willingness to accept access friction
How Steyble Plays Into the Spectrum
Steyble is built primarily for points 2 and 3 — the smart-account wallet and the hardware-wallet-plugged-in tier — which is where most active DeFi capital sits. It interoperates cleanly with multi-sig (point 4) and cold-storage flows (points 5-6), so users can shift balances along the spectrum without forcing one wallet to do every job. The right frame is 'Steyble for the active layer, your hardware wallet and multi-sig for the storage layer' — not 'one wallet for everything'.