Who holds the keys? Understanding custody when you leave coins on an exchange
The phrase not your keys, not your coins is often repeated and rarely explained. When you leave crypto on an exchange, the platform controls the private keys and your balance is a record in its system. You can trade quickly and recover access through a support process, which are real conveniences. In exchange, you rely on the platform's security and conduct. This guide explains what custody means in everyday terms, which controls remain in your hands, how a private wallet differs and how to decide what to keep where. It does not recommend any particular choice.
What custody means day to day
A custodial service holds the keys on your behalf. You prove who you are with a login and a second step, and the service decides whether to execute your instructions. That brings convenience, such as account recovery and easy trading, but it also means that your access is only as safe as your login and that the platform's own controls and policies apply to your funds.
Controls you still hold
Even without the keys, you decide how strongly your account is protected. A strong password, an authenticator app or passkey, the anti-phishing code, a withdrawal whitelist and regular checks of devices reduce the chance that someone else instructs the platform in your name. These settings are your part of custody and cost nothing but a few minutes.
How a private wallet differs
With a private wallet you control the keys, and nobody can freeze or recover them for you. If you lose the recovery phrase, the funds are gone, and if someone learns it, they can take everything. That responsibility suits some people and burdens others. It also requires practice with small amounts before you move anything significant.
Deciding what goes where
A common approach is to keep on the exchange only the funds you actively trade and to hold longer-term amounts elsewhere, provided you can manage the recovery phrase carefully. Whatever you choose, write the decision down, review it periodically and keep a record of where each asset sits. No arrangement removes risk, and the right balance depends on your habits and skills.
Risk boundary: Pakistan Crypto Guide
Digital assets are volatile and derivatives can amplify losses. This website has no login, wallet connection, deposit form or customer-support chat. A referral link only records attribution; it does not guarantee access, pricing, rewards, approval or investment results. Availability can differ by residence, legal entity and product, so no regional access is assumed from language or branding alone.
Scenario checkpoint
- Understand that on an exchange the platform holds the keys
- Set up a strong password, second step and withdrawal whitelist
- Practise with small amounts before using a private wallet
- Keep on the exchange only what you actively trade
- Write down where each asset is held and review it regularly