A custodian is an organization that keeps assets safe for someone else. In cryptocurrency, a custodian controls the private keys that unlock digital assets and performs security and record-keeping tasks on a client’s behalf. Crypto never leaves the blockchain, so custodians protect access to it by safeguarding those keys.
Banks and trust companies have long acted as custodians for paper certificates, cash, and securities. The crypto version borrows that idea but applies it to private keys and wallet infrastructure rather than vaults and physical ledgers.
Beyond storing keys, many providers handle operational work that people or institutions prefer not to run in-house. Typical add-ons include insured coverage, transaction processing and settlement, backup and recovery for wallet access, and compliance procedures for client onboarding and monitoring.
Private keys can be lost, stolen, or mishandled. Devices that hold them can fail. For institutions that manage other people’s assets, that risk is not acceptable, so they hire regulated third parties to store keys and run controls. Solutions usually blend hot storage for quick access with cold storage kept offline for resilience.
Security stacks vary, but common building blocks include segregated wallets, access controls, and key-management procedures. Many providers use multi-signature setups and hardware security modules so that no single person or device can move funds on its own.
With self-custody, you hold your own keys and accept full responsibility for security and recovery. With third-party custody, you outsource that responsibility and gain convenience and operational support, but you also introduce counterparty risk because an outside firm controls the keys.
In many jurisdictions, investment firms that hold client assets must use a qualified custodian as defined in regulation. In the United States, the Investment Advisers Act framework points to entities such as banks, certain trust companies, broker-dealers, and futures commission merchants.
The field includes specialized crypto firms and, increasingly, traditional financial institutions. Examples of large qualified providers cited in industry coverage include Coinbase Custody, Gemini Custody, and BitGo Trust Company, which operate under New York State approvals.
Custody services typically charge based on assets under custody, activity, or both. They reduce key-management risk for clients, but they create concentration risk if a provider is breached or mismanages operations. Some custodians offer insurance for covered events, which can offset part of this risk.