All Articles
Education5 min

Not Your Keys, Not Your Coins

Onramp Research·February 20, 2026

What Does 'Not Your Keys, Not Your Coins' Mean?

In Bitcoin, private keys are everything. A private key is the cryptographic proof that authorizes the spending of Bitcoin associated with a particular address. Whoever holds the private key can move the Bitcoin. Whoever does not hold the private key cannot. There is no appeals process, no customer service line, and no court order that can override this mathematical reality.

"Not your keys, not your coins" distills this reality into its most essential form. When you deposit Bitcoin on an exchange, you are not storing Bitcoin in a digital vault with your name on it. You are transferring Bitcoin to the exchange's address, controlled by the exchange's keys. What you receive in return is a database entry, a promise from the exchange that it will return an equivalent amount of Bitcoin when you request it.

This distinction between holding Bitcoin and holding a claim on Bitcoin is the most important concept in Bitcoin security. It is the difference between owning gold in your safe and owning a gold certificate from a bank. One is an asset. The other is a liability of a counterparty.

The Painful History of Third-Party Key Custody

The "not your keys" maxim is not theoretical wisdom. It is a lesson written in billions of dollars of losses.

Mt. Gox, once handling roughly 70% of all Bitcoin transactions, filed for bankruptcy in 2014 after losing approximately 850,000 Bitcoin belonging to customers. The exchange held the keys. The customers held nothing.

FTX collapsed in 2022, revealing that customer Bitcoin had been diverted to fund speculative trading and personal expenditures. Over $8 billion in customer funds were missing. Again, the exchange held the keys.

Celsius, BlockFi, Voyager, and numerous smaller platforms followed the same pattern: customers deposited Bitcoin, the platform controlled the keys, the platform mismanaged or misappropriated the assets, and customers were left with bankruptcy claims worth pennies on the dollar.

Each of these disasters validated the "not your keys" principle in the most painful way possible. If customers had controlled their own keys, the fraudulent or reckless behavior of these platforms could not have affected their holdings.

The Self-Custody Ideal and Its Challenges

The natural response to "not your keys, not your coins" is self-custody: holding your own private keys and taking personal responsibility for their security. This approach eliminates counterparty risk entirely. No exchange failure, no corporate fraud, and no regulatory seizure can affect Bitcoin that is secured by privately held keys.

However, self-custody introduces its own set of risks. Private keys must be stored securely but remain accessible. Seed phrases must be backed up in multiple locations but protected from theft. Hardware wallets must be maintained, updated, and eventually replaced. Inheritance planning must ensure that heirs can access funds without making them vulnerable to theft during the holder's lifetime.

The inconvenient truth is that self-custody failures are common. Estimates suggest that millions of Bitcoin have been permanently lost due to lost keys, forgotten passwords, damaged hardware, and improper backup procedures. For these holders, "not your keys" became "your keys, but lost forever."

Nick Szabo articulated the core tension: trusted third parties are security holes, but individual operational security is also a security hole. The question is not whether to trust someone but how to structure trust to minimize total risk.

Onramp's Multi-Institution Custody: A New Answer

Onramp Bitcoin provides an answer to the "not your keys" dilemma that preserves the principle while solving the operational challenges of self-custody. Through Multi-Institution Custody (MIC), private keys are distributed across three independent, regulated custodians: BitGo, Coinbase, and Anchor Watch.

This architecture means that no single entity, including Onramp itself, holds enough keys to unilaterally access client Bitcoin. This is a fundamentally different model from both traditional exchange custody (where one entity holds all keys) and self-custody (where one individual holds all keys).

The MIC model addresses the "not your keys" concern directly. While no single custodian holds your keys, no single custodian can steal your coins either. The risk is distributed across multiple independent institutions, each regulated, each audited, and each with its own security infrastructure. The failure of any single custodian does not result in loss of client assets.

Over $1 billion in client assets are secured through this approach, demonstrating that institutional-grade security and the spirit of "not your keys" are not mutually exclusive.

How MIC Compares to Self-Custody

Self-custody and MIC represent different approaches to the same goal: protecting Bitcoin from counterparty risk.

Self-custody eliminates all third-party involvement. The holder bears 100% of the security responsibility and 100% of the risk. This approach is ideal for technically sophisticated holders who are willing and able to maintain rigorous operational security indefinitely.

MIC distributes the security responsibility across multiple independent institutions. No single entity bears 100% of the risk, and no single entity's failure can compromise client funds. This approach is ideal for holders who want institutional-grade security without the operational burden of self-custody.

Both approaches avoid the centralized custody model that has failed repeatedly. The key insight is that "not your keys, not your coins" is fundamentally about counterparty risk. Self-custody eliminates counterparty risk by eliminating all counterparties. MIC mitigates counterparty risk by distributing it across multiple independent parties, none of which alone can compromise funds.

The Spectrum of Bitcoin Custody

Parker Lewis has observed that Bitcoin security is not a binary choice between self-custody and trust. It is a spectrum, and the optimal position on that spectrum depends on the holder's technical capability, the amount of Bitcoin, and the time horizon.

Many sophisticated Bitcoin holders maintain a portfolio approach: small amounts in a hot wallet for spending, medium amounts in self-custody hardware for personal savings, and significant holdings in Multi-Institution Custody for long-term security. This approach captures the benefits of each model while mitigating the weaknesses.

Onramp's MIC is particularly well-suited for the largest allocation, the long-term savings tranche that represents the most important and most irreplaceable portion of a holder's Bitcoin. This is the Bitcoin you cannot afford to lose to a hardware failure, a backup error, or an inheritance planning gap.

Sound Money Demands Sound Custody

Bitcoin's value proposition rests on verifiable ownership and resistance to confiscation. The "not your keys" principle is a reminder that these properties exist at the protocol level but can be undermined by poor custody choices.

Onramp preserves these properties through distributed key management that eliminates single points of failure while maintaining the accessibility and professional management that long-term holders need. With Bitcoin IRA, brokerage, and custody products all secured through MIC, Onramp provides a comprehensive solution for holders who take the "not your keys" principle seriously and want custody infrastructure that honors it at institutional scale.

Frequently Asked Questions

What does 'not your keys, not your coins' mean?

It means that if you don't control the private keys to your Bitcoin, you don't truly own it. You hold only a promise from whatever entity controls the keys. Exchange failures like FTX and Mt. Gox proved this by losing billions in customer Bitcoin. Onramp's Multi-Institution Custody addresses this by distributing keys so no single entity can access your funds.

Is self-custody the only way to follow the 'not your keys' principle?

No. Self-custody eliminates counterparty risk but introduces operational risks like lost keys and backup failures. Onramp's Multi-Institution Custody distributes keys across BitGo, Coinbase, and Anchor Watch, preventing any single entity from accessing your Bitcoin while avoiding the self-custody burden. Over $1 billion is secured through this model.

How does Onramp's custody solve the 'not your keys' problem?

Onramp distributes private keys across three independent custodians so that no single entity, including Onramp, can unilaterally access client Bitcoin. This eliminates the concentrated counterparty risk that destroyed customer assets at FTX, Celsius, and Mt. Gox, while avoiding the operational complexity of individual key management.

Stay Informed

Get weekly custody analysis and platform updates delivered to your inbox.