How to Self-Custody Bitcoin, and Where It Goes Wrong

Bitcoin was made for one thing: so that two people anywhere in the world could send value to each other with nobody standing in the middle. No bank to approve it, no government to freeze it, no company to take a cut or ask questions.

To self-custody Bitcoin, meaning to hold its keys yourself, is how you actually get that. If somebody else holds your keys, you've taken the one money in the world built to need no middleman and put a middleman straight back.

For us as Muslims, and for the Ummah as a whole, that means more than most people realise.

What happened in Kabul in August 2021

When Kabul fell on 15 August 2021, the banks closed, and they stayed shut for about three weeks. When they opened again, the central bank allowed each customer to take out $200 a week, and people queued from early morning to get even that. Around $9.5 billion of the country's reserves were frozen abroad. Families who had saved for years found their savings existed on a screen and nowhere else, and many who had already left the country couldn't reach their accounts from abroad at all.

Why couldn't the banks simply give people their money back? Because banks don't keep your money. They lend it out and keep only a small part as cash. On a normal day that works, because only a few people ask for their money at once. On the day everyone asks, it isn't there. A war, sanctions, a government collapsing, or simply saying something the authorities don't like: any of these can be that day.

Crypto itself is banned in Afghanistan today, and our framework respects the law where you live. The lesson of 2021 is about banks, and it holds in every country on earth.

What you truly own

In truth, none of us owns anything in this world. It all belongs to Allah, and we're only trustees of what He has placed in our hands (al-Hadid 57:7).

But among the things you hold in trust, Bitcoin in your own custody is different from almost anything else. If only you hold the key, it's only in your hands. No bank can ration it, no government can freeze it, and nobody can ask you how you spent it or why.

Nobody except Allah. The Prophet ﷺ said a person's feet won't move on the Day of Judgement until he is asked about his wealth, how he earned it and how he spent it (Tirmidhi 2417). That's the only audit a believer should fear.

Why an exchange isn't the answer

Buying Bitcoin and leaving it on an exchange puts the middleman right back. The exchange holds the key, and what you hold is a promise.

Exchanges go bankrupt. When FTX collapsed in November 2022, its customers waited more than two years to be repaid, and then only at November 2022 prices. Exchanges freeze accounts: fail an identity check, or fall outside their rules, and your balance is locked until they decide otherwise. And exchanges, like banks, do what governments tell them. When young Nigerians protested police brutality in October 2020, a group raising money for them had its bank account deactivated and its payment link shut down, so it switched to taking donations in Bitcoin. In 2014 HSBC closed the accounts of Finsbury Park Mosque and the Ummah Welfare Trust in London, giving no reason beyond its "risk appetite".

Anything a company holds for you can be frozen with one phone call to that company.

Trust the blockchain, then put your trust in Allah

When you self-custody Bitcoin, you're trusting a system that has run since 2009 without anyone managing to print extra coins or reverse a single payment. The money you save there is yours alone.

Your part is the key: twelve or twenty-four ordinary words. Write them down (memorise them too if you like, and I'll explain below why memory alone isn't enough), keep them where only you know, and let nobody else know about them except the family who will inherit from you. Then put your trust in Allah. A man asked the Prophet ﷺ whether he should tie his camel or trust Allah, and he said: tie it, and trust Allah (Tirmidhi 2517).

Self-custody is tying the camel. The rest of this guide is how to tie it properly: every common way of holding your own Bitcoin, what went wrong with several of them in 2025 and 2026, and the old-fashioned method that still beats most of them.

The seed phrase is the key to the blockchain

Your Bitcoin isn't really in your wallet. It sits on the blockchain, and what you actually own is the key that can move it: those twelve or twenty-four words, generated once, that no company can reset for you. The device, the app, the brand on the box can all break, get hacked or go out of business, and your coins will still be there for whoever holds the words.

When a wallet is created, it picks a very large random number and shows it to you as a list of words taken from a fixed list of 2,048 (the BIP-39 standard). Everything else is calculated from that number: every address you'll ever receive to, and every signature that ever moves your coins.

Three things follow, and most beginners get at least one of them wrong.

First, the words work in any compatible wallet. If your Ledger dies, you can type the words into a Trezor, a BitBox or a phone app and your balance appears. Nothing lives "inside" the device that you can't rebuild from the words.

Second, anyone who sees the words owns your Bitcoin, in the only sense the network recognises. There's no fraud department and no reversal.

Third, the device is a signing tool and nothing more. Its job is to keep the key away from your internet-connected phone and computer while you approve payments. A good one does that very well. But if the key was weak when it was made, or someone saw the words while you wrote them down, the best device in the world can't help you.

Hold on to that third point. Every failure further down comes back to it.

Possession, savings and amanah

Possession matters in fiqh. Qabd (actual possession) decides when a sale is complete and what kind of wealth you hold, and an exchange balance is a claim against a company rather than property in your hand. We made the full argument in Self Custody and Possession in Islamic Law. Here are the practical reasons that sit on top of it.

Start with savings. Money in a conventional bank account is generally treated in fiqh as a loan you've made to the bank, and the bank lends it on at interest. A savings account pays you a slice of that interest directly. Bitcoin in your own keys is none of that. It's property you hold, lent to nobody, earning nothing, which is exactly why it can serve as clean savings. It's also volatile, so keep it for money you won't need for years and keep your living costs in cash.

It's also an amanah. Preserving wealth (hifz al-mal) is one of the higher objectives of the Shariah, and your family has a claim on what you leave behind. Holding your own keys makes you the trustee, which is a duty as much as a right. The inheritance side of that has its own guide.

And whatever new money comes next, the question stays the same. Banks and governments are building their own digital money, and stablecoins already exist that their issuer can freeze (we show which ones). I'm not going to speculate about anyone's intentions. You don't need to. Ask one question of any money you're offered: who holds the key? If the answer isn't you, it isn't savings in the sense this article means.

Every way to self-custody Bitcoin, compared

The last two rows aren't alternatives to the others. Every method from the phone app down still produces a seed phrase, and every one of them still needs it written down. The device protects the key while you use it. The written words protect it when everything else is gone.

What actually went wrong in 2025 and 2026

People ask me which wallet is "safe". It's the wrong question, and the last two years show why. Here are the failures that mattered.

A hot wallet's update was the attack. On 24 December 2025, version 2.68 of the Trust Wallet browser extension went out with code that read the wallets stored inside it. About $7 million left roughly 2,600 wallets within hours. The users did nothing wrong; their wallet updated itself. A hot wallet is only as safe as its maker's update channel, which is why it should only ever hold spending money.

A cold wallet signed something nobody read. In February 2025 the exchange Bybit lost about $1.5 billion from a multisig cold wallet. The keys were never stolen. The people approving the payment were shown a normal-looking screen on a compromised web page and signed something else. Read what you're approving on the device's own screen, every time, and check the address there against the one you meant.

An air-gapped wallet made weak keys for five years. This is the one we warned about in August. A build error that crept into Coldcard firmware in March 2021 meant some devices made their seeds from a weak software generator instead of the chip's real randomness. Coldcard is one of the most respected air-gapped devices there is, and it didn't matter. The attackers never touched a device; they worked out the predictable keys and, from 30 July 2026, swept them. By 4 August, Galaxy Research had confirmed 1,596 BTC stolen from about 7,300 addresses in three waves. The owners who weren't exposed were the ones who had added a strong passphrase or mixed in at least 50 of their own dice rolls when the seed was made. Being offline protects you from the internet. It doesn't protect you from the device's own mistakes.

A genuine-looking device came with a spy inside. In October 2026 Ledger confirmed that devices sold by a Southeast Asian reseller, CryptoBilis, carried an extra chip that read the 24 words off the screen during setup and sent them out over a mobile network. Ledger's own "genuine check" still passed, because the secure chip itself was untouched. Investigators put suspected losses above $86 million. Buy from the maker, and treat any device that arrives already set up, or with words printed on a card, as theft in progress.

Your home address leaked, again and again. In December 2020, about 272,000 Ledger customers had their names and home addresses dumped online. In 2026 alone, Ledger's payment processor (January), Trezor's shipping partner (August, about 13,700 customers) and SafePal (August, about 39,800 customers) all exposed order details. No coins were taken in any of these. But a list of people who bought a hardware wallet is a list of people who own crypto, and 2025 saw 72 verified physical attacks on holders, up 75% on 2024. Ship the device to a pickup point or an office, and keep your holdings to yourself.

You'll also read about laboratory attacks, such as researchers using lasers on a Trezor Safe 7 in June 2026 and on Tangem cards in July. Those need the device in someone's hands plus specialist equipment. A PIN and a passphrase handle that risk for nearly everyone.

Now look at the pattern. Bitcoin itself didn't fail once. Every loss came through a single point: one update, one screen, one random number generator, one shop, one database.

That's the whole case for the setups below.

The old way still works

Before any of these gadgets existed, people held Bitcoin by keeping the words. It's still the strongest backup there is, if you do it properly.

Memorising

A memorised seed is the most private backup possible. No one can find it in a drawer. But memory is a terrible only copy. It fades, it fails with illness and age, and it dies with you, which turns your savings into wealth your heirs can never divide. Memorise the words as a second copy if you like. Never as the only one.

And never make up your own words. In Bitcoin's early years people built "brain wallets" from a phrase they chose themselves: a Qur'anic verse, a line of poetry, a favourite password. Attackers ran every phrase from every book they could find, and those wallets were emptied within minutes of being funded. Let the device choose the words. Your job is to keep them.

Writing it down and hiding it

Pen on paper works and costs nothing. It also burns, gets wet and fades. Steel is better: stamped or engraved plates survive a house fire, and a few dollars of steel washers and a letter-punch set do the same job as a branded plate.

Then hide it. In a wall, under a floorboard, in a sealed tin in the ground, in a safe-deposit box. All fine. What matters is that you keep two copies in two different places, so one flood doesn't end it; that one person you trust knows a backup exists and roughly where; and that the words are never photographed, typed into a phone, stored in a password manager or emailed to yourself.

Don't cut the list in half, either. Splitting 24 words into two piles of 12 feels clever, but anyone who finds one pile has most of the attacker's work done. If you want a backup that no single hiding place can betray, use a tool built for it: a multisig wallet, or Shamir backup (offered on Trezor), where any two of three shares restore the wallet and one share alone reveals nothing.

The passphrase

Most wallets let you add an extra word or sentence of your own, sometimes called the 25th word. It creates a completely separate wallet from the same seed, and it's what saved the careful Coldcard owners. But it has to be written down too, and kept apart from the seed, because a forgotten passphrase loses the money just as surely as a forgotten seed.

Which setup for which amount

You don't need a vault for $200. You do for your life savings. Roughly:

• Spending money, up to a month's expenses: a reputable phone wallet, with the seed written on paper, kept at home, tested once.
• Savings you'd be upset to lose: a hardware wallet bought from the maker's own website, the seed on steel in two places, a passphrase if you're confident you'll keep it, and a restore test before you fund it.
• Your family's savings: a 2-of-3 multisig across three different makers, each key in a different place, a copy of the wallet's setup file stored next to each key, and an inheritance plan written down.

The multisig line is the one I'd underline. Every 2026 failure above was a single device or a single seed. With two of three keys from different makers, a weak key or a spy chip in one of them moves nothing.

Before you move your savings

1. Buy the device from the manufacturer, delivered to a pickup point.
2. Set it up yourself. If words are already printed in the box, stop.
3. Where the device allows it, add your own dice rolls when the seed is created.
4. Write the words by hand and check every word against the screen.
5. Wipe the device, restore it from your written words, and confirm the first receive address matches. Almost nobody does this, and it's the only proof your backup works.
6. Send a small amount in, send it back out, then move the rest.
7. Every time you send, check the address and the amount on the device's own screen.
8. Tell nobody how much you hold.

What I'd do

Keep what you're actively trading on an exchange, and everything you're saving in your own keys. I'd rather own it than be owed it.

If this article leaves you with one thing, make it this. The device isn't your Bitcoin. The app isn't your Bitcoin. The company certainly isn't. Twelve or twenty-four words are, and they're the deed to everything you've saved. Guard them like one.

The coins that pass our screen are on the halal crypto list, and Bitcoin's own verdict is the place to start.