Wallets and Seed Phrases

A wallet doesn't hold coins; it holds keys, and the keys control coins recorded on the blockchain. Your seed phrase, the 12 or 24 words your wallet shows at setup (a standard called BIP-39 defines them), can rebuild every one of those keys. That means whoever reads it owns everything the wallet controls, instantly and permanently.

Who holds the keys to your bankroll: custodial vs self-custody

With a custodial wallet, an exchange holds the keys and you hold an account, much like a bank. It's convenient, there's a password reset, and there's also a company between you and your coins. Self-custody flips that: you hold the keys, nobody can freeze your funds, and nobody can recover them for you either.

Neither model is wrong; they fail differently. Custodial risk is the company: a frozen account, a hacked exchange, a bankruptcy. Self-custody risk is you: one bad backup and the money's gone. Pick the failure mode you can actually manage today, and revisit as your balance grows. For the full decision framework, see custodial or self-custody.

Most players start custodial: buy coins on an exchange, send them to the casino from there. For small amounts, that's a reasonable trade. The switch to self-custody makes sense the day your balance would genuinely hurt to lose. The self-custody habits lesson turns that into a routine: a hot wallet holding only play money, cold storage holding the rest. From that point on, the seed phrase becomes the single most valuable thing you own in crypto.

Post-mortem: how a player's seed phrase gets stolen

Walk through a compromise the way it usually happens, because it's quieter than people expect. Call the player Sam. Setting up a new wallet, Sam sees the 12 words and takes a screenshot, planning to write them down later. Later never comes. The photo syncs automatically to his cloud account, which reuses a password from an old forum that was breached years ago.

Months pass. Someone runs the leaked password against cloud services, gets into Sam's account, and searches his photos for "seed", "recovery", and grids of words. The screenshot surfaces. The attacker types the 12 words into their own wallet app, which faithfully rebuilds Sam's keys, then sweeps every coin to a fresh address in one transaction. Elapsed time from finding the photo: a few minutes.

Notice what didn't happen. Nobody hacked the blockchain. Nobody broke the wallet's encryption. No malware touched Sam's phone. Three ordinary decisions, screenshot instead of paper, cloud sync left on, one reused password, lined up and became a total loss. And because blockchain transfers don't reverse, there was no fraud department to call afterward.

The seed phrase rules that would have saved Sam

• Write the seed phrase on paper or stamped steel, offline, the moment the wallet shows it. Never a screenshot, photo, email, or cloud note.
• Never type it into any website or app that asks, however official it looks. Wallets only need it to restore, and you start that process, not a pop-up.
• No casino, wallet company, or support agent has a legitimate reason to ask for it. A request for your seed phrase is the robbery itself.
• Store the paper somewhere that survives your bad day: a safe, a lockbox, somewhere fire and flatmates can't reach.

The mirror-image mistake gets less press but loses just as much money: losing the phrase yourself. A phone dies, the wallet app is gone, and the words were never written anywhere. In self-custody there's no reset button, so a lost phrase usually means lost funds. Back it up before you fund the wallet, not after.

Start custodial if that's comfortable, but learn the seed-phrase rules before your first self-custody wallet, not during your first emergency. The habits take ten minutes to set up. Sam's post-mortem took three years to arrive and three minutes to execute.