How people protect self-custody crypto

A seed phrase is a master key with no lock on it. Whoever holds the words holds the money, and a hardware wallet doesn't change that: the words are on the card. Every approach below is a way to put a lock on the master key, and every lock has a catch. Most also hand part of the lock to another company or person. A GeoSafe Vault's lock is the phone in your pocket: only you sign, and you keep the wallet you have.

Key takeaways

A hardware wallet on its own, and every transaction-warning tool, still fall to a copied seed phrase. Ledger and Trezor say so in their own guides.
Most ways of closing that door ask you to trust someone else: a company holding one of your keys, a server in every signature, or an exchange holding all of it.
An exchange closes that door by holding your keys. Your assets become a claim against a company.
A GeoSafe Vault is two-factor authentication (2FA) for a self-custody wallet: a layer, not a wallet and not a custodian. Only you sign, with your wallet and your phone; GeoSafe cannot. It pays out only to your linked wallet, and waits 1, 3, 7 or 14 days when you approve away from a place you chose.
GeoSafe is an invite-only iOS app, Ethereum and EVM chains first; internal security review done, independent audit planned. Best for one person with a wallet they already have; not yet for Bitcoin or Android.

Last checked 29 October 2026. Facts from each maker's own pages, listed under Sources. Spotted an error? hello@geosafe.ai and we'll correct it.

Approach	Who you must trust	Stops a stolen seed phrase?	The catch	Best for
Hardware wallet	Nobody. And nobody can help if the words leak.	No	Anyone with those words has everything; the device is not needed. Ledger and Trezor say so themselves.	Everyone's first step. Not a last line.
Hardware wallet + passphrase	Nobody. Only your memory, for years.	Yes	One word you type every time and may never mistype. A typo opens an empty wallet, and nobody can recover it for you.	The careful typist who trusts their memory for years.
Transaction-warning tool	The tool's judgement on every click.	No	Warns you before you sign something bad. Does nothing about a copied key: "No reset switch. No revoking."	Anyone who clicks links. A seatbelt, not a lock.
Multisig, run yourself (Safe)	Nobody. You run every key yourself.	Yes	Several keys, several devices, gas on every transaction, and you are your own support desk.	The tinkerer who enjoys running keys, or a team.
Collaborative custody (Casa, Unchained)	A company that holds one of your keys.	Yes	Two to five devices, signing ceremonies, from USD 250 a year. Built for large sums.	Seven figures and a person to call.
Co-signer account (Ready)	A company, for every signature.	Yes	A company holds the second key, and its service has to be up for you to sign.	Someone content to depend on a company every time.
MPC wallet (Zengo)	The provider's server, for every signature and for recovery.	N/A, no seed phrase exists	No words to lose, but the provider's server is part of every signature and of recovery.	Someone who never wants to see twelve words.
Exchange vault (Coinbase, Kraken)	The company, with all of it.	N/A, no seed phrase exists	The exchange holds the keys. Your assets are a claim against a company that can be hacked, pause withdrawals, close your account or go under.	What you trade, not what you keep.
GeoSafe Vault	Only yourself. Your wallet and your phone sign; GeoSafe cannot sign anything.	Yes	iPhone only. Ethereum and EVM chains first, not Bitcoin yet. Away from a place you chose, a wait of 1, 3, 7 or 14 days. Invite-only; independent audit planned.	One person, one wallet, one phone. Wants a second yes, not a second job.

What a Vault is

A smart-contract account: an account on Ethereum that follows rules written into it, instead of answering to one key. It sits under the wallet you already have, and you move in what you want protected. Every withdrawal needs two signatures, your wallet and your phone, and only ever goes to the wallet you linked. Inside a Safe Zone you chose, your Approve goes through now. Anywhere else it waits 1, 3, 7 or 14 days, your choice, then needs your Approve again. Deny works anywhere, any time.

Who holds what

Thing	Who holds it
Your wallet and seed phrase	You, as before. It can ask the Vault for a withdrawal, never finish one alone.
The second key	Your iPhone's secure hardware, behind Face ID or PIN.
Your assets and the rules	The Vault contract you own, on the blockchain. Nobody shortens a wait already running.
Your zones and recovery places	Your phone. Never stored by GeoSafe in readable form.
One emergency key	GeoSafe. It can stop a withdrawal or a recovery, but it cannot move funds, start a withdrawal, shorten a wait or change where a recovery goes. A recovery you start completes without GeoSafe.

The questions that decide it

If GeoSafe disappears

GeoSafe holds one emergency key. It can stop a withdrawal or a recovery to protect you, but it cannot move funds, start a withdrawal, shorten a wait or change where a recovery goes. A recovery you start completes without GeoSafe, and if GeoSafe disappears the Vault keeps working. The rules live in the contract, not on our servers. The verified contract address and the way to withdraw without our app will be published on the Security page.

If you lose your phone, or your seed phrase leaks

Lose your phone? Your linked wallet plus your recovery places, places you chose at set-up and reproduce on a map, restore the Vault on a new phone. There is no seed phrase for the Vault to write down. How recovery works is on the Security page. If the linked wallet's seed phrase leaks, the Vault stays where it is: don't withdraw to that wallet, re-link the Vault to a fresh one from your phone. The stolen phrase can't do that, and like every protection change it takes effect after a cooling-off period.

If you travel, or are never home

Set several Safe Zones, in different cities if that is how you live. Away from all of them a withdrawal waits 1, 3, 7 or 14 days, then you approve from wherever you are. Deny works from anywhere. Want a shorter wait for a trip? Change it before you go; the change takes effect after a cooling-off period.

If someone forces you at home

Inside your Safe Zone an approval goes through now, so what can be forced from you in one sitting is what reaches your linked wallet; it can't go anywhere else. Prefer everything to wait, even at home? Switch your zones off. If something happens to you, whoever you trust can recover the Vault with your recovery places; see Support.

Adding a Vault to what you have

Keep your hardware wallet and seed phrase as they are. No wallet yet? Any WalletConnect-compatible wallet works; a hardware wallet is the safest first step.
In the GeoSafe app on your iPhone, connect that wallet and create your Vault. Pick a Safe Zone and an away wait.
Move in what you want protected, and only that. Start small.

GeoSafe is an invite-only iOS app. Leave your email and we send your invite as places open. Request my invite

Questions

Which is best?

It depends on what you hold and how you live. Large sums with a company at your side: collaborative custody. No seed phrase at all: an MPC wallet. A team: Safe. One person with a wallet they already have, who wants a second yes from their phone without new hardware or a company signing key: a Vault. Most people should use more than one.

Does a GeoSafe Vault keep me in self-custody?

Yes. You hold your wallet key, your phone holds a second key in its secure hardware, and the Vault is a smart-contract account you own. GeoSafe never holds your funds. GeoSafe holds one emergency key. It can stop a withdrawal or a recovery to protect you, but it cannot move funds, start a withdrawal, shorten a wait or change where a recovery goes. A recovery you start completes without GeoSafe, and if GeoSafe disappears the Vault keeps working.

Is GeoSafe a custodian or a wallet?

Neither. It is a layer under the wallet you already have: a Vault that needs your wallet and your phone to sign and pays out only to your linked wallet. You keep your wallet and your seed phrase.

What are the risks of keeping digital assets on an exchange?

The exchange holds the keys, so your assets are a claim against a company. If it is hacked, pauses withdrawals, closes your account, is ordered to hand assets over, or becomes insolvent, you wait on the company. When FTX filed for bankruptcy in November 2022 it said there could be more than one million creditors. In return you get delays, allowlists, support and no seed phrase to lose.

What is a Safe Zone, and how long is the wait?

A Safe Zone is an area you size around a place you choose, usually where you are when you move money; you can set several. Inside one, your Approve goes through now. Anywhere else, the withdrawal waits 1, 3, 7 or 14 days, 7 by default, then still needs your Approve. Switch your zones off and everything waits, even at home.

Why not a Safe with my phone as the second signer?

You can set a Safe up 2-of-2 with a phone key, and for one person that gives two signatures. What it doesn't give out of the box is the wait when you approve away from a place you chose, a single linked wallet that funds can go to, and a flow built for one person and one phone.

Does GeoSafe work with Bitcoin?

Not yet. Ethereum and EVM chains first, through WalletConnect-compatible wallets.

Is the Vault contract audited, and what does it cost?

The Vault contract has had internal security review; an independent audit is planned. The report, the verified contract address and the documented way to withdraw without the app will be published on the Security page. The app is free during early access; network gas applies to every Vault move. Fees may come later, and we will say so clearly before anything changes.

Sources

Ledger: "if someone steals your SRP sheet, they can easily access your wallet", Ledger Academy, updated 19 Jun 2026; Nano S Plus listed at USD 59, Ledger store.
Trezor: hidden wallet "cannot be accessed" without backup and passphrase, use only if you fully understand the risks, Trezor Learn; Safe 3 listed at USD 59, Trezor store.
Revoke.cash: "No reset switch. No revoking.", Revoke.cash.
Safe: "no single person could compromise the funds", Safe help.
Casa: 2-of-3 and 3-of-5, Casa cannot move funds alone, Casa support, 21 May 2026; from USD 250 a year, Casa pricing.
Unchained: client holds two keys, USD 250 a vault a year, Unchained pricing; Unchained vs Casa, reviewed May 2026.
Ready (formerly Argent): Signer key plus Guardian key, 7-day timelock, Ready docs.
Zengo: two shares, server co-signs, recovery by email, cloud file and face scan, Zengo help, 23 May 2024.
Coinbase Vault: two-day delay, "Coinbase Support is unable to bypass the waiting period", Coinbase help; Kraken Global Settings Lock, Kraken support, 23 Mar 2026.
FTX: "more than one million creditors", CNBC, 15 Nov 2022.

Written by GeoSafe. GeoSafe is the reference point because the page is built around one question, not because a Vault is right for everyone. Prices change; check the maker's page before you buy. Make one of these products and see an error? hello@geosafe.ai.

Every way to protect self-custody, and the catch in each.