Buying Bitcoin is easy. Actually owning it is a separate step that most people never take. When your Bitcoin shows up as a balance on an exchange, that number is a promise from the company, not Bitcoin in your possession. The exchange holds the private keys. You hold an entry in their database.
This guide walks through how to close that gap safely: how to move your Bitcoin off an exchange and into a wallet that only you control. The process is not difficult, but the order matters, and a few specific mistakes can be permanent. Do it in the sequence below and the risk of error drops to near zero.
The one rule that prevents disaster
Never move a meaningful amount until you have set up your wallet, backed it up, tested the backup by restoring from it, and sent a small test transfer first. Every catastrophic self-custody story skips one of those steps. None of this guide is hard — it just has to be done in order.
What "moving off the exchange" actually means
Bitcoin ownership comes down to a single thing: who controls the private key. On an exchange, the exchange controls it. Your account balance is an IOU that depends entirely on the company staying solvent, honest, un-hacked, and unfrozen. FTX, Celsius, and Mt. Gox are the well-known reminders that those conditions are not guaranteed.
"Moving off the exchange" means generating a private key that lives only on your own device, and then sending your Bitcoin to an address that key controls. After that, no company can freeze it, lend it out, lose it in bankruptcy, or block your withdrawal. The trade is simple: you give up someone else's promise and take on the responsibility of holding a key correctly. This guide is about doing that second part right.
Before you move anything
Preparation is where safety is won. Get these in place before you touch the withdraw button:
- A hardware wallet, bought new and direct. A hardware wallet keeps your private key on a dedicated offline device. Buy a reputable model new, directly from the manufacturer — never second-hand, never from a marketplace reseller. A pre-initialised device is a known theft trap.
- A quiet hour and a clear head. Rushing is the enemy. Do not do this for the first time while the market is moving and you feel pressure to act fast.
- A plan for your seed-phrase backup. Decide where two durable physical backups will live, in two separate places. Digital is not an option — see below.
The step-by-step process
Step 1 — Set up the hardware wallet yourself
Initialise the device from scratch, offline. The device will generate a seed phrase: a list of 12 or 24 words that is the human-readable form of your private key. The device must generate it. You should never use a seed someone gave you, one printed in a manual, or one generated by a website. If your brand-new device already has a seed or PIN set, stop and contact the manufacturer — it should arrive blank.
Step 2 — Record the seed phrase, on paper or metal only
Write the words down, in order, by hand. Better still, stamp them into a steel backup plate that survives fire and water. What you must never do is let the seed touch anything digital:
- No photo or screenshot — phones sync to the cloud automatically.
- No password manager, notes app, email, or text file.
- No typing it into any website, ever.
Anyone who gets your seed phrase can take your Bitcoin from anywhere in the world, instantly and irreversibly. Treat those words as the asset itself.
Step 3 — Verify the backup by restoring from it
This is the step almost everyone skips, and the one that quietly causes losses years later. A backup you have never restored from is a guess. Wipe the device (or use a spare) and restore your wallet using only your written seed. Confirm it reproduces the same wallet. Only once you have proven the backup works should you trust it with real value.
Step 4 — Generate a receive address and verify it on the device
In your wallet software, create a fresh Bitcoin receive address. It will be a long string of letters and numbers (or a QR code). Crucially, verify that address on the hardware wallet's own screen before using it. This defends against malware that could swap an address shown on your computer. Trust the small screen on the device, not the big screen on the computer.
Step 5 — Send a small test transfer first
Go to the exchange's withdraw screen, paste your verified address, and send a small amount — enough to confirm the path works, small enough that a mistake would not hurt. Copy and paste the address; never type it by hand. After sending, wait for the transaction to confirm on the network and appear in your own wallet.
When that small amount lands in a wallet you control, you have proven the entire chain: the device, the backup, the address, and the withdrawal process all work. That confirmation is what makes the next step safe.
Step 6 — Move the remainder
With the test confirmed, withdraw the rest. You can do it in one transaction or in stages — staging can be calmer and lets you double-check each time. For each withdrawal: generate or reuse your verified address, paste it, confirm the amount and the network fee, and send. Watch each transaction confirm and verify the balance in your own wallet, not on the exchange.
When you are done, your Bitcoin sits at addresses your hardware wallet controls. The exchange is now just a place you might buy more — not a place that holds what you already own.
The mistakes that actually lose coins
Self-custody failures are almost never exotic. They are a short list of avoidable errors:
- Skipping the recovery test. Discovering a backup is wrong only when you need it is the most common quiet loss.
- Storing the seed digitally. A photo in the cloud or a note on a phone is the most common theft vector.
- Not verifying the address on the device. Address-swapping malware is real; the device screen is your defence.
- Sending the wrong asset or on the wrong network. Send Bitcoin to a Bitcoin address on the Bitcoin network. Cross-network mistakes can be unrecoverable.
- Rushing the first time with the full amount. The test transfer exists precisely so your first attempt is low-stakes.
- Telling people how much you moved. Amount privacy is personal security. Share it with no one who does not strictly need to know.
A note on fees and timing
Most exchanges charge a withdrawal or network fee to send Bitcoin on-chain, and the network fee itself rises and falls with demand. The fee is the price of taking real possession, and it is almost always small next to the counterparty risk you are removing. If fees are temporarily high, you can wait for a quieter period — there is rarely any urgency to withdraw at a specific minute.
Does this work for Coinbase, Binance, Kraken, and the rest?
Yes. The wallet side of this process is identical regardless of where your Bitcoin currently sits. What differs slightly is each exchange's withdraw screen — where the "Send" or "Withdraw" button lives, how they label the address field, and any security holds on first withdrawals. The principles never change: verify your own address, test small, then move the rest. If your Bitcoin is in a Bitcoin ETF rather than on an exchange, the path is different — an ETF share cannot simply be withdrawn as Bitcoin — and is worth a dedicated conversation.
When it is worth having someone alongside you
Plenty of people do this confidently on their own, and that is a good outcome. But if the amount is large enough that a mistake would genuinely hurt, or if any step above made you unsure, having an experienced person verify each action in real time removes the part that actually causes losses: the silent, unnoticed error. You still hold your own keys the entire time — the role of guidance is to watch and confirm, never to take custody.
However you do it, the destination is the same: Bitcoin held at an address only you control, backed up, tested, and free of anyone else's solvency. That is what owning Bitcoin actually means.