What is a crypto vault and how to build your own

A crypto vault is any structure that holds crypto assets behind more barriers than an ordinary wallet: keys kept offline, several signatures required to authorize a withdrawal, or a mandatory delay before the money can leave. The term is used for very different things, from a custodian's physical safe to a DeFi contract that has nothing safe about it. This guide separates the five meanings, shows when a vault makes sense, how to build your own with affordable equipment, and which mistakes destroy the most wealth.

The five meanings of vault in crypto

Cold storage vault. Institutional custodians keep private keys on disconnected devices inside physical vaults, with access procedures that require several people. The client holds a claim against the company, not the key. Exchanges say they keep most client assets in this kind of structure.

Exchange vault. Some platforms offer a separate account with delayed withdrawals. In Coinbase Vault, for example, a withdrawal needs approval from two or three registered email addresses and then waits 48 hours, during which it can be cancelled. That limits the damage from a stolen password, but it is still third-party custody: the exchange still holds the keys.

Multisig vault. The wallet requires M of N signatures to spend, with 2-of-3 the most common setup. Collaborative custody services such as Casa and Unchained charge about US$ 250 a year for a vault in which the client holds two keys and the company holds one, used only for recovery. The same setup can be built independently with three hardware wallets and a coordinator app.

Time-locked vault. Funds can only move after a delay or through a predefined recovery path. On Bitcoin, native timelocks cover part of this, and covenant proposals such as BIP-345 (OP_VAULT) are still under discussion in 2026. On Ethereum, smart-contract wallets allow delay modules and guardians who can cancel a suspicious withdrawal.

DeFi vault. Protocols such as Yearn and the ERC-4626 standard use "vault" for a contract that pools deposits from many users and runs a yield strategy. Here the word means "pool", not "safe". The risk is in the code and the strategy, and no insurance covers a loss. An investor who confuses the two meanings puts savings into a contract thinking they are protecting them.

When a crypto vault makes sense

Amount. If losing the balance would change your life, it deserves a vault. A simple rule: sums equal to several months of income, or a meaningful share of your net worth, do not stay on an exchange or in a phone app.

Horizon. A vault is for what you will not touch for years. Money for frequent trading lives in a separate wallet with a small balance.

Heirs. A well-built vault has a documented recovery path. A 2-of-3 multisig with one key held by an heir or a lawyer, plus sealed instructions, keeps the wealth from disappearing with you.

Physical threat. Delayed withdrawals and keys spread across locations make coercion pointless: even under pressure, the owner cannot empty the vault on the spot.

The crypto-asset market involves high risk, including significant volatility and the possibility of losing the invested capital. A vault protects against theft and error, not against a price drop.

How to build your own crypto vault

1. A hardware wallet bought from the manufacturer

Buy directly from Ledger, Trezor or another manufacturer, never from resellers or second-hand. Initialize the device yourself and generate the seed on it. The model comparison is in Ledger vs Trezor: which hardware wallet.

2. A metal seed backup in a separate location

Stamp the 12 or 24 words onto a steel plate, resistant to fire and water, and store it away from the device. No photos, cloud, email or password managers. A second backup at another address covers fire and flooding.

3. A passphrase with its own backup

The passphrase (the so-called 25th word of the BIP39 standard) creates a hidden wallet from the same seed. Whoever finds the metal plate without the passphrase cannot reach the vault. It needs its own physical backup, kept apart from the seed, because without it the balance is unrecoverable.

4. A 2-of-3 multisig for larger amounts

Above a certain threshold, a single device is a single point of failure. Three hardware wallets from different manufacturers, in three locations, with an open-source coordinator app, ensure that no isolated theft or loss compromises the balance. Collaborative custody services simplify the setup in exchange for an annual fee.

5. A recovery test and a succession plan

Before moving the full amount, send a small sum, wipe the wallet and recover everything from the backup. Then document for your heirs where the keys are and how to use them, in a sealed envelope or with a lawyer. Vault's self-custody immersion walks through this process step by step, with each participant operating their own wallets.

Common mistakes

• Photographing the seed or saving it to the cloud. It is the most frequent cause of theft.
• Using a passphrase with no backup. The owner forgets it, and the balance is gone.
• Buying a hardware wallet on a marketplace. The device may arrive tampered with.
• Treating an exchange vault as self-custody. If the exchange fails, the vault fails with it.
• Depositing into a DeFi vault thinking it is a safe. It is a yield strategy with contract risk.
• Keeping all three multisig keys in the same place. It becomes an ordinary wallet, only more expensive.
• Never testing recovery. The mistake only shows up when it is too late.

The fundamentals of custody, hot wallets and cold wallets are in crypto custody: self-custody vs. third-party custody.

Vault Capital is not a vault

The name confuses some people, so it is worth being direct. Vault Capital is a securities advisory firm authorized by Brazil's CVM under CVM Resolution 19/2021. It is not a custody product, not a wallet and not a vault: assets always stay under the client's own ownership. The investor keeps the keys and the accounts; Vault guides the strategy. The principle is advisory, never custody, and the details are on the compliance and regulation page.

Frequently asked questions

Is a crypto vault the same thing as a cold wallet?

Not exactly. Every cold wallet keeps keys offline, but a vault usually adds extra barriers: multiple signatures, a withdrawal delay or a recovery path. A hardware wallet on its own is a cold wallet; with multisig and a succession plan, it becomes a vault.

Does an exchange vault protect me if the exchange fails?

No. The withdrawal delay protects against a break-in to your account, not against insolvency, a court freeze or fraud by the platform itself. The keys stay with the exchange.

Do I need multisig to hold R$ 50,000 in bitcoin?

Not necessarily. For that amount, a hardware wallet with a metal backup and a passphrase is usually enough, as long as recovery has been tested. Multisig starts to pay off when the cost of three devices and the operational complexity become small relative to the balance.

Does Vault Capital hold my crypto assets?

No. Vault is an advisory firm and never holds custody of client funds. The investor always holds the keys.

Let's talk

Building a real crypto vault takes a few hours and a small spend on equipment, and it prevents the loss that hurts most: the irreversible one. Vault's Self-Custody Immersion exists so that investors leave with a wallet, a backup and a succession plan ready and tested, with the keys always in their own hands.