Why Can’t I Hold the Keys to My Crypto IRA? Crypto Keys Explained

You've heard it before: "Not your keys, not your crypto." But what does it actually mean? We take a deep dive into keys, wallets,
A vintage gold box containing gold bitcoins and a crypto key

You might have heard it before: “Not your keys, not your crypto.” It’s a popular phrase among crypto diehards, and one we get a lot of questions about.

But what does it mean? And how does it apply to cryptocurrency held in an IRA?

To make sense of it all, we’re taking a deep dive into a number of frequently asked questions, including:

So stick around to learn about crypto keys, wallets, custody, and what it means for you. Or, click the hyperlinks above to skip to the section you’re most interested in.

Blockchain Basics

Before we discuss how crypto wallets work or the role of public and private keys, it’s essential you have a baseline understanding of how blockchains work.

A blockchain is an immutable (meaning unalterable) ledger of transactions that is grouped into blocks and linked together in-you guessed it!-a chain.

Typically, as with Bitcoin, this ledger is decentralized, meaning it’s not governed by a central authority. Rather, nodes (basically, computers that run a cryptocurrency’s software) keep independent copies of all previous blocks.

When a new transaction occurs, it’s transmitted to these nodes, which listen for new transactions and group them into blocks. To prevent fraud, a node (also called a miner) must solve a complicated mathematical equation proving it did the work to complete a block. (This is where the term “proof of work” comes from.)

The first miner to solve the equation receives a reward for helping to build the blockchain. For example, Bitcoin miners receive BTC as a reward. Meanwhile, the other nodes validate the work against their copy of the blockchain.

If a majority of nodes see a newly created block as valid, the chain continues. But if a majority see a new block as invalid, the blockchain could split (called a fork). Gaming the system isn’t that easy, though. Because the network defers to the longest blockchain, maintaining a fraudulent record would require an unscrupulous miner to perpetually beat all other miners to completing blocks-a mathematical near-impossibility. Aside from hard forks, which are a discussion for another day, the problem will work itself out in short order. The majority of validators will reject the bad block and continue building on the original blockchain, rendering the rogue chain effectively useless.

So what does this have to do with crypto keys? A lot, actually.

What Are Crypto Keys?

Every time BTC is sent or received, it’s recorded on the blockchain. However, Bitcoin’s creator Satoshi Nakomoto designed the cryptocurrency using public-private key cryptography so that users could transact anonymously.

In this system, users have a public key and a private key, both of which are required to access your crypto. Essentially, a public key is used to encrypt a message and a private key unencrypted it.

Think of your public key as a post office box that only you can access, and your private key as the key to that mailbox. Just as anyone can send a letter to your post office box, anyone can send Bitcoin to your public key. When crypto is sent to you, it’s recorded on the blockchain as a transaction between the sender’s public key and your public key. But to access (or unencrypt) that balance – say, to send your BTC to a friend – you need your private key. Without it your crypto is stuck.

Given their complexity – each private key is a randomly generated 256-bit number that corresponds with your public key – it would be immensely difficult for even the most sophisticated of computers to hack. In fact, there are said to be fewer grains of sand on earth than private key combinations.

How does anyone remember their private key, then? To make it easier, many private keys, such as those associated with Bitcoin, are represented in a (relatively) shorter, hexadecimal format. For example, a hexadecimal private key might be:*


Unfortunately, that’s still far from convenient. Imagine checking out at the grocery store and needing to enter your private key instead of your 4-digit PIN number. (No, thanks.) This is where crypto wallets come in.

*Example solely for the purpose of illustration. You should not use this as a private key.

What Is a Crypto Wallet?

Essentially, a crypto wallet is just a place to securely store your keys. But as you can probably imagine, there are a handful of wallet types to choose from, each with its pros and cons.

A crypto wallet could be as simple as a piece of paper with your private keys on it (hopefully stored in a safe), an online wallet, or even hardware-based-think a thumb drive (for example, the popular Nano Ledger).

Offline Crypto Wallets

Also called “cold wallets,” these range from hardware devices to purely analog solutions, making them popular for long-term storage. However, this also means less convenience when you need to access your crypto.

A private key written on a piece of paper is inherently safe from hackers, but could get lost, deteriorate, or fall into the wrong hands. Entering a private key any time (or where) you need access to your coins is also not very convenient.

A hardware wallet allows you to make crypto transactions, but needs to be connected to a computer in order to send or access your crypto. This, to many, means greater security. However, hardware wallets can stop working or be lost.

Take the British IT engineer who in 2013 accidentally threw away a hard drive that held his private keys to 7,500 Bitcoins – worth nearly $155 million as of October 27, 2022. (In case you’re wondering, he’s still looking for that hard drive, and we can’t blame him.)

Online Crypto Wallets

Often called “hot wallets,” app- or software-based online wallets tend to be more convenient, allowing access wherever you are. There’s an obvious disadvantage, though: If someone is able to get into your account, they can access your crypto.

There’s also a tremendous range of online wallets, from self-custodial wallets (Metamask and Coinbase Wallet) to custodial web-based exchange wallets (a standard Coinbase account).

Many crypto proponents, however, would argue that the bank-like functionality provided by custodial wallets goes against the founding principles of crypto. According to CoinDesk, “When a user outsources wallet custody to a business, they are essentially outsourcing their private keys to that institution.”

Ultimately, what’s right for you depends on your preferences.

Custodial and Non-Custodial Wallets

Often, exchanges offer both custodial and self-custodial wallets to accommodate various user’s needs and comfort level. With custodial wallets, when you want to buy, sell, send, or withdraw crypto, you effectively authorize the exchange to carry out those actions on your behalf.

An example of an exchange that offers both custodial and self-custodial wallets is Coinbase.

Think of a Coinbase account like a traditional brokerage account. You can buy, sell, and trade coins and tokens. But you can’t send crypto to an individual wallet, which may or may not matter to you. And you don’t hold the keys.

Coinbase Wallet, on the other hand, is a self-custodial wallet, meaning you hold your private keys in your web or mobile browser. Not only does a self-custodial wallet give you access to more digital assets. You can also send and receive crypto from specific wallets, which is essential if you intend to make purchases using your crypto.

Keys, Custody, and Crypto IRAs

Now that you have a better understanding of crypto keys and wallets, it’s probably pretty clear what people mean when they say, “Not your keys, not your crypto.”

If you don’t hold your keys (their words, not ours), someone – be it an exchange, a government, or hacker – could gain access to your crypto. On the flip side, you could easily lose your private keys forever, and many people have.

But what you really want to know is what “Not your keys, not your crypto” means in the context of crypto IRAs.

Why Hold Crypto in an IRA?

The intention behind Bitcoin was to anonymously transact with people around the globe using a currency not subject to the controls of central banks. To date, though, relatively few people and businesses use crypto for day-to-day transactions. (However, according to a recent Deloitte survey, that’s changing.)

Instead, Bitcoin has come to be seen as both a store of value and an investment. Owing to the tremendous gains Bitcoin and many other cryptocurrencies have seen over the past decade, investors are right to wonder, “Can I put crypto in my IRA?”

IRAs – especially Roth IRAs – offer not just major tax advantages over buying crypto in a brokerage account, but also enable investors to roll over funds sitting in other retirement accounts, like an old 401(k) or 403(b).

Not to mention that the long-term nature of retirement accounts makes them the perfect pair for HODLers.

How to Invest in Crypto with an IRA

When most people think of IRAs, they think of public market offerings like stocks, bonds, mutual funds, and so on. But as many savvy investors are discovering, there’s a lot more you can invest your retirement dollars in using a self-directed IRA – including alternative assets like art, crypto, farmland, and private equity.

Self-directed IRAs provide all the same tax advantages of any IRA custodian, only you get to decide how you invest your money. So a crypto IRA is just a self-directed individual retirement account that lets you invest in cryptocurrencies. And while these IRAs used to involve mountains of paperwork and high fees, that’s no longer the case.

Today, you can open an Alto CryptoIRA® in minutes and begin trading crypto with the tax advantages of an IRA in a matter of days. And with $10 investment minimums, you don’t have to commit the large sums required by many other crypto IRAs. So you can start small if you’re unsure how much of your portfolio to allocate to crypto.

Why Can’t I Hold the Keys to My Crypto IRA?

While you might be surprised by all the types of investments you can make with a self-directed IRA, there are restrictions, which is where keys come into play.

Custody and Self-Directed IRA Prohibited Transactions

All individual retirement accounts, including self-directed crypto IRAs, are subject to U.S. tax codes. Section 408 of the Internal Revenue Code defines an IRA as “a trust created or organized in the United States for the exclusive benefit of an individual or his beneficiaries.” As a result, such accounts must be administered by a bank or a trust company.

These trustees or custodians, in turn, are responsible for ensuring that money held in retirement accounts is not used improperly. After all, the government wants to make sure bad actors don’t misuse retirement vehicles to illegally dodge taxes.

For example, you can’t invest IRA funds in a second home or a personal business. Because you could, in theory, use that second residence as a vacation home – and you would certainly benefit if your personal business enjoys an injection of capital courtesy of your tax-advantaged retirement funds – you’re considered a disqualified person. So too is anyone who controls the “assets, receipts, disbursements, and investments” or who may exert influence over decisions regarding the investment.

This is at the heart of what makes holding your own keys within an IRA legally problematic.

Not only does holding the keys to your crypto appear to be direct possession of the investment instead of the trustee. One could easily send crypto they hold in an IRA to another non-IRA wallet held by them, a spouse, or another disqualified person.

Nor is it a theoretical issue as of November 18, 2021.

Checkbook LLCs, Crypto Keys, and the IRS

In the 2021 court case, McNulty v. Commissioner, the IRS determined that a self-directed “checkbook IRA” had been improperly used to purchase gold coins to be held as an investment. (A checkbook IRA is an IRA that is set up as a special purpose limited liability corporation to make investments on its behalf.)

Investing in gold within an IRA is not illegal, but taking physical possession of coins by the taxpayer is. As was selling those coins and not reporting the profits.

In effect, the defendant was able to profit from the intentional misuse of money she rolled over from other tax-advantaged retirement accounts.

While crypto wasn’t the focus of the case, it put a spotlight on the challenges self-directed IRA custodians face in keeping a watchful eye over (and preventing abuse of) checkbook LLC accounts. Challenges made especially difficult by the inherent anonymity of crypto. (Remember, you send to public keys, NOT names of account holders.)

Not only does holding the keys to your crypto (even through a checkbook LLC) likely amount to personal possession, which could put you at major risk. IRA custodians that offer checkbook LLC crypto IRAs are opening themselves up to the very real risk that account holders will unintentionally or – in the case of McNulty – intentionally skirt U.S. tax laws.

For these reasons, while checkbook crypto IRAs do still exist, most legitimate crypto IRAs do not allow you to hold the keys to your coins and tokens, citing both the recent McNulty case and Section 408 of the Internal Revenue Code.

Diversify Your Retirement Portfolio with a Crypto IRA

For some, not being able to hold their keys could be a non-starter. But for those savvy investors who recognize the tax advantages, especially in conjunction with compounding returns over years or even decades, an IRA is a smart way to allocate a portion of your portfolio to crypto.

With Alto CryptoIRA, you can buy and sell crypto tax-free or tax-deferred, depending on whether you choose a traditional, SEP, or Roth IRA. Plus, by investing within an Alto CryptoIRA, you can take comfort knowing your crypto is held in institutional-grade hot and cold storage.

Open a CryptoIRA today and diversify your portfolio with access to up to 200+ cryptocurrencies.


Still unsure and want to speak with someone?

Set up a time here.