Custody options, from easy to sovereign

There is no single right setup. There is a right setup for an amount, a skill level and a threat model.

The ladder

1. Custodial. An exchange or broker holds the keys; you hold a login. Easiest. You are exposed to their hack, bankruptcy, freeze or error. Fine for amounts you would keep in a checking account while you learn.
2. Hot wallet. Keys on your phone or computer. You control them; malware and theft of the device are the risks. Right for spending money.
3. Hardware wallet. Keys on a dedicated device that never connects to the internet; transactions are signed inside it and sent back. The standard for savings. Risks shift to the backup and to physical security.
4. Multisig. Several keys, usually on separate devices in separate places, with 2-of-3 or similar needed to spend. No single lost or stolen key loses the funds. More to set up, more to maintain, more to explain to your heirs.
5. Collaborative custody. Multisig where a company holds one key and you hold the rest. You keep control; they help with recovery and inheritance; they cannot move funds alone.

Choosing

A common pattern: a custodial account or hot wallet for small, active amounts, and a hardware wallet (or multisig as the amount grows) for savings. Move up the ladder as the amount and your confidence grow. Never set up something you could not operate under stress or explain to someone you trust.