On day one, the wallet behind your #Name is invisible. You signed up with email or a social login, you paid with a card, and you left with a portal on the map. Underneath, a small piece of software called Privy quietly created an embedded wallet for your account: a public address that owns your #Name, plus a private key that authorises you to act on it. You did not need to think about either. That is the entire point of an embedded wallet — it is a guard-rail. It lets a non-crypto user buy a name, run a portal, and never accidentally lose it to a misplaced sticky note.
On day 200, some users decide they want more. They want the keys themselves, not the custodial version. They want the on-chain record on #SPACE to be controlled by a wallet that they hold, on a device they hold, with backups that exist outside any single company including ours. That upgrade is called self-custody, and this article is the plain-English walk-through of when to do it, why, and how. We will also de-mystify what an “on-chain record” actually is and what protections it does and does not buy you.
What an embedded wallet actually is (and isn’t)
An embedded wallet is a regular crypto wallet — a public/private key-pair on a public blockchain — with the keys stored by a managed provider (in our case Privy) instead of by you. The provider implements the boring infrastructure: secure key generation, key storage, signing of transactions, recovery flows tied to your email or social login. From your perspective it feels like a normal account.
The advantages of an embedded wallet are real and worth saying out loud:
- You cannot lose the keys to a missed seed phrase backup. Recovery goes through your email/social login, the way every other product on the internet recovers accounts.
- You do not have to install anything. No browser extension, no mobile app prompt for every transaction.
- Buying a
#Name, paying for keywords, or topping up Gigi credits feels like Stripe, not like crypto.
The trade-offs are equally real:
- The provider can, in principle, freeze access to the wallet under court order or in response to a sufficiently severe terms-of-service violation. The model is similar to a custodial bank account.
- If the provider has an outage, you cannot sign transactions during the outage. (Most modern providers, including Privy, have very high uptime; this is a worst-case, not a daily concern.)
- You do not have an obvious path to use this wallet on apps outside hashtag.org — the keys are not portable until you export them.
For roughly 95% of portal owners, the embedded wallet is the right answer for the first year or longer. Self-custody only becomes worth the operational overhead when you specifically value the property an embedded wallet does not give you: keys nobody else can revoke.
What changes when you go self-custody
Self-custody, in one sentence: you hold the private key to the wallet that owns your assets, and you also hold the seed phrase that can reconstruct that private key on a different device. Once that is true, no third party — not Privy, not hashtag.org, not your email provider — can move the assets out of that wallet. The flip side is that nobody can recover them on your behalf if you lose the seed phrase. The responsibility transfers entirely to you.
The concrete changes for a hashtag.org user who self-custodies their #Name:
- The on-chain record on #SPACE stays the same; only the controlling key changes. Visitors to your portal see no difference.
- When the portal renews next year, the renewal is still a normal Stripe charge or a Gigi credits debit — you do not have to interact with the wallet for routine subscription life.
- When you take any on-chain action that changes ownership (selling the
#Name, transferring it to another wallet, registering a sub-name), the wallet has to sign that transaction with your private key. You will see a standard wallet signature popup; this is how the system proves it was actually you. - If hashtag.org goes offline tomorrow, your
#Nameis still yours. The on-chain record persists; you just lose the convenient web UI. Other apps that read#SPACEcan resolve your name; you can run your own resolver if you want to.
Step 1 — Decide if you actually need this
Honest decision tree:
- You are a brick-and-mortar local business, you do not produce content the internet argues about, and you treat
#Nameas a domain replacement. Stay on the embedded wallet. The platform-risk delta of self-custody is tiny in your case and the operational overhead is real. - You are a creator who has been demonetized, deplatformed, or shadow-banned in the past, or who creates content that historically attracts platform action. Self-custody is worth the 30 minutes. The whole point of moving your audience to a portal is durability; finishing the job means the keys are in your hands.
- You sell anything where ownership history matters — an artist’s long-term name, a brand you might one day license or sell, a digital identity tied to a long-running project. Self-custody is the upgrade you want.
- You are doing this because someone on a podcast said embedded wallets are custodial and that means “not your keys, not your coins.” Be honest with yourself: is anything you actually do at risk? If not, self-custody is a theological win, not a practical one. Stay simple.
Step 2 — Choose a self-custody wallet
Pick one wallet. Just one, for now. The good defaults today are:
- Phantom — mobile + browser extension, very polished, great beginner UX, multi-chain. Defaults to Solana but supports the other major chains.
- Rainbow — mobile-first, beautiful, focused on Ethereum and friends. Excellent if your day-to-day is mostly NFTs and DeFi.
- Backpack — multi-chain extension and mobile, popular with creators, built around a contact-list model that fits social use cases.
- MetaMask — the legacy default. Comprehensive, ubiquitous, less friendly to new users. Pick this only if you know why you want it.
Hardware wallets (Ledger, Trezor) are the next step up — the keys live on a physical device that signs transactions when you press a button. We recommend considering them once you have lived with a software wallet for a few months and understand the workflow. Going straight from email login to a hardware wallet is usually too big a jump.


Step 3 — The seed phrase ritual
When you create the new wallet, the wallet app gives you a sequence of 12 or 24 ordinary English words. This is the seed phrase. It mathematically derives every private key in the wallet, which means it controls everything in the wallet, forever. Three rules:
- Write it down on paper. Two paper copies, stored in two physical locations, one of which is fire-resistant. A bank safe-deposit box and a fireproof home safe is a common pairing. Metal seed-phrase plates are worth the $30 if your wallet will ever hold something of meaningful value.
- Never type it into anything. Not Notes, not Google Drive, not your password manager, not a screenshot, not an email to yourself. Every wallet phishing scam in the world is some variant of “please confirm your seed phrase here.” The wallet app will never ask, and neither will anyone legitimate.
- Treat it like a bank account. If you would not casually lend someone your debit card and PIN, you also do not show them the seed phrase. The two have the same blast radius.
Once the seed phrase is backed up, you have a self-custody wallet. The wallet app will give you a public address — a long string starting with something like0x... or ...solana. That address is the new home for your #Name.
Step 4 — Move the #Name from the embedded wallet to the new one
Inside hashtag.org, open Account → Wallet. You will see two sections: the embedded wallet (the one we provisioned for you) and a “Connect external wallet” option. Connect the new wallet you just created — it will prompt you to sign a one-line message proving you control it. This is signing, not spending; it costs nothing and moves no assets.
Now find the Transfer this #Name action on the same page. Choose “to my external wallet” and confirm. Two on-chain things happen, in order:
- The current owner record on #SPACE is updated from the embedded wallet’s public address to the external wallet’s public address. This is a normal smart-contract transaction; the new owner is recorded on-chain.
- Inside hashtag.org, your
#Nameis now controlled by the external wallet. Subscriptions, billing, and admin still flow through your account, but ownership-level actions (sale, transfer, sub-name, anything that mutates the on-chain record) require the external wallet’s signature.
We cover the network gas for this transfer the first time you do it, exactly so the upgrade isn’t artificially gated on holding crypto. Future on-chain actions you initiate may incur small gas fees you pay yourself; we always show the estimate first.
What you actually have now
Strictly speaking, you now have a portable, decentralized identifier — a DID — for your business or your creator persona. Practically:
- Your
#Nameis recorded on a public chain. Anyone can verify you own it. No one can quietly rewrite who owns it. - The mapping from
#Nameto the actions a wallet can take (publish a portal, list keywords, accept stablecoin) is governed by smart contracts on#SPACE. The rules are public and readable; no platform can change them in the middle of the year. - You can sign in to other Web3 apps that read
#SPACEusing the same name. Identity becomes an export, not a per-app username. - Migrating off hashtag.org someday is a one-line move: take your wallet (and therefore your
#Name) to whatever resolver or front-end you prefer. The portal data may be specific to hashtag.org but the identity is yours.
What self-custody does not protect against
A short, useful list to set expectations:
- Losing the seed phrase. If you lose the words and have no backup, the wallet (and the
#Namein it) is unrecoverable. Period. Make two paper copies. - Phishing. If you sign a malicious transaction prepared by a phishing site, the chain dutifully records what you signed. The chain is only tamper-resistant; it is not consent-aware. Read every wallet popup before signing.
- Being wrong about a partner. If you give your seed phrase to a co-founder who turns out to be unreliable, the chain treats it as you-acting. Use multi-sig or hardware wallets for shared assets.
- Bad-faith governance. Decentralised does not mean magic. A protocol with a centralised admin key is only as good as the people holding the admin key. The point of
#SPACEis that ownership of your#Namedoes not depend on hashtag.org’s good behaviour, but the whole stack still depends on the chain’s soundness.
Operational tips for the first 90 days
- Keep using the embedded wallet flow inside hashtag.org for the small stuff — paying for keywords, topping up credits, day-to-day billing. Reserve the external wallet for ownership-level actions. Friction in the right places makes self-custody safer.
- Test a small transfer first. Move $5 of USDC from the embedded wallet to the external wallet and back. Confirm the workflow feels right before you ever transfer the
#Nameitself. - Set up a recovery contact — some wallets support designating a recovery wallet owned by a trusted friend or partner. Useful in case of device loss; not a replacement for a paper backup.
- Update your portal admin team carefully. Self-custody changes who can mutate ownership; it does not change who can edit content. If you have a virtual assistant or staff, they keep their content access exactly as before.
FAQ
Can I go back to the embedded wallet? Yes — transfer the#Name back to the embedded wallet from inside Account → Wallet. Self-custody is a choice, not a one-way door.
Do I need crypto to self-custody? No. The first transfer is gas-sponsored and most ongoing actions you take through the hashtag.org UI bundle gas for you. You only need a small amount of native chain currency if you start transacting on-chain directly outside our app.
What if Privy goes out of business? If you are still on the embedded wallet at that moment, Privy supports key export by design — you can pull your keys out and import them into any standard wallet. We help you with this in the UI.
Can I have one wallet for multiple #Names? Yes. A self-custody wallet can hold any number of #Names and other on-chain assets. Many creators centralise this way: one wallet, one seed phrase, several brand portals.
Is self-custody safer than the embedded wallet? Different. Embedded wallets are safer against lazy users (you cannot lose the keys); self-custody is safer against hostile platforms (no one else can take the keys). Pick the threat model that matches your reality.
Where to go next
If you have not yet, claim your #Name first — the 60-second walkthrough. With ownership locked in via self-custody, two complementary moves make the most of your portal: train the agent so it sounds like you (10-minute GIGI setup) and lock in the search phrases visitors actually type (keyword auctions). And if you are moving over from a third-party platform, the migration playbook is in Stop renting your audience.

