Course outline · 13 lessons
Bitcoin Wallets & Self-Custody

Wallet of Satoshi, Phoenix and the Best Lightning Wallets

Three unbranded phones with dark screens are grouped on a pale wooden table, two upright and one lying in front.

Lightning wallets let you send and receive bitcoin in a few seconds, usually for a small fee. So far this course has covered ordinary (“on-chain”) bitcoin, where every payment is recorded on the blockchain. Lightning is a payment layer built on top of Bitcoin for fast, small payments. This lesson helps you pick a Lightning wallet and make your first payment, and it explains which wallets let you hold your own keys: Phoenix, Zeus, Alby, Wallet of Satoshi and Blink.

Course 4 explains in depth how the Lightning Network works and how channels and routing work. You don’t need those lessons to follow this one: the short primer below covers what you need.

Lightning in Two Minutes

Why a second layer? Each Bitcoin block has limited room, so every on-chain payment competes for space and pays a fee to get in, and it counts as settled only once a block includes it, about every ten minutes on average. That suits savings and large payments. For a coffee, waiting for a block is slow, and when blocks are busy the fee can cost more than the coffee. Lightning moves most payments off the blockchain: two parties lock some bitcoin into a shared channel with one on-chain transaction, then pay each other inside it as often as they like. The blockchain sees the channel being opened and, one day, closed, not the payments in between.

How a payment crosses the network. You don’t need a channel with everyone you pay. If your wallet has a channel with a node that, through other nodes, reaches the shop, your payment hops along that chain, and each node in the middle forwards it for a small fee. Each payment is all-or-nothing: either it arrives in full, or it fails and the money stays where it was, so no node in the middle can keep it on the way.

Your wallet has a channel with a node, that node has a channel with another node, and that one has a channel with the shop. Your payment hops along the three channels, and each of the two nodes in the middle forwards it for a small fee. There are only two endings: the payment arrives in full and the shop gets the whole amount, or it fails and comes back, and your bitcoin stays where it was. No node in the middle can keep it.
A payment hops through channels to reach the shop. Each node in the middle forwards it for a small fee. The payment is all or nothing: it arrives in full, or it fails and your bitcoin stays where it was, so no node on the way can keep it.

What changes for you. A self-custodial Lightning wallet takes part in each payment as it happens, so your phone has to be online for it to receive (Phoenix wakes itself in the background when a payment arrives), and its backup works differently from an on-chain wallet’s (see “Custody on Lightning” below). Course 4’s Lightning Backups and Watchtowers explains how channel funds are kept safe.

Lightning in Five Words

  • Channel: a shared, pre-funded pot of bitcoin between your wallet and another node, opened with one on-chain transaction. Payments move the balance inside the pot without touching the blockchain each time. That’s why Lightning is fast and cheap.
  • Inbound liquidity: how much you can receive through your channels. A new wallet has none, so receiving its first payment means someone has to open or enlarge a channel, which costs an on-chain fee.
  • LSP (Lightning Service Provider): a company that opens and manages channels for your wallet, for a fee. Phoenix’s LSP is ACINQ, the company that makes it.
  • Invoice: a payment request, usually shown as a QR code starting with “lnbc”, for a specific amount. Most invoices expire after a while and can be paid only once.
  • Lightning address: an email-like address (name@domain.com) that anyone can pay again and again, choosing the amount within the minimum and maximum its service allows. Behind it, a server creates a fresh invoice each time.
Left, on-chain: three payments, each recorded in its own block on the blockchain. Right, Lightning: your wallet and another node share a channel, a pot of bitcoin with your part and their part. One on-chain transaction, in one block, opens it. After that, payments move the balance inside the pot without touching the blockchain each time, which is why Lightning is fast and cheap.
A channel is opened once on the blockchain; after that, payments stay inside it. On-chain, every payment is recorded on the blockchain. In a channel, payments only move the balance inside the shared pot, which is why Lightning is fast and cheap.

You may also meet: LNURL (a standard for QR codes that trigger a payment or withdrawal), splicing (resizing a channel without closing it), force-close (closing a channel on your own when the other side doesn’t cooperate; your funds come back on-chain after a waiting period), NWC (Nostr Wallet Connect, a way to let apps request payments from your wallet) and zaps (Lightning tips on the Nostr social network).

Custody on Lightning

As on-chain (see Custodial vs Non-Custodial Wallets), the question is who holds the keys. With a custodial wallet a company holds them and you have an account. With a non-custodial wallet you hold them, backed up by words you write down. Lightning adds one twist: a Lightning wallet’s backup usually restores your Lightning balance only in the same app. Your funds sit in channels that app manages, so another wallet given the same words may show nothing. That’s different from the on-chain rule that a BIP39 phrase restores almost anywhere.

The Best Lightning Wallets for Sending and Receiving Bitcoin Instantly

The short answer, by what you want:

You want…UseWhy
Self-custody on your phone, with no channels to managePhoenixYou hold the keys; it opens and resizes its channel for you. Our default recommendation.
To use your own Lightning node from your phoneZeusA remote control for your node, or a node on the phone itself.
Lightning in your browser, for websites and NostrAlbyBrowser extension plus Alby Hub, a node you can host yourself.
The simplest possible app, for pocket moneyWallet of Satoshi or BlinkVery easy, but custody is disputed or depends on the account type (see below). Small amounts only.

Non-Custodial Lightning Wallets

Phoenix Wallet (by ACINQ)

Phoenix, made by ACINQ (the company behind one of the main Lightning implementations), is the easiest way to hold your own keys on Lightning. Since version 2.0 it uses a single channel per wallet that it resizes as needed by splicing, so you never manage channels yourself. ACINQ describes it as self-custodial: “trust-minimized, but not trustless”, because it relies on ACINQ as its LSP to open and route.

Phoenix’s fees (from its FAQ, checked November 2026):

ActionFee
Sending via Lightning0.4% + 4 sats
Receiving via Lightning, enough inbound liquidityNo fee
Receiving via Lightning, not enough inbound liquidity1% + mining fees
Channel creation1,000 sats
Receiving on-chainMining fees
Sending on-chainMining fees (you choose the rate)

Worked examples. Sending a 100,000-sat payment costs 0.4% (400 sats) + 4 sats = 404 sats. Receiving your first 100,000 sats by Lightning means Phoenix has to create your channel: going by its fee table, expect the 1% liquidity fee (about 1,000 sats), the 1,000-sat channel-creation fee and the mining fee for the on-chain transaction, which depends on how busy the network is. When on-chain fees are low that adds up to roughly 2,000–3,000 sats. By default Phoenix refuses an incoming payment whose fee would be more than 5,000 sats or 50% of the amount, and the payment goes back to the sender. Later payments that fit in your channel arrive free.

Costs in Phoenix, from its fee table. Receiving your first 100,000 sats: Phoenix has to create your channel, so you pay the 1% liquidity fee (about 1,000 sats), the 1,000-sat channel-creation fee and a mining fee that depends on how busy the network is; roughly 2,000 to 3,000 sats in all when on-chain fees are low. Receiving later payments that fit in your channel: free. Sending 100,000 sats via Lightning: 0.4% (400 sats) plus 4 sats, 404 sats.
Receiving your first payment pays for your channel. That’s why your first 100,000 sats cost roughly 2,000–3,000 sats to receive when on-chain fees are low. Later payments that fit in the channel arrive free, and sending 100,000 sats costs 404.

On-chain deposits. Phoenix also gives you an ordinary Bitcoin address. Funds sent there land in a “swap-in wallet” that Phoenix controls on your behalf; after 3 confirmations they’re moved into your channel, for the mining fee. If the mining fee is above the maximum you’ve set, the move waits until fees fall.

Backup. Phoenix shows 12 standard BIP39 words. Restoring them in Phoenix brings back your channel funds. In other wallets they won’t show your Lightning balance: Phoenix says it can restore only channels created by Phoenix. If ACINQ ever disappeared, your channel can be force-closed and the funds come back on-chain, where you can recover them with your words in a wallet such as Electrum; Phoenix’s FAQ says not to uninstall or reset the app until such funds are recovered.

Two places your money can be. Normally it sits in the channel Phoenix manages: restoring your 12 words in Phoenix brings the funds back; restoring them in another wallet won't show your Lightning balance, but it hasn't vanished. If ACINQ ever disappeared, the channel can be force-closed and the funds come back on-chain after a waiting period; then your words recover them in a wallet such as Electrum. Phoenix's advice: don't uninstall or reset the app until such funds are recovered.
Phoenix’s 12 words bring back your Lightning balance only in Phoenix. In another wallet that balance won’t show, but it hasn’t vanished. If ACINQ ever disappeared, the channel can be force-closed and the funds come back on-chain, where the same words recover them in a wallet such as Electrum.

Availability: iOS and Android (on Android also as a direct download); phoenixd is a server version for developers. Phoenix was pulled from US app stores at one point; on 3 November 2026 it was listed in the US App Store.

Our full Phoenix wallet review goes further.

Your First Lightning Payment With Phoenix

  1. Install Phoenix from your phone’s app store (publisher: ACINQ) or from phoenix.acinq.co. Check the publisher; fake wallet apps exist (how to spot them).
  2. Create a new wallet and write down the 12 words on paper, numbered. They restore your Phoenix balance in Phoenix. Never type them anywhere else.
  3. Fund it with a small amount. Either have someone pay you a Lightning invoice (the first one pays for your channel, as above) or send a small amount on-chain from an exchange to Phoenix’s Bitcoin address, choosing the Bitcoin network (after 3 confirmations it moves into your channel, as long as the mining fee is within your maximum; Your First Withdrawal walks through an exchange withdrawal).
  4. Pay something: scan a merchant’s or friend’s Lightning invoice or address, check the amount and the fee Phoenix shows, and send. It usually completes within a few seconds.
  5. Keep it as spending money. Treat Phoenix like a cash wallet; savings belong in cold storage.
Top: an invoice, a payment request whose code starts with lnbc, for one set amount. Once it has been paid, or has expired, the same invoice can no longer be paid. Bottom: a Lightning address, name@domain.com, that anyone can pay again and again, choosing the amount within the service's limits. Behind it, a server creates a fresh invoice for each payment.
An invoice is for one payment; a Lightning address can be paid again and again. Behind the address, a server creates a fresh invoice for every payment, for the amount the payer chooses, within the service’s limits.

Zeus Wallet

Zeus is the wallet for people who run their own Lightning node. Where Phoenix automates channels, Zeus gives you control of every channel, fee and peer.

It started as a remote control: you run a Lightning node (LND or Core Lightning, among others) at home or on a server, for example on Umbrel or Start9, and point Zeus at it. Zeus later added an embedded node: an LND node running on your phone, which uses an LSP for inbound liquidity.

  • Custody: non-custodial; keys stay on your node or phone
  • Channel management: full manual control
  • Privacy: supports Tor connections to your node
  • Extras: coin control, channel rebalancing, point-of-sale mode

Best for: node operators and power users. Course 4 covers running a Lightning node.

Alby

Alby started as a browser extension: a Lightning wallet in your browser that pays websites through the WebLN standard. Its core today is Alby Hub, a Lightning node with a web dashboard that you run yourself: on a computer, on a personal server such as Umbrel or Start9, or on a cloud server you rent from a hosting provider. Alby adds no fees of its own (getalby.com, checked 7 November 2026).

  • Custody: you hold the keys wherever it runs. On a rented cloud server you also trust the hosting provider with the machine
  • Nostr: built-in zaps, and NWC to connect your Hub to other apps
  • Podcasting 2.0: streaming small payments to podcasters

Best for: web payments, content creators, Nostr users and developers. See our Alby review.

Breez

Earlier versions of this lesson recommended Breez. That app is no longer in the app stores; Breez published an experimental desktop recovery tool for old backups, and now publishes Glow, which we haven’t reviewed (checked 3 Nov 2026).

Wallets Where Custody Is Disputed or Depends on the Account: Small Amounts Only

Wallet of Satoshi

Wallet of Satoshi is one of the most popular Lightning wallets because there’s almost nothing to set up: open it, get a Lightning address, start paying. It started out openly custodial, and in some regions it still offers a custodial account, which new users there get first (its disclosure, last updated 25 August 2026). Its newer self-custody mode runs on Spark, a separate system built on Bitcoin, is available everywhere and gives you a 12-word recovery phrase; the custodial account has none, so check which mode your app is in. Two things to know about the Spark mode:

  • The 12 words are a Spark recovery phrase. Wallet of Satoshi’s own help pages say entering them in a hardware wallet or another BIP39 wallet will not recreate your balance; you need a wallet or tool that supports Spark.
  • Whether it’s truly self-custodial is disputed. The company and Spark call it self-custodial. WalletScrutiny, an independent wallet reviewer, still rates it custodial, because Spark’s operators must co-sign every off-chain transfer, so you can’t move funds on your own day to day. (Spark offers a way to withdraw to the Bitcoin blockchain without the operators, which WalletScrutiny treats as an emergency fallback outside the app.)
Wallet of Satoshi's self-custody mode runs on Spark. Day to day, every off-chain transfer needs two signatures, your key and Spark's operators, so you can't move funds on your own. Spark also offers a way to withdraw to the Bitcoin blockchain without the operators; WalletScrutiny treats it as an emergency fallback outside the app. The company and Spark call the wallet self-custodial; WalletScrutiny rates it custodial because the operators must co-sign.
The dispute over Wallet of Satoshi is about who must sign. Spark’s operators must co-sign every off-chain transfer, so WalletScrutiny rates it custodial; the company and Spark call it self-custodial. Spark’s way to withdraw to the blockchain without the operators is, for WalletScrutiny, an emergency fallback outside the app.

Wallet of Satoshi left the US app stores in 2023; on 3 November 2026 it was listed in the US App Store again. Use it only for small spending amounts.

Blink Wallet (Formerly Bitcoin Beach Wallet)

Blink began as the Bitcoin Beach Wallet, used in El Zonte, El Salvador, in the grassroots experiment that preceded the country’s 2021 Bitcoin law. Its original accounts are custodial: Blink holds the funds. Since 24 June 2026 it also offers non-custodial accounts, which we haven’t reviewed, and it now offers custodial accounts only in some regions (blink.sv, checked 3 Nov 2026). Blink is known for Stablesats, a dollar-denominated balance kept stable using derivatives rather than stablecoins.

Custody has real consequences. In September 2026 an attacker used a flaw in Blink’s admin tools to empty 24 custodial accounts; Blink restored every balance, and non-custodial accounts weren’t affected (our advisory). Accounts with two-factor authentication on lost nothing. Small amounts only, and turn 2FA on.

Best Lightning Wallet Comparison Table

Wallet Who holds the keys? Platform Channels Backup restores in… Best For
PhoenixYou (ACINQ as LSP)iOS, AndroidAutomatic (one channel, splicing)Phoenix (channel funds); on-chain via force-closeSelf-custody with ease
ZeusYou (your node)iOS, AndroidFull manual controlYour node’s own backupNode operators
Alby HubYou (on a rented server, the host runs the machine)Browser, desktop, serverVia Alby HubAlby HubWeb payments, creators
Wallet of SatoshiWallet of Satoshi (custodial account, some regions) or, in Spark mode, disputed: you per the company, custodial per WalletScrutinyiOS, AndroidNone to manageSpark mode: Spark-compatible wallets only; custodial account: no recovery wordsPocket money
BlinkBlink (custodial accounts) or you (non-custodial accounts, not reviewed)iOS, AndroidNone to manageDepends on account typeDollar-stable balance option

Custodial vs Non-Custodial Lightning: The Trade-offs

On Lightning, self-custody adds channels, liquidity and (for node runners) uptime to the usual job of guarding your words. Phoenix hides most of that; Zeus exposes all of it.

When an Easy App Is Fine

  • Very small balances: opening a channel costs an on-chain fee, which can be large relative to a few dollars.
  • Tipping and small payments, or trying Lightning for the first time.

When Self-Custody Is Worth It

  • Larger balances: the risk of a provider being hacked, shutting down or freezing accounts grows with what you hold.
  • Regular use: setting up Phoenix once pays off.
  • Regulatory risk: custodial apps can be pulled from a country’s app stores, as happened in the US in 2023.

The Recommended Progression

  1. Start with Phoenix and a small amount: you get self-custody from day one, with little to manage.
  2. Move to Zeus or Alby Hub if you later run your own node or want full control.

Keep savings on-chain, on a hardware wallet; Lightning is for spending.

How to Choose the Best Lightning Wallet for Your Needs

Self-custody with ease: Phoenix. Your own node: Zeus. Web and Nostr: Alby. Simplicity for pocket money: Wallet of Satoshi or Blink, small amounts only. Merchants: we have no current pick; we used to suggest Breez’s point-of-sale mode, and Zeus also has one.

For hands-on testing of each wallet, see our best Lightning wallets comparison and review guide.

Frequently Asked Questions

Which Lightning wallet is the safest?

Against company failure, hacks and freezes, wallets where you hold the keys (Phoenix, Zeus, self-hosted Alby Hub) are safer. Against your own mistakes, an easy custodial app is more forgiving. For anything more than pocket money, hold your own keys and keep your words safe (Seed Phrases Explained).

Is Wallet of Satoshi custodial?

It depends on the mode. In some regions it offers a custodial account, which new users there get first; everywhere it offers a self-custodial mode built on Spark, and only that mode has a 12-word recovery phrase (its disclosure, 25 August 2026). Even the Spark mode is disputed: WalletScrutiny still rates it custodial because Spark’s operators must co-sign every off-chain transfer. Either way, its words won’t restore your balance in a hardware wallet or ordinary BIP39 wallet. Use it for small amounts.

Can I use Lightning with a hardware wallet?

Not directly. Hardware wallets are built for on-chain savings and don’t manage Lightning channels. Keep savings on the hardware wallet and a small balance in a Lightning wallet such as Phoenix. Some advanced node setups use a hardware wallet to fund channels, which takes technical skill.

How much does it cost to open a Lightning channel?

It depends on the wallet and on on-chain fees. In Phoenix, a first channel costs the 1,000-sat creation fee plus the liquidity fee and mining fee (see the worked example above). If you run your own node and open channels yourself, you pay the on-chain mining fee, which might be a few hundred to a couple of thousand sats when the network is quiet and much more when it’s busy. See our Lightning fees guide.

What happens if my Lightning wallet company shuts down?

With a custodial wallet, your funds are at risk: you’re a creditor. With a non-custodial wallet, the bitcoin is still yours. With Phoenix, the channel can be force-closed and the funds return on-chain after a waiting period, recoverable with your 12 words in a wallet such as Electrum.

Check Your Understanding

1. You restore your Phoenix 12 words in another wallet and see a zero balance. Has your money vanished?

Answer

No. Phoenix’s words are BIP39, but your Lightning balance sits in a channel that only Phoenix can restore. Restore the words in Phoenix to get it back; if the channel is ever force-closed, the funds return on-chain and can then be found with the same words.

2. Why does receiving your first Lightning payment cost more than later ones?

Answer

A new wallet has no inbound liquidity, so a channel must be opened (or enlarged) with an on-chain transaction. In Phoenix that means a liquidity fee, a channel-creation fee and a mining fee. Later payments that fit in the channel arrive free.

3. What’s the difference between an invoice and a Lightning address?

Answer

An invoice is a one-time payment request, usually for a set amount and with an expiry. A Lightning address looks like an email address and can be paid any number of times, for an amount the payer chooses within the service’s limits; a server behind it creates a fresh invoice for each payment.