Keystone fam,
Here's an update on some of the actions we promised and how to protect yourself from phishing.
Where things stand:
- We cut shipping data retention from 180 to 90 days, effective now.
- Want your data gone sooner? Once your order arrives, contact our support team, and we'll delete it right away.
- We emailed every affected user from [email protected].
- We paused all shipments and began quarantining affected devices at every warehouse we use, including Amazon's.
- We're answering your questions here on X and through support tickets.
Thank you to everyone who shared feedback on the lookup page for affected users. We're working through every concern to make it as secure as possible.
Stay safe from phishing:
- Incident emails only come from [email protected]. Check the sender every time.
- We will never ask for your seed phrase. Not by email, DM, or phone.
- If a message pushes you to act fast, stop and check with us first.
We'll share more on next steps in the coming days.
Again, we're sorry we let this happen. We're doing everything we can to make it right and to help every affected user through it.
Questions, or think we missed something? Drop them in the replies.
4.0/ 5
Our score
Very good
Price from
$149
Secure element
Yes
Firmware
Fully open source
Connectivity
QR code (air-gapped)microSD
Supported assets
5,500
Bitcoin-only
No
What is Keystone?
Keystone is an air-gapped hardware wallet that signs transactions through QR codes and keeps private keys offline. The Keystone 3 Pro combines a 4-inch touchscreen with three secure-element chips, fingerprint verification and support for up to three recovery phrases.
Company and product history
The brand is operated by Yanssie HK Limited. Lixin Liu is CEO and Aaron Chen is CTO. The project began in 2018 as Cobo Vault and was later relaunched under the Keystone name. Its first premium hardware wallet, Cobo Vault Ultimate, was funded on Indiegogo in 2018.
How Keystone works
Compatible software wallets communicate with the device through QR codes and microSD cards, rather than relying on a network connection for transaction signing. Keystone integrates with more than 45 software wallets, including MetaMask, OKX Web3 Wallet, BlueWallet and Keplr. The website also lists support for more than 5,500 assets, although token support varies by chain and wallet integration.
Users can choose multi-coin firmware or a Bitcoin-only firmware with a reduced code base. The Bitcoin-only version supports PSBT, multisignature wallets and Bitcoin testnet. The device supports BIP39 recovery phrases, while its three-phrase design allows multiple wallets to be managed from one device. The Keystone Tablet and Tablet Plus store recovery phrases on steel, with the Tablet Plus described as fire-resistant and corrosion-resistant.
Prices and availability
The Keystone 3 Pro is listed at a $149 sale price, compared with a $183.90 regular price. The MetaMask edition costs $249. The Bundle Pack is listed at $232.90 on sale and $252.90 regularly. Keystone Care+ starts at $50. The product is available for purchase online, and free shipping applies to orders over $30 sent to Europe, the United States, or Australia. Switzerland and Norway are excluded.
Track record and risks
Keylabs audited the Keystone 3 Pro in November 2023. The audit covered its secure elements and fingerprint sensor, as well as its tamper circuit and PUF-based keys. Keystone has open-sourced its secure-element firmware, hardware design, application layer and parts of its operating-system layer.
Air-gapped signing reduces network exposure but adds QR or microSD steps and depends on compatible companion wallets. Losing all recovery-phrase backups can permanently block access, while support for individual tokens and chains can change. The company’s recent tamper-response design renders a tampered device unusable, which protects against continued use but can also require a recovery from the seed phrase.
Founders
Lixin LiuCEO
Aaron ChenCTO
Best for:Long-term self-custodyAir-gapped transaction signingMulti-chain wallet holdersBitcoin multisignature setups
Pros and cons
Pros
- QR signing keeps private keys offline during transactions
- Three secure-element chips support physical attack resistance
- 4-inch touchscreen shows transaction details clearly
- Supports more than 5,500 assets
- Bitcoin-only firmware includes PSBT and multisignature support
- Keylabs audit completed in November 2023
Cons
- Keystone 3 Pro costs $149 on sale and $183.90 regularly
- QR and microSD signing adds steps compared with USB workflows
- Token support varies across chains and software wallets
- Recovery depends on safely storing the seed phrase
- Tamper response can permanently disable the device
- Support for some integrations can change, as with Core for AVAX
Our review
4.0/5
Very good
Keystone's air-gapped QR signing, touchscreen and three secure elements are strong for self-custody, while partial open-source coverage and the listed price limit its appeal.
Keystone 3 Pro is a hardware wallet for for long-term self-custody. Its main security advantage is separation from networked devices: transactions are signed through QR codes, with microSD support, rather than a data connection. The device has three secure-element chips, fingerprint verification and a tamper response that can make it unusable after interference. A Keylabs audit completed in November 2023 examined the device’s physical-security design. The device combines these features, although it does not remove the risks of a stolen device, exposed recovery phrase or malicious transaction approval.
The four-inch touchscreen displays transaction details on the device. Keystone supports up to three recovery phrases, BIP39 passphrases and multisignature use. Its Bitcoin-only firmware includes PSBT and multisignature support, as well as Bitcoin testnet support. The multi-coin firmware covers more than 5,500 assets and integrates with more than 45 software wallets. MetaMask, OKX Web3 Wallet, BlueWallet and Keplr are among the named integrations. Support remains dependent on the companion wallet and chain implementation, and recent product updates show that integrations can change: Core dropped Keystone support for AVAX on September 1, 2026, with migration requiring firmware 3.1.2 and a USB connection.
Keystone’s clearest strengths are air-gapped signing and a large display, supported by layered physical protections. The main weaknesses are price, dependence on QR-compatible software wallets, and a firmware model that is not fully open source in the strictest sense. Keystone has open-sourced its secure-element firmware and hardware design, along with the application layer and parts of the operating system, while the site describes the product as fully open source.
The brand began in 2018 as Cobo Vault and now operates under Yanssie HK Limited, with Lixin Liu as CEO and Aaron Chen as CTO. Its published record includes the 2023 Keylabs audit and continued firmware work. Keystone suits holders who value offline signing and broad wallet integrations.
Specs
| Price from | $149 · unverified |
|---|---|
| Connectivity | QR code (air-gapped), microSD · unverified |
| Secure element | Yes · unverified |
| Firmware | Fully open source · unverified |
| Display | Touchscreen · unverified |
| Air-gapped signing | Yes |
| Bitcoin-only | No · unverified |
| Supported assets | 5,500 · unverified |
| BIP39 passphrase | Yes · unverified |
| Multisig support | Yes · unverified |
| Companion app | 45+ integrated software wallets, including MetaMask, OKX Web3 Wallet, BlueWallet and Keplr · unverified |
| Touchscreen | Yes · unverified |
| Backup options | Three recovery phrases, SLIP-39 mnemonic sharding, Keystone Tablet, Keystone Tablet Plus · unverified |
Not disclosed by the provider: KYC required, Battery, NFC.
Data from the provider's website and public sources. Fees and availability change; confirm on the official site before you sign up.
Key features
QR air-gapped signing
Keystone signs transactions through QR codes without a direct network connection. It also supports microSD communication.
Three secure elements
The Keystone 3 Pro uses three secure-element chips and a tamper-response design that can render the device unusable after tampering.
Large touchscreen
A 4-inch display lets users review transaction details on the device, with fingerprint verification for access control.
Multi-wallet support
Keystone integrates with more than 45 software wallets, including MetaMask, OKX Web3 Wallet, BlueWallet and Keplr.
Broad asset support
The multi-coin firmware supports more than 5,500 assets, with availability varying across chains and wallet integrations.
Bitcoin-only firmware
A Bitcoin-only firmware reduces the code base and supports PSBT, multisignature wallets and Bitcoin testnet.
Multiple recovery phrases
The device supports up to three distinct recovery phrases. It allows multiple wallets on one hardware wallet.
Steel phrase backups
Keystone Tablet and Tablet Plus products store recovery phrases on steel; Tablet Plus is fire-resistant and corrosion-resistant.
Inside Keystone
Keystone 3 Pro Hardware Wallet
The main hardware wallet uses a four-inch touchscreen, fingerprint verification and QR-based air-gapped signing. It supports three recovery phrases, multi-coin firmware and Bitcoin-only firmware.
Keystone Tablet Plus
This steel backup device stores recovery phrases. The site describes it as fire resistant and corrosion resistant.
Keystone Wallet Pouch
The pouch protects the hardware wallet from physical wear. It is described as resistant to a one-metre drop, scratches and wear.
Bitcoin-Only Firmware
This firmware reduces the code base and attack surface for Bitcoin use. It supports PSBT, multisignature wallets and Bitcoin testnet.
Multi-Coin Firmware
The multi-coin firmware supports major cryptocurrencies and more than 5,500 assets. Support is accessed through Keystone's integrated software-wallet connections.
Keystone Bundle Pack
The listed sale price is $232.90, against a regular price of $252.90.
Keystone screenshots
What users say about Keystone
Reported problems include devices dying after storage, limited wallet support, and unresolved signing or compatibility issues. Concerns about legacy-device support and app reliability add to a mixed picture.
In their own words
“They work great. I dont use the nexus app, its not necessary. You connect the air gapped KS3 pro to software wallets like metamask through QR codes. Its my fav wallet by far.”
“The big advantage also with the qrcode is the ''dont trust, verify'' part of it. You can read and uncode the qrcode yourself. It is often zipped or clear Json data you can understand and see the partially signed TRX.”
“I had a keystone 3 pro bought one year, after that, my device show some problems (break every time when pin), I joined in the discord channel, related my problem, recorded a video, and they sent another new device. The support was very good with me.”
“First one lasted about 6 months then unable to charge unable to turn on despite all the troubleshooting. Purchased a second device same problem only lasted 3 months. So can't recommend and won't be purchasing a third as despite their claims they clearly haven't addressed this known issue.”
“Update on my Keystone/Arweave case - I now have real concerns about trusting this company's answers, not just their support speed. Their latest reply says they now believe this may be a hardware issue specific to my device, and asks me to ship it in.”
“They've been slacking on adding new wallets for a while now. This is for 2 reasons in my opinion, 1.) Theyre trying to push more people into their keystone nexus app, and 2.) Theyre working in the background on the next generation keystone device.”
Scam warning: Phishing calls, emails, and fake support messages have targeted Keystone users for seed phrases and wallet access.
Scam warning: A fake Keystone-related website prompted users to enter seed phrases, and a malicious site was reported as a wallet-draining scam.
Based on 200 Reddit posts and comments from the last 12 months, checked Oct 18, 2026. These are posts by users on other sites, not reviews submitted on CryptoReview.
User reviews
No user reviews yet. Have you used Keystone? Share your experience below.
FAQ
Who founded or runs Keystone?
Keystone began in 2018 and is operated by Yanssie HK Limited. Lixin Liu is CEO and Aaron Chen is CTO; the project was formerly known as Cobo Vault.
How much does the Keystone 3 Pro cost?
The Keystone 3 Pro has a $149 sale price and a $183.90 regular price. The MetaMask edition costs $249, while the Keystone Bundle Pack costs $232.90 on sale and $252.90 at its regular price.
Where can I buy Keystone, and is KYC required?
Keystone is available for purchase online.
Is Keystone 3 Pro safe?
Keystone 3 Pro keeps private keys offline and signs transactions through QR codes. It has three secure-element chips, fingerprint verification, tamper response and a Keylabs audit completed in November 2023.
What assets and wallets does Keystone support?
The multi-coin firmware supports more than 5,500 assets and Keystone lists more than 45 integrated software wallets. Named integrations include MetaMask, OKX Web3 Wallet, BlueWallet and Keplr, with support varying by chain and token.
Does Keystone support multisig and passphrases?
Keystone supports multisignature wallets and BIP39 passphrases. Its Bitcoin-only firmware also supports PSBT, multisignature and Bitcoin testnet use.
Latest from Keystone on X
Dear Keystone fam,
We know this has been a stressful week, and many of you have questions. Here are answers to the ones we’re hearing most.
→ I bought my device in 2024/2025/2026. Am I affected?
If you placed an order from 2024 to 2026, your shipping data may have been exposed. We’re building a page where you can check whether you’re affected, and we’ll share it here as soon as it’s live.
→ The authentication key was exposed. How can I verify a device delivered before Oct 20?
Our device verification page still runs on the old authentication key, so you can still use it to verify an unopened Keystone. The attacker has that key now, but it doesn’t affect devices that were already delivered before Oct 20.
→ I already use my Keystone. Can I keep using it?
Yes. If you received it before Oct 20, verify it on our website and keep using it as normal.
→ I received my device on/after Oct 20. What should I do?
With the key exposed, attackers could build a fake device with the real key inside, making it look genuine. Contact our support team right away at [email protected], and they’ll walk you through the next steps.
→ My order is in transit. What should I do?
Refuse the package when it arrives and email us at [email protected]. Our support team will help you from there.
→ Is it safe to place a new order on your website?
Yes. Because of the key leak, we’ve set aside all existing Keystone 3 Pro inventory to be destroyed. Any order you place now is a pre-order from a fresh batch with new authentication keys, expected to arrive in 4 to 6 weeks. If you’re OK with the wait, go ahead and order.
→ Is it still safe to update my Keystone’s firmware?
Yes. Your Keystone only installs firmware signed by our team. The key that leaked is our web authentication key, which is completely separate from our firmware signing key. Firmware updates are safe, so you can update and keep using your device as normal.
⚠️ Remember, scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or “fixes” for your order or address. None of it is from us.
We will never ask for your recovery phrase or private keys. NEVER share them with anyone, and NEVER enter your recovery phrase into a device you didn’t order. Don’t click links in messages you weren’t expecting. Type https://t.co/7km8AZM288 into your browser yourself.
Need help? Reach us directly here on X or at [email protected]
Once again, we’re sorry we let this happen. We’re doing everything we can to make it right and to help every affected user through it.
Still have questions, or think we missed something? Drop them in the replies, and we’ll help.
We know this has been a stressful week, and many of you have questions. Here are answers to the ones we’re hearing most.
→ I bought my device in 2024/2025/2026. Am I affected?
If you placed an order from 2024 to 2026, your shipping data may have been exposed. We’re building a page where you can check whether you’re affected, and we’ll share it here as soon as it’s live.
→ The authentication key was exposed. How can I verify a device delivered before Oct 20?
Our device verification page still runs on the old authentication key, so you can still use it to verify an unopened Keystone. The attacker has that key now, but it doesn’t affect devices that were already delivered before Oct 20.
→ I already use my Keystone. Can I keep using it?
Yes. If you received it before Oct 20, verify it on our website and keep using it as normal.
→ I received my device on/after Oct 20. What should I do?
With the key exposed, attackers could build a fake device with the real key inside, making it look genuine. Contact our support team right away at [email protected], and they’ll walk you through the next steps.
→ My order is in transit. What should I do?
Refuse the package when it arrives and email us at [email protected]. Our support team will help you from there.
→ Is it safe to place a new order on your website?
Yes. Because of the key leak, we’ve set aside all existing Keystone 3 Pro inventory to be destroyed. Any order you place now is a pre-order from a fresh batch with new authentication keys, expected to arrive in 4 to 6 weeks. If you’re OK with the wait, go ahead and order.
→ Is it still safe to update my Keystone’s firmware?
Yes. Your Keystone only installs firmware signed by our team. The key that leaked is our web authentication key, which is completely separate from our firmware signing key. Firmware updates are safe, so you can update and keep using your device as normal.
⚠️ Remember, scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or “fixes” for your order or address. None of it is from us.
We will never ask for your recovery phrase or private keys. NEVER share them with anyone, and NEVER enter your recovery phrase into a device you didn’t order. Don’t click links in messages you weren’t expecting. Type https://t.co/7km8AZM288 into your browser yourself.
Need help? Reach us directly here on X or at [email protected]
Once again, we’re sorry we let this happen. We’re doing everything we can to make it right and to help every affected user through it.
Still have questions, or think we missed something? Drop them in the replies, and we’ll help.
https://t.co/IbtXqeqKAX
We owe you an apology.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type https://t.co/7km8AZM288 yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
On October 20, we detected unauthorized access to our official website. After verifying API activity with Shopify, we confirmed on October 23 that a third party obtained customer shipping information. You trusted us with those details, and we're sorry we didn't keep them safe.
Exposed: names, contact details, shipping addresses, and order details (items and prices).
Not exposed: payment card or bank details, recovery phrases, private keys, or wallet passwords.
We've blocked access, fixed the vulnerability, opened an investigation, and are emailing affected customers.
Scammers may pose as Keystone by phone, text, email, or mail, offering refunds, replacement devices, or "fixes" for your order or address. None of it is from us.
NEVER share your recovery phrase or private keys, and NEVER enter your recovery phrase into a device you didn't order. We will never ask for them. Don't click links in unexpected messages. Type https://t.co/7km8AZM288 yourself.
A detailed report is coming soon.
Until then, trust only our official channels. If anything feels off, email [email protected]. We'd rather hear from you than have you take a chance.
Again, we're truly sorry to everyone affected.
Most people think linking a hardware wallet to a software wallet exposes your keys 🤔
It doesn’t.
Keystone shows a QR code of your xPub, a one-way derivation of your private key.
Nexus scans it & derives your addresses locally.
Your keys never go online. That’s air-gapped 🧊 https://t.co/OwNy5rJ1pH
It doesn’t.
Keystone shows a QR code of your xPub, a one-way derivation of your private key.
Nexus scans it & derives your addresses locally.
Your keys never go online. That’s air-gapped 🧊 https://t.co/OwNy5rJ1pH
Recent public posts from @KeystoneWallet, shown as published. Not reviewed or endorsed by CryptoReview.
Alternatives to Keystone
NFC hardware wallet with 14,100+ assets across 90+ blockchains
NFCSecure elementPartially open source
Air-gapped hardware wallet with QR signing, a CC EAL5+ chip and 10,000+ assets
QR code (air-gapped) · microSDSecure elementClosed source
Open-source hardware wallets supporting 100+ chains and 30,000+ coins and tokens
No KYCUSB-C · BluetoothSecure elementFully open source
Swiss-made open-source hardware wallet line launched in 2015 by Shift Crypto
Secure elementFully open sourceBitcoin-only
Hardware wallets with Secure Element chips, 100+ chains and 15,000+ supported assets
No KYCSecure elementPartially open sourcePrice from: $59
Open-source hardware wallet brand protecting crypto since 2013
Secure elementFully open source1,000 supported assets