What is Keystone wallet and how does it work?

Keystone wallet is a hardware wallet that keeps your private keys on a device which never needs a USB or Bluetooth link to a phone or computer for signing. Instead, the Keystone 3 Pro uses its camera and screen to exchange QR codes with a software wallet. The company has made crypto wallets since 2018 and changed its name from Cobo Vault to Keystone in June 2021, according to Bitcoin Magazine.

How does the Keystone wallet QR code system work?

Keystone acts as the signer, while a software wallet on your phone or computer acts as the interface that talks to the blockchain. Keystone's own MetaMask guide shows the pattern. To connect, the device shows a QR code that MetaMask scans to import your account's public information, which lets MetaMask display balances without holding the keys, much like a watch-only wallet.

To send funds, MetaMask builds the transaction and shows it as a QR code. You scan that code with Keystone, check the details on its screen, and approve it with your password. Keystone then shows a signed QR code, which MetaMask scans and broadcasts. The keys never leave the device. Our guide on how crypto QR codes work covers QR codes more broadly.

Is there a Keystone wallet app?

As of October 2026, Keystone's setup guide relies mainly on third-party wallets rather than a single companion app. It lists OKX Wallet, BlueWallet, MetaMask, Rabby and Safe, which supports multisig accounts on EVM chains. Bitcoin Magazine also named Sparrow and Nunchuk as compatible with the bitcoin-only firmware. The setup page says the Keystone 3 Pro supports bitcoin and EVM chains, and the firmware repository lists Solana among its topics.

How secure is a Keystone hardware wallet?

Keystone's design aims to cut connections that malware could use. According to its GitHub repository, the Keystone 3 firmware runs alongside three secure element chips, and most of the code is public, though one chip library ships as a precompiled file because of licensing limits. Bitcoin Magazine reported that the device includes a self-destruct mechanism meant to erase keys if it detects physical tampering, plus a fingerprint sensor.

Wallets are created on the device as a 24-word seed phrase, and the bitcoin-only firmware added Shamir backups and passphrase support. In March 2025, Least Authority published a security audit of Keystone for Zcash support, commissioned by Zcash Community Grants.

How do you update Keystone wallet firmware?

Keystone's setup page describes two methods. With microSD, you copy the firmware file from Keystone's firmware page onto a FAT32 card and start the upgrade on the device. With USB, available on firmware 1.0.4 and later, you approve the connection on the device and install from the firmware page in a browser. Both methods ask for a battery charge above 20%. The page also offers an optional device check that scans a code from Keystone's website to confirm the unit is genuine. For general background, see what is a hardware wallet.