What Is Keystone Wallet? The Air-Gapped Hardware Wallet Explained

Keystone says it has built self-custody hardware since 2018 ². The products launched as Cobo Vault, and the brand was renamed Keystone in June 2021. Lixin Liu is CEO ⁷. CTO Aaron Chen contributed to BIP-129, a Bitcoin standard for setting up multisig wallets ².

The Terms of Use name Yanssie HK Limited as the operator of the Keystone brand. The terms are governed by Hong Kong law ³. The company's address is in Kowloon, Hong Kong ¹.

1. Pair once. The Keystone shows a QR code containing your public account data. Your software wallet scans it so it can display balances and build transactions. No private key leaves the device ¹.
2. Build a transaction in the software wallet, which shows it as a QR code.
3. Scan and check. The Keystone scans that QR code and shows the details on its 4-inch screen. You approve with your fingerprint or password.
4. Return the signature. The Keystone displays the signed transaction as a QR code. The software wallet scans it and broadcasts it ¹.

Because the device has no data connection, malware on your computer cannot talk to it directly. You still need to read the address and amount on the Keystone screen before approving. Keystone calls this "clear signing" ². Background: what is a hardware wallet and hot vs cold wallets.

Keystone works through other wallets rather than one mandatory app. It lists MetaMask as an official partner, alongside OKX Wallet, Rabby, Keplr, Solflare, Tonkeeper, BlueWallet, Eternl, Backpack and Safe ¹. The home page gives both "45+" and "100+" as the number of integrated wallets ¹. Keystone also offers its own Nexus app for sending, receiving and swapping ¹.

There are two firmware versions ¹⁷:

• Multi-coin firmware: Keystone claims 5,500+ assets, including BTC, ETH, SOL, XRP, ADA, TON and ZEC. Token support varies by chain ¹.
• Bitcoin-only firmware: a reduced build for Bitcoin users. It supports PSBT multisig and testnet, and works with Sparrow, BlueWallet and Nunchuk ¹⁷.

You create the wallet on the device and write down its recovery phrase. Keystone also supports Shamir backup, which splits the backup into several shares, and an optional passphrase, an extra word that creates a separate hidden wallet ⁷. The Keystone Tablet products are stainless-steel plates for storing the phrase ¹.

Keystone never needs your recovery phrase. Download firmware and apps only from keyst.one, because search ads and look-alike domains are a common phishing route (crypto phishing). Setup steps: how to set up a hardware wallet.

The Keystone 3 Pro sold for $149 on Keystone's shop on October 23, 2026, against a listed compare-at price of $183.90 ⁴. A bundle of accessories sells for $254.80 ¹. Keystone ships worldwide and points buyers in unlisted regions to official resellers ⁶.

Devices bought from January 1, 2025 carry a 1-year limited warranty from delivery. Earlier purchases had 2 years ³. Optional Keystone Care+ extends cover to 2 years for $50 or 3 years for $100. The warranty excludes physical damage, misuse and modified firmware, and it cannot be transferred ³. There is no subscription.

Keystone's design rests on four elements ¹²⁷:

• the air gap;
• three secure-element chips;
• a fingerprint sensor;
• tamper resistance it describes as "PCI-grade."

Its firmware was rewritten in Rust and published in full on GitHub ⁷. Keystone runs a bug bounty for its hardware and firmware with coordinated disclosure (updated July 13, 2026) ⁵.

Keystone's About page says it has had "0 Security Incidents" ². That is the company's own figure, and no independent disclosure was found to contradict it ⁸. The air gap does not protect you from:

• a leaked recovery phrase;
• approving a malicious contract approval you did not read;
• a counterfeit device bought from an unofficial seller.

For other approaches, see SafePal, which also signs by QR code, and Ledger and Trezor, which use cable or Bluetooth connections. For a scored comparison, see the hardware wallet ratings.