Security advisory (updated 3 November 2026): a firmware flaw in some Coldcard models, disclosed in July 2026, produced seeds with far less randomness than intended. Coinkite has released fixed firmware for every affected model, but updating does not repair a seed created on affected firmware. If you created a seed on a Coldcard, read who is affected and exactly what to do, or use the two-minute check. All current advisories: security advisories.
Keystone 3 Pro Wallet Review: Air-Gapped Bitcoin Signing with a Touchscreen
The Keystone 3 Pro is a hardware wallet that never talks to your computer by radio. You build a payment on your computer, show it to the Keystone as a QR code, check it on the device’s 4-inch screen, sign, and show the signed QR code back. It has no Bluetooth, WiFi or NFC, and its USB-C port charges the device and passes data only after you approve the connection on screen. Three secure element chips protect the seed and your fingerprint data, and a fingerprint reader gives you a quicker way to unlock and sign.
This guide shows how that works and what to decide before you buy: which firmware to install, how its Shamir backup behaves, and how it compares with the alternatives. It ships with multi-coin firmware, and Keystone also offers a Bitcoin-only firmware, which is the version we recommend if you hold only bitcoin.
Keystone (formerly Cobo Vault) was founded in 2018 and operates out of the Asia-Pacific region. The company has gone through a rebrand and multiple hardware generations, each one pushing toward better air-gapped UX for multi-chain users. If you are evaluating this device alongside Bitcoin-only alternatives, our hardware wallet buying guide provides a structured comparison framework.
Affiliate disclosure: the buy link in this review is an affiliate link to Keystone (we may earn a commission, paid in BTC). We recommend the device on its merits — the verdict below is the one we would write whether or not that program existed. We still point Bitcoin-only readers to a Bitcoin-only device first. For savings, whichever devices you use, we recommend a 2-of-3 multisig across three manufacturers, a passphrase and dice-generated seeds.
Product Specifications
| Feature | Specification |
|---|---|
| Price | $149 (pre-order, Nov 2026) |
| Manufacturer | Keystone (Asia-Pacific, founded 2018) |
| Firmware | Multi-coin by default; Bitcoin-only firmware available |
| Connectivity | QR codes for signing; microSD slot; USB-C for charging, and for data only after you approve the connection on screen (Air-Gap Mode makes it charge-only) |
| Secure Element | 3 secure element chips (Microchip and Maxim parts) |
| Screen | 4-inch LCD touchscreen, 480 × 800 |
| Battery | Built-in rechargeable Li-ion, 1,000 mAh / 3.7 Wh |
| Biometrics | Fingerprint sensor (up to 3 fingerprints, for unlocking or signing) |
| Open Source | Firmware open-source & reproducible (WalletScrutiny-verified); hardware schematics and BOM published. Some third-party MCU libraries remain vendor-controlled. SE silicon proprietary; its firmware not published. |
Design and Build Quality
The Keystone 3 Pro is big for a hardware wallet: Keystone’s spec sheet gives 62.4 × 103.9 × 12.1 mm and 103 g. The 4-inch touchscreen dominates the front of the device, giving it the footprint of a small smartphone rather than the key-fob size of most competitors. This is a deliberate design decision: Keystone prioritizes screen real estate for verifying transaction details, displaying QR codes at scannable sizes, and providing a touch-based UI that feels familiar to smartphone users.
The body is constructed with a combination of materials designed to feel premium at a mid-range price. The fingerprint sensor sits below the screen and integrates into the authentication flow. Build quality is solid — the device does not flex or creak, and the touchscreen is responsive with minimal lag.
The Keystone 3 Pro runs on a built-in rechargeable lithium-ion battery (1,000 mAh / 3.7 Wh) that you charge over USB-C. If the device will spend long stretches in a drawer, keep it topped up: Keystone’s support guide warns that leaving the battery flat for a long time can damage it, and recommends charging it regularly and to around 80% before storing it. Plugging in the cable charges the device. It only transfers data if you approve the connection on screen, and you can switch USB data off entirely in the settings.
The camera module on the back handles QR code scanning. It is the main input channel for transaction data, and its quality matters. In testing, the Keystone’s camera reads QR codes reliably in normal lighting conditions, though very small or low-contrast codes can require a couple of attempts.
Setup Process
Initial setup happens entirely on the device’s touchscreen. You power on, select your language and create a password. The device then generates a seed phrase, which you write down and verify by tapping the words in the correct order on screen. Fingerprints are added afterwards, in the settings.
The touchscreen makes this process significantly more intuitive than button-and-scroll interfaces found on smaller devices. Typing passwords, entering seed words, and navigating menus all benefit from the larger display. First-time hardware wallet users will find the setup experience familiar — it feels closer to setting up a new phone than configuring a security device.
The Keystone supports standard BIP39 seed phrases (12, 18, or 24 words) and also supports Shamir Secret Sharing through SLIP39, which we will cover in detail below. You can import an existing seed by typing it in on the touchscreen keyboard or set up the device with a new seed generated from its hardware random number generator.
Passphrases (the optional “25th word”) are supported for users who want to derive hidden wallets from the same seed. For a detailed explanation of how passphrases add security and what risks they introduce, our guide on wallet security passphrases and recovery best practices covers the topic thoroughly.
Security Features
The Keystone 3 Pro stacks multiple security mechanisms that are worth examining individually.
Triple Secure Element Architecture
The device contains three secure element chips; Keystone’s firmware documentation lists parts from Microchip and Maxim. This is unusual — most hardware wallets use a single secure element or none at all. Keystone says the seed phrases and the fingerprint data are stored separately, which makes them harder for an attacker to reach.
Anti-Tamper Mechanisms
The Keystone includes PCI-grade anti-tampering features. If the device detects physical intrusion — attempts to open the case, probe the circuit board, or tamper with the secure elements — it triggers a self-destruct mechanism that wipes all stored key material. The device performs a self-check at every boot to verify that no tampering has occurred since last use. This level of physical security is typically found in payment terminals and banking hardware, not consumer electronics. Our analysis of side-channel and physical attack risks provides broader context on why these protections matter.
Fingerprint Authentication
The integrated fingerprint sensor lets you unlock the device or sign transactions without typing your password. You can enroll up to three fingerprints and choose in the settings whether they unlock the device, sign transactions, or both. It is a shortcut, not a second factor: the password still unlocks the device and signs transactions on its own. Keystone says the fingerprint data is stored on the secure elements, separately from the seed phrase.
Air-Gapped Design
Like Foundation’s Passport Core (no longer sold), the Keystone has no Bluetooth, no WiFi, and no NFC (the Coldcard is similar, but offers optional NFC). With Sparrow and most other wallets, data goes in and out as QR codes, scanned by the built-in camera and shown on the touchscreen. The USB-C port charges the device and only transfers data after you approve the connection on screen: Keystone uses it for firmware updates, and with the multi-coin firmware some wallets can also sign over USB. A setting called Air-Gap Mode turns the port into a charge-only connection. With no radios and USB data switched off, the remote attack vectors associated with wireless protocols and USB data stacks are gone. Firmware updates load from a microSD card or, if you allow it, over USB.
For users managing both hot and cold wallets, our architecture guide on balancing cold storage and hot wallet risk management explains how an air-gapped signing device fits into a broader security strategy.
Shamir Secret Sharing (SLIP39)
One of the Keystone’s more advanced features is support for Shamir Secret Sharing through the SLIP39 standard. Instead of backing up a single seed phrase that represents a single point of failure, SLIP39 lets you split your seed into multiple shares with a configurable threshold. On the Keystone you choose Shamir when you create a wallet, so it is a new wallet with its own addresses: to protect coins you already hold under a 12- or 24-word phrase, create the Shamir wallet and send the coins to it.
For example, you could create a 3-of-5 Shamir backup: five separate share cards, any three of which are sufficient to reconstruct your seed. You distribute these shares to different physical locations — a home safe, a bank vault, a trusted family member, a secondary property, and a sealed envelope with your attorney. Losing any two shares does not compromise your funds, and no single share reveals anything about your keys.
This is a significant upgrade over standard BIP39 backups, where a single seed phrase must be stored in one piece, creating an all-or-nothing risk profile. Shamir backups add redundancy without sacrificing security. However, SLIP39 is not universally supported — you need a wallet or device that understands the format to reconstruct the seed. The Keystone handles both creation and reconstruction of Shamir shares natively.
For a broader discussion of seed phrase backup strategies and their risk profiles, our resource on seed phrase storage best practices and risk mitigation is a useful companion read.
Software Ecosystem
For Bitcoin, the Keystone works with the main wallet apps that support air-gapped signing:
Bitcoin Wallets
- Sparrow Wallet — Full integration via QR codes for air-gapped PSBT signing. This is the recommended pairing for Bitcoin-focused users.
- Electrum — Desktop wallet support through standard PSBT workflows.
- Blue Wallet — Mobile PSBT signing via QR codes for watch-only wallet setups.
- Nunchuk — Multisig coordination and collaborative custody with Keystone as a signing device.
- Specter Desktop — Bitcoin Core integration for node operators running multisig.
The multi-coin firmware also works with wallet apps for other networks. This site covers Bitcoin only, so we have not tested those, and we recommend the Bitcoin-only firmware if you hold only bitcoin.
Multi-Chain Support vs Bitcoin-Only Mode
Out of the box, the Keystone runs multi-coin firmware that supports many networks besides Bitcoin. Keystone markets that breadth as a selling point; for a Bitcoin holder, it is mostly code you do not need.
However, multi-chain support comes with inherent tradeoffs. Every additional blockchain integration means additional firmware code, additional signing logic, and additional potential attack surface. Bitcoin-only devices like the Coldcard (and the discontinued Passport Core) deliberately restrict their scope to minimize this risk — fewer code paths mean fewer potential vulnerabilities, though Coldcard’s July 2026 seed flaw showed that a small codebase does not rule out serious bugs.
Keystone addresses this partially with a Bitcoin-only firmware option. You can flash the device with firmware that strips out all non-Bitcoin functionality, reducing the codebase to a smaller, more auditable scope. If you hold only bitcoin, install the Bitcoin-only firmware when you set up the device, before you create your seed or move any funds. The evolution of how Bitcoin custody solutions have balanced feature scope with security is explored in our article on Bitcoin self-custody, security, redundancy, and usability.
Air-Gapped Workflow: How QR Code Signing Works
With Sparrow and most other companion wallets, every transaction follows a QR-code-based workflow. Here is the step-by-step process:
- Construct the transaction — On your companion wallet (Sparrow, for example), you create a transaction specifying the recipient, amount, and fee. The wallet generates an unsigned transaction.
- Display the unsigned transaction — The companion wallet displays the unsigned transaction as a QR code (or animated sequence of QR codes for larger transactions) on your computer or phone screen.
- Scan with Keystone — Using the built-in camera, the Keystone scans the QR code and decodes the unsigned transaction data.
- Review on trusted screen — The 4-inch touchscreen displays the full transaction details: recipient address, amount, fee, and network. You verify that everything matches your intent.
- Authenticate and sign — You authenticate with your fingerprint or password. The Keystone signs the transaction using the private keys stored in the secure elements.
- Display the signed transaction — The Keystone displays the signed transaction as a QR code on its screen.
- Scan with companion wallet — Your companion wallet scans the signed QR code and broadcasts the transaction to the network.
At no point does any private key material leave the Keystone. The QR codes contain only transaction data and signatures — never seeds or private keys. The 4-inch screen is a genuine advantage here: QR codes are large, clear, and scan quickly. Smaller devices with sub-2-inch screens often need animated QR sequences that take longer to transfer.
Pros and Cons
Pros
- Signs over QR codes with no Bluetooth or WiFi; USB data only flows after on-screen approval and can be switched off
- 4-inch touchscreen makes transaction verification and QR scanning fast and clear
- Three secure element chips, with seed and fingerprint data stored separately
- Fingerprint unlocking and signing as a quicker alternative to typing the password
- Dedicated Bitcoin-only firmware available
- SLIP39 Shamir Secret Sharing for distributed seed backups
- PCI-grade anti-tamper with self-destruct capability
- Open-source, reproducible firmware (WalletScrutiny-verified) plus published hardware schematics and BOM
- Competitive pricing at $149
Cons
- Larger form factor is less portable than compact devices like the Jade or Ledger
- Multi-chain firmware increases code complexity and theoretical attack surface
- The secure-element chips themselves are proprietary commercial silicon (Microchip/Maxim), as on every secure-element wallet, and their firmware is not published (some third-party MCU libraries are vendor-controlled too), though the main firmware, hardware schematics and BOM are published and the build is reproducible
- Touchscreen interface may be less durable long-term than physical buttons
- Fingerprint sensor adds convenience but also adds a potential failure point
- Manufacturer based in Asia-Pacific — some users prefer US or European supply chains for trust reasons
- Built-in lithium battery: Keystone recommends charging it regularly, and to about 80% before long storage
- Fewer years of public security track record compared to Trezor; Coldcard’s July 2026 disclosure is a reminder that track record alone guarantees nothing
Who Should Buy the Keystone 3 Pro
The Keystone 3 Pro suits Bitcoin users who want air-gapped QR signing with a large, readable screen. Checking a full address or a multisig transaction on a 4-inch display is easier than on the small screens of most signing devices, and the QR workflow means the device never needs a cable to your computer.
It also works well as one key in a multisig with devices from other makers, where its large screen helps you review each transaction.
The Keystone also appeals to users who want SLIP39 Shamir backups. If you want to distribute your seed backup across multiple locations with a threshold recovery scheme, this is one of the few devices that handles it natively.
If you want a device built only for Bitcoin from the start, look at a Coldcard Mk5 or Q, which runs a tighter codebase built specifically around Bitcoin; our earlier alternative, the Passport Core, is discontinued, and Foundation now sells the Passport Prime, which we have not reviewed. Track record alone is not enough, as Coldcard’s July 2026 seed flaw showed: for savings, spread your keys across devices from three different manufacturers. The Keystone’s Bitcoin-only firmware mode is a reasonable compromise, but the hardware itself is designed for multi-chain use, and that philosophy permeates the device. For institutional-scale Bitcoin custody considerations, our article on institutional custody and core Bitcoin principles discusses the relevant tradeoffs.
Comparison with Alternatives
Keystone 3 Pro vs Ledger Flex
The Ledger Flex is Keystone’s closest competitor in the large-touchscreen category. Both have touchscreens large enough for comfortable interaction (E Ink on the Ledger, LCD on the Keystone), and both support thousands of assets. The key difference is connectivity: the Ledger Flex uses Bluetooth and USB for data transfer, while the Keystone has no Bluetooth and signs over QR codes, with USB data only when you approve it on screen. Ledger’s firmware is not open source (though they have moved toward opening parts of it), while Keystone’s firmware is open source. Ledger has a longer track record and broader brand recognition. The Keystone wins on air-gapped security and firmware transparency; the Ledger wins on ecosystem maturity and integration breadth.
Keystone 3 Pro vs Foundation Passport
These devices serve different audiences despite sharing the air-gapped philosophy. The Passport Core was Bitcoin-only with fully open-source hardware and firmware, aluminum construction, and a physical keypad. It is now discontinued: Foundation sells the Passport Prime instead, which we have not reviewed. The Keystone runs multi-coin or Bitcoin-only firmware, uses a touchscreen and includes fingerprint authentication. If you hold only bitcoin and want air-gapped QR signing, the Keystone with its Bitcoin-only firmware is the one of the two you can still buy. Our lesson Ledger vs Trezor and Beyond lists the other devices with Bitcoin-only firmware.
Keystone 3 Pro vs Coldcard Mk5
The Coldcard is a Bitcoin-only device with a small screen, a numeric keypad, and a deeply paranoid security model. It does not support any other cryptocurrency, does not have a touchscreen, and does not have a fingerprint reader. What it does have is years of public security work and a deep set of Bitcoin-only security features. Its July 2026 seed flaw, now fixed in firmware, is a reminder that no reputation replaces spreading your keys across manufacturers. Coinkite no longer sells the MK4; its current models are the Mk5 ($269, $219 on sale) and the Q ($369, $319 on sale), as of November 2026. The Keystone, at $149, offers a much larger touchscreen, QR signing and three secure chips; the Coldcard offers a Bitcoin-only codebase from the start, microSD signing and anti-coercion features such as a duress PIN. Either can serve as one key in a multisig with other makers.
Verdict
The Keystone 3 Pro occupies a rare position in the hardware wallet market. It is one of the few devices that combine genuine air-gapped signing (no Bluetooth, no WiFi, and USB data only when you approve it, or never if you switch it off) with a large, usable touchscreen at a mid-range price. The triple secure element architecture, fingerprint authentication, and anti-tamper mechanisms are features typically reserved for higher price points or enterprise-grade equipment.
The tradeoffs are real: multi-chain firmware is inherently more complex and harder to audit than Bitcoin-only code, the secure-element silicon is proprietary commercial hardware (as on every SE-based wallet), and the manufacturer does not have the longer track record of companies like SatoshiLabs (Trezor) or the community credibility of Blockstream (Jade). But Keystone has been shipping hardware wallets since 2018, publishes its firmware with reproducible builds, and has kept to an air-gapped design.
For Bitcoin users who want air-gapped QR signing on a large screen, especially as one key in a multisig with other makers, the Keystone 3 Pro with its Bitcoin-only firmware is one of the strongest options. Pair it with Sparrow and your keys stay permanently offline.
Rating: 8/10
If the Keystone 3 Pro fits your use case — air-gapped Bitcoin signing on a large screen, or one key in a multisig alongside other vendors — it is available directly from Keystone[#aff]. Keystone lists the 3 Pro on pre-order (expected to ship in 4–6 weeks, as of 3 Nov 2026).
Frequently Asked Questions
Can the Keystone 3 Pro be used in a Bitcoin multisig setup?
Yes. The Keystone supports standard PSBT (BIP174) workflows and exports xpubs via QR code. You can use it as one signing device in a multisig quorum managed by Sparrow, Specter, Nunchuk, or other coordinator software. It works alongside devices from other manufacturers. For savings, we recommend a 2-of-3 multisig with devices from three different manufacturers, a passphrase, and seeds generated with 99+ dice rolls (Keystone’s own guide recommends 99 rolls if you create the seed with dice). The 4-inch screen makes reviewing multisig transaction details comfortable, and the QR-based workflow integrates smoothly with air-gapped PSBT coordinators. For guidance on setting up and managing multisig configurations, our guide on multi-signature wallet configurations and practical implementation covers the process in detail.
How does the self-destruct anti-tamper feature work, and can it be triggered accidentally?
The anti-tamper mechanism monitors for physical intrusion attempts — opening the device case, probing the circuit board, or tampering with the secure element chips. If triggered, the device wipes all stored key material from the secure elements, rendering the device empty. Normal use — drops, bumps, temperature changes, airport X-ray machines — will not trigger the mechanism. It requires the kind of deliberate physical probing associated with extraction attacks. Your funds are not at risk from the self-destruct because your seed phrase backup (written on paper or metal) remains valid and can be restored on any BIP39-compatible wallet (or, for a Shamir backup, on a wallet that reads SLIP39). If you added a passphrase, you will need it as well; in a multisig, the seed restores only that one key, and you also need the wallet descriptor. The anti-tamper feature protects against someone stealing your device and extracting keys, not against everyday wear and tear.
Is the Bitcoin-only firmware meaningfully more secure than the multi-chain firmware?
In principle, yes. The Bitcoin-only firmware strips out all non-Bitcoin signing logic, address derivation paths, and chain-specific code. This reduces the overall codebase, which reduces the potential attack surface — fewer lines of code mean fewer potential bugs or vulnerabilities. It also simplifies auditing, since reviewers only need to verify Bitcoin-related functionality. If you hold only bitcoin, install the Bitcoin-only firmware when you set up the device: it does everything a Bitcoin user needs with less code.
How does SLIP39 Shamir backup compare to a standard BIP39 seed phrase for security?
A standard BIP39 seed phrase is a single secret: whoever possesses it controls your funds. This creates a fundamental tension between security (hiding it well) and accessibility (being able to find it when needed). SLIP39 resolves this by splitting the seed into multiple shares with a threshold — for example, 3-of-5 means you need any three of five shares to reconstruct the seed. No individual share reveals anything about your keys. This allows you to distribute shares across multiple locations and trusted parties, surviving the loss or theft of up to two shares while maintaining security. The downside is complexity: you have more pieces to manage, more locations to maintain, and you need a SLIP39-compatible device or software to reconstruct the seed. BIP39 is simpler and more universally supported. SLIP39 is more resilient but requires more planning. For high-value holdings, the added resilience of Shamir backup is often worth the extra setup effort. Our comprehensive guide on seed phrase security discusses both approaches and helps you decide which fits your situation.
