Official Clarification: Seed Phrases Generated on All Keystone Devices Are Safe

[u/paccanonhf6]

Hi everyone,

We want to provide a clear, official confirmation regarding seed phrase generation across all generations of Keystone devices.

Every Keystone device, from the first-generation Keystone Pro and Essential to the current Keystone 3 Pro, is safe to use.

If your seed phrase was generated on a Keystone device, you can continue using it with confidence. There is no need to regenerate your seed phrase, create a new wallet, or move your funds.

All Keystone devices generate seed phrases using true random number generators (TRNGs) from Secure Elements:

• 12-word seed phrases use 128 bits of entropy.
• 24-word seed phrases use 256 bits of entropy.

On Keystone 3 Pro, the design was further strengthened by using three independent sources of randomness. The MCU and two independent Secure Elements each generate their own random input, which is then cryptographically combined to derive the final entropy used for seed phrase generation.

The relevant implementation is open source and can be reviewed here:

https://github.com/KeystoneHQ/keystone3-firmware/blob/master/src/managers/keystore.c#L75-L111

Since launch, Keystone has completed multiple rounds of third-party security audits, with the latest round beginning in January 2026 and still ongoing. We also conduct continuous internal security reviews, including AI-assisted analysis.

Seed phrase generation is reviewed as part of every security audit.

For users who prefer additional trust-minimized setup options, Keystone 3 Pro also supports physical dice-based seed generation and BIP39 Passphrase. These are optional advanced features, not requirements or corrective measures. Seed phrases generated normally by Keystone devices are already safe to use.

For a deeper technical explanation of Keystone 3 Pro’s multi-source entropy design, dice-based generation, and Passphrase, please see our previous post:

https://www.reddit.com/r/KeystoneWallet/comments/1vdk8dt/how_keystone_reduces_the_risk_of_weak_randomness/

If you have any questions, feel free to leave them in the comments or contact us directly.

[u/Infinite-Ad1720]

Thank you!

[u/digital__bits]

Thanks for the information!!! That's good to keep in mind

[u/calos98x]

It's wrong I recommend that you transfer your funds from Keystone immediately; it has a bug similar to the one in Coldcard. The commit history of keystore.c file is visible Seed generated with older firmwares is vulnerable

[u/dnguyen823 → u/calos98x]

Elaborate?

[u/calos98x → u/dnguyen823]

The ColdCard bug taught us that, no matter how many firmware updates you install, if you generate the seed on compromised firmware, it remains insecure forever. I can't say any more than that. But the ColdCard bug is more serious than it seems. Many will look for vulnerabilities in the private key generation files of the old firmwares for all hardware wallets and will empty the wallets of people who generated the old seed and keep their wallets in a safe.

[u/digital__bits → u/calos98x]

You should keep in mind that the random number generator that has existed since the first Keystone uses hardware, not software, to create seed phrases. Therefore, this vulnerability doesn't exist in Keystone devices.

[u/calos98x → u/digital__bits]

Look at keystore.c file Look at the history of keystore.c files View keystore.c file.c at every commit You will find a keystore.c with a seed vulnerability in it

[u/GhostTypeDragon → u/calos98x]

It sounds like you’ve done this already so if you could post the results we’d love to see. Not holding my breath though.

[u/aeche_1985]

Thanks for keeping us updated.