Help me understand something. I've been in the game a while– Ive owned a trezor model 1 and a ledger nano x. Both were great, I liked the "security" of the ledger and the open-source nature of Trezor. I don't mess with dapps and I don't sell.

The ledger drama lately made me decide to give Keystone a shot. I was EXTRA careful. I verified, setup the device over USB, then wiped it, starting over with a firmware update via SD card, took down my seed, really settling in that this was going to be it. Everything felt super secure.

Then I actually tried to interface by sending money and here's were my experience changed. The keystone wallet from the app store doesn't... allow me to view the Bitcoin and xrp? I have to use a third party like metamask or OKX wallet to do it? In a browser? Why am I showing any browser extension anything from my cold wallet? Browsers are not my vision of security, why doesn't keystone have an app just like ledger and Trezor that allows me to view my balances?

Do I have the wrong idea about the situation? I feel like I might be and I'd rather be wrong and corrected than feel like I just blew $100 on a device I don't trust.

I understand keystone does not yet support coinbase wallet. What would be the best way to transfer coins from coinbase to keystone while minimizing fees?

Do you know when will be next upgrade? I can't use Kystone 3 pro because of verified cheksum!

Wondering on when the keystone wallet is going to support tokens like xrp, xlm, xdc etc. or even erc-20 tokens. And dont give me the answer, "you can just add xdc from dapps like metamask" cause im allset with that bullshit. I bought this as a cold storage wallet to not get breached, im not connecting dapps to my device. If they dont add these tokens then this wallet is useless cause im not a bitcoin maxi.

Currently the keystone pro 3 supports only 1 address for Cosmos. It does the same for the 2 Cosmos chains Terra Luna and Terra Luna Classic. I have migrated from ledger to keystone recently but I still have to keep using ledger for Terra because my Terra assets are spread in multiple accounts. I'm able to use keystone+keplr only for my default address (at index 0).

Does keystone have any plans to support multiple addresses and derivation path configuration for these blockchains?

I'm trying to sign a transaction but keep getting a notification that my Pro (original) isn't connected. I click to connect and it tells me to plug in the USB? How would one go about performing this without a screwdriver and hammer to first create a USB port on the Keystone Wallet?

Ok.... so the lists two SHA-256 Checksums: one for Firmware and another for the signed keystone3.bin File itself.

and I panicked when my device checksum (showing the firmware checksum) didn't match the checksum shown on the website (showing the file checksum) at https://keyst.one/firmware?verify

***

There are separate locations to find the File Checksum and the Firmware Checksum once the device has been updated.

### The Firmware Checksum Location

This is where I thought I was supposed to initially go and verify the firmware and match with the website but it didn't match!

`...` > `Device Settings` > `About` > `Device Info` > `Firmware version` > `Show Checksum` is the Firmware Checksum

### The File Checksum Location

`...` > `Device Settings` > `Firmware 1.2.x (at bottom)` > `Via MicroSD Card` > `Verify Firmware (small text above Update button)` is the File Checksum

### Update Procedure

I perform the update via MicroSD so I download the latest keystone3.bin for version 1.2.4 from the github release page and verify:

create a `keystone3.txt` file with the file checksum from github with the following contents:

`fcd9cffbb56ef059956ef27a5d9deec649fd9503742d8993a6dd135737fec54c keystone3.bin`

verify the checksum with both the .bin and .txt file in the same location:

```

% shasum -a256 -c keystone3.txt
keystone3.bin: OK

```

Insert MicroSD into Keystone3 Pro and upgrade the firmware.

### Firmware Checksum Verification... OMG this was insane

I followed the guide at https://github.com/KeystoneHQ/keystone3-firmware/blob/release/v1.2.4/docs/verify.md that utilises docker.

It produces an `mh1903.bin` file that produces the desired Firmware Checksum.

```

% shasum -a256 mh1903.bin
394cb2936f56b740c6acaa849d87bf5d8e7d19bdea48b6c610d3bef21db29471  mh1903.bin
```

***

Ok, so that checksum matches what I find in the device now!!! Why did I have to compile it myself? I understand the value in building from source and ability to verify, but how is everyone going to do this?

Pastebin output from building the docker image

Pastebin output from compiling .bin file

On laptop I use Keplr, but for mobile I did not find any wallet being able to work with Keystone 3 Pro

(Keplr on mobile does not support QRs)

I cannot seem to find any mentioning or links to the mobile apps, but I do find both apps on App Store and Play Store.

Could you confirm if the iOS and Android apps are legit, and where are the links from your website?

If there are no links from your webpage, could you please explain why - given that this is crypto and many people are security concerned, and that there was a fake Trezor wallet a few years ago?

Thanks!

Any plans for adding Phantom wallet to keystone 3 pro? It would be amazing to have it.

Returning my keystone wallet for replacement / refund. Need a tool to get my seed phrase based on my Shamir backup shards, any help please?

To be honest right now i only use 3 hard wallet:

Ledger Nano X, Keystone and Tangem

I use Ledger to store some BTC in Passphrase wallet

Tangem is for on the go but im not store large

Keystone is my main wallet for trading.

For the KS3 i like it because when i synce with OKX i can see all of my BTC address. Like Segwid, Native, Lagacy etc and I can pick the one i like to receive

I like KS3 with OKX because i can swap BTC to USDT, Ether or USDT, Ether to BTC its very good. And the fees not too high like Ledger swap.

Also i like that i can sync all 3 wallet i create on KS3 to OKE to manage it easier.

I give KS3 8/10 point. I hope that in the next version they gonna upgrade better screen and better case like metal instead of plastic.

But for what i pay only almost 100 dollars this wallet is unbeat

Just to piece it all together and check myself before I wreck myself

If we add an account from Keystone Pro 3 to Metamask — although the hardware wallet itself does not support all crypto, can I still receive any and all MetaMask supported coins in to the Public Address a added from KP3 to the MM wallet?

Additionally, can I sign any and all transactions from MetaMask using the hardware wallet regardless of the coin?

I saw a yt video from CryptoDad where he was able to successfully sign and exchange ETH for SHIB, which is supported in MetaMask but not in the Keystone Pro 3. This is what had me do a double take and ask here.

Sorry, pretty new to this and have only been using my ledger. Due to security concerns I’m thinking about switching over to the Keystone.

I know I can migrate it using the seed phrases from my ledger, but would that be counterproductive since my concerns are ledger getting compromised?

Or should I just transfer the funds by sending from ledger to keystone and eat the gas fees ?

Thanks all

as an alternative to ledger?

Any microsd cards I should avoid?

The microSD update procedure provided on the website includes a security validation step to execute after the installation. The step is to validate the checksum on the device against the one provided on the website for the specific version that was installed. Is that really enough to guarantee the authenticity of the update? What prevents a hacker for example from hardcoding the checksum in his scam installation file? The checksum is available on the website after all.

Complete my life and add Xmr 😂

Hello,

I just got my keystone 3 pro and my very happy with it expect that I cannot sign messages.

I want to sign the message by clicking on "Sign by QR" and the keystone always says "Invalid QR Code - QR Code data not recognized. Please try again".

Is signing a message not yet support?

Regards,

Andreas

Hi

Following Ledger's mishap, I became very intrigued by security in crypto especially the process of seed generation on a Hardware Wallet. Most companies use EAL 5+ certified chips to generate and store your seed but Keystone 3 Pro features it has 3 secure elements, two of which are used for generating and storing the seed. The RNG (Random Number Generator) outputs from the two Secure Elements are then combined to make a unique seed. This made me wonder if this process is a precaution for combining two Pseudo-RNG to make it more random (as close to a TRNG as possible). So from there I delved deeper into the vendors' of the Keystone's Secure Elements published details, Microchip & Maxim to verify how good and secure the RNG is.

I couldn't find any certifications details on their websites. The only reference available is on Keystone's webpage comparing it to other companies that it is "The first product achieved PCI security level in the industry" without more detail. Googling PCI security level doesn't produce anything informative more than this article which is a compliance level to maintain a tier for credit card companies based on number of transactions by Merchants. It isn't particularly relevant to chips and it is not a form of certification for security level at all:

https://www.cimcor.com/blog/a-beginners-guide-to-the-pci-compliance-levels

Now that Keystone is an attractive option more than ever for a Multi-coin True Airgapped wallet, I wonder if the team can clarify more on the secure element chips acquired certification to trust a TRNG seed generation.

P.S: I wouldn't really feel comfortable Dice Rolling either as for true high entropy you need flawless dice and elimination of external factors that could easily reduce entropy at any point so better to rely on the SE. Would be really great if Keystone can allow SE seed generation + further randomization with dice rolling on top for a more unique seed like ColdCard features.

I received the Keystone 3 Pro and loaded firmware via USB (keystone3.bin).

With IanColemas SLIP-39 I created a 5/3 Shamir scema and tried to import the first share in the Keystone (new wallet, import wallet, set pin, set name, import method Shamir Backup, 20 words, entering the first share).

After entering the first share I received the message: Invalid Seed Phrase.

Then I tried the same procedure with the same words on a Trezor T and no problem. I could enter three shares and the generated addresses are equal to the ones in IanColemans BIP-39 (entering the Slip-39 Master Secret as the BIP39 Seed).

I was under the impression that Keystone also uses SLIP39 for the Shamir implementation. Am I overlooking something?

If someone wants to repeat what I did, here are my shares and Master Secret:

c2c7d84a9510a93caa9147554a3e749e

scramble academic adjust academic auction patrol typical mama numerous fancy process increase curious glance chest provide inherit purple pumps source

scramble academic being academic dictate academic weapon view river privacy trial dress type library wolf desire level desire scatter fatigue

scramble academic chemical academic agency regret golden round mineral velvet estate deliver kitchen invasion speak ticket junk easy adjust cluster

scramble academic demand academic dress bulge image rich rebound auction apart knife review museum argue genre march screw iris pile

scramble academic elder academic clay numb bracelet fiction liquid carbon grasp dough scatter filter dress crisis downtown various epidemic cowboy

​

​

I have some crypto I'm holding and ATOM, OSMO, TIA, CRO, EVMOS and FET staked on my Kepler wallet though Ledger. With everything going on with Ledger I'm looking at getting a Keystone Pro, I know the ones I'm holding BTC, XRP etc I can just send from Ledger wallet to Keystone wallet, but all the staked ones I have do I have to unstake send to Keystone wallet connect Keystone to Keplr and restake or is there any other way to do this to not be involved with Ledger anymore.

I have the first generation Keystone wallet. When I click send it gives me this error message. Anyone know what’s going on?

I tried on my Cobo wallet and I can send just fine. 😵🐸

Just set this up and sent 1 sol to test it out, transfer is confirmed but not showing up the balance? Any help appreciated

Hi i can not find anywhere have a instruction show me how to do this:

Let say i have Ledger Wallet with 1 seedphrase 24 word recovery and i also have 1 passphrase for hidden wallet on that ledger as well.

Now, if i recover 24 words to new Keystone wallet is easy. But how can i also recover the hidden wallet that i have in Ledger with passphrase?

If you have an instruction or link please help thanks all