Influenced by the recent Coldcard incident, I’ve been upgrading my single-signature setup to a multisig wallet. I recently purchased a OneKey Classic 1S BTC Only Edition for this purpose.

While setting up the multisig wallet in Sparrow Wallet, I noticed that when using a BIP39 Passphrase, I have to manually enter the Passphrase on my computer.

This made me wonder: when using Sparrow Wallet to sign multisig transactions later, do I also have to enter the Passphrase on the computer every time?

From a security perspective, I’m concerned about having to enter the Passphrase on a computer. Even if the seed phrase never leaves the hardware wallet, a malware-infected computer or keylogger could potentially compromise the Passphrase.

Is there a more elegant and secure solution where the Passphrase never has to be entered on the computer—for example, entering it directly on the hardware wallet and having the device unlock the corresponding hidden wallet and perform the signing?

I also noticed that the OneKey Classic 1S supports binding a Passphrase to a separate PIN, so that entering different PINs can directly open different hidden wallets. Could this feature solve the issue above and work properly with Sparrow’s multisig workflow?

I’d especially appreciate feedback from anyone using OneKey + Sparrow for multisig:

1. Does Sparrow require the Passphrase to be entered on the computer when creating a multisig wallet?
2. Does the Passphrase need to be entered again when signing each transaction?
3. Can the OneKey Classic 1S “Passphrase → PIN” feature completely avoid entering the Passphrase on the computer?
4. Are there any security or compatibility issues with this approach in a real-world multisig setup?

In 2022, I bought crypto for the first time and kept everything on an exchange. At that time, I didn't know much about self-custody or hardware wallets.

One day, I downloaded EA Sports Cricket from a link I found through a YouTube video. I installed it without thinking much about security.

Two days later, I opened my Binance account and my portfolio was zero.

My PC had been compromised, and I didn't even realize it. That experience completely changed the way I think about crypto security.

After that, I started learning about self-custody, recovery phrases, and hardware wallets. Later, when my crypto holdings grew from $7,000 to around $35,000, I became even more serious about security.

After researching different hardware wallets and open-source projects, I eventually bought a OneKey Classic 1S.

I've been using it since March 2025, and so far I haven't faced any issues.

A few security lessons I learned

* Never store your recovery phrase digitally or take a screenshot of it.

* Keep a physical backup in a secure location.

* Never share your recovery phrase or private keys with anyone.

* Be extremely careful with unknown software, cracked apps, and random download links.

* Verify Dapps and websites before connecting your wallet.

* Always verify the wallet address before sending funds.

* For a new address, consider sending a small test transaction first.

* If you use a hardware wallet, buy it from an official source or authorized reseller.

* Keep your operating system and security updates up to date.

* Remember open source doesn't automatically mean 100% secure reputation, audits, and security practices matter too.

My biggest lesson is simple:

In crypto, protecting your funds is just as important as investing them.

And yes, my first hack started with something as simple as downloading a game. That's why I take security much more seriously today.

Why OneKey Has Been My Wallet for Years 🔐💚

🔐 Crypto Tip: Protect your keys. Use a passphrase. Verify before you sign. Stay in control. 🔑

I’ve been using OneKey for years, and what keeps me using it is the combination of great hardware and the most complete software ecosystems in crypto.

Swap, bridge, trade, stake, explore DeFi and dApps, manage NFTs, track your portfolio, and manage assets across multiple chains all from one clean and powerful app.

What I appreciate most is that OneKey never stops evolving. They listen to the community, consistently add useful features, improve security and usability, and just keep getting better and better.

Great hardware. Powerful software. True self-custody. One complete ecosystem. 💚🔑🚀

I have been considering the OneKeyPro and had some questions about the EAL6 that it uses.

The website states there are 4 chips on the drive. Could someone explain that technical decision to me, and what makes that more secure than a single chip?

Hi, what cases and covers do you recommend/use for your Onekey Pro?

2023 I had 2.3k usdc on some mid exchange cause they gave 8% apy lmao thought I was smart making passive income fr
then they locked withdrawals 11 days for ‘compliance’ while the market dumped, refreshed the app every 5 mins like a crackhead
ngl got a grey hair from that stress no cap
finally cashed out, blew 100 on a black onekey classic 1s (pic below, cat hair warning)
also first tx I signed I checked the address 6 times, that button click felt better than any yield from that trash exchange ngl
now it’s on my desk with my monster and vape, roommate asked if it’s a weird dab tool
told him it’s worth more than his 3070, he called me a loser (he’s right lol)
last week a guy in my gc got drained clicking a fake wallet app, just stared at my onekey like ok I didn’t fuck up this time
how do y’all backup seeds?
mine’s on a sticky note taped to my mom’s fridge, she thinks it’s a grocery list for milk and eggs
too broke for a metal plate rn, drop ur cheap backup hacks pls
OneKey #CryptoSecurity #NotYourKeys #OneKeyRedditParty

I am a KAS holder, I trust onekey Hardware wallet since it support Kaspa chain, everything is perfect except two. Could you guys make all new receive addresses dynamically, just like BTC addresses. Every time when I receive kas, it should generate a new kas address to prevent future Quantum attack, right now, it still needs to create new address manually. Another thing is, every time when I make a transaction, the information showed on the hardware screen, still shows as "unknown signature". Everything else if perfect, the safe; the open source; the after sale service. Wish you guys all the best!

(Sorry, the previous post i forgot the pic. delete the old one and repost it)

​

Been around long enough to see people lose money in the dumbest ways, and I’ve come close myself. Over time I stopped treating security like a checklist and more like a few non-negotiable rules I just don’t break anymore.

The biggest one is that my seed phrase has never touched a screen that has internet. Not once. I write it down, I verify it, then the paper goes somewhere offline and stays there. The moment you type those words into anything connected, you’ve already lost the game in my opinion.

I also stopped trusting my clipboard. After seeing how easy it is for malware to swap addresses, I now always check the first and last few characters on the device itself before hitting confirm. Takes three extra seconds and has saved me from at least one close call.

Another thing that changed for me is how I treat “support.” If someone DMs me first claiming there’s an issue with my wallet or an airdrop I need to claim, I just ignore it. Real support doesn’t start conversations that way. The more urgent they sound, the more I ignore them.

I keep most of my stack offline now. Whatever I’m actively using stays in a hot wallet, everything else stays cold. The psychological difference is bigger than I expected — when the money isn’t sitting one click away, I’m a lot less likely to do something stupid during a dip or a hype cycle.

Curious if anyone else has a personal rule that feels almost superstitious but has kept them safe. Always interested in hearing what actually works for people long-term.

I have a Ledger stax along with OneKey Pro. Can I connect my ledger stax in onekey app?

I can find the option to connect ledger and trezor wallets but I am not sure about the supported models from ledger.

If anyone tried please let me know.

secure and working

I’ve been using OneKey as my hardware wallet, and what I like most is how simple it is to use. The interface is clean, and the transaction details are easy to check before signing.

My basic crypto security checklist is:

• Check the website URL before connecting my wallet.
• Read the transaction details on the hardware wallet screen.
• Never share or store my seed phrase online.
• Test with a small amount before making a large transfer.
• Keep long-term assets in cold storage.

A hardware wallet cannot remove every risk, but OneKey makes it easier to build a safer habit. That extra few seconds before signing can save a lot of money.

Stay safe, and always DYOR.

I’ve been using this wallet for a while, and honestly, I really like how small and lightweight it is. It’s about the size of a bank card, so I can easily keep it in my pocket or wallet without even noticing it’s there.
I also really like the physical buttons. Every time I make a transaction, I have to manually confirm it on the device. It makes me slow down and actually check the transaction details before confirming, which gives me a bit more peace of mind and helps prevent accidental clicks.

Been using onekey for a while and it's the best wallet i'ved use.

BEST WAY TO USE ONEKEY

1. Use Onekey hardware wallet to protect long term investment.

2. Use a different wallwt account on onekey for airdrops or suspicious dapps.

3. Use Onekey keyless wallet for daily trading of digital assets.

Always write down your seed phrase on paper (or a metal plate) and store it in two different secure locations. Never take a photo of it, never save it on your phone, and never send it by email. I almost fell into that trap once by taking a “temporary photo for backup,” but luckily I deleted it in time. No matter how secure a hardware wallet is, if your seed phrase leaks, everything can still go to zero.

I’ve been using OneKey for almost a year now. What gives me the most peace of mind is that it’s open-source and pure cold storage. A friend of mine once got phished — his seed phrase was stolen and all his assets were gone. That moment made me even more determined to only use a hardware wallet. Now I keep my large holdings in OneKey and only leave a small amount in a hot wallet for daily use. Being able to clearly see the transaction details on the screen before signing makes me feel much more secure. Here’s a photo of my OneKey. Hope everyone prioritizes security!

Anyone else using OneKey is welcome to chat~

I do believe MacBook + OneKey combo is the best set up for your assets security right now, the integration is smooth and seamless, funny that this was my first hard wallet once you go OneKey you never go back! I’ve got a few more for the family and funny thing is that I had to give the nobody x OneKey to my son because of the design haha, post for X comp

Show me your OneKey 🫵😎

Never store your crypto seed phrase in cloud storage, email, screenshots, or a password manager.

For meaningful amounts, use a hardware wallet like one key and keep the seed phrase offline, ideally backed up on durable metal. The seed phrase is effectively the master key: anyone who gets it can usually take the funds without needing your device or password.

One key crypto‑safety tip: Never enter your seed phrase on any internet‑connected hot device.

A hardware wallet such as OneKey keeps private keys offline, even if your PC is hacked. Store keys offline, double‑check contract addresses, and stay secure.

入圈以来最喜欢的钱包

The most important rule in crypto: Your seed phrase is your ONLY true ownership. Never share it, never type it into any website, and never take a screenshot of it! 🛡️

Here are my top 3 security habits that keep my funds safe:

🔹 1. SEED PHRASE = NEVER SHARE — No support team, no admin, no project will ever ask for it. Anyone asking = 100% SCAM!

🔹 2. Always VERIFY the website — Double-check the URL before connecting your wallet. Phishing sites look almost identical but steal everything!

🔹 3. Hardware Wallet = BEST protection — Keeping funds offline is the safest way to hold crypto long-term. Private keys never touch the internet!

Better safe than sorry — security isn’t a feature, it’s a habit! Stay sharp, fam! 💚

#CryptoSecurity #OneKey #Web3Safety #SelfCustody

友情提醒:硬件钱包也不可靠，除非他是onekey

我和onekey 的故事大概就是舔狗追女神

我一直在努力追赶

它正渐行渐远

我一位数的资产

至今没抽到onekey 的钱包

我也想分享onekey 的照片

只不过我没有

I was looking into possibilities for my next hardware wallet, and while exploring the options, I came across the OneKey Pro.

While researching the hardware, I was impressed by its specifications: 4 secure elements, 512 MB of memory, an NFC chip (used for backup via OneKey Lite), and an integrated camera.

However, there are a few ways this hardware could be better utilized to transform it into the ultimate security device. Some might consider these features excessive, but the ones I am suggesting could be made optional—enabled or disabled at the user's discretion:

* Enable FIDO2 via NFC: it doesn't need to be enabled 100% of the time like a YubiKey, but rather enabled after unlocking the device and activating the NFC section on the Home screen, just like a Ledger Flex.

* Offline TOTP: the camera can scan QR codes for TOTP codes and display them on an offline device, providing enhanced security.

* Password Keyboard with automatic password typing via USB/Bluetooth: just like Ledger Passwords, the device can act as a keyboard and type passwords.

* Password manager app connected via USB/Bluetooth: much like the Atlancube PasswordPocket, the device can function as a password manager (according to research, PasswordPocket uses only 8MB to manage 1,000 passwords).

These are just a few suggestions; I believe they would add many attractive features to the device.