Keystone
Keystone · Hardware · Last reviewed 2026-04-30
Users who want QR-first airgapped signing and broad wallet compatibility.
Why trust this view
Keystone evidence summary
What you control, and what can still fail.
- Key model
- Hardware signer
- Recovery / backup path
- Seed-based hardware signing with QR-based airgapped transaction workflows
- Hardware support
- The product is the hardware signer; commonly paired with supported software wallets
- Open-source posture
- Open-source firmware, hardware design, and wallet app (KeystoneHQ/keystone3-firmware), aside from a closed pre-compiled MCU vendor library
Who should shortlist it?
Shortlist if
Users who want QR-first airgapped signing and broad wallet compatibility.
Pause if
You want a Bitcoin-only device by default or a fully guided consumer recovery model.
Primary risk
Broad multi-asset support and third-party coordinator use increase the setup surface; users must verify firmware and signing flows.
How this wallet is evaluated.
Recovery safety
Can a user recover under stress without handing unilateral control to a provider?
Key control
Who signs, how many keys exist, and whether multisig or hardware separation is available.
Ease of use
Whether the setup burden matches the likely user and balance size.
Hardware support
Whether long-term savings can use dedicated signing devices and coordinator flows.
Privacy tooling
Whether the wallet supports power-user controls such as PSBTs, descriptors, Tor, or coin control.
Evidence trail
Keystone source receipt
No live quote. Wallet reviews use public materials for platform support, backup model, hardware support, open-source posture, and recovery risk.
Air-gapped hardware wallet using QR codes and microSD (no USB data/Bluetooth/WiFi/NFC); multi-asset (5,500+ assets) with a Bitcoin-only firmware option; three secure-element chips; BIP39 seed (supports up to three seeds); marketed as open source.
Verified against source · checked 2026-04-30OfficialKeystone 3 firmware GitHub README (official)Firmware is open source (C + Rust, FreeRTOS) and publicly auditable; runs on MH1903 MCU with three secure elements; caveat: the MH1903 vendor library is included as a pre-compiled binary due to IP restrictions, so that component is not source-available.
Partially supported · checked 2026-04-30Support docsKeystone 3 Pro independent review (reputable secondary)Confirms strict air-gap (USB-C charge-only, no radios, all interaction via QR), three secure elements with tamper-wipe, open-source firmware/hardware design, and a Bitcoin-only firmware option.
Verified against source · checked 2026-04-30Sources
Open the official materials before trusting any recovery model with meaningful funds.
Bitkey
People who want self-custody with guided recovery and less seed-phrase handling.
BJBlockstream Jade
Users who want a lower-cost Bitcoin-focused hardware signer with QR airgap support and strong Blockstream App integration.
LLedger
Users who want a mainstream hardware-wallet ecosystem with broad asset and app support.
Not investment advice. Pledge provides comparison data for educational purposes only; it is not financial, investment, legal, or tax advice. Listed rates, terms, and scores can change and Pledge does not guarantee future availability, pricing, approval, or outcomes. Verify current terms with official sources before acting.
Affiliate disclosure. Pledge currently has no affiliate links, referral fees, or sponsored placements. If a paid relationship is ever added, it will be disclosed inline where it appears — and it will not affect rankings or scores.