
“Why are you offering a BTC-only firmware and what’s the benefit of upgrading the hardware wallet with it?” This is a question we frequently receive and this article explains all the reasoning behind this availability.

## Security First!

The ultimate reason for choosing a hardware wallet is the security it provides. The Keystone team perceives security as a paramount concern in this new bitcoin era. Our reasoning behind offering a BTC-only firmware is derived from this core perspective.

As you may be aware, bitcoin has many [forks](https://forkdrop.io/how-many-bitcoin-forks-are-there) such as Litecoin and Dogecoin. These forks might be a threat to your precious bitcoin. In this [article](https://thecharlatan.ch/Coin-Isolation/), it describes a potential attack called the “Hardware Wallet Coin Isolation Bypass” (it has been fixed by affected hardware wallet vendors). It is a method of attack where the attacker hacks your companion app and when you try to sign a litecoin transaction, the hacked companion app will construct a bitcoin transaction and your hardware wallet will then sign with the Litecoin app on your hardware wallet, resulting in you losing your precious bitcoin. This is why removing altcoin support from the firmware will generally increase security for your bitcoin and is one of the primary reasons why we offer a BTC-only firmware for your Keystone hardware wallet.

## Additional Security Features

After we released the BTC-only firmware, it was positively welcomed by the bitcoin community along with our other features such as QR code air-gapped signing. This resulted in more requests submitted by the bitcoin community. In response to these needs, we added [PSBT (BIP-174)](https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki) support to the BTC-only firmware and made your Keystone hardware wallet compatible with [BlueWallet, Sparrow, Specter, Electrum, Casa and other bitcoin wallets](https://support.keyst.one/3rd-party-wallets/bitcoin-wallets).

With these integrations, Keystone users have additional access to a variety of useful security features and benefits:

1. All 3 types of Bitcoin addresses (legacy, nested segwit and native segwit) are supported.
2. The ability to connect your wallet to your own Bitcoin node.
3. Bitcoin multi-sig support.
4. Privacy features like coinjoin.

Additional Bitcoin features for the BTC-only firmware are currently being considered such as Taproot support and other software bitcoin wallet integrations like Caravan.

## Final Note

The code base of the BTC-only firmware is completely and uniquely different from the multi-coin firmware. Due to this reason, there are 2 things to note:

1. The BTC-only firmware CANNOT be changed back to the multi-coin firmware once it is applied. This irreversibility is because switching back-and-forth between these 2 firmwares will cause serious unforeseen errors.
2. We currently don’t have any plans to add these Bitcoin features to the multi-coin firmware. Because adding those features is not a simple copy-and-paste of the code blocks. We strongly suggest upgrading to the BTC-only firmware if you want the best security for your bitcoin.

Keystone team has always and will continue to aim to offer the most secure and user-friendly hardware wallet for the bitcoiners.


0ydNhmHBejBil3hSP.webp

The relevance & benefits of Keystone’s BTC-only firmware

![0FX0iTM-H5Iea_8PZ.webp](https://keyst.one/images/0_FX_0i_TM_H5_Iea_8_PZ_5066c172b2.webp)
This setup works with both Keystone’s Bitcoin-only firmwares.

The Bitcoin network consists of interconnected nodes and miners that secure the network against potential attacks. Miners secure the blockchain by utilizing proof-of-work to mine blocks and process transactions. Nodes store the entire transactional database of Bitcoin (the blockchain), it contains transactions from all the way from the genesis block mined by Satoshi Nakamoto to the latest block mined today. Nodes also secure the consensus of the system and enforce rules that miners must abide by in order to receive their block rewards for finding new blocks.

When a user transacts using a light wallet for example on a mobile phone, their wallet leaks out information about the funds and transactions on the wallet. This is because you are using someone else’s node and give them information that they can misuse in order to deanonymize you and tie your information like IP address or other information to transactions.

When a light wallet queries for transactions, it usually sends the extended public key of a given wallet that contains all the present and future wallet addresses to a third party server, with that a third party server can see all of your transactions and future transactions. This is a big privacy issue.

In order to fix this problem and provide additional privacy when transacting, the user can opt to use a bitcoin full node when querying data and broadcasting transactions. The privacy benefits of such installations is great, therefore we must not ignore them and make use of them in order to restrict others from doing surveillance over our transactions.

This tutorial here will explain how to set up a MyNode installation on a Raspberry Pi, how to install Tails OS on a pendrive and how to connect the Electrum installation on Tails to the Electrum Private Server on the MyNode server.

For running a MyNode+TailsOS installation, you will need the following items:

> **1 computer with a compatible camera that TailsOS recognizes**
> 
> **1 license for** [**MyNode Premium Edition**](http://mynodebtc.com/order_now) **($99 Dollars, sold separately)**
> 
> **Latest generation** [**Raspberry Pi**](https://www.amazon.com/Raspberry-Model-2019-Quad-Bluetooth/dp/B07TC2BK1X/) **with at least 4GB of RAM**
> 
> **A microSD card with minimum size of 8 GB**
> 
> **1 USB 3.0 pendrive with 8GB minimum space**
> 
> **An SSD drive with 500GB of minimum space** [**(1TB is recommended)**](https://www.amazon.com/SanDisk-Ultra-NAND-Internal-SDSSDH3-1T00-G25/dp/B071KGRXRG/)
> 
> **1 mobile enclosure for the SSD to connect via USB 3.0 to the Raspberry Pi**
> 
> **1 Ethernet Cable connecting the Raspberry Pi and a Router that is connected to the Internet**
> 
> **1 USB 3.0 cable**
> 
> **1 Charging Brick that can accept a USB connector to function as a power supply source**

## Step 1

If you have the proper pendrive, go ahead and download TailsOS from [https://tails.boum.org/](https://tails.boum.org/) The installation is simple, and the Tails website will walk you through the installation step by step, just read the given instructions and there will be no issues.
![06KyKGlNYniq_99ry.webp](https://keyst.one/images/06_Ky_K_Gl_N_Yniq_99ry_1961332ccb.webp)
![0lsuZ8r5ZRiIJJl-H.webp](https://keyst.one/images/0lsu_Z8r5_Z_Ri_IJ_Jl_H_4f4346f427.webp)
![0LO-ORTCoTLqC_03J.webp](https://keyst.one/images/0_LO_ORT_Co_T_Lq_C_03_J_5b3edf13e8.webp)
Keep Following the instructions!

## Step 2

You will also have to download Balena Etcher to write ISO images to the pendrive, download the installer from [https://www.balena.io/etcher/](https://www.balena.io/etcher/)
![0lPAD-084oeEgakeY.webp](https://keyst.one/images/0l_PAD_084oe_Egake_Y_8b7ee30db9.webp)
## Step 3

After you successfully downloaded the ISO and have downloaded Etcher, go ahead and plug in the pendrive and write the ISO file onto it, based on which installation method you selected you will either need 1 or 2 pendrives to manage the installation.

## Step 4

After you are done, restart the computer, and press multiple times F12 to enter the boot selection screen on your PC (key might vary on MacOS) and select the pendrive for booting.

**(Don’t enable persistence and don’t set a root administrator password.)**

## Step 5

After successful boot, restart the computer and go back to your main operating system.

## Step 6

Now, head over to [https://mynodebtc.com/](https://mynodebtc.com/) to download the community edition of MyNode (**please note here that you will need the premium edition in order to connect with Electrum on TailsOS over Tor to MyNode**)
![076GBze9II-OglOl4.webp](https://keyst.one/images/076_G_Bze9_II_Ogl_Ol4_628fb7ef04.webp)
Follow the steps explained on the website.

## Step 7

After downloading the MyNode ISO file, plug in the microsd file into your computer and write the ISO image onto the microsd card.

## Step 8

After finished writing the ISO file, assemble the raspberry pi, insert the microsd card into it and power it on by plugging it onto a charging brick with a USB 3.0 cable.

## Step 9

Allow the MyNode installation to finish booting and creating system files, then navigate with your browser to [http://mynode.local](http://mynode.local) or the local IP address of the raspberry pi. The password for first time login will be “bolt”

Make sure to change the password, in the settings, to something you will remember else you will have to fully wipe your device’s SSD to be able to restart with the whole installation process.
![0VjVMorxGJXLgScUO.webp](https://keyst.one/images/0_Vj_V_Morx_GJX_Lg_Sc_UO_e576bb09ee.webp)
After logging in and the initial block download was successful you should see this screen, but the difference will be that the items are still either loading or syncing.

Go ahead and press “ENABLE” on Electrum Server, the installation will take a long time while it stands up and syncs the network onto the device.

## Step 10

After the MyNode installation says Electrum Private server is running, you can go ahead and input the MyNode serial into the settings to enable remote connections via Tor.
![0Kjug1erA5-dN22lh.webp](https://keyst.one/images/0_Kjug1er_A5_d_N22lh_af46ad6a46.webp)
What should appear here for you is something similar to “Set Product Key” and input the product key into it that you received via email.
![0x3zfgt1JeAndVJAk.webp](https://keyst.one/images/0x3zfgt1_Je_And_VJ_Ak_c2d053ef1b.webp)
## Step 11

Afterwards let the device restart or anything else it requests and then start booting up the computer with TailsOS as explained in Step 4.

## Step 12

After successful boot and when the connection indicator of TailsOS shows active connection to the Tor Network, you can start the connecting process of Electrum Wallet to the Electrum Private Server.

> ****!WARNING!**** **Never start Electrum Wallet just by navigating to it in the menu, follow the below guide on how to start it properly so that it does not leak information to unwanted participants on the network.**

## Step 13

Go to Applications on TailsOS and look for a program called “Terminal”. It should look somehow like this:
![0aktt9IGH5fiJZXwo.webp](https://keyst.one/images/0aktt9_IGH_5fi_JZ_Xwo_44bec93994.webp)
The terminal will look somehow like this, based on your graphical settings:
![0oIFcXapBcXxgY9wO.webp](https://keyst.one/images/0o_I_Fc_Xap_Bc_Xxg_Y9w_O_111dd804d4.webp)
## Step 14

Open up the Electrum Private Server information screen by clicking on Info.
![037dFAOQrv-nB_sJS.webp](https://keyst.one/images/037d_FAO_Qrv_n_B_s_JS_c58120602c.webp)
## Step 15

You will then see the various connection information of your private electrum server for both local and remote connections. What you will need is the following command:
![02c_y7g_GDYCIQ918.webp](https://keyst.one/images/02c_y7g_GDYCIQ_918_cad352ab8e.webp)
Here you will see the Electrum Tor Command, you need to manually type it over onto TailsOS into the Terminal you just opened previously. What you exactly have to type is

> **electrum -1 -s yourmynodetorprivateconnectionaddress.onion:50002:s -p socks5:localhost:9050**

It should be in this format without the “./” infront, TailsOS does not accept that command in front of the command.


0FX0iTM-H5Iea_8PZ.webp

Ultimate Bitcoin Privacy Guide using TailsOS with built in Electrum Wallet and MyNode with Electrs Enabled

It’s undeniable that open source has become a necessity, not just an option. Especially for a security product, not being open source is equivalent to violating the most fundamental principle of asset storage: “**Not your key, not your coin**.”

**For Keystone, every line of our code is released based on the principles of open source.**

![Where Do We Come From? What Are We? Where Are We Going?](https://keyst.one/images/what_are_we_a0ba0b3fb0.webp)


> D'où venons-nous ? Que sommes-nous ? Où allons-nous ?
>                                                                          —— Paul Gauguin

As Keystone engage with more open-source communities and deepens interactions with various open-source groups, we find ourselves increasingly curious, much like the existential questions posed in Gauguin’s paintings:

**Why Keystone choose open source as the path to Valhalla? What exactly is open source? Where is Keystone’s open-source agenda headed?**

## Open source is our philosophy

Upon delving into the history of open source, it becomes apparent that the concept wasn’t innate but emerged as a compromise, initially known as “free software.”

At the close of the 20th century, the free software movement endured over a decade of struggle and negotiation with commercial proprietary software. In February 1998, a small gathering of veteran hackers in Silicon Valley coined the term “open source” as a neutral alternative to the ideologically charged “free software.” This meeting was convened by **Eric S. Raymond**, the author of “The Cathedral and the Bazaar,” a book that non-technically describes the open-source phenomenon and has become a classic in the open-source world.

Launched by its founder, **Richard Matthew Stallman** (RMS), the movement was a call for software user freedom in response to proprietary software vendors not providing source code, thus hindering programmers’ ability to modify. RMS’s philosophy had three tenets:

 1. Freedom to use the software.

 2. Freedom to modify the software.

 3. Freedom to redistribute the software.

Many misconstrue open source as merely “making the code public”. However, at Keystone, we view it as a philosophy that drives our commitment to code transparency, security, and product excellence.

**All hardware wallets should be open-source.** Hardware wallets, as a form of self-custody for storing crypto, are the keystone of the concept of decentralisation. **Open source is not an option; it’s a necessity.**

The source code tells you exactly what the program will do, so with open-source software, anyone can examine the source code, learn how the program works, and compile the code into a usable program.

We can proudly say that all of Keystone’s hardware products have been open source from day 1.

## What is Keystone’s Open Source?

The rise of the internet allowed engineers globally to collaborate on a platform, regardless of location, time, or even race, for a shared vision. This combination of factors, backed by geniuses like Linus, has its true genesis in a “culture of honor” rooted in the hacker community — a community passionate about computer hardware and software. While ostensibly about sharing and showing off skills, the overt outcome is altruism. However, the underlying driving force is the self-gratification that hackers gain from recognition and praise.

“ If I am not for myself, who is for me? But if I am for my own self only, what am I?” — this is the soul of the open-source culture.

### Clone, Build, Run

Open source is not just about making code publicly available on GitHub; it’s about providing software that anyone can access freely.

Open-source empowers individuals to view, modify, and distribute the code they deem appropriate. This level of transparency and flexibility is fundamental to our ethos at Keystone, ensuring that our community can actively participate in and contribute to our ongoing mission of creating secure and reliable hardware wallets.

![[https://github.com/KeystoneHQ](https://github.com/KeystoneHQ)](https://keyst.one/images/Github_Keystone_HQ_981cc1b9eb.webp)


Anyone can clone our code from Keystone’s GitHub repository, compile it locally, and independently verify the results.

## **Where is Keystone’s open-source agenda headed?**

In today’s world, open source seems to be a developing trend, both at the policy level and in the capital market, for various reasons. However, behind this enthusiasm, we should soberly and rationally see that open source is essentially neutral. The soul of open source lies in software user freedom, and the driving force of open-source contributors is fundamentally rooted in the culture of reputation and honor.

In the field of software, technical collaboration and knowledge sharing through open source have obvious advantages. One clear view is that human knowledge should be advanced, shared, and utilized on a broader scale.

The Keystone 3 Pro epitomizes our growth and our commitment to these philosophy.

After the release of Keystone 3 Pro, we will be organizing a series of co-creation events closely related to community developers.

## About Keystone

**[Keystone](https://keyst.one/)** is an **[open-source](https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752)** airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with **[three secure element chips](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461)**. One of Keystone’s unique features is its ability to support **[multiple recovery seed phrases](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4)**, reducing the need to purchase multiple hardware wallet devices.

With the **[primary aim](https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff)** of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability.

**[Website](https://keyst.one/) | [Twitter](https://twitter.com/KeystoneWallet) | [Discord](https://keyst.one/discord) | [Telegram](https://t.me/KeystoneWallet) | [GitHub](https://github.com/KeystoneHQ)**


keystone open source.webp

When we talk about open source, what are we discussing?

As technology evolves, so do the approaches and philosophies behind its development. 2 years ago, we [**penned down our thoughts on the open-source approach for the Keystone Pro**](/on-open-source-and-transparency-ba37fa1c1e8c). Now, with the launch of the [**Keystone 3 Pro**](/keystone-3-the-ultimate-protector-of-your-digital-assets-122144288fad), we see this as the perfect time to share our updated perspective and insights on open source.

## Open Source: More than Just Publishing and Sharing Code

![193CTXz7IaX8XbzazhzbASA.webp](https://keyst.one/images/193_CT_Xz7_Ia_X8_Xbzazhzb_ASA_2170e4039f.webp)

The true essence of open source goes beyond releasing code to the public

Many misconstrue open source as merely “making the code public”. However, at Keystone, we view it as a philosophy that drives our commitment to code transparency, security, and product excellence. Let’s take a look at some examples below:

**Technical Hurdles:** Transitioning to an open-source model isn’t just about sharing the code; it’s also equally about adapting the product’s technical architecture. For instance, protecting chip communication channels in the Keystone device became paramount for us. With proprietary closed source software, we could easily use asymmetric cryptography with a private key to safeguard the channels. But in an open source setting, the visibility and transparency of our code would compromise and make this solution vulnerable. As a result, we decided to adopt a different approach where every Keystone device, upon initialization, would generate its own unique set of communication keys exclusive to that device only.

**Product Execution:** Code quality is synonymous with software quality. Well-structured, flawlessly written code leads to superior, reliable software. Conversely, poor code can cause myriad issues from bugs to complete system failures. Many software wallets, in their haste to outpace competitors, may compromise on code quality, opting for closed-source to shield their intellectual property. Keystone, however, believes in the integral value of open source code. Moreover, we understand that our prowess isn’t restricted to software code as well. Our strength as a company also lies in supply chain management, global fulfillment, and managing diverse channels, including e-commerce.

**Setting Audit Standards:** Embracing open source nudges us towards rigorous code auditing. Our commitment is evident in how we treated the audit reports for the Keystone Pro; we open-sourced them, ensuring transparency. We also meticulously addressed all issues and concerns raised. At present, the Keystone 3 Pro’s firmware is under scrutiny by [**SlowMist**](https://www.slowmist.com/), and [**Keylabs**](https://keylabs.io/) (formerly [**Wallet.fail**](https://wallet.fail/)) is overseeing the hardware design. The reports will be made avaliable to the public once the audits are completed.

## The Pitfalls of Closed Source Tech

![1V0J6xx2r8BN_W_sKXKtUwA.webp](https://keyst.one/images/1_V0_J6xx2r8_BN_W_s_KX_Kt_Uw_A_0f2eab000d.webp)
The spike in hacking incidents have jeopardized many users

Recent hacks of prominent software wallet projects highlight the risks associated with closed-source systems. Incidents include:

[**Slope Wallet**](https://decrypt.co/106680/solana-hack-blamed-slope-mobile-wallet-exploit)**:** [**Solana**](https://solana.com/) users faced a setback with a massive hack that resulted in a loss of approximately $4.5 million in $SOL tokens and other crypto tokens. The exploit was linked to a vulnerability in the [**Slope mobile wallet app**](https://slope.finance/). Assessments from Solana’s developers hint that a private key mismanagement led to the “accidental transfer” of these keys to an external party. Users who were compromised had utilized Slope mobile wallet to generate their wallet address.

[**MyAlgo Wallet**](https://cointelegraph.com/news/myalgo-users-urged-to-withdraw-as-cause-of-9-2m-hack-remains-unknown)**:** The leading software wallet provider for the [**Algorand Network**](https://algorand.com/), [**MyAlgo**](https://wallet.myalgo.com/access), urged its users to take immediate action to withdraw their crypto assets from any MyAlgo wallet generated using a seed phrase. That came in the wake of a mysterious hack, which has baffled even the MyAlgo team and other experts. The breach drained an estimated $9.2 million in $ALGO, the native token of the Algorand Network.

[**Atomic Wallet**](https://cointelegraph.com/news/atomic-wallet-exploited-users-report-loss-of-entire-portfolios)**:** Renowned for its decentralized and noncustodial attributes, **t**he team behind [**Atomic wallet**](https://atomicwallet.io/) had to issue warnings across their social media platforms and temporarily suspend their app downloads during the hack. Users of Atomic Wallet reported losses exceeding $35 million. While the team evaluated numerous potential security risks, ranging from malware code injection and man-in-the-middle attacks to viruses targeting individual devices, they couldn’t precisely identify the specific type of breach.

If the above software wallets had adopted an open source approach, auditors could have spotted and helped rectified their potential vulnerabilities, minimizing the likelihood of such breaches. Nevertheless, this strengthens Keystone’s commitment to ensuring our hardware wallet works seamlessly with all software wallets. Regardless of the many software wallets continuing with a closed-source model, our goal remains to enhance their security universally.

## Open Source Enhancements in the Keystone 3 Pro
![1Vl8T9H-Vz5sHtLRbHGWbRw.webp](https://keyst.one/images/1_Vl8_T9_H_Vz5s_Ht_L_Rb_HG_Wb_Rw_fd5caf8a2a.webp)
Much like individuals who workout daily at a gym to build strength, Keystone consistently updates our hardware and software to reinforce the security of our hardware wallet

For the Keystone Pro, we took pride in making a variety of features open-source. This encompassed everything from the Secure Element firmware to the hardware blueprint (including the circuit layout and BOM). Additionally, we’ve also shared the hardware wallet application framework and segments of its operating system layer publicly.

With the Keystone 3 Pro, our dedication to transparency still stands firm. **EVERY SINGLE LINE** of code we’ve written, along with the hardware designs and audit reports from SlowMist and Keylabs, will be open-sourced. We aim to make these reports publicly available in November 2023 after resolving all issues highlighted in the audits.

The main notable enhancement in the Keystone 3 Pro compared to its predecessor is the transition from Android to an embedded system. Despite its widespread use, Android’s complexity makes it cumbersome for developers to delve into. By adopting an embedded system, we’ve substantially streamlined our code, making it more accessible and scrutinizable.

This in turn, also makes the firmware of the Keystone 3 Pro more “Reproducible”, empowering individuals with the ability to audit, experiment and test out the firmware’s code for themselves. It allows users to verify that the firmware loaded onto Keystone’s hardware wallets matches the code we publicly share. This resonates deeply especially with the people who live by the mantra “Don’t Trust, Always Verify.” For them, mere access to open-source code isn’t enough.

If you’d like to probe deeper into our security architecture, we also welcome you to check out this article about the [**secure elements chips avaliable in the Keystone 3 Pro**](/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461).

## Keystone’s Unwavering Allegiance to Open Source
![1bJ_ywtrUQapZZ2u7jlwJBA.webp](https://keyst.one/images/1b_J_ywtr_U_Qap_ZZ_2u7jlw_JBA_61906de3c6.webp)
We’ve made an oath to always remain committed to open source

At Keystone, our pursuit of open source isn’t a mere trend but a deeply ingrained belief. We recognize that open source goes beyond than just sharing code; it’s about embracing transparency, fostering community collaboration, and continually elevating security standards. The Keystone 3 Pro epitomizes our growth and our commitment to this philosophy. Our unwavering belief in open source resonates in our products, our transparency efforts, and our drive to deliver unrivaled security. As we forge ahead, we value the mutual trust that binds us with our community, and together, we’re eager to continue to redefine the boundaries of technological advancement in Web3.

## About Keystone

[**Keystone**](https://keyst.one/) is an [**open-source**](/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with [**three secure element chips**](/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461). One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases**](/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim**](/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff) of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask**](https://metamask.io/) (both [**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785) versions), as well as other premier software wallets like the [**OKX Web3 Wallet**](https://www.okx.com/web3), [**Solflare**](https://solflare.com/), [**Rabby**](https://rabby.io/), and more.

[**Website**](https://keyst.one/) **|** [**Twitter**](https://twitter.com/KeystoneWallet) **|** [**Discord**](https://keyst.one/discord) **|** [**Telegram**](https://t.me/KeystoneWallet) **|** [**GitHub**](https://github.com/KeystoneHQ)

The Role of Open Source Tech in Keystone’s Development.jpg

The Role of Open Source Tech in Keystone’s Development

*By [Patrick Kim](https://medium.com/@patrickkim_1991)*

The Glacier Protocol is a storage scheme that takes the “not your keys, not your bitcoin” ethos to its literal extreme. While it’s a great reference for a completely trustless model of security, the majority of users don’t have the technical expertise or time to execute every step of Glacier Protocol’s 93-page manual, and are actually much more likely to risk losing everything by attempting to. However, average users can gain from learning about the Glacier Protocol’s more rudimentary tools, such as using casino-grade dice as a physical source of entropy.

### Glacier Protocol in a Nutshell

Glacier Protocol was designed to be the gold standard of how to make every single storage and transaction decision from the perspective of security alone. To accomplish this, it completely eliminates reliance on third parties for things like private key generation and connecting to the blockchain. It requires the user to purchase their own laptops, USB keys, and casino-grade dice, and practically build the majority of their storage and transaction mechanisms from scratch. As you might imagine, you really have to know what you’re doing to get through the entire 93-page manual without risking something going wrong through human error. Just to begin with, one of the first steps requires you to know how to quarantine a laptop by manually removing its wi-fi communication card.

In addition to being a strength, Glacier Protocol’s completely trustless model of avoiding printers, network connections, and hardware wallets is its greatest weakness. The biggest downside for having to operate so many of the mechanisms manually is that you could easily fall victim to human error. The feeling of dread when transferring assets from a known wallet environment into unknown in inaccessible [deep cold storage](https://blog.keyst.one/deep-cold-storage-how-beginners-can-swim-in-the-deep-end-430af49d03bd) is familiar to many experienced bitcoiners, especially those who are aware of just how many things could go wrong and cause a total loss of assets. Apply the emotions of that moment to large parts of the Glacier Protocol process, and you have some idea of the stresses of the undertaking.

Glacier Protocol calls for a Faraday bag to sheath laptops in while they are running sensitive operations, but electromagnetic waves are just one of the many types of emissions leaked by the large attack surfaces of generic consumer electronic devices like [air-gapped computers](https://blog.keyst.one/air-gapped-computers-and-phones-vs-hardware-wallets-whats-the-difference-458888cdd97). While neither will a windowless room and white noise fan cover all the ways private keys can be exfiltrated, these measures are relatively easy to implement and can’t hurt, so they can be beneficial depending on your level of paranoia. Close the curtains and download a white noise mp3 file to give yourself some peace of mind while you are running sensitive operations. You never know, drones could be spying on you through your windows.

### How to Use Dice to Generate Private Keys

Ownership of private keys is everything in Bitcoin, which is why random number generation is the single most important step in any storage scheme. If you get [true random number generation (TRNG)](https://blog.keyst.one/secure-elements-harnessing-a-force-of-nature-14a959da7b54) wrong, your keys might someday not be your keys. Pseudo random number generation (PRNG) software, while statistically random, is still predictable to an advanced hacker and could even contain backdoors. Glacier Protocol’s example of using casino-grade dice as a physical source of randomness can be used by anyone who doesn’t have a hardware wallet with a Secure Element to generate private keys. Alternatively for those who want to make their use of a hardware wallet more trustless, it can also be used to generate a backup that can be imported into a hardware wallet.

Here’s how to do it:

 1. Roll a dice 256 times, recording rolls of 1 through 3 as 0’s, and rolls of 4 through 6 as 1’s so that you end up with a 256-bit binary. Make sure that when you are rolling, you get enough bounces and that you are not always starting with a particular side of the die facing up.

 2. Use a sha256 tool to get its hexadecimal checksum result of the 256-bit binary, then convert it to binary. The tools for calculating the checksum and converting it into binary can be found easily online, but you will want to download them and use them offline.

 3. Take the first 8 digits of the binary checksum and add them to the end of the 256-bit binary so that you have a 264-bit binary.

 4. Divide the 264-bit binary into 24 sets of 11-bit binaries.

 5. Convert each 11-bit set into a decimal number. This can also be done with tools found online, which should be downloaded and operated offline.

 6. Use the BIP 39 list of mnemonic phrase words to find the mnemonics that correspond to each of the 24 sets of decimal numbers.

 7. Record the mnemonic phrase and store it so that it will not be lost. (Visit our article on [deep cold storage](https://blog.keyst.one/deep-cold-storage-how-beginners-can-swim-in-the-deep-end-430af49d03bd) for more information on protecting your recovery phrase.).

![Casino dice — all you need to generate your own private keys.](https://keyst.one/images/Casino_dice_89f0d7dfce.webp)

Glacier Protocol uses 62 dice rolls and manipulates these results to get a 256-bit entropy, but we suggest the following method to reduce complication. Keystone supports for automatically converting [101 dice rolls into a 256-bit private key](https://support.keyst.one/advanced-features/recovery-phrase/use-dice-to-generate-recovery-phrase). And the result aligns with Ian Coleman’s tool for [easy verification](https://blog.keyst.one/how-to-verify-the-recovery-phrase-created-by-dice-rolling-af01c16b765e). With 101 dice rolls, you get a quantity of entropy as big as that of the 256-bit binary (there are 6 possible outcomes of a dice roll, and 6¹⁰¹ >2²⁵⁶). Note that you do not need to worry about the possibility of human error while you are recording dice rolls by hand or following the other steps without the help of automation. As long as you make sure your recovery phrase is stored properly, other errors are inconsequential to the randomness and security of your private keys.

Check out Keystone’s other features.

04k-eUpkubZpQAku4.webp

The Glacier Protocol and Using Dice To Generate Keys

## A New Era For Keystone

**[Keystone](https://keyst.one/)** has been a name synonymous with security, innovation, and relentless pursuit of user experience. For half a decade, through five meticulous years of iterations, we have sculpted a product that reflects not just our capabilities but our aspirations. Gaining consistent recognition from users, our products have stood the test of time and commitment.

Yet, the time has come to recognize that our current brand image does not fully resonate with our underlying philosophy and the vision that has driven us forward. Our vision goes beyond mere product design, it also reflects our core values, our dedication to security, and our commitment to an unparalleled user experience.

![Keystone logo design.webp](https://keyst.one/images/Keystone_logo_design_e6d8d8cd5f.webp)

We are thrilled to embark on a new journey. This is not just an upgrade to our brand image; it is a reiteration of who we are and what we believe in. It is a deeper exploration into what makes Keystone not just a product but a partner in your journey. We are re-communicating the core values that Keystone adheres to, evolving our brand, and deepening the consensus among those who have placed their trust in us.

We invite you to experience a brand that not only aligns with our product vision but also symbolizes our steadfast commitment to you.

## A New Logo Steeped in Principles

![Keystone wallet features.webp](https://keyst.one/images/Keystone_wallet_features_b4b9d5710d.webp)

The essence of our new logo is encapsulated in four key values:

* **Security:** By open-sourcing all possible code, we champion a transparent approach to security that’s confident enough to withstand all challenges

* **Stability:** Our commitment to rock solid excellence pervades every aspect, from product design to customer service and visual representation

* **Usability:** Simplicity is our strength. With an intuitive design mirroring mobile experience, Keystone ensures a seamless user journey

* **Decentralization:** We are steadfast in implementing support for third-party software wallets, offering users the best compatibility and fostering collaborative efforts between Web3 protocols

## Symbolizing the New Keystone Logo

Keystone’s heritage still resonates in the new logo symbol, carrying forward the Key Stone shape in a stone arch. The font’s thickness marries tradition with youthfulness, while the colour pays homage to our old logo, subtly tweaked for visual vibrancy.

Our new logo serves as the core symbol of our philosophy, echoing our values:

**Security — Through Open Source**

![software and hardware.webp](https://keyst.one/images/software_and_hardware_157e919d22.webp)

**Decentralization — Emphasizing Collaboration**

![integrations and signing.webp](https://keyst.one/images/integrations_and_signing_afad6790d1.webp)

**Stability & Simplicity — An Untoppleable and Easily Recognized Symbol**

![Keystone logo transition.webp](https://keyst.one/images/Keystone_logo_transition_845fc2fc47.webp)

## Shaping the Future

![Keystone logo as stone.webp](https://keyst.one/images/Keystone_logo_as_stone_94e7f64cc0.webp)

With a perfect blend of legacy and innovation, Keystone’s rebranding is more than a mere facelift; it’s a renewed commitment to the Web3 world. It’s a promise to continue our pursuit of security, stability, usability, and decentralization, offering users the opportunity to experience the future, today.

![Keystone logo with assets.webp](https://keyst.one/images/Keystone_logo_with_assets_e3a12fcada.webp)

Join us as we embark on this new chapter, where we endeavor to elevate the standards of hardware wallets, setting the stage for an era of boundless possibility.

**Let’s shape the future together. Download our new Media Kit [here](https://drive.google.com/drive/folders/1MqffY73AbWE3ItSE6s_YP8SD7k1Gbz8r).**

**#UnlockYourKeystone**

## About Keystone

**[Keystone](https://keyst.one/)** is an **[open-source](https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752)** airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with **[three secure element chips](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461)**. One of Keystone’s unique features is its ability to support **[multiple recovery seed phrases](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4)**, reducing the need to purchase multiple hardware wallet devices.

With the **[primary aim](https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff)** of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as **[MetaMask](https://metamask.io/)** (both **[Extension](https://twitter.com/MetaMask/status/1469351219290382341)** and **[Mobile](https://twitter.com/MetaMask/status/1517256930389110785)** versions), as well as other premier software wallets like the **[OKX Web3 Wallet](https://www.okx.com/web3)**, **[Solflare](https://solflare.com/)**, **[Rabby](https://rabby.io/)**, and more.

**[Website](https://keyst.one/) | [Twitter](https://twitter.com/KeystoneWallet) | [Discord](https://keyst.one/discord) | [Telegram](https://t.me/KeystoneWallet) | [GitHub](https://github.com/KeystoneHQ)**


Keystone logo blue background.webp

Unveiling The Future of Security — The New Keystone Brand

To all Keystone enthusiasts, from those who’ve been with us since day one to those who’ve just discovered us,

I hope this message finds you in good health and high spirits. As the CEO of Keystone, it’s my privilege and pleasure to connect with you all in this way. I write this letter not just as the head of this company, but as a fellow member of the Web3 community, who, like you, dreams of a decentralized, secure, and accessible future.

First and foremost, my heart is full of gratitude for the trust you’ve shown in Keystone. We’ve recently experienced a significant surge in demand for our hardware wallet, and it fills me with pride and humility to see that in this rapidly evolving world of digital assets, you’ve chosen to rely on Keystone. Our mission has always been to ensure that you can confidently, securely, and easily engage with the world of Web3, and your trust reinforces our resolve to deliver on this mission every single day.

Our hardware wallets have been flying off the shelves faster than we expected. For those of you who have been patiently waiting, I extend a heartfelt apology for the delay. Rest assured, we’re working tirelessly to resolve this. We expect a new batch of Keystone wallets to arrive at our warehouse within the next week or so, and we’ll begin shipping the devices to users immediately after. Furthermore, we are in the process of manufacturing an additional batch that will be available at the end of July. You can start participating in the pre-sale on our **[website](https://keyst.one/)** to secure a device from this batch.

Over the years, our journey has been marked by the pursuit of two fundamental principles: **[open source](https://blog.keyst.one/on-open-source-and-transparency-ba37fa1c1e8c)** and **[self-custody](https://blog.keyst.one/keystone-product-design-principles-cd833bc11125)**.

**[Since our inception in 2018](https://blog.keyst.one/keystone-who-we-are-b037777a1259)**, our commitment to open source has been unshakeable. It’s been our firm belief that transparency and openness are the cornerstones of a successful hardware wallet product. In 2023, our open source ethos led us to fruitful collaborations with major software wallets like **[Keplr](https://twitter.com/keplrwallet)**, **[ArConnect](https://twitter.com/arconnectio)**, **[BlockWallet](https://twitter.com/GetBlockWallet)**, **[BitKeep](https://twitter.com/BitKeepOS)**, and **[Core](https://twitter.com/coreapp)**.

Open source, to us, is more than a buzzword. It’s a commitment. A commitment to a transparent, reliable process of code review, compiling, and firmware publishing that raises the quality of our code while warding off potential threats. We’re proud to have built our hardware wallet on open-source software, laying bare our work for inspection by security researchers, developers and anyone in the Web3 community who’s interested. Transparency is our motto, and to our knowledge, we were the first in the industry to publicly share our **[Secure Element firmware](https://github.com/KeystoneHQ/keystone-se-firmware)** and **[auditing reports](https://github.com/KeystoneHQ/Keystone-developer-hub/tree/main/audit-report) **for everyone to see.

Our second core principle, self-custody, is something we deeply value. We respect your autonomy and security in handling your funds. It’s the basic security assumption of a hardware wallet that your recovery phrase or private keys will never touch an online environment, and we stand by that. We will not deviate from this path, and I assure you that we will not be implementing any form of KYC seed recovery service.

Reflecting on our journey, I am filled with pride recalling how Keystone has continually led the charge in pioneering advancements in the hardware wallet industry. We set the bar high by being the first in our field to create a premium hardware wallet that upholds the robustness standards of the American military (MIL-STD-810G). We introduced the Web3 community to the secure practice of **[QR code data transmission](https://blog.keyst.one/ever-wondered-what-your-hardware-wallet-inputs-and-outputs-9b33b4cedafd)**. Additionally, we also catered to the needs of the Bitcoin community with our **[BTC-only firmware](https://blog.keyst.one/the-relevance-benefits-of-keystones-btc-only-firmware-8965ebb42e48)**, and have actively addressed the **[Blind Signing issues](https://blog.keyst.one/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6)** that plagued hardware wallet users. **[Our collaboration with MetaMask](https://twitter.com/MetaMask/status/1517256930389110785?s=20)** speaks volumes of our commitment to integrations, and remains a cherished milestone in our journey.

But our past achievements only drive us to aim higher. Our journey, like that of the broader Web3 community, is an ongoing one. We are eagerly looking forward to introducing even more cutting-edge solutions and enhancements, starting with our plans to implement Account Abstraction features.

Your trust and belief in us are what fuels our passion and commitment. I am incredibly grateful to you all for choosing Keystone, and I promise you that we will continue working tirelessly to exceed your expectations. Together, we’ll continue to make self custody solutions even more secure and accessible to everyone.

Thank you for being a part of this incredible journey with us. We are honored to serve you and to be a part of this vibrant, innovative community.

**With heartfelt thanks,**

**Lixin Liu,**

**CEO, Keystone.**


lixin liu thank you.webp

Keystone’s Journey: Embracing Open-Source and Self-Custody in the Web3 World — A Letter from our CEO

Keystone first launched in 2018, and since then we have undergone several updates and improvements. Today, we celebrate our 5th anniversary. It has been a thrilling journey for the team over the past five years, with numerous new partnerships and collaborations established with people and groups from different protocols.

To commemorate this milestone, we are offering a **25% discount** on ALL products from the **1st to 10th of February 2023**. Visit our [**online store**](https://shop.keyst.one/collections/all) today to purchase your Keystone!

We’d also be covering our 10 most significant integrations partnerships from the beginning of 2022 until the present day in this article.

Be sure to also keep an eye on our [**Twitter**](https://twitter.com/KeystoneWallet)  for a chance to win a Keystone Essential device through a lucky draw contest.

## What is Keystone

![159NvFhC8Q4B_rj6TC8BdGw.webp](https://keyst.one/images/159_Nv_Fh_C8_Q4_B_rj6_TC_8_Bd_Gw_01ca5954cf.webp)

Keystone is a hardware wallet that prioritizes security of its users. One of the unique features of the device is that it is [**fully air-gapped**](/air-gapped-computers-and-phones-vs-hardware-wallets-whats-the-difference-458888cdd97). Keystone uses [**QR codes to transmit data**](/ever-wondered-what-your-hardware-wallet-inputs-and-outputs-9b33b4cedafd) to web-enabled devices, eliminating the risk of any remote attack through the absence of wired connection ports, WiFi, Bluetooth, NFC, or 5G chips.

Additionally, Keystone also boasts a [**Secure Element**](/secure-elements-the-last-line-of-defense-4669012d4edc) that stores and generates private keys using a truly random number generation method. The firmware is [**open-source**](/on-open-source-and-transparency-ba37fa1c1e8c) which allows users to verify its authenticity as well. For even greater security, there is also a fingerprint sensor option on the device to prevent password leakage in public places.

Keystone also has a built-in [**self-destruct mechanism**](/self-destruct-mechanisms-unique-defense-against-side-channel-attacks-4cfea3d4eff1) that activates upon tampering, instantly wiping the private key from the device to prevent data extraction by physical attackers.

Lastly, the standout security feature of Keystone is that it protects users from [**blind signing transactions**](/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6). It [**decodes the transaction message hash of a smart contract into a human readable format**](https://www.youtube.com/watch?v=ElIM7-YPsMY&t=5s), then displays all the information (“From address”, “To address”, “Amount” etc.) clearly on the 4-inch touchscreen and prompts users to manually check them before signing off on it.

## 10 Significant Integration Partnerships from the beginning of 2022 until the present day

1. [**MetaMask Web Extension**](https://consensys.net/blog/news/metamask-x-keystone-how-to-benefit-from-hardware-wallet-security-using-transparent-qr-code/?utm_content=190655131&utm_medium=social&utm_source=twitter&hss_channel=tw-3278906401) **&** [**MetaMask Mobile App**](https://www.youtube.com/watch?v=ixRIoGfbmTI) **Integration**

![1p3oUAb33yx8oH1X3kOVHew.webp](https://keyst.one/images/1p3o_U_Ab33yx8o_H1_X3k_OV_Hew_a60cf35be6.webp)

We began the first quarter of 2022 with great enthusiasm, putting in a lot of manpower and resources to integrate with [**MetaMask**](https://metamask.io/). As a result, we were able to achieve a major milestone by becoming the first hardware wallet to be integrated with both the web extension and mobile app of MetaMask.

This integration meant that MetaMask users could store and manage their digital assets in a cold storage environment, adding an extra layer of security against hacking and other cyber threats.

**2\.** [**Smart Contract Metadata Registry**](https://github.com/KeystoneHQ/Smart-Contract-Metadata-Registry) 

![1qDHNmaiW4aiPq8P9a4Pd7A.webp](https://keyst.one/images/1q_DH_Nmai_W4ai_Pq8_P9a4_Pd7_A_7618a2107f.webp)

Simultaneously while integrating MetaMask, we also worked together with multiple DeFi applications to integrate their [**ABIs**](/why-are-hardware-wallets-out-dated-for-defi-8a3d81a27572) into our Smart Contract Metadata Registry in order to address and combat the issues of blind signing.

To name a few partners: [**PancakeSwap**](/pancakeswap-keystone-partnership-secure-signing-on-bsc-blockchain-29739db00930), [**Sushi**](/sushi-keystone-partnership-secure-defi-signing-on-multiple-blockchains-349384c1c978), [**Trader Joe**](/trader-joe-keystone-partnership-secure-signing-on-avalanche-blockchain-1d44a34b1f7e), [**DODO**](/dodo-keystone-partnership-secure-signing-on-another-top-dex-56862781777), [**SpookySwap**](/spookyswap-keystone-partnership-secure-signing-with-top-dex-protocol-on-fantom-ecosystem-70e6153a1d3e), [**Perpetual Protocol**](/perpetual-protocol-keystone-partnership-secure-signing-on-layer-2-perpetual-futures-dex-56e53308799d)

**3\.** [**GoPlus Security Partnership**](/introducing-goplus-security-keystone-partnership-9285226cd284) 

![17UQo5MBVtYbcJQxjewO0UQ.webp](https://keyst.one/images/17_U_Qo5_MB_Vt_Ybc_J_Qxjew_O0_UQ_c1c1f46a4a.webp)

We then decided to enlist the [**Go+ Security**](https://gopluslabs.io/) team to help improve our defenses as hacking became prevalent in the Web3 space.

By connecting to Go+ Security’s database, we were able to decode transactions more efficiently when interacting with public chains, non-custodial wallets, decentralized exchanges, and crypto data aggregators, among others.

In addition, this also enhanced our users’ experience by displaying more security-related information, such as contract authenticity and risk factors on Keystone’s 4-inch screen, which enabled users to be alerted in advance prior to approving any transactions.

**4\.** [**BlockSec Partnership**](https://keystonewallet.medium.com/new-partnership-announcement-blocksec-keystone-c134e2469bf2) 

![1n-HnIkvdi1Bo-QVqb2LkSw.webp](https://keyst.one/images/1n_Hn_Ikvdi1_Bo_Q_Vqb2_Lk_Sw_8185b3a69e.webp)

We also sought assistance from [**BlockSec**](https://blocksec.com/), a reputable Web3 blockchain security firm to join us on our journey.

Partnering with BlockSec allowed us to seamlessly and efficiently resolve ABI data on Ethereum with help from their security data. This greatly allowed us to focus on our strengths, which is to build a world class hardware wallet, rather than having to devote resources to building infrastructure.

**5\.** [**Solflare Web Extension**](https://twitter.com/solflare_wallet/status/1535290700761387012?s=20&t=c6Xb-HL86BqMCSpMr3KHoQ) **&** [**Solflare Mobile App**](https://keystonewallet.medium.com/keystone-integrates-with-solflare-mobile-efee70ffa3a1) **Integration** 

![1Q4LX72gEysYoUMe14iEO9Q.webp](https://keyst.one/images/1_Q4_LX_72g_Eys_Yo_U_Me14i_EO_9_Q_78d370cb0a.webp)

In June, we decided to broaden our support for non-EVM chains and began to explore the [**Solana**](https://solana.com/) ecosystem as our first step in this direction. This eventually resulted in us forming a partnership to integrate with the Solflare team.

[**Solflare**](https://solflare.com/) is an all-encompassing and secure crypto wallet and is available as both a web extension and a mobile application. The integration enables Keystone users to safely manage their SOL and SPL tokens, and also access various decentralized applications on the Solana network.

**6\.** [**Sender Web Extension**](https://keystonewallet.medium.com/new-integration-with-sender-wallet-one-of-the-most-popular-wallet-for-near-ecosystem-2a0b1a4d135e) **Integration** 

![1Tj5L1Gfq5w8hRvtCysSmZw.webp](https://keyst.one/images/1_Tj5_L1_Gfq5w8h_Rvt_Cys_Sm_Zw_95daf35a0f.webp)

We then turned our attention to the [**NEAR**](https://near.org/) ecosystem. This led to our integration with the Sender Wallet team, which was smooth sailing.

[**Sender**](https://senderwallet.io/)  is a web and mobile wallet constructed on NEAR. The integration provided a comprehensive experience for Keystone users that encompass asset management, staking, NFT collections, and trading on NEAR.

Sender is developed as a non-custodial wallet, which gives its users complete autonomy over it. This means that users have complete authority over their private keys, don’t have to go through complicated procedures to demonstrate ownership of their funds and have the option of additional security measures, such as creating recovery passwords or linking it to hardware wallets like Keystone.

**7\.** [**Fewcha Web Extension**](https://twitter.com/nguyenleFCH/status/1591088432100814851?s=20&t=c6Xb-HL86BqMCSpMr3KHoQ) **Integration**

![Screen Shot 2024-04-23 at 13.34.43.png](https://keyst.one/images/Screen_Shot_2024_04_23_at_13_34_43_343f6034d4.png)

Riding the momentum, we seized the opportunity and focused on [**Aptos**](https://aptoslabs.com/), swiftly initiating conversations with the Fewcha Wallet team.

The partnership resulted in a groundbreaking achievement, as we became the first hardware wallet to support Aptos and they became the first Aptos wallet extension to support a hardware wallet.

[**Fewcha wallet**](https://fewcha.app/) is a non-custodial Web3 wallet for the Aptos blockchain. It facilitated and enabled Keystone users to freely and securely move their digital assets between their wallet and various Aptos dapps.

**8\.** [**SubWallet Web Extension**](https://www.youtube.com/watch?v=nVYanDOnfbE) **Integration**

![1gOgS8L4do2Wf9TONcVbN3w.webp](https://keyst.one/images/1g_Og_S8_L4do2_Wf9_TO_Nc_Vb_N3w_cf294dcef1.webp)

As the end of the year approached, we delved into the world of [**Polkadot**](https://polkadot.network/) **&** [**Kusama**](https://kusama.network/) and stumbled upon the SubWallet team. As the friendship between both our teams blossomed, so did the integration between our products.

[**SubWallet**](https://subwallet.app/) is a user-friendly gateway for the Polkadot and Kusama ecosystem. Their goal is to offer users the most straightforward and safest way to connect to various DeFi and GameFi dapps.

The wallet is constructed on top of Polkadot{.js} and emphasizes on simplifying user access and interaction with Web3 applications built on the Substrate Framework. It is available on both Desktop & Mobile and is open for [**Public Testing**](https://twitter.com/subwalletapp/status/1587403200105451520?s=20&t=feiKXKS6Tz_q8qPpoZKOJA).

Currently, SubWallet can operates seamlessly on both Substrate and EVM networks. It offers support for more than 80 networks within the Polkadot and Kusama ecosystem. By integrating with SubWallet, Keystone users can access and manage their assets across both the Polkadot and Kusama ecosystem.

**9\.** [**Safe Web Extension**](https://keystonewallet.medium.com/keystone-safe-gnosis-safe-eliminate-multi-signature-blind-signing-once-and-for-all-f3624df52950) **&** [**Safe Mobile App**](/keystone-integrates-with-the-safe-ios-mobile-app-ensuring-elevated-security-a9d347099136) **Integration**

![1ujKK2CimcHhNNxYDrojctg.webp](https://keyst.one/images/1uj_KK_2_Cimc_Hh_N_Nx_Y_Drojctg_299bacffea.webp)

We concluded 2022 by integrating with [**Safe**](https://safe.global/) and implemented support for it’s multi-signature functionality. We also greatly improved the security issues surrounding multi-signature transactions by eliminating blind signing.

This integration gave our users access to create and set up multi-sig wallets, in which multiple signatures are required to authorize any transaction.

The introduction of multi-signature support in the Keystone hardware wallet is particularly advantageous for individuals/companies who wish to share control of their funds with multiple parties, such as a business partner or family member.

**10\.** [**Keplr Web Extension**](/keystone-integrates-with-keplr-becomes-part-of-the-cosmos-ecosystem-4202c9b6277a) **Integration**

![1KiwtL90DYZY-f8SoBkTafA.webp](https://keyst.one/images/1_Kiwt_L90_DYZY_f8_So_Bk_Taf_A_c5f6d71a82.webp)

2023 then arrived. We made a huge splash in January and started the year off with a bang by forming an integration partnership with the Keplr team.

[**Keplr**](https://www.keplr.app/) is a reputable IBC-compatible wallet for the [**Cosmos**](https://cosmos.network/) Interchain ecosystem, developed by [**Chainapsis**](https://twitter.com/chainapsis). Being open-source, it is widely accepted by many Cosmos users because of its capability to support a variety of coins and tokens in the ecosystem.

With this integration, Keystone users can now seamlessly manage their Cosmos assets securely by simply connecting their device to Keplr’s Web Extension Application.

This partnership merges the user-friendly features of a software wallet with the robust security of a hardware wallet, providing Cosmos users with the best of both worlds. Additionally, it works towards reinforcing the security of the entire Cosmos ecosystem by providing more choices for Cosmos users to safeguard their assets on a hardware wallet.

## Conclusion

Since the inception of Keystone, we have proven ourselves to be a dependable and secure option for storing digital assets. We have made several improvements and updates to enhance the user experience and security of the device. We are certain that by keeping our emphasis on security and affordability, Keystone hardware wallet will continue to be a preferred choice among Web3 users in the future.

We’re ready to shake things up in the new year, keep an eye out for us!

## About Keystone

[Keystone](https://keyst.one/) is a 100% air-gapped QR code hardware wallet. The wallet is [designed](/keystone-product-design-principles-cd833bc11125) to maximize attack cost, minimize trust, prevent potential human error, avoid single-point-of-failures and boost interoperability. Keystone is integrated with MetaMask ([Extension](https://twitter.com/MetaMask/status/1469351219290382341) and [Mobile](https://twitter.com/MetaMask/status/1517256930389110785)) as well as other top software wallets like [Solflare](https://twitter.com/KeystoneWallet/status/1536713613175496704?s=20&t=ARJFK2l8SSXITIVhjijGzw), [Sender](https://twitter.com/SenderWallet/status/1564894871445446657?s=20&t=ARJFK2l8SSXITIVhjijGzw), [Fewcha](https://twitter.com/KeystoneWallet/status/1582186370209939456?s=20&t=ARJFK2l8SSXITIVhjijGzw) etc.

[Website](https://keyst.one/) | [Twitter](https://twitter.com/KeystoneWallet) | [Discord](https://keyst.one/discord) | [Telegram](https://t.me/KeystoneWallet) | [GitHub](https://github.com/KeystoneHQ)

1b6TUPWVhw13n4I9Kn4X-Eg.webp

Keystone’s 5th Birthday Bash: 25% off ALL Products, February 1st-10th


As we promised, we and our auditing partner completed the first audit report of the Keystone3 Pro in November 2023. Now it’s time for us to take a deeper dive into this report.

Its audit by Keylabs, transcends the ordinary, marking a pivotal moment in the saga of digital asset protection. In a domain long dominated by giants like Ledger or Trezor, Keystone3 emerges not just as a challenger but as an innovator, reshaping perceptions and setting new benchmarks.

**Keystone stands out in hardware wallet security, achieving several ‘firsts’ in Keylabs audits**: It’s the **first **to feature a point-of-sale grade secure microcontroller, the **first** with a fingerprint sensor, the **first** to implement Physically Unclonable Function-based keys on secure elements, the **first** audited with three secure elements, and the **first** with an effective tamper circuit.

This audit isn’t merely a comparison; it’s a detailed examination of how Keystone3 is carving out its unique stronghold in the world of hardware wallets.

## Keystone3 Pro’s Pioneering Features

Keystone it is the first wallet audited by Keylabs to incorporate a point-of-sale grade secure microcontroller, offering robust defense against digital threats.

The wallet’s integration of a fingerprint sensor is a novel approach to biometric security, a feature not seen in other hardware wallets. Another significant innovation is the use of Physically Unclonable Function (PUF)-based keys on its secure elements, enhancing the security of key generation and storage. The seed phases of your wallet was stored in Maxim’s chip, fortified and untouchable.

![Frame 10643.jpg](https://keyst.one/images/Frame_10643_b53d7bdd3d.jpg)

**The Keystone3 boasts three secure elements, compared to single element, providing multiple layers of security.** Its effective tamper circuit, another first in the industry, renders the device unusable upon tampering, surpassing the physical security capabilities of other wallets. The audit also highlighted Keystone3’s potential for further improvements and security enhancements in future firmware updates, indicating a progressive approach to wallet security.

Another notable finding was the wallet’s effective tamper circuit, which deactivates the device upon any signs of tampering. This feature significantly elevates the wallet’s defense against physical attacks.

## Key Takeways from the Audit

The Keylabs audit uncovered several key insights into the Keystone3’s security architecture. A major strength identified was the wallet’s robust tamper response, which outperforms other product’s in terms of physical security. However, the audit also brought to light a high severity issue related to tamper response inadequacy, alongside two low Severity firmware issues, and three low severity hardware vulnerabilities.

Keystone does not dodge away from these issues; instead, we clearly inform everyone about their existence. The audit report mentions that these issues have been properly resolved.

The Keystone3’s use of multiple secure elements and a secure microcontroller provides a strong defense against various threats, matching and sometimes surpassing other product’s security protocols.

## Threat Model and Security Concerns

The audit’s approach to threat modeling was like a grand chess game, with Keylabs anticipating moves from a variety of adversaries.

It mapped out threats from remote hackers, considering remote attackers, local attackers, insider threats, and various attack vectors. This model was adjusted to reflect Keystone3’s unique features, such as the fingerprint sensor and multiple secure elements. Keystone3’s approach to hardware security, particularly with its point-of-sale grade microcontroller and PUF-based keys, provides robust protection against a wide range of threats, aligning closely with Ledger’s security measures but adding its innovative hardware enhancements.

This holistic view of security, addressing threats from all angles, shows Keystone3’s commitment to being a leader in wallet security, constantly evolving to meet the challenges of the digital age.

## Future Directions for Keystone3: Setting New Industry Standards

The audit’s recommendations offer a roadmap for Keystone3 to elevate its security framework.

Suggested strategies include strengthening physical security features, improving secure boot processes, and implementing multi-factor authentication. These enhancements are crucial for Keystone3 to surpass the high security standards set by competitor, especially in firmware stability and physical security.

Keystone3’s potential to lead the hardware wallet industry lies in its ability to integrate these recommendations effectively, setting new benchmarks for wallet security. The wallet’s innovative features, combined with Keylabs’ suggestions, position Keystone3 as a leader in the next wave of hardware wallet technology, potentially surpassing established benchmarks.

## Conclusion

The Keystone3 Wallet, through its comprehensive audit by Keylabs, asserts itself as a vanguard in the realm of cryptocurrency security. This audit isn’t just a mere comparison to competitive; it’s a testament to Keystone3’s ambition and potential. Keystone3 is not only challenging the status quo but also inspiring a new wave of innovation in hardware wallet technology.

As Keystone3 continues to refine its security measures, it stands on the brink of redefining hardware wallet security, challenging the established standards set by Ledger. This moment marks not just a new product release but a significant leap forward in ensuring the safety and integrity of digital currencies.

## About Keystone

[**Keystone](https://keyst.one/)** is an [**open-source](https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752)** airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with [**three secure element chips](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461)**. One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4)**, reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim](https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff)** of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask](https://metamask.io/)** (both [**Extension](https://twitter.com/MetaMask/status/1469351219290382341)** and [**Mobile](https://twitter.com/MetaMask/status/1517256930389110785)** versions), as well as other premier software wallets like the [**OKX Web3 Wallet](https://www.okx.com/web3)**, [**Solflare](https://solflare.com/)**, [**Rabby](https://rabby.io/)**, and more.

[**Website](https://keyst.one/) | [Twitter](https://twitter.com/KeystoneWallet) | [Discord](https://keyst.one/discord) | [Telegram](https://t.me/KeystoneWallet) | [GitHub](https://github.com/KeystoneHQ)**


1aw4LFNwbgVPxgW_YjF2o4g.webp

Deep Dive into Next-Gen Hardware Wallet : Crashing Keystone3 Pro Audit

![rust.webp](https://keyst.one/images/rust_f74fbe8563.webp)

Anyone with a technical background understands the challenges associated with developing on [**embedded systems**](https://www.techtarget.com/iotagenda/definition/embedded-system). These systems often have limited memory, processing capabilities, and battery life, necessitating judicious use of these resources by developers. Additionally, real-time constraints are crucial, requiring the software to be deterministic and free from any sort of delays.

## Why Rust?

Keystone recognizes [**Rust**](https://www.rust-lang.org/) as a contemporary programming language engineered for safety, speed, and expressiveness. It is particularly suitable for developing applications critical to security, such as operating systems, embedded systems, and financial software. The type system and memory safety model of Rust aid in averting common errors that could result in security vulnerabilities, like dangling pointers and null pointer dereferences, thereby enhancing the reliability and security of applications. Moreover, Rust also offers a high level of control, making it an excellent choice for performance-critical applications, a key consideration for embedded systems where resources are limited. Furthermore, it’s popularity within the crypto community is evident, with blockchains such as [**Solana**](https://solana.com/) adopting it.

By utilizing Rust, the Keystone team can allocate development resources more efficiently, focusing on the integration of our hardware wallet with additional software wallets instead of the underlying development. One good example would be our recent [**integration with Keplr 2.0’s desktop plug-ins**](https://twitter.com/keplrwallet/status/1695059495435505933?s=20).

## Reflecting on the Past
![android.webp](https://keyst.one/images/android_9a6f161155.webp)

The Keystone Pro Gen2 was built entirely on Android

The previous generation of the Keystone Wallet was built on Android. We chose Android for its advanced set of tools that are crucial for applications such as the camera (for scanning QR codes), touchscreen (for ease of use), and other functionalities that improve the overall user experience. Additionally, the decision to construct our hardware wallet application layer on an Android operating system was influenced by its [**open-source nature**](https://github.com/KeystoneHQ/Keystone-cold-app) and its widespread use in several payment and banking terminals.

However, two drawbacks we encountered were the inability to make the hardware wallet entirely open-source because certain parts of the operating system were proprietary to different vendors and the extensive size of the Android codebase, which made auditing difficult. Consequently, we proceeded to [**implement several measures**](https://github.com/KeystoneHQ/Keystone-system) to mitigate potential Android vulnerabilities, including:

* Disabling adb and removing the adb daemon
* Eliminating unrelated system processes and applications
* Prohibiting the installation of third-party applications
* Patching Linux kernel vulnerabilities

## Transiting from Android to Embedded OS

In early 2022, we decided that it was the time to develop the Keystone wallet further by incorporating significant enhancements to make it completely open-source.

![embed.webp](https://keyst.one/images/embed_7fbafdd646.webp)

An embedded operating system is designed only to perform a specific task

The biggest hurdle our team faced was ensuring the security of the software on the Keystone 3 hardware wallet. Rust’s emphasis on safety made it an obvious choice for this purpose. We leveraged Rust’s type system to prevent bugs and errors and utilized its ownership system for safe memory management. By harnessing these features, we were able to create a software highly resilient to attacks.

Performance was another significant challenge, as the software on the Keystone 3 hardware wallet needed to be efficient enough to operate with the device’s limited resources. Rust’s performance optimizations facilitated meeting this requirement. We employed Rust’s compiler to optimize our code’s performance and utilized its standard library to access efficient algorithms and data structures. This approach enabled us to develop software that was both secure and efficient.

## What’s Next?

The next major step in Keystone’s open-source plan is to concentrate on usability and documentation. Our main objective is to make the Keystone Github repository as accessible and readable as possible, even for those without an engineering background. We plan to make the documentation straightforward and succinct, enabling anyone to comprehend our development progress. The objective of this open-source initiative is to develop the Keystone wallet into the most secure and easy-to-use hardware wallet on the market.
![road.webp](https://keyst.one/images/road_92d8fd66a4.webp)
The road ahead may be uncertain, but it’s the one we must take to move forward

The release of the open source codes for Keystone 3 will be done in a staggered manner rather than simultaneous. This approach is necessary to protect our users from the heightened risk of cyberattacks that typically arise when the source code is revealed, as it simplifies the process of identifying vulnerabilities.

The importance of open-source cannot be overstated for us. It not only substantially reduces the risk of backdoor insertions by rogue engineers but also enables smoother integrations with various DApps and software wallets. We are extremely optimistic about the potential for expanding compatibility, which will also contribute to reducing trust dependencies on our products in the future.

## Closing
![bridge.webp](https://keyst.one/images/bridge_35281544e3.webp)
Build bridges, not walls

We are fully committed to enhancing the Keystone 3 by focusing on usability, documentation, and maintaining the vitality of open-source. This journey has its challenges, but it is necessary and worthwhile as we strive to provide a secure and easy-to-use wallet, facilitate smoother integrations, and ultimately reduce the reliance on our products. By doing so, we are not only contributing to the security and functionality of the Keystone hardware wallet but also promoting a more open and collaborative ecosystem.

## About Keystone

[**Keystone**](https://keyst.one/) is an [**open-source**](/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with [**three secure element chips**](/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461). One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases**](/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim**](/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff) of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask**](https://metamask.io/) (both [**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785) versions), as well as other premier software wallets like the [**OKX Web3 Wallet**](https://www.okx.com/web3), [**Solflare**](https://solflare.com/), [**Rabby**](https://rabby.io/), and more.

[**Website**](https://keyst.one/) **|** [**Twitter**](https://twitter.com/KeystoneWallet) **|** [**Discord**](https://keyst.one/discord) **|** [**Telegram**](https://t.me/KeystoneWallet) **|** [**GitHub**](https://github.com/KeystoneHQ)

rust.webp

Opting for Rust in the Development of Keystone 3

Greetings, I am [**Lixin**](https://twitter.com/BitcoinLixin), the CEO of [**Keystone Hardware Wallet**](https://twitter.com/KeystoneWallet). [**Not so long ago, I shared insights on our holistic approach to hardware wallet design**](https://blog.keyst.one/keystone-product-design-principles-cd833bc11125), emphasizing the critical necessity of looking at security from various angles. Building on that foundation, today, I wish to shed light on our latest product, the Keystone 3 Pro, and its embodiment of what we call “community-oriented” product design.

![Similar to a Weaponsmith meticulously crafting a shield, Keystone’s objective is to develop a product that safeguards the wider Web3 community](https://keyst.one/images/1d63ngt2_Ctp_Svh1y_HA_4j_Ng_1eb0e9b596.webp)

It’s been 12 years since I embarked on my journey in the tech world, starting as a product manager. Despite now holding the title of CEO, I remain a product manager at heart, continually focusing on the end-user’s experience and needs.

## Web2 vs Web3

Before delving into the article, it’s crucial to understand the distinct differences between Web2 and Web3 ideologies. Succinctly put: while Web2 companies construct walled gardens, Web3 organizations are committed to building bridges to forge connections.

![Web2](https://keyst.one/images/17_Dfaseyy_Re_KM_1rw_QO_Htt_PA_ccebd2bdf0.webp)

![Web3](https://keyst.one/images/1rlyje_Z_Vzm_Psz_Pb_R2_Jh8_Gg_Q_fecdf5c96e.webp)

 1. **Web2 Mentality:** Here, the emphasis is on creating an enclosed and self-contained ecosystem that effectively retains users. The main motivation is to optimize financial gains. While this is not inherently negative, it does limit open collaboration and innovation.

 2. **Web3 Vision:** This approach is about building bridges. It’s about fostering connections between disparate “islands” and allowing for seamless integration. Even more impressively, the products in Web3 aren’t just “connected”; they can be layered atop each other to cater to myriad scenarios.

## What is a “Community-Oriented” Product?

Now, after helping you understand the stark contrasts between the philosophies of Web2 and Web3, I’d like to share the design principles that motivated the creation of the Keystone 3 Pro. Great “community-oriented” products are:

 1. **Non-restrictive:** In today’s digital age, communities crave a setup where their data isn’t confined to a single app or platform. They seek the freedom to choose.

 2. **Composable:** Products, especially in the Web3 space, should be inherently interoperable, allowing them to be meshed together to cater to a multitude of user scenarios.

 3. **Less Profit Driven:** While such a design philosophy might not always be viable, the beauty of Web3 lies in consensus-building. If a product garners community consensus, its longevity and success are assured.

![Community-Oriented products empower their users with options](https://keyst.one/images/123d_ez1_w_v_J_Kn_f_Z_n_Q_204b0e62aa.webp)

Let’s take a look at some examples where this ethos is demonstrated in Web3:

 1. [**BIP39**](https://www.halborn.com/blog/post/what-is-a-bip39): At its core, BIP39 is about generating a [**seed phrase**](https://blockworks.co/news/what-are-seed-phrases#:~:text=A%20seed%20phrase%20is%20a,a%20seed%20phrase%20for%20recovery.), which is a series of easily remembered words. This serves as a human-friendly representation of a wallet’s seed, which is crucial for backing up and restoring wallet data. Due to it’s widely adopted standard, the BIP39 seed phrase ensures that users can migrate or recover their assets across different software wallets without any hitches.

 2. [**Fat Protocol Thesis**](https://thedefireport.substack.com/p/revisiting-the-fat-protocol-thesis): The thesis here is that most of the value is captured at the protocol layer (e.g., [**Ethereum**](https://ethereum.org/en/), [**Bitcoin**](https://bitcoin.org/en/). Applications built on top (e.g, Decentralized apps like [**Uniswap**](https://uniswap.org/), [**Sushi**](https://www.sushi.com/), [**Pancakeswap**](https://pancakeswap.finance/) might be numerous and valuable, but the underlying protocol will still capture the significant share of the value.

 3. [**Composable Wallets**](https://medium.com/coinmonks/1the-importance-of-composable-wallets-for-users-and-developers-accb2aadff49): In summary, composable wallets can be seamlessly integrated or used in combination with other software or digital wallet solutions, providing users with expanded functionality and interoperability. These types of wallets are especially useful in Decentralized Finance (DeFi) and blockchain ecosystems where multiple tools, platforms, and protocols often need to interact.

## Keystone 3 Pro — The People’s Hardware Wallet

![Protecting our users 24/7](https://keyst.one/images/1_Vym_Y_Fou_R_Ud_Ka_KK_Ps_R5d_O_Jg_00f1c7395f.webp)

So, what makes the Keystone 3 Pro a great “community-oriented” product?

 1. **Interoperable (Non-restrictive & Composable):** Rather than pushing for our own ecosystem, we’ve ensured that the Keystone 3 Pro is compatible with various software wallets. This not only enhances the security of these software wallets but also provides users with the comfort of not having to purchase and adapt to a new hardware wallet and its unique software application as their digital asset holdings continue to grow. Our vision is to transition away from our proprietary companion software wallet and to ensure that the Keystone 3 Pro is universally compatible with every software wallet out there.

 2. [**Multi-Seed Support**](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4) (Less Profit Driven): We understand the importance of flexibility. That’s why we’ve programmed the Keystone 3 Pro to be able to support up to three seed phrases, eliminating the need for users to purchase several Keystone devices to manage multiple seed phrases simultaneously.

Commercially, these decisions may seem conflicting. But we firmly believe in the overarching thesis of Web3 — **Consensus Trumps All**. By prioritizing the community and their needs, we believe that the Keystone 3 Pro will not only stand out but also stand the test of time.

## Closing Thoughts

To all our valued users, I deeply appreciate the improvement feedbacks you’ve provided Keystone throughout the years. It has not only been instrumental in the growth and refinement of the Keystone 3 Pro but has also underscored the significance of a community-driven approach.

Keystone’s mission has always been to equip you with the best, and your insights have been a beacon guiding us through the ever-evolving landscape of Web3. As we continue on this journey, we hope you remain by our side and share more of your Keystone experiences and feedback with us.

![We place great importance on and prioritize user feedback](https://cdn-images-1.medium.com/max/2048/1*VymYFouRUdKaKKPsR5dOJg.png)

Do continue to stay connected and share more thoughts with us about the Keystone 3 Pro on Twitter — [**@KeystoneWallet**](https://twitter.com/KeystoneWallet), as we further our commitment to safeguarding your financial independence.

Thank you for being a pivotal part of our story. Here’s to more years of collaboration and mutual growth!

## About Keystone

[**Keystone**](https://keyst.one/) is an [**open-source**](https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with [**three secure element chips**](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461). One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases**](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim**](https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff) of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask**](https://metamask.io/) (both [**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785) versions), as well as other premier software wallets like the [**OKX Web3 Wallet**](https://www.okx.com/web3), [**Solflare**](https://solflare.com/), [**Rabby**](https://rabby.io/), and more.

[**Website**](https://keyst.one/) | [**Twitter**](https://twitter.com/KeystoneWallet) | [**Discord**](https://keyst.one/discord) | [**Telegram**](https://t.me/KeystoneWallet) | [**GitHub**](https://github.com/KeystoneHQ)


A Community-Centric Designed Hardware Wallet.jpg

Keystone 3 Pro: A Community-Centric Designed Hardware Wallet

In the contemporary world, a rising tide of environmental concerns — land, water, and air contamination, climatic changes, biodiversity loss, or health repercussions like respiratory issues and cancer — continues challenging humanity. Among these pressing concerns, product packaging is one of the easily overlooked culprits.

## The Unseen Impact of Unboxing Joy

![1_3olOHaWWvsFY3cxcDOnJQ.webp](https://keyst.one/images/1_3ol_O_Ha_W_Wvs_FY_3cxc_D_On_JQ_4135957146.webp)

Most of us have experienced the joy of unboxing a new electronic device. That distinct smell, the pristine components, and the adrenaline rush that accompanies the reveal. However, each time we relish this moment, we inadvertently contribute to the mounting waste from packaging materials. For many businesses, the quest for delivering an optimal unboxing experience can often overshadow the bigger environmental picture.

At Keystone, we’re on a mission to rethink this dynamic. While our immediate business objectives focus on enhancing product experience and driving sales, we’re equally, if not more, invested in our planet’s future. With the new packaging for our Keystone 3 Pro, we are embarking on a journey to harmonise the thrill of unboxing with sustainable practices.

## Our Approach: Incorporating Sustainability

## **Prioritising Eco-friendly Materials**

![1MEvjx37eQDWEzQSGAZKSMg.webp](https://keyst.one/images/1_M_Evjx37e_QDW_Ez_QSGAZKS_Mg_64ebac3766.webp)

**Purity in Packaging**: Our product’s external packaging utilises FSC(Recycled Kraft Paper), recognised for its near-complete pulp content and zero plastic elements. The surface of the packaging paper does not use PP film to protect the ink, but instead uses substitute plastic oil to protect the printed content. It contains no plastic components, meaning our packaging materials are 100% biodegradable.

![1gdlE-owFlHr9AvwflRUkPw.webp](https://keyst.one/images/1gdl_E_ow_Fl_Hr9_Avwfl_R_Uk_Pw_3cb1e10bb1.webp)

**Sensible Inner Design:** For the inner core, we’ve opted for cardboard made from RGBP(Recycled Gray Board Paper), commonly known as grey cardboard. It’s not only robust but also has a reduced carbon footprint compared to its white cardboard counterpart due to the reduced bleaching processes.

![17sBv1qEKtS1oBdaIFVYpsg.webp](https://keyst.one/images/17s_Bv1q_E_Kt_S1o_Bda_IFV_Ypsg_e776b503fd.webp)

**Optimised Tray Design:** Crafted from black kraft card paper, the product tray is meticulously designed to reduce paper consumption without compromising product safety. Furthermore, we’ve incorporated cushioning paper, eliminating the need for traditional, less eco-friendly foam or plastic buffers.

![1WJOlYaO1ZITVF6SnB73ToQ.webp](https://keyst.one/images/1_WJ_Ol_Ya_O1_ZITVF_6_Sn_B73_To_Q_9a8c51c3e7.webp)

**Environment-friendly ink:** The content printing uses environmentally friendly vegetable oil ink.

## Embracing Recycling and Reuse

![1cRF8LtwJ02GqcvlKSkejoA.webp](https://keyst.one/images/1c_RF_8_Ltw_J02_Gqcvl_K_Skejo_A_9b5f52a8c5.webp)

At Keystone, we believe packaging is more than just a protective cover or an impressive unboxing moment. We design our packaging to be repurposed, recycled, and reused long after its initial purpose is fulfilled. Our unique drawer-style packaging, accompanied by our special jelly glue, can easily be repurposed into a functional storage unit that can be attached under your table. What’s more, the washable nature of the glue ensures it can be reused, making it ideal for securing other items like power strips.

## Final Thoughts: Our Eco-promise

![1CpBZZf8Y_byiS3k1MS67MQ.webp](https://keyst.one/images/1_Cp_BZ_Zf8_Y_byi_S3k1_MS_67_MQ_e6a221b018.webp)

Our journey towards sustainable packaging isn’t merely a business move; it’s a testament to our unwavering commitment to Mother Earth. We genuinely believe that even if our efforts offset a minuscule amount of carbon, it’s a step in the right direction. Through constant innovation, we aim to provide our customers with not just a product but a sustainable experience.

## About Keystone

[**Keystone**](https://keyst.one/) is an [**open-source**](/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilises an embedded system. To further enhance its security, the device is equipped with [**three secure element chips**](/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461). One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases**](/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim**](/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff) of maximising security against potential threats, minimising dependence, reducing human errors, and eliminating single points of failure, Keystone also strongly emphasises extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask**](https://metamask.io/) (both [**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785) versions) and other premier software wallets like the [**OKX Web3 Wallet**](https://www.okx.com/web3), [**Solflare**](https://solflare.com/), [**Rabby**](https://rabby.io/), and more.

[**Website**](https://keyst.one/) **|** [**Twitter**](https://twitter.com/KeystoneWallet) **|** [**Discord**](https://keyst.one/discord) **|** [**Telegram**](https://t.me/KeystoneWallet) **|** [**GitHub**](https://github.com/KeystoneHQ)

1L2uBmGqpJucm--qIB568-w.webp

Sustainable Packaging: Keystone’s Perspective

## How can you verify your hardware wallet isn’t a fake?

_By_ [_Patrick Kim_](https://medium.com/@patrickkim_1991)
![1x_gs4lMchx2hMgP1vxBjqw.webp](https://keyst.one/images/1x_gs4l_Mchx2h_Mg_P1vx_Bjqw_6d0d18f752.webp)
Supply chain attacks are one of the most serious security threats for hardware wallets because they target vulnerabilities in the logistics process and could happen without the owner knowing. This is why you should never purchase a hardware wallet from anywhere other than an official website or authorized reseller. The Keystone, like most hardware wallets, comes with tamper-evident packaging as a countermeasure. While tamper-evident packaging raises the cost of supply chain attacks, it’s [not a foolproof measure](https://www.youtube.com/watch?v=Y1OBIGslgGM&feature=youtu.be&t=434) to prevent them.

### How Web Authentication Works Upon Initialization

The Keystone’s Web Authentication process gives you a much higher degree of assurance that your device has not fallen victim to a supply chain attack. When you initialize your Keystone, you will be prompted to visit [https://keyst.one/authentication](https://keyst.one/authentication) to confirm your device has not been tampered with or swapped out for a fake somewhere along the supply chain. Web Authentication works because of the same digital signature algorithm used in Bitcoin. In asymmetric encryption, only a private key can produce a digital signature that can be verified with its corresponding public key, and only a private key can decrypt information encrypted using its public key. This is one-way transfer of information powers verifiability in Bitcoin.

Each Keystone has a pair of public and private keys pre-installed in the Secure Element during manufacturing that is used solely for the purpose of Web Authentication. This pair of keys has nothing to do with the public and private master key pair generated from [physical entropy](/secure-elements-harnessing-a-force-of-nature-14a959da7b54) by the Secure Element during initialization of the Keystone. We will call this pair of public and private keys Web Authentication keys.

The backend of the Web Authentication page is operated by a hardware security module (HSM) server, which is a highly secure crypto processing service offered by AWS. Like a Secure Element, it also has a pair of public and private keys. Each Keystone’s [Secure Element](/secure-elements-the-last-line-of-defense-4669012d4edc) knows the public key of the HSM server, while the HSM server knows that device’s Web Authentication public key.

On the Web Authentication page, you will be prompted to scan a QR code. This QR code is a random string of numbers generated by the HSM which has been encrypted with your Keystone’s Web Authentication public key and then signed by the HSM’s private key. When you scan this QR code, your Keystone will first use the HSM’s public key to verify the HSM server’s signature of the message. This is to ensure that the QR code you are looking at is from the official Web Authentication page, and not the victim of a phishing scam.

The Keystone will then use its Web Authentication **private key** to decrypt the message that was encrypted with its public key by the HSM server. This results in the 8 digits you are asked to enter into the Web Authentication page after scanning the QR code. The HSM system will then check to see whether the digits align with the original random string it generated. If Web Authentication fails, you will not want to use your device at all. A failure message indicates that either your Keystone is not operating the Secure Element it was manufactured with, or that your device was swapped out for a counterfeit entirely.

### What Are the Potential Risks for it Being Compromised?

To spoof this process, attackers would need a considerable amount of resources. Not only would the HSM server have to be hacked, but the device’s Secure Element would also have to have been compromised. We are using AWS’s HSM server, which in our evaluation has the highest degree of security. With the Secure Element’s strong track record of being notoriously difficult to directly hack into, it is extremely improbable that both would be compromised at the same time.

The Keystone Pro also includes an [anti-tamper self-destruct mechanism](/self-destruct-mechanisms-unique-defense-against-side-channel-attacks-4cfea3d4eff1) that would render the device useless in the event attackers seek to open it and tamper with the components inside.

1x_gs4lMchx2hMgP1vxBjqw.webp

Web Authentication: A Counter to Supply Chain Attacks

We are beyond excited to share our latest strategic partnership with imToken. This collaboration marks a significant milestone in enhancing the security and usability of managing digital assets across various EVM chains.

Let’s start with a brief introduction. As a hardware wallet company, Keystone is deeply committed to ensuring the utmost security for your digital assets. We specialise in providing robust devices designed to protect your valuable cryptocurrencies from online threats. Our approach centres around generating and managing your seed phrase in a completely offline environment, thereby keeping potential hackers at bay.

Our integration with imToken represents a unique blend of the convenience of software wallets and the unparalleled security of hardware wallets. This partnership is more than just merging two technologies; it’s about offering you the freedom to choose how you manage your EVM assets through various web3 wallets.

### Exploring the imToken in detail:

![imToken wallet.webp](https://keyst.one/images/im_Token_wallet_cdc326d59f.webp)

imToken stands out in the crowded field of asset management wallets, thanks to its user-friendly UI & UX designs. This simplicity has made it a preferred choice over other web3 wallets. They’re also revolutionising the software wallet space by adopting an open-source approach and encouraging community contributions.

Here’s what imToken offers you:

* Asset management across EVM chains on iOS and Android platforms.

* An intuitive swap function for easy token exchanges.

* A built-in Dapp browser to streamline all your web3 interactions.

* NFT management directly from the wallet interface.

* A comprehensive wallet page displaying asset value and current market trends.

* A market function for real-time tracking of your favorite cryptocurrencies.

### Unifying Multi-Chain Support:

![imToken multi-chain support.webp](https://keyst.one/images/im_Token_multi_chain_support_a8d5e02baf.webp)

imToken Wallet is your one-stop solution for managing diverse digital assets across multiple chains. It simplifies the process of non-custodial staking from your mobile device, covering everything from coins and tokens to NFTs and ENS. As part of the initial integration, Keystone users can access the ETH and EVM chain assets using imToken without hiccups.

### Prioritising Security:

![imToken prioritising security.webp](https://keyst.one/images/im_Token_prioritising_security_a161cd66ac.webp)

As an open-source software wallet, imToken places immense importance on security. They conduct regular internal audits and extensive R&D to ensure their products meet the highest standards. They also seek external validation through third-party safety audits from leading security firms like **[Slowmist](https://www.slowmist.com/)** and **[Peckshield](https://peckshield.com/)**, further solidifying their commitment to security. Their **[bug hunter program](https://slowmist.io/imtoken/)**, in collaboration with Slowmist, is a testament to their proactive approach to addressing potential vulnerabilities.

![imToken eth transfer.webp](https://keyst.one/images/im_Token_eth_transfer_648167da36.webp)

The **[active security centre](https://medium.com/imtoken/permit-signature-security-challenges-and-solutions-3817de9aa381)** in imToken adds an additional layer of protection, analysing smart contracts and safeguarding you from engaging with fraudulent contract addresses.

### Conclusion:

This partnership between Keystone and imToken is more than just a technical collaboration. It’s a commitment to providing a safe, user-friendly, and versatile platform for managing digital assets. Experience the security, convenience, and peace of mind that comes with using Keystone and imToken together. Your digital assets deserve the best protection, and together, we’re making that a reality. As we continue our partnership, we will gradually introduce more support in the future.

### Firmware update:

To take advantage of this integration, Keystone users need to update their firmware to version V- 1.1.4. This update is crucial for establishing a smooth connection between your Keystone 3 Pro and the imToken Wallet. You can find our comprehensive firmware upgrading guide **[here](https://guide.keyst.one/docs/firmware-upgrade)**, and the firmware update is available **[here](https://keyst.one/firmware)**.

### About imToken:

imToken is a decentralised digital wallet that carries crypto assets, identity, and data in the digital world. Established in 2016, imToken has provided secure and reliable digital asset management services for over 15 million users in over 150 countries and regions.

⬇️ Download imToken: [Google Play](https://play.google.com/store/apps/details?id=im.token.app&utm=medium) |[ Apple App Store](https://itunes.apple.com/us/app/imtoken2/id1384798940?src=medium)

Social handles: [Twitter](https://twitter.com/imTokenOfficial) |[ Support](https://support.token.im/hc/en-us) | [Website](https://token.im/)

### About Keystone:

**[Keystone](https://keyst.one/)** is a 100% air-gapped QR code hardware wallet. The wallet is **[designed](https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff)** to maximise attack cost, minimise trust, prevent potential human error, avoid single-point-of-failures and boost interoperability. Keystone is integrated with MetaMask (**[Extension](https://twitter.com/MetaMask/status/1469351219290382341)** and **[Mobile](https://twitter.com/MetaMask/status/1517256930389110785)**) and other top software wallets like **[OKX](https://x.com/KeystoneWallet/status/1702568172342436067?s=20)**, **[Solflare](https://x.com/KeystoneWallet/status/1720697432542195879?s=20)**, **[Fewcha](https://x.com/KeystoneWallet/status/1719367149515600329?s=20)**, etc.

**[Website](https://keyst.one/) | [Twitter](https://twitter.com/KeystoneWallet) | [Discord](https://keyst.one/discord) | [Telegram](https://t.me/KeystoneWallet) | [GitHub](https://github.com/KeystoneHQ)**


Keystone and imToken.webp

Keystone + imToken: A Fusion of Safety and Simplicity Keystone Wallet Keystone

The [**Keystone**](https://twitter.com/KeystoneWallet) team is thrilled to announce a new milestone in our journey — An integration with  [**OKX wallet**](https://www.okx.com/web3).

Keystone, for those who may not be familiar, is a hardware wallet device designed to ensure top-tier security against cyber threats like hacking, by facilitating offline storage of digital assets. With a focus on user-friendliness and solid security measures, Keystone has become a preferred choice for many digital asset investors seeking reliable protection for their investments.

This strategic partnership fuses the benefits of a software wallet’s convenience and accessibility with a hardware wallet’s robust security, offering Web3 users an optimal blend of features. Furthermore, it reinforces the security framework of the entire Web3 ecosystem by broadening the options for users to securely store their assets on a hardware wallet.

## A Closer Look at OKX
![1X-5l_iSxADUG1Bod_oQcqQ.webp](https://keyst.one/images/1_X_5l_i_Sx_ADUG_1_Bod_o_Qcq_Q_e5bd18c28a.webp)

[**OKX**](https://www.okx.com/)  has consistently held its position as one of the most rapidly expanding centralized exchanges. The platform boasts a staggering trading volume of approximately $1 billion per day, making it a popular choice amongst seasoned and beginner traders alike. Its extensive array of trading features, combined with a user-friendly interface, KYC-free trading options, and the security offered by a licensed and regulated platform, have all propelled OKX to be the preferred crypto exchange for many.

## Exploring The OKX Wallet
![1aUZXXZEO040TEptLG36kUA.webp](https://keyst.one/images/1a_UZXXZEO_040_T_Ept_LG_36k_UA_aef18b24dd.webp)

The [**OKX wallet**](https://www.okx.com/web3)  functions as a gateway to the world of Web3 - Decentralized Finance (DeFi), Non-Fungible Tokens (NFTs), and Decentralized Applications (DApps). Developed by OKX, the wallet champions decentralization and non-custodial functionality, ensuring that users retain complete control over their digital assets.

**Key features of the OKX Wallet include:**

* Full control and ownership of funds
* Multi-chain wallet compatible with over 40 blockchains, including Ethereum, OKC, and BSC etc.
* Supports the importing of multi-seed phrases and derivation of addresses in a single wallet

## Embracing Multi-Chain Access with OKX Wallet
![1SCEIn54GiUx8fyZtJCDZBg.webp](https://keyst.one/images/1_SCE_In54_Gi_Ux8fy_Zt_JCDZ_Bg_b8e5bd14fc.webp)

The OKX Wallet acts as a bridge to the OKX DEX, a built-in DEX aggregator facilitating multi-chain and cross-chain transactions. It grants easy access to the OKX NFT Marketplace, a comprehensive multi-chain NFT trading and creation platform, and serves as a Web3 portal, unlocking access to over 2,000+ DApps on different chains.

It also simplifies the process of engaging with multiple networks. By automatically recognizing and connecting to supported networks, the OKX Wallet streamlines the user experience, making DeFi and GameFi far more accessible.

## Demystifying the OKX X Routing Technology
![12vgW8Fc_AompW6VDl04JkA.webp](https://keyst.one/images/12vg_W8_Fc_Aomp_W6_V_Dl04_Jk_A_31b661d1aa.webp)

OKX Wallet’s proprietary X Routing technology revolutionizes cross-chain swaps by seeking the best exchange rates. It scans through multiple blockchains and Decentralized Exchanges (DEXs) to yield the most competitive price across all supported DEXs. The X Routing technology takes into account gas fees and slippage and offers a variety of quotes along with the best pricing for all swaps.

## Unleashing The Potential of NFTs with OKX Wallet
![1ycOPUEdLi8UlWV8lYjIJOw.webp](https://keyst.one/images/1yc_OPU_Ed_Li8_Ul_WV_8l_Yj_IJ_Ow_068eba1179.webp)

The OKX Wallet has full NFT integration, enabling users to buy, sell, trade, and even create their own NFTs right within the wallet through the OKX NFT Marketplace. Users can also easily access NFT orders from leading NFT markets such as OpenSea, LooksRare, Magic Eden, and IMX Official, among others. The wallet also supports the minting of new NFTs, where users can create and sell or trade their own NFTs.

## DApp Gateway: Connecting The Dots
![1pqejq_rk02oRiuG5arYLCg.webp](https://keyst.one/images/1pqejq_rk02o_Riu_G5ar_YL_Cg_ce9ff26f72.webp)

The OKX Wallet serves as a universal gateway to a diverse range of DApps, eliminating the hassles of connecting to various platforms and blockchains. With a simple connection, users can explore leading DeFi platforms such as Lido, Aave, and Curve, along with new GameFi applications like Splinterlands and Axie Infinity.

## Conclusion
![1gEVh-qxzmOBo9kWkCIK-jQ.webp](https://keyst.one/images/1g_E_Vh_qxzm_O_Bo9k_Wk_CIK_j_Q_a799effd02.webp)

The OKX Wallet is a one-stop solution for those seeking a non-custodial wallet that can connect to multiple DApps and support any NFT. With the integration of Keystone, the usability and versatility of the OKX Wallet is set to soar, making it a critical tool for anyone engaged in DeFi, GameFi, token swapping, or NFT trading.

Current Keystone owners will have to upgrade their firmware to the latest version to be able to connect their Keystone Essential or Pro to the OKX Wallet Web Extension App. Existing Keystone users can refer to our firmware upgrading guide [**here**](https://bit.ly/3yvP6t8) & update their firmware [**here**](https://keyst.one/firmware?locale=en).

Visit the [**OKX Wallet website**](https://www.okx.com/web3) to download their app, and be sure to keep an eye out for more upcoming updates!

## About OKX Wallet

OKX Wallet stands as a versatile, all-encompassing crypto wallet designed for multiple platforms. It grants users effortless access to the expansive Web3 ecosystem, which includes a plethora of tokens and dApps across more than 60 chains and roll-ups. As a self-custodial and decentralized wallet solution, users maintain full control over their private keys and

digital assets.  
Embodying a truly multi-chain wallet, OKX Wallet accommodates both EVM and non-EVM chains. With continuous support for emerging chains, users can effortlessly interact with dApps across various chains without the need for manual RPC input or switching wallets.

[**Website**](https://www.okx.com/web3) | [**Twitter**](https://twitter.com/okxweb3)  | [**Discord**](https://discord.com/invite/em57qYyEVt)  | [**Telegram**](https://t.me/OKCNetwork)

## About Keystone

[**Keystone**](https://keyst.one/) is a 100% air-gapped QR code hardware wallet. The wallet is [**designed**](/keystone-product-design-principles-cd833bc11125) to maximize attack cost, minimize trust, prevent potential human error, avoid single-point-of-failures and boost interoperability. Keystone is integrated with MetaMask ([**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785)) as well as other top software wallets like  [**Solflare**](https://twitter.com/KeystoneWallet/status/1536713613175496704?s=20&t=ARJFK2l8SSXITIVhjijGzw), [**Sender**](https://twitter.com/SenderWallet/status/1564894871445446657?s=20&t=ARJFK2l8SSXITIVhjijGzw), [**Fewcha**](https://twitter.com/KeystoneWallet/status/1582186370209939456?s=20&t=ARJFK2l8SSXITIVhjijGzw)  etc.

[**Website**](https://keyst.one/) **|** [**Twitter**](https://twitter.com/KeystoneWallet) **|** [**Discord**](https://keyst.one/discord) **|** [**Telegram**](https://t.me/KeystoneWallet) **|** [**GitHub**](https://github.com/KeystoneHQ)

1PNWg395CxepsofWpFq9pPQ.webp

A New Alliance: Keystone and OKX Wallet Collaborates

We are ecstatic to announce an integration collaboration between [**Keystone**](https://twitter.com/KeystoneWallet), the top-notch provider of secure hardware wallet infrastructure, and [**OKC**](https://twitter.com/OKCNetwork) (OKX Chain), an EVM-compatible Layer 1 built on Cosmos emphasizing on true interoperability (IBC) and optimized performance. This integration promises to deliver a plethora of advantages to users of both Keystone and OKC.

## OKX Chain Unleashed

![1vn7UMlKJeG8tbXqcT361WQ.webp](https://keyst.one/images/1vn7_U_Ml_K_Je_G8tb_Xqc_T361_WQ_e8157253a2.webp)

OKC is the world’s first trading chain — blockchain technology built for trading. It is the next step in the development of decentralized trading, where people can trade anything of value on-chain, and own and control the assets that they trade.

OKC provides safe and efficient infrastructure for creating decentralized applications for seamless on-chain trading of all kinds of assets within a cross-chain, value-exchange ecosystem.

In developing this open-source, trading-focused blockchain technology, OKX has focused on providing lower operational costs for blockchain developers looking to build new decentralized-trading applications. This means lower fees for end-users of DApps based on OKC. The team also designed OKC to level up user-experience standards for decentralized trading — OKC’s base layer is optimized to provide the best trading performance and experience.

## **Advantages of OKX Chain**

![0B3I3pWqINSKpj-Yb.webp](https://keyst.one/images/0_B3_I3p_Wq_INS_Kpj_Yb_ca1e505416.webp)

### **1\. High Scalability & Maximized Performance**

The chain is based on enhanced Tendermint and Delegated Proof of Stake (DPoS) consensus that can support up to 5000 Transactions per Second (TPS). This will allow Web3 applications to reach their full potential at extremely low cost.

### **2\. Enhanced Interoperability**

OKX Chain supports Inter-Blockchain Communication (IBC) protocol that — together with the Tendermint consensus algorithm, featuring instant finality — can be used to realize value transmission between Cosmos ecosystem within seconds. Being fully EVM compatible, OKX Chain allows developers to build projects without any learning cost.

### **3\. Developer Friendly**

OKX Chain is completely open-source. Anyone can read it, check the progress, comment on it, and help build the ecosystem. OKX Chain also provides native oracle protocol and industry-leader Chainlink for maximum flexibility to access price feeds.

### **4\. Secure**

The OKX Chain team offers a reliable smart contract auditing service, making it a genuinely decentralized protocol that avoids the centralization risks of most blockchain networks today.

### Conclusion

Keystone firmly believes that this partnership marks a significant triumph for the Web3 ecosystem. By integrating Keystone’s proficiency in security with the OKX Chain, we aspire to fashion a safer and more user-friendly experience for everyone. The prospects of this collaboration are exhilarating, and we are enthusiastic about our continued collaboration with OKX to create new technological advancements in the future.

## About OKC

OKX Chain is an EVM- and IBC-compatible L1 built on Cosmos with a focus on true interoperability and maximized performance. At high scalability, developers can build and scale with low gas fees. The OKX Chain ecosystem and infrastructure, including the all-in-one multi-chain Web3 interface, enables a seamless experience for both developers and users.

How to find us?

[**Website**](http://okx.com/okc) | [**Twitter**](https://twitter.com/OKCNetwork) | [**LinkedIn**](https://www.linkedin.com/company/okc-network/)  | [**Discord**](https://discord.com/invite/em57qYyEVt)  | [**Telegram**](https://t.me/OKCNetwork) | [**DevCommunity**](https://discord.gg/62y38Kh8Pp) | [**Submit Your Project**](https://forms.gle/rL13FPssWUBCVaFG9)

## About Keystone

[**Keystone**](https://keyst.one/) is a 100% air-gapped QR code hardware wallet. The wallet is [**designed**](/keystone-product-design-principles-cd833bc11125) to maximize attack cost, minimize trust, prevent potential human error, avoid single-point-of-failures and boost interoperability. Keystone is integrated with MetaMask ([**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785)) as well as other top software wallets like  [**Solflare**](https://twitter.com/KeystoneWallet/status/1536713613175496704?s=20&t=ARJFK2l8SSXITIVhjijGzw), [**Sender**](https://twitter.com/SenderWallet/status/1564894871445446657?s=20&t=ARJFK2l8SSXITIVhjijGzw), [**Fewcha**](https://twitter.com/KeystoneWallet/status/1582186370209939456?s=20&t=ARJFK2l8SSXITIVhjijGzw)  etc.

[**Website**](https://keyst.one/) **|** [**Twitter**](https://twitter.com/KeystoneWallet) **|** [**Discord**](https://keyst.one/discord) **|** [**Telegram**](https://t.me/KeystoneWallet) **|** [**GitHub**](https://github.com/KeystoneHQ)

1yoAVkiEq9cLvrhSTT739-Q.webp

Keystone Integrates With OKC (OKX Chain) — Amplifying Digital Asset Security For It’s Users

Discover the latest news, development and security tips to safeguard your assets with Keystone.


Picture this: A world where managing and protecting your digital assets is a breeze, thanks to a single piece of hardware that flawlessly combines convenience and security. The future of digital asset management has arrived and its name is the [**Keystone 3 Pro**](https://keyst.one/). Consider it your reliable companion in the world of Web3.

Keystone 3 Pro represents a perfect blend of innovation and dependability, setting new industry standards for securing digital assets in cold storage. Crafted with an emphasis on user experience and paramount safety measures, this new hardware wallet is a league of its own.

## Pricing

Keystone 3 Pro, priced at **USD$129**, offers a balanced blend of user accessibility and sophisticated functionality. It excels due to its remarkable combination of top-notch hardware, software, innovative security measures, and dedication to open-source principles, making it an unbeatable choice for those who prioritize their crypto asset’s safety.

Let’s dive into the capabilities of KS3 and discover how it can help you in securing your digital assets.

![](https://keyst.one/images/1_V_Ho4g_RQN_5_Lhm8f_Bncjc_Yw_a8c682131f.webp)

Sporting a sizable 4-inch touch screen, the Keystone 3 Pro offers not just a visually pleasing device but significantly enhances usability by providing an intuitive user interface. The sizeable display helps users to combat [**blind signing**](https://blog.keyst.one/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6) by allowing them to meticulously review their transaction details prior to approval, thereby avoiding the inadvertent authorization of malicious transactions.

![](https://keyst.one/images/1kul_W_Rw_Rm_Eit_Cq_Qjy2t_P1x_Q_4f17a4c4aa.webp)

Keystone 3 Pro will continue to support QR code transactions, streamlining the process of sending and receiving crypto. However, in response to some users experiencing challenges with their cameras not accurately recognizing QR codes, and not requiring the enhanced security associated with QR codes, we are incorporating a USB port into the device.

This feature will allow users to utilize a USB connection to interact with software wallets like [**MetaMask**](https://metamask.io/) to authenticate transactions. Additionally, [**firmware updates**](https://keyst.one/firmware) can be implemented through the same USB connection.

![](https://keyst.one/images/1u_RFA_1hb_M1_G_Qd_j_Ut_Hgow_681e309940.webp)

To prevent password leakage, the Keystone 3 Pro has a built-in fingerprint signature authentication feature, adding an extra level of security and ensuring that only authorized users can access the device.

![](https://keyst.one/images/1_Dx7_W_Bn4xp_C_4_D_Q_Ms_A_Kbvw_3541f692ed.webp)

Keystone 3 Pro is currently the **ONLY** hardware wallet that incorporates the use of [**three distinct secure elements**](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461): the [**Microchip ATECC608B**](https://ww1.microchip.com/downloads/en/DeviceDoc/ATECC608B-CryptoAuthentication-Device-Summary-Data-Sheet-DS40002239A.pdf), [**Maxim DS28S60**](https://www.analog.com/en/products/ds28s60.html#product-evaluationkit), and [**Maxim MAX32520**](https://www.engineersgarage.com/maxim-integrated-unveils-the-max32520-worlds-most-secure-iot-microcontroller/) offering a level of security that is unmatched. Each secure element has a unique role in reinforcing the hardware wallet’s security, collectively ensuring the protection of recovery phrases and biometric data of users.

**Microchip ATECC608B** and **Maxim DS28S60** are specifically engineered to safeguard recovery phrases. They collaboratively produce a secure environment for recovery phrase storage, with the ATECC608B providing hardware-level security and authorization, and the DS28S60 ensuring a trusted platform module is always in place.

The **Maxim MAX32520**, on the other hand, is a secure microcontroller unit that plays a vital role in securing fingerprint data. It utilizes encrypted flash storage for safeguarding a user’s fingerprint data, with the verification process being executed securely within the MCU (only available in the Keystone 3 Pro)

![](https://keyst.one/images/1_K_Wi_Xds8t_Q_Znwwhltd_Inz_BQ_7f192cea3e.webp)

Secret recovery phrases serve as the fundamental pillar of crypto security. [**Each Keystone 3 Pro has the capacity to accommodate up to three distinct recovery phrases, each secured by different passwords**](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), thereby enabling users to oversee multiple crypto accounts from a single hardware wallet. **Transitioning between wallets is a breeze, requiring only the respective password inputs.** This feature amplifies the device’s adaptability and user-friendly nature. Additionally, it also enables users to easily create a new wallet for multi-signature transactions without the need for an extra hardware wallet. This boosts operational efficiency without compromising the safety and integrity of their digital assets.

In the unfortunate scenario of a “[**$5 wrench attack**](https://cointelegraph.com/news/5-wrench-attacks-appear-to-be-on-the-rise-in-the-crypto-community)” where you are coerced into disclosing your recovery phrase, you can fool an attacker into assuming that another wallet is your primary one. Instead of using your primary recovery phrase, you would enter a different one to unlock a decoy wallet, thereby ensuring the majority of your assets remain secure.

![](https://keyst.one/images/1bj_GHN_O_Qswo_Yt9_KP_3hw_e2276bc89c.webp)

[**Built on the principles of openness and transparency**](https://blog.keyst.one/keystone-product-design-principles-cd833bc11125), Keystone incorporates open-source firmware and hardware, making it possible for anyone to scrutinize, validate, and contribute to its evolution.

![](https://keyst.one/images/1_Jzi_Kxu9_Zlbg6_Vqtg_A9_e_Q_0a75a42627.webp)

Marking a first in the hardware wallet industry, the Keystone 3 Pro incorporates a [**PCI**](https://www.pcisecuritystandards.org/)-grade anti-tampering feature, with an intricate ‘security house’ of circuitry encompassing the core IC and SE chips. Any physical tampering results in an immediate data wipeout, further strengthening the device’s resilience.

![13fXyFXmU9g-I99rxUp_lzQ.webp](https://keyst.one/images/13f_Xy_F_Xm_U9g_I99rx_Up_lz_Q_543d047515.webp)

Keystone 3 Pro operates on a customized embedded system designed and fully built by the Keystone team. The system creates a compact, task-specific environment that greatly reduces potential attack vectors and enhances both the hardware and software security. This stand-alone system doesn’t interact with any network, making it secure and simple to update and maintain.

Another aspect of the embedded system is that it’s programmed predominantly in [**Rust**](https://www.rust-lang.org/) — a programming language renowned for its emphasis on reducing bugs. Rust accomplishes this through the utilization of a static typing system. This feature of Rust helps to avert a multitude of errors that could potentially result in runtime issues in other programming languages.

![](https://keyst.one/images/1k_Nvv3nq_C4c6_Xa_Wdm_NGS_Dy_Q_3f1dbfa0c8.webp)
Keystone 3 Pro also comes with an exceptional characteristic — a customizable backplate. This enables users to personalize their Keystone with their favorite image, adding a one-of-a-kind personal flair to their device. However, owing to limitations in the supply chain, this novel characteristic is presently only available to key members and contributors of the Keystone community. Our goal is to make this attribute available to all users by the coming year, 2024.

![](https://keyst.one/images/1_M_Vfv_Y_5m_Y37o_Ix_V5qj_F_Btg_d3a19c864e.webp)

Lastly, the Keystone 3 Pro is loaded with state-of-the-art features. It’s compatible with various Software Wallets’ Derivation Path and supports the [**SLIP-39 Shamir’s Secret Sharing scheme**](https://medium.com/r?url=https%3A%2F%2Fblog.keyst.one%2Fwhy-keystone-implemented-shamir-backups-71e319f972a6). It also streamlines the process of setting up a passphrase, providing an additional layer of security beyond the standard 24-word recovery phrase. Furthermore, it also features multi-signature functionalities and the ability to use a [**dice to generate the secret recovery phrase**](https://blog.keyst.one/how-to-verify-the-recovery-phrase-created-by-dice-rolling-af01c16b765e), thereby enhancing its array of robust features.

Don’t settle for less — trust the Keystone 3 Pro to safeguard your digital assets effectively! [**Join the waitlist today**](https://twitter.com/KeystoneWallet/status/1677260351489048577?s=20)!

<blockquote class="twitter-tweet" data-media-max-width="560"><p lang="en" dir="ltr">???? We&#39;re opening the waitlist for Keystone 3!<br><br>???? Want to be the first to get your hands on Keystone 3 at a discounted price? Here&#39;s what you need to do:<br><br>???? Tweet why you&#39;re looking forward to the launch of Keystone 3 &amp; include the hashtag <a href="https://twitter.com/hashtag/Keystone3Waitlist?src=hash&amp;ref_src=twsrc%5Etfw">#Keystone3Waitlist</a> in your tweet <a href="https://t.co/FFxblTlwgK">pic.twitter.com/FFxblTlwgK</a></p>&mdash; Keystone Hardware Wallet (@KeystoneWallet) <a href="https://twitter.com/KeystoneWallet/status/1677260351489048577?ref_src=twsrc%5Etfw">July 7, 2023</a></blockquote> <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

## About Keystone

[**Keystone**](https://keyst.one/) is an [**open-source**](https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752) airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with [**three secure element chips**](https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461). One of Keystone’s unique features is its ability to support [**multiple recovery seed phrases**](https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4), reducing the need to purchase multiple hardware wallet devices.

With the [**primary aim**](https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff) of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as [**MetaMask**](https://metamask.io/) (both [**Extension**](https://twitter.com/MetaMask/status/1469351219290382341) and [**Mobile**](https://twitter.com/MetaMask/status/1517256930389110785) versions), as well as other premier software wallets like the [**OKX Web3 Wallet**](https://www.okx.com/web3), [**Solflare**](https://solflare.com/), [**Rabby**](https://rabby.io/), and more.

[**Website**](https://keyst.one/) | [**Twitter**](https://twitter.com/KeystoneWallet) | [**Discord**](https://keyst.one/discord) | [**Telegram**](https://t.me/KeystoneWallet) | [**GitHub**](https://github.com/KeystoneHQ)


MetaMask

OKX

Keplr

Nunchuknew

MetaMask

OKX Web3 Wallet

Keystone's Blog

Keystone 3 Pro: The Ultimate Protector of Your Digital Assets

Keystone 3 Pro: A Community-Centric Designed Hardware Wallet

The Role of Open Source Tech in Keystone’s Development

Deep Dive into Next-Gen Hardware Wallet : Crashing Keystone3 Pro Audit

Opting for Rust in the Development of Keystone 3

Keystone 3 Pro: A Community-Centric Designed Hardware Wallet

When we talk about open source, what are we discussing?

The Role of Open Source Tech in Keystone’s Development

The Glacier Protocol and Using Dice To Generate Keys

The relevance & benefits of Keystone’s BTC-only firmware

Ultimate Bitcoin Privacy Guide using TailsOS with built in Electrum Wallet and MyNode with Electrs Enabled

Keystone + imToken: A Fusion of Safety and Simplicity Keystone Wallet Keystone

A New Alliance: Keystone and OKX Wallet Collaborates

Keystone Integrates With OKC (OKX Chain) — Amplifying Digital Asset Security For It’s Users

Unveiling The Future of Security — The New Keystone Brand

Keystone’s Journey: Embracing Open-Source and Self-Custody in the Web3 World — A Letter from our CEO

Keystone’s 5th Birthday Bash: 25% off ALL Products, February 1st-10th

Sustainable Packaging: Keystone’s Perspective

Web Authentication: A Counter to Supply Chain Attacks