Discover the latest news, development and security tips to safeguard your assets with Keystone.

<h2>A New Era For Keystone</h2>
<a href="https://keyst.one/">Keystone</a> has been a name synonymous with security, innovation, and relentless pursuit of user experience. For half a decade, through five meticulous years of iterations, we have sculpted a product that reflects not just our capabilities but our aspirations. Gaining consistent recognition from users, our products have stood the test of time and commitment.
Yet, the time has come to recognize that our current brand image does not fully resonate with our underlying philosophy and the vision that has driven us forward. Our vision goes beyond mere product design, it also reflects our core values, our dedication to security, and our commitment to an unparalleled user experience.
<img src="https://keyst.one/images/Keystone_logo_design_e6d8d8cd5f.webp" alt="Keystone logo design.webp">
We are thrilled to embark on a new journey. This is not just an upgrade to our brand image; it is a reiteration of who we are and what we believe in. It is a deeper exploration into what makes Keystone not just a product but a partner in your journey. We are re-communicating the core values that Keystone adheres to, evolving our brand, and deepening the consensus among those who have placed their trust in us.
We invite you to experience a brand that not only aligns with our product vision but also symbolizes our steadfast commitment to you.
<h2>A New Logo Steeped in Principles</h2>
<img src="https://keyst.one/images/Keystone_wallet_features_b4b9d5710d.webp" alt="Keystone wallet features.webp">
The essence of our new logo is encapsulated in four key values:
<ul>
<li>Security: By open-sourcing all possible code, we champion a transparent approach to security that’s confident enough to withstand all challenges
</li>
<li>Stability: Our commitment to rock solid excellence pervades every aspect, from product design to customer service and visual representation
</li>
<li>Usability: Simplicity is our strength. With an intuitive design mirroring mobile experience, Keystone ensures a seamless user journey
</li>
<li>Decentralization: We are steadfast in implementing support for third-party software wallets, offering users the best compatibility and fostering collaborative efforts between Web3 protocols
</li>
</ul>
<h2>Symbolizing the New Keystone Logo</h2>
Keystone’s heritage still resonates in the new logo symbol, carrying forward the Key Stone shape in a stone arch. The font’s thickness marries tradition with youthfulness, while the colour pays homage to our old logo, subtly tweaked for visual vibrancy.
Our new logo serves as the core symbol of our philosophy, echoing our values:
Security — Through Open Source
<img src="https://keyst.one/images/software_and_hardware_157e919d22.webp" alt="software and hardware.webp">
Decentralization — Emphasizing Collaboration
<img src="https://keyst.one/images/integrations_and_signing_afad6790d1.webp" alt="integrations and signing.webp">
Stability &amp; Simplicity — An Untoppleable and Easily Recognized Symbol
<img src="https://keyst.one/images/Keystone_logo_transition_845fc2fc47.webp" alt="Keystone logo transition.webp">
<h2>Shaping the Future</h2>
<img src="https://keyst.one/images/Keystone_logo_as_stone_94e7f64cc0.webp" alt="Keystone logo as stone.webp">
With a perfect blend of legacy and innovation, Keystone’s rebranding is more than a mere facelift; it’s a renewed commitment to the Web3 world. It’s a promise to continue our pursuit of security, stability, usability, and decentralization, offering users the opportunity to experience the future, today.
<img src="https://keyst.one/images/Keystone_logo_with_assets_e3a12fcada.webp" alt="Keystone logo with assets.webp">
Join us as we embark on this new chapter, where we endeavor to elevate the standards of hardware wallets, setting the stage for an era of boundless possibility.
Let’s shape the future together. Download our new Media Kit <a href="https://drive.google.com/drive/folders/1MqffY73AbWE3ItSE6s_YP8SD7k1Gbz8r">here</a>.
#UnlockYourKeystone
<h2>About Keystone</h2>
<a href="https://keyst.one/">Keystone</a> is an <a href="https://blog.keyst.one/the-role-of-open-source-tech-in-keystones-development-4dd77faea752">open-source</a> airgap hardware wallet that utilizes an embedded system. To further enhance its security, the device is equipped with <a href="https://blog.keyst.one/secure-elements-the-bedrock-of-hardware-wallet-security-1dd8cbdef461">three secure element chips</a>. One of Keystone’s unique features is its ability to support <a href="https://blog.keyst.one/unleashing-the-power-of-multiple-secret-recovery-phrases-with-keystone-3-a-comprehensive-guide-3c3afb997cc4">multiple recovery seed phrases</a>, reducing the need to purchase multiple hardware wallet devices.
With the <a href="https://blog.keyst.one/keystone-3-pro-a-community-centric-designed-hardware-wallet-81646869feff">primary aim</a> of maximizing security against potential threats, minimizing dependence, reducing human errors, and eliminating single points of failure, Keystone also places a strong emphasis on extensive interoperability. It is compatible with well-known software wallets such as <a href="https://metamask.io/">MetaMask</a> (both <a href="https://twitter.com/MetaMask/status/1469351219290382341">Extension</a> and <a href="https://twitter.com/MetaMask/status/1517256930389110785">Mobile</a> versions), as well as other premier software wallets like the <a href="https://www.okx.com/web3">OKX Web3 Wallet</a>, <a href="https://solflare.com/">Solflare</a>, <a href="https://rabby.io/">Rabby</a>, and more.
<a href="https://keyst.one/">Website</a> | <a href="https://twitter.com/KeystoneWallet">Twitter</a> | <a href="https://keyst.one/discord">Discord</a> | <a href="https://t.me/KeystoneWallet">Telegram</a> | <a href="https://github.com/KeystoneHQ">GitHub</a>

Unveiling The Future of Security — The New Keystone Brand

To all Keystone enthusiasts, from those who’ve been with us since day one to those who’ve just discovered us,
I hope this message finds you in good health and high spirits. As the CEO of Keystone, it’s my privilege and pleasure to connect with you all in this way. I write this letter not just as the head of this company, but as a fellow member of the Web3 community, who, like you, dreams of a decentralized, secure, and accessible future.
First and foremost, my heart is full of gratitude for the trust you’ve shown in Keystone. We’ve recently experienced a significant surge in demand for our hardware wallet, and it fills me with pride and humility to see that in this rapidly evolving world of digital assets, you’ve chosen to rely on Keystone. Our mission has always been to ensure that you can confidently, securely, and easily engage with the world of Web3, and your trust reinforces our resolve to deliver on this mission every single day.
Our hardware wallets have been flying off the shelves faster than we expected. For those of you who have been patiently waiting, I extend a heartfelt apology for the delay. Rest assured, we’re working tirelessly to resolve this. We expect a new batch of Keystone wallets to arrive at our warehouse within the next week or so, and we’ll begin shipping the devices to users immediately after. Furthermore, we are in the process of manufacturing an additional batch that will be available at the end of July. You can start participating in the pre-sale on our <a href="https://keyst.one/">website</a> to secure a device from this batch.
Over the years, our journey has been marked by the pursuit of two fundamental principles: <a href="https://blog.keyst.one/on-open-source-and-transparency-ba37fa1c1e8c">open source</a> and <a href="https://blog.keyst.one/keystone-product-design-principles-cd833bc11125">self-custody</a>.
<a href="https://blog.keyst.one/keystone-who-we-are-b037777a1259">Since our inception in 2018</a>, our commitment to open source has been unshakeable. It’s been our firm belief that transparency and openness are the cornerstones of a successful hardware wallet product. In 2023, our open source ethos led us to fruitful collaborations with major software wallets like <a href="https://twitter.com/keplrwallet">Keplr</a>, <a href="https://twitter.com/arconnectio">ArConnect</a>, <a href="https://twitter.com/GetBlockWallet">BlockWallet</a>, <a href="https://twitter.com/BitKeepOS">BitKeep</a>, and <a href="https://twitter.com/coreapp">Core</a>.
Open source, to us, is more than a buzzword. It’s a commitment. A commitment to a transparent, reliable process of code review, compiling, and firmware publishing that raises the quality of our code while warding off potential threats. We’re proud to have built our hardware wallet on open-source software, laying bare our work for inspection by security researchers, developers and anyone in the Web3 community who’s interested. Transparency is our motto, and to our knowledge, we were the first in the industry to publicly share our <a href="https://github.com/KeystoneHQ/keystone-se-firmware">Secure Element firmware</a> and **<a href="https://github.com/KeystoneHQ/Keystone-developer-hub/tree/main/audit-report">auditing reports</a> **for everyone to see.
Our second core principle, self-custody, is something we deeply value. We respect your autonomy and security in handling your funds. It’s the basic security assumption of a hardware wallet that your recovery phrase or private keys will never touch an online environment, and we stand by that. We will not deviate from this path, and I assure you that we will not be implementing any form of KYC seed recovery service.
Reflecting on our journey, I am filled with pride recalling how Keystone has continually led the charge in pioneering advancements in the hardware wallet industry. We set the bar high by being the first in our field to create a premium hardware wallet that upholds the robustness standards of the American military (MIL-STD-810G). We introduced the Web3 community to the secure practice of <a href="https://blog.keyst.one/ever-wondered-what-your-hardware-wallet-inputs-and-outputs-9b33b4cedafd">QR code data transmission</a>. Additionally, we also catered to the needs of the Bitcoin community with our <a href="https://blog.keyst.one/the-relevance-benefits-of-keystones-btc-only-firmware-8965ebb42e48">BTC-only firmware</a>, and have actively addressed the <a href="https://blog.keyst.one/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6">Blind Signing issues</a> that plagued hardware wallet users. <a href="https://twitter.com/MetaMask/status/1517256930389110785?s=20">Our collaboration with MetaMask</a> speaks volumes of our commitment to integrations, and remains a cherished milestone in our journey.
But our past achievements only drive us to aim higher. Our journey, like that of the broader Web3 community, is an ongoing one. We are eagerly looking forward to introducing even more cutting-edge solutions and enhancements, starting with our plans to implement Account Abstraction features.
Your trust and belief in us are what fuels our passion and commitment. I am incredibly grateful to you all for choosing Keystone, and I promise you that we will continue working tirelessly to exceed your expectations. Together, we’ll continue to make self custody solutions even more secure and accessible to everyone.
Thank you for being a part of this incredible journey with us. We are honored to serve you and to be a part of this vibrant, innovative community.
With heartfelt thanks,
Lixin Liu,
CEO, Keystone.

Keystone’s Journey: Embracing Open-Source and Self-Custody in the Web3 World — A Letter from our CEO

Keystone first launched in 2018, and since then we have undergone several updates and improvements. Today, we celebrate our 5th anniversary. It has been a thrilling journey for the team over the past five years, with numerous new partnerships and collaborations established with people and groups from different protocols.
To commemorate this milestone, we are offering a 25% discount on ALL products from the 1st to 10th of February 2023. Visit our <a href="https://shop.keyst.one/collections/all">online store</a> today to purchase your Keystone!
We’d also be covering our 10 most significant integrations partnerships from the beginning of 2022 until the present day in this article.
Be sure to also keep an eye on our <a href="https://twitter.com/KeystoneWallet">Twitter</a> for a chance to win a Keystone Essential device through a lucky draw contest.
<h2>What is Keystone</h2>
<img src="https://keyst.one/images/159_Nv_Fh_C8_Q4_B_rj6_TC_8_Bd_Gw_01ca5954cf.webp" alt="159NvFhC8Q4B_rj6TC8BdGw.webp">
Keystone is a hardware wallet that prioritizes security of its users. One of the unique features of the device is that it is <a href="/air-gapped-computers-and-phones-vs-hardware-wallets-whats-the-difference-458888cdd97">fully air-gapped</a>. Keystone uses <a href="/ever-wondered-what-your-hardware-wallet-inputs-and-outputs-9b33b4cedafd">QR codes to transmit data</a> to web-enabled devices, eliminating the risk of any remote attack through the absence of wired connection ports, WiFi, Bluetooth, NFC, or 5G chips.
Additionally, Keystone also boasts a <a href="/secure-elements-the-last-line-of-defense-4669012d4edc">Secure Element</a> that stores and generates private keys using a truly random number generation method. The firmware is <a href="/on-open-source-and-transparency-ba37fa1c1e8c">open-source</a> which allows users to verify its authenticity as well. For even greater security, there is also a fingerprint sensor option on the device to prevent password leakage in public places.
Keystone also has a built-in <a href="/self-destruct-mechanisms-unique-defense-against-side-channel-attacks-4cfea3d4eff1">self-destruct mechanism</a> that activates upon tampering, instantly wiping the private key from the device to prevent data extraction by physical attackers.
Lastly, the standout security feature of Keystone is that it protects users from <a href="/blind-signing-a-security-black-hole-for-the-ethereum-community-13f909b848b6">blind signing transactions</a>. It <a href="https://www.youtube.com/watch?v=ElIM7-YPsMY&t=5s">decodes the transaction message hash of a smart contract into a human readable format</a>, then displays all the information (“From address”, “To address”, “Amount” etc.) clearly on the 4-inch touchscreen and prompts users to manually check them before signing off on it.
<h2>10 Significant Integration Partnerships from the beginning of 2022 until the present day</h2>
<ol>
<li><a href="https://consensys.net/blog/news/metamask-x-keystone-how-to-benefit-from-hardware-wallet-security-using-transparent-qr-code/?utm_content=190655131&utm_medium=social&utm_source=twitter&hss_channel=tw-3278906401">MetaMask Web Extension</a> &amp; <a href="https://www.youtube.com/watch?v=ixRIoGfbmTI">MetaMask Mobile App</a> Integration</li>
</ol>
<img src="https://keyst.one/images/1p3o_U_Ab33yx8o_H1_X3k_OV_Hew_a60cf35be6.webp" alt="1p3oUAb33yx8oH1X3kOVHew.webp">
We began the first quarter of 2022 with great enthusiasm, putting in a lot of manpower and resources to integrate with <a href="https://metamask.io/">MetaMask</a>. As a result, we were able to achieve a major milestone by becoming the first hardware wallet to be integrated with both the web extension and mobile app of MetaMask.
This integration meant that MetaMask users could store and manage their digital assets in a cold storage environment, adding an extra layer of security against hacking and other cyber threats.
2. <a href="https://github.com/KeystoneHQ/Smart-Contract-Metadata-Registry">Smart Contract Metadata Registry</a> 
<img src="https://keyst.one/images/1q_DH_Nmai_W4ai_Pq8_P9a4_Pd7_A_7618a2107f.webp" alt="1qDHNmaiW4aiPq8P9a4Pd7A.webp">
Simultaneously while integrating MetaMask, we also worked together with multiple DeFi applications to integrate their <a href="/why-are-hardware-wallets-out-dated-for-defi-8a3d81a27572">ABIs</a> into our Smart Contract Metadata Registry in order to address and combat the issues of blind signing.
To name a few partners: <a href="/pancakeswap-keystone-partnership-secure-signing-on-bsc-blockchain-29739db00930">PancakeSwap</a>, <a href="/sushi-keystone-partnership-secure-defi-signing-on-multiple-blockchains-349384c1c978">Sushi</a>, <a href="/trader-joe-keystone-partnership-secure-signing-on-avalanche-blockchain-1d44a34b1f7e">Trader Joe</a>, <a href="/dodo-keystone-partnership-secure-signing-on-another-top-dex-56862781777">DODO</a>, <a href="/spookyswap-keystone-partnership-secure-signing-with-top-dex-protocol-on-fantom-ecosystem-70e6153a1d3e">SpookySwap</a>, <a href="/perpetual-protocol-keystone-partnership-secure-signing-on-layer-2-perpetual-futures-dex-56e53308799d">Perpetual Protocol</a>
3. <a href="/introducing-goplus-security-keystone-partnership-9285226cd284">GoPlus Security Partnership</a> 
<img src="https://keyst.one/images/17_U_Qo5_MB_Vt_Ybc_J_Qxjew_O0_UQ_c1c1f46a4a.webp" alt="17UQo5MBVtYbcJQxjewO0UQ.webp">
We then decided to enlist the <a href="https://gopluslabs.io/">Go+ Security</a> team to help improve our defenses as hacking became prevalent in the Web3 space.
By connecting to Go+ Security’s database, we were able to decode transactions more efficiently when interacting with public chains, non-custodial wallets, decentralized exchanges, and crypto data aggregators, among others.
In addition, this also enhanced our users’ experience by displaying more security-related information, such as contract authenticity and risk factors on Keystone’s 4-inch screen, which enabled users to be alerted in advance prior to approving any transactions.
4. <a href="https://keystonewallet.medium.com/new-partnership-announcement-blocksec-keystone-c134e2469bf2">BlockSec Partnership</a> 
<img src="https://keyst.one/images/1n_Hn_Ikvdi1_Bo_Q_Vqb2_Lk_Sw_8185b3a69e.webp" alt="1n-HnIkvdi1Bo-QVqb2LkSw.webp">
We also sought assistance from <a href="https://blocksec.com/">BlockSec</a>, a reputable Web3 blockchain security firm to join us on our journey.
Partnering with BlockSec allowed us to seamlessly and efficiently resolve ABI data on Ethereum with help from their security data. This greatly allowed us to focus on our strengths, which is to build a world class hardware wallet, rather than having to devote resources to building infrastructure.
5. <a href="https://twitter.com/solflare_wallet/status/1535290700761387012?s=20&t=c6Xb-HL86BqMCSpMr3KHoQ">Solflare Web Extension</a> &amp; <a href="https://keystonewallet.medium.com/keystone-integrates-with-solflare-mobile-efee70ffa3a1">Solflare Mobile App</a> Integration 
<img src="https://keyst.one/images/1_Q4_LX_72g_Eys_Yo_U_Me14i_EO_9_Q_78d370cb0a.webp" alt="1Q4LX72gEysYoUMe14iEO9Q.webp">
In June, we decided to broaden our support for non-EVM chains and began to explore the <a href="https://solana.com/">Solana</a> ecosystem as our first step in this direction. This eventually resulted in us forming a partnership to integrate with the Solflare team.
<a href="https://solflare.com/">Solflare</a> is an all-encompassing and secure crypto wallet and is available as both a web extension and a mobile application. The integration enables Keystone users to safely manage their SOL and SPL tokens, and also access various decentralized applications on the Solana network.
6. <a href="https://keystonewallet.medium.com/new-integration-with-sender-wallet-one-of-the-most-popular-wallet-for-near-ecosystem-2a0b1a4d135e">Sender Web Extension</a> Integration 
<img src="https://keyst.one/images/1_Tj5_L1_Gfq5w8h_Rvt_Cys_Sm_Zw_95daf35a0f.webp" alt="1Tj5L1Gfq5w8hRvtCysSmZw.webp">
We then turned our attention to the <a href="https://near.org/">NEAR</a> ecosystem. This led to our integration with the Sender Wallet team, which was smooth sailing.
<a href="https://senderwallet.io/">Sender</a> is a web and mobile wallet constructed on NEAR. The integration provided a comprehensive experience for Keystone users that encompass asset management, staking, NFT collections, and trading on NEAR.
Sender is developed as a non-custodial wallet, which gives its users complete autonomy over it. This means that users have complete authority over their private keys, don’t have to go through complicated procedures to demonstrate ownership of their funds and have the option of additional security measures, such as creating recovery passwords or linking it to hardware wallets like Keystone.
7. <a href="https://twitter.com/nguyenleFCH/status/1591088432100814851?s=20&t=c6Xb-HL86BqMCSpMr3KHoQ">Fewcha Web Extension</a> Integration
<img src="https://keyst.one/images/Screen_Shot_2024_04_23_at_13_34_43_343f6034d4.png" alt="Screen Shot 2024-04-23 at 13.34.43.png">
Riding the momentum, we seized the opportunity and focused on <a href="https://aptoslabs.com/">Aptos</a>, swiftly initiating conversations with the Fewcha Wallet team.
The partnership resulted in a groundbreaking achievement, as we became the first hardware wallet to support Aptos and they became the first Aptos wallet extension to support a hardware wallet.
<a href="https://fewcha.app/">Fewcha wallet</a> is a non-custodial Web3 wallet for the Aptos blockchain. It facilitated and enabled Keystone users to freely and securely move their digital assets between their wallet and various Aptos dapps.
8. <a href="https://www.youtube.com/watch?v=nVYanDOnfbE">SubWallet Web Extension</a> Integration
<img src="https://keyst.one/images/1g_Og_S8_L4do2_Wf9_TO_Nc_Vb_N3w_cf294dcef1.webp" alt="1gOgS8L4do2Wf9TONcVbN3w.webp">
As the end of the year approached, we delved into the world of <a href="https://polkadot.network/">Polkadot</a> &amp; <a href="https://kusama.network/">Kusama</a> and stumbled upon the SubWallet team. As the friendship between both our teams blossomed, so did the integration between our products.
<a href="https://subwallet.app/">SubWallet</a> is a user-friendly gateway for the Polkadot and Kusama ecosystem. Their goal is to offer users the most straightforward and safest way to connect to various DeFi and GameFi dapps.
The wallet is constructed on top of Polkadot{.js} and emphasizes on simplifying user access and interaction with Web3 applications built on the Substrate Framework. It is available on both Desktop &amp; Mobile and is open for <a href="https://twitter.com/subwalletapp/status/1587403200105451520?s=20&t=feiKXKS6Tz_q8qPpoZKOJA">Public Testing</a>.
Currently, SubWallet can operates seamlessly on both Substrate and EVM networks. It offers support for more than 80 networks within the Polkadot and Kusama ecosystem. By integrating with SubWallet, Keystone users can access and manage their assets across both the Polkadot and Kusama ecosystem.
9. <a href="https://keystonewallet.medium.com/keystone-safe-gnosis-safe-eliminate-multi-signature-blind-signing-once-and-for-all-f3624df52950">Safe Web Extension</a> &amp; <a href="/keystone-integrates-with-the-safe-ios-mobile-app-ensuring-elevated-security-a9d347099136">Safe Mobile App</a> Integration
<img src="https://keyst.one/images/1uj_KK_2_Cimc_Hh_N_Nx_Y_Drojctg_299bacffea.webp" alt="1ujKK2CimcHhNNxYDrojctg.webp">
We concluded 2022 by integrating with <a href="https://safe.global/">Safe</a> and implemented support for it’s multi-signature functionality. We also greatly improved the security issues surrounding multi-signature transactions by eliminating blind signing.
This integration gave our users access to create and set up multi-sig wallets, in which multiple signatures are required to authorize any transaction.
The introduction of multi-signature support in the Keystone hardware wallet is particularly advantageous for individuals/companies who wish to share control of their funds with multiple parties, such as a business partner or family member.
10. <a href="/keystone-integrates-with-keplr-becomes-part-of-the-cosmos-ecosystem-4202c9b6277a">Keplr Web Extension</a> Integration
<img src="https://keyst.one/images/1_Kiwt_L90_DYZY_f8_So_Bk_Taf_A_c5f6d71a82.webp" alt="1KiwtL90DYZY-f8SoBkTafA.webp">
2023 then arrived. We made a huge splash in January and started the year off with a bang by forming an integration partnership with the Keplr team.
<a href="https://www.keplr.app/">Keplr</a> is a reputable IBC-compatible wallet for the <a href="https://cosmos.network/">Cosmos</a> Interchain ecosystem, developed by <a href="https://twitter.com/chainapsis">Chainapsis</a>. Being open-source, it is widely accepted by many Cosmos users because of its capability to support a variety of coins and tokens in the ecosystem.
With this integration, Keystone users can now seamlessly manage their Cosmos assets securely by simply connecting their device to Keplr’s Web Extension Application.
This partnership merges the user-friendly features of a software wallet with the robust security of a hardware wallet, providing Cosmos users with the best of both worlds. Additionally, it works towards reinforcing the security of the entire Cosmos ecosystem by providing more choices for Cosmos users to safeguard their assets on a hardware wallet.
<h2>Conclusion</h2>
Since the inception of Keystone, we have proven ourselves to be a dependable and secure option for storing digital assets. We have made several improvements and updates to enhance the user experience and security of the device. We are certain that by keeping our emphasis on security and affordability, Keystone hardware wallet will continue to be a preferred choice among Web3 users in the future.
We’re ready to shake things up in the new year, keep an eye out for us!
<h2>About Keystone</h2>
<a href="https://keyst.one/">Keystone</a> is a 100% air-gapped QR code hardware wallet. The wallet is <a href="/keystone-product-design-principles-cd833bc11125">designed</a> to maximize attack cost, minimize trust, prevent potential human error, avoid single-point-of-failures and boost interoperability. Keystone is integrated with MetaMask (<a href="https://twitter.com/MetaMask/status/1469351219290382341">Extension</a> and <a href="https://twitter.com/MetaMask/status/1517256930389110785">Mobile</a>) as well as other top software wallets like <a href="https://twitter.com/KeystoneWallet/status/1536713613175496704?s=20&t=ARJFK2l8SSXITIVhjijGzw">Solflare</a>, <a href="https://twitter.com/SenderWallet/status/1564894871445446657?s=20&t=ARJFK2l8SSXITIVhjijGzw">Sender</a>, <a href="https://twitter.com/KeystoneWallet/status/1582186370209939456?s=20&t=ARJFK2l8SSXITIVhjijGzw">Fewcha</a> etc.
<a href="https://keyst.one/">Website</a> | <a href="https://twitter.com/KeystoneWallet">Twitter</a> | <a href="https://keyst.one/discord">Discord</a> | <a href="https://t.me/KeystoneWallet">Telegram</a> | <a href="https://github.com/KeystoneHQ">GitHub</a>

Keystone’s 5th Birthday Bash: 25% off ALL Products, February 1st-10th

By <a href="https://medium.com/u/8ba20221c99b">Patrick Kim</a>
Considering using an old computer or smartphone as cold wallet rather than placing your trust in a third party’s hardware wallet? Research suggests you may want to think twice, as air-gapped computers and smartphones are rife with vulnerabilities that a hacker can exploit to get at your private keys. This article will explain why repurposing your old device just can’t substitute for using a professional hardware wallet.
<h4>Air-Gapped Computers as Cold Wallets</h4>
Storing private keys on an offline device, particularly with computers, is a cold storage solution that has been around for a long time. In his report <a href="https://arxiv.org/pdf/1804.08714.pdf">Beatcoin: Leaking Private Keys from Air-Gapped Cryptocurrency Wallets</a>, Dr. Mordechai Guri demonstrates just how unsafe this practice is. His work outlines how private keys can be stolen from an air-gapped computer in three steps:
<ol>
<li>A virus infiltrates the air-gapped computer, most commonly through USB.</li>
<li>The virus takes control and sends instructions to a specific component of the computer.</li>
<li>The virus leverages its control over the component to exfiltrate (export) the private keys.</li>
</ol>
Dr. Guri’s major finding was in the number of ways steps 2 and 3 could be accomplished once a virus has infiltrated a device. His research is particularly relevant to personal computers as they are multifunctional devices with numerous components that have emissions of one sort or another. Dr. Guri described ingenious yet realistic ways to exploit these emissions, some of which you wouldn’t believe:
<ul>
<li>Virus takes control of the <a href="https://www.youtube.com/watch?v=v2_sZIfZkDQ">computer fan</a> to exfiltrate information through sound;</li>
<li>Virus manipulates <a href="https://www.youtube.com/watch?v=H7lQXmSLiP8">hard disk drive noise</a> to exfiltrate information;</li>
<li>Virus causes the air-gapped computer to output radio signals generated by the computer’s <a href="https://www.youtube.com/watch?v=2OzTWiGl1rM">electromagnetism</a>;</li>
<li>And in the most alarming example, a virus was even able to use <a href="https://www.youtube.com/watch?v=ddmHOvT866o">ultrasonic waves</a> to output the private key information stored on an air-gapped computers and air-gapped Raspberry Pis.</li>
</ul>
Dr. Guri’s team demonstrated how these outputs — whether they be light, sound, or radio signal emissions — can be picked up and converted by nearby devices to exfiltrate private keys.
<img src="https://keyst.one/images/1_h_Oha_Hoqv_Em_GD_Qr_We4_N_Tmg_809b348954.webp" alt="1__h__OhaHoqvEmGDQrWe4NTmg.webp">
The only question Dr. Guri’s findings seem to leave to the imagination is, How easy is it to actually install malware on an air-gapped computer? To the untrained observer, it may seem fairly improbable that a virus can be transmitted to a device that isn’t connected to the internet. However, all cold wallets need some means of connecting to the network to execute transactions or download operating system or wallet software. With air-gapped computers, data transmission usually happens by USB.
USB data transmissions are notoriously vulnerable. To take an example anyone can appreciate the severity of, in 2008, <a href="https://en.wikipedia.org/wiki/Agent.BTZ">a USB drive left in the parking lot of a Middle East US military base</a> became the vector that installed a software virus on the Department of Defense’s internal network. Appearing to be lost, the USB was picked up by a Department of Defense employee who unwittingly allowed the virus agent.btz to infiltrate a laptop attached to the United States Central Command. Pentagon IT security personnel spent 14 months trying to rid the network of all traces of the virus.
Many crypto enthusiasts use USB drives to transmit their transaction information in and out of air-gapped computers. Not only is this practice unsafe, but it’s particularly inviting to hackers because of the large attack surface on a computer.
The dangers to air-gapped computers don’t stop there for users of third-party operating system or wallet software. In an example of how even software downloaded from trusted official pages can carry its own risk, hackers in 2016 replaced the official Linux Mint download icon with their own backdoor program. Just as this malware link affected everyone who clicked where it was <a href="https://blog.linuxmint.com/?p=2994">inserted on the Linux Mint download page</a>, a virus can infiltrate an air-gapped computer in the form of “trusted” software.
<h4>Android Devices as Cold Wallets</h4>
We’ve pointed out the various reasons why offline computers cannot be considered truly air-gapped. But what about smartphones, which have no fans or mechanical hard drives?
Let’s first take a look at Android phones. Android phones rely on TrustZone for security (Let’s take it for granted that private keys are actually being stored in TrustZone, although there have been known to be incidents where unscrupulous vendors weren’t doing so). Demonstrations of leaking private keys through <a href="https://duo.com/decipher/new-side-channel-attack-extracts-private-keys-from-some-qualcomm-chips">side-channel attacks</a> show that TrustZone can be quite vulnerable. This means that if an attacker gains physical access to an air-gapped Android, they can steal its private keys through complex but practically achievable methods. Android chip manufacturers can release patches once zero-day attacks are discovered, but Android device makers then need to pass them on to users, which they sometimes don’t agree to do.
<h4>iPhones as Cold Wallets</h4>
iPhones use something called the Secure Enclave, which can be understood as a Secure Element embedded in the main processor. As the likeness in name suggests, Apple’s Secure Enclave pioneered the use of Secure Elements in smartphones. The Secure Enclave is capable of performing pretty much every function of a Secure Element including true random number generation (TRGN) and even shares most of its physical properties.
Despite what the Secure Enclave is capable of, it’s completely useless for cryptocurrencies because Apple has total custodianship of the private keys and does not open their use up to any other party. Not only is Secure Enclave based on secp256r1 elliptic curve encryption while Bitcoin uses secp256k1, but even if Secure Enclave supported secp256k1, Apple doesn’t provide an API for extracting private keys or the recovery seed.
Because you cannot use the Secure Enclave for anything other than Apple ecosystem functions, you need a third-party app to use an iPhone as a cold wallet. The fact that transaction signing and private key storage then have to happen on the iOS level and not within the Secure Element represents an incomparable difference in terms of security. Private keys stored on the iOS level are an easier target for the side-channel attacks described above as possible on TrustZone. Furthermore, as all random number generation on wallet apps is algorithm-based, you’ll end up with a pseudorandom rather than true random number for your recovery seed.
While an iPhone has a smaller attack surface than a computer and does not use USB data transmissions, it isn’t much safer because Secure Enclave can’t perform transaction signing and private key storage in a secure environment or TRGN in a way that is recoverable. Even if Apple were to add support for secp256k1, you would not be able to backup your wallet if anything happened to the iPhone. Neither will Apple’s release of CryptoKit signify a change for cold storage — here “Crypto” refers to cryptography, not cryptocurrency.
<h4>Keeping it Simple</h4>
Hardware wallets are minimalistic devices with drastically reduced attack surfaces. While air-gapped smartphones are somewhat safer than air-gapped computers, don’t be lulled into a false sense of security by the tradition of using either. If you’re truly interested in securing your assets, you should only be looking at hardware wallets with a Secure Element. To learn more about how we go even further in minimizing the possibility of attack, read on about how the transparency of the Keystone’s <a href="https://blog.keyst.one/ever-wondered-what-your-hardware-wallet-inputs-and-outputs-9b33b4cedafd">QR code transmissions</a>.

Air-Gapped Computers and Phones vs Hardware Wallets: What’s the Difference?

Relaunched under the Keystone brand (formerly known as Cobo Vault), the hardware wallet team is led by <a href="https://twitter.com/BitcoinLixin">Lixin Liu</a>, Keystone CEO and <a href="https://twitter.com/aaron1sme">Aaron Chen</a>, Keystone CTO.
Together with the Keystone team, Lixin and Aaron seek to continually provide crypto users timeless security to their previous digital assets no matter where they are in the world. This article introduces the global crypto community to Keystone’s team, their achievements, and their mission.
Since the very first premium hardware wallet was successfully funded (<a href="https://www.indiegogo.com/projects/cobo-vault-military-grade-cryptocurrency-wallet">Cobo Vault Ultimate</a>) on indiegogo in 2018, the team has earned the trust of both consumers and enterprises for their impenetrable security and high-end machinery of their open-source hardware wallet. Various achievements have been successfully accomplished by the team to improve hardware security for the global crypto community:
<ul>
<li>First in the industry to produce a premium hardware wallet that meets the American military standards for robustness (<a href="https://en.wikipedia.org/wiki/MIL-STD-810">MIL-STD-810G</a>).</li>
<li>Introduced QR code data transmission to the crypto community by working with the <a href="https://github.com/BlockchainCommons/Airgapped-Wallet-Community">Airgapped Wallet Community</a> for 100% air-tight security which is compatible with BlueWallet, Specter, Sparrow and Nunchuk.</li>
<li>First in the industry to publicly share their <a href="https://github.com/CoboVault/cobo-vault-se-firmware">Secure Element firmware</a> and <a href="https://github.com/CoboVault/cobo-vault-docs/tree/master/audit-report">auditing reports</a>.</li>
<li>Developed 3 types of metal storage for recovery phrases (currently best sellers within their product category on <a href="https://www.amazon.com/dp/B07RZW8CWY/">Amazon</a> )</li>
<li>Successfully launched BTC-only firmware to improve security for the Bitcoin community and is considered to be part of <a href="https://twitter.com/mflaxman/status/1310580116808970240">the best multi-sig solution</a> for bitcoin.</li>
<li>Addressed the Blind Signing issues for the ETH community</li>
<li>Integrated Cobo Vault hardware wallet with MetaMask</li>
<li>Received the <a href="https://medium.com/web3foundation/web3-foundation-grants-wave-7-recipients-15043dbc9198">Web3 Foundation grant in 2020</a> for integrating Cobo Vault with Pokadot.js.</li>
</ul>
Even though recovery phrases are considered a simple matter to most crypto users and hardware wallet developers, the team did some deep optimization regarding the recovery phrases, paying extreme attention to every detail for flawless security regarding your recovery phrase. Here are just a few optimizations that were carefully implemented:
<ul>
<li>Recovery phrase check</li>
<li>Create your own recovery with dice rolls</li>
<li>Auto calculation for the 24th word</li>
<li>Implementing SLIP 39(Shamir Recovery Phrase)</li>
</ul>
Here are the Keystone team’s values that guide how timeless crypto hardware security wallets are built at Keystone:
Interoperability:
QR codes were carefully considered as the best method to transfer any signed or unsigned transactions regardless of the concerning blockchain when using a hardware wallet. There were multiple reasons behind this adoption to address a strong interoperable function a hardware should have.
First and foremost, it provides a more stable connection between hardware and software wallets than USB cables or bluetooth connections. Secondly, QR codes provide 100% air-gapped security so users can be fully aware of what information is passed to and from their hardware wallets. Last but not least, the Keystone hardware wallet only acts as the signer of your crypto transactions without being restricted to any particular software wallet. This protects your assets from fraud and potential hacks in every transaction you make without limiting the interoperability of your Keystone hardware wallet.
Hardware Wallet UX:
The team believes that UX should be considered as a part of the security. The company is no longer designing hardware wallets just for crypto veterans but for hundreds of millions of people around the world who are going to join this crypto revolution. Currently, human error is no-doubt the biggest reason for crypto loss and would be in the foreseeable future since cryptocurrencies have yet to become common knowledge. If the team doesn’t make improvements from tiny buttons and small screens, the majority of people could lose billions of digital assets in the coming years.
Community-focused:
The crypto community’s needs will be addressed and prioritized so their feedback and criticisms( <a href="https://twitter.com/lukechilds">@lukechilds</a>, @<a href="https://twitter.com/nicksdjohnson">nicksdjohnson</a> ) will be taken into careful consideration. We are proud to have listened to our <a href="https://twitter.com/Multicripto/status/1369907849237848065?s=19">user’s voices</a> and quickly addressed their concerns regarding our hardware wallets.
The Keystone team believes that crypto hardware wallets are for everyone. In the future, these wallets will be your ID in a world that utilizes decentralized services, safely stores your digital assets, and encrypts your sensitive data for confidentiality. Keystone wishes to make those functions available to all users regardless where you are or where you’re from. When will you join this new digital world? For more information on the Keystone team and the new Keystone wallet, please visit our <a href="https://keyst.one/">new website</a>.
<a href="https://medium.com/tag/security?source=post_page-----b037777a1259---------------security-----------------">Security</a>|<a href="https://medium.com/tag/hardware-wallet?source=post_page-----b037777a1259---------------hardware_wallet-----------------">Hardware Wallet</a>|<a href="https://medium.com/tag/bitcoin?source=post_page-----b037777a1259---------------bitcoin-----------------">Bitcoin</a>|<a href="https://medium.com/tag/ethereum?source=post_page-----b037777a1259---------------ethereum-----------------">Ethereum</a>|<a href="https://medium.com/tag/cryptocurrency?source=post_page-----b037777a1259---------------cryptocurrency-----------------">Cryptocurrency</a>

Keystone's Blog

Unveiling The Future of Security — The New Keystone Brand

Keystone’s Journey: Embracing Open-Source and Self-Custody in the Web3 World — A Letter from our CEO

Keystone’s 5th Birthday Bash: 25% off ALL Products, February 1st-10th

Air-Gapped Computers and Phones vs Hardware Wallets: What’s the Difference?

Keystone: Who we are