Wallet Review
Keystone Wallet Overview
An air-gapped hardware wallet built for offline signing and self-custody
Our partners
Why Users Choose Keystone
Air-Gapped Security
Keystone is designed to operate without USB, Bluetooth, or WiFi connections. This air-gapped approach keeps the device isolated from any network, reducing the attack surface for remote threats.
QR-Based Transaction Signing
Transactions are passed to and from the Keystone device using QR codes rather than a wired or wireless connection. The device signs the transaction offline and the signed result is scanned back into a companion wallet.
Hardware Wallet Design
Keystone is a physical hardware device with a touchscreen interface. Private keys are generated and stored on the device and never transmitted over a network connection.
Open-Source Firmware
Keystone's firmware is open-source and publicly available for independent review, allowing security researchers and the broader community to audit the device's codebase.
Companion Wallet Compatibility
Keystone is designed to work alongside a range of software wallets as a signing device. Users can manage assets in a companion wallet interface while keeping their private keys on the offline Keystone hardware.
Self-Custody
Keystone is a self-custody solution. Users hold their own recovery phrase and private keys on the device. Keystone does not hold user funds or have access to wallet credentials.
Keystone Wallet Overview
Keystone is an open-source hardware wallet designed around an air-gapped security model. Unlike hardware wallets that connect to computers via USB or Bluetooth, Keystone communicates with companion software through QR codes. This means the device never establishes a wired or wireless network connection, keeping private keys fully isolated from internet-connected environments during transaction signing.
Because Keystone is a self-custody solution, users are responsible for securely storing their recovery phrase. Private keys are generated and stored on the device and never leave the hardware. Keystone's firmware is open-source, allowing independent review of the codebase. The device is intended to be used alongside compatible software wallets, which handle the asset management interface while Keystone handles offline signing.
Users who hold assets on a Keystone device and want to move them between different cryptocurrencies without using a centralized exchange may find non-custodial swap services a practical complement to their hardware wallet setup. Baltex provides direct swap routes across multiple asset pairs without requiring account creation or holding assets in custody.
Frequently Asked Questions about Keystone
What does air-gapped mean in the context of Keystone?
Air-gapped means the device has no USB, Bluetooth, WiFi, or other network connection. Keystone communicates only through QR codes, so private keys are never transmitted over any network connection during transaction signing.
How does QR-based signing work with Keystone?
A companion software wallet constructs an unsigned transaction and displays it as a QR code. The Keystone device scans this QR code, signs the transaction offline, and displays the signed result as a new QR code. The companion wallet then scans this to broadcast the transaction to the network.
Why is open-source firmware relevant for Keystone?
Open-source firmware allows independent security researchers and the public to review the code running on the device for vulnerabilities or unexpected behavior. This transparency provides an additional layer of accountability for users evaluating the security of their hardware wallet.
Who is Keystone designed for?
Keystone is designed for users who want a high level of physical isolation for their private keys and prefer a hardware wallet that does not rely on USB or wireless connections. It is well-suited for security-conscious individuals, long-term holders, and users comfortable with a QR-based signing workflow.
Need to swap assets without a centralized account?
Baltex provides non-custodial swap routes across multiple asset pairs without requiring account registration or holding assets in custody — a practical option for hardware wallet users.
