What Is Keystone?
Keystone (previously known as Cobo Vault) is a hardware wallet manufactured by a company focused on cryptographic security. It is designed around a single core principle: the private keys should never be exposed to any communication channel that could be intercepted.
While USB connections and Bluetooth connections — used by Ledger and Trezor — are generally considered secure, they are still active communication channels that could theoretically be exploited via supply chain attacks, firmware vulnerabilities, or newly-discovered exploits. Keystone eliminates this attack surface entirely by using only QR codes for data transfer.
The result is a hardware wallet that is physically air-gapped during signing. Your computer and your Keystone device never have any physical or wireless connection. Data is transmitted only through QR codes displayed on screen — and QR codes cannot be used to inject malicious code or extract private keys.
As of 2026, Keystone supports over 5,500 coins and tokens, has fully open-source firmware, and integrates natively with MetaMask, BlueWallet, Phantom, Solflare, and other major wallets via QR code.
How Air-Gapped QR Code Signing Works
Understanding Keystone’s QR-based signing model is essential to appreciating why it was designed this way.
Traditional Hardware Wallet Signing (USB/Bluetooth)
- User constructs transaction in MetaMask/Ledger Live
- Transaction data is sent over USB or Bluetooth to the hardware device
- Device signs and returns the signed transaction over the same connection
The connection is the attack surface. Even if current implementations are secure, the connection exists and could be vulnerable to future exploits.
Keystone’s QR Code Signing
- User constructs an unsigned transaction in a compatible wallet (MetaMask, Phantom, BlueWallet)
- The wallet displays the unsigned transaction as a QR code on the computer screen
- User holds up the Keystone device and scans the QR code with its camera
- User approves on the Keystone touchscreen
- Keystone signs the transaction and displays the signed result as a QR code
- The user scans this QR code with the wallet app’s camera (phone or desktop)
- The signed transaction is broadcast
The key security property: At no point is there any wired or wireless connection between the Keystone device and any online computer. Data moves only through optical QR codes. A QR code displayed on screen cannot reach through the display to attack the signing device.
This is the strictest possible air-gap implementation in a consumer hardware wallet.
Keystone Pro vs Keystone Essential: Model Comparison
Keystone offers two main models for 2026:
| Feature | Keystone Essential | Keystone Pro |
|---|---|---|
| Price | ~$119 | ~$169 |
| Screen | 4-inch touchscreen | 4-inch touchscreen |
| Camera | Yes | Yes |
| QR code signing | Yes | Yes |
| Fingerprint sensor | No | Yes |
| Battery | Replaceable AAA batteries | Rechargeable battery |
| Shamir Secret Sharing | No | Yes |
| Open source firmware | Yes | Yes |
| Supported coins | 5,500+ | 5,500+ |
| MetaMask integration | Yes | Yes |
| Multi-sig support | Via PSBT | Yes, enhanced |
Keystone Essential
The entry-level model is powered by three AAA batteries — which means it can be used indefinitely without USB charging (batteries are replaceable, USB is not needed). No fingerprint sensor, but the touchscreen is the same size as the Pro.
For most users who want an air-gapped hardware wallet without premium features, the Essential is the value choice.
Keystone Pro
The flagship model adds:
The Shamir Backup feature on the Pro is particularly valuable for users who want more sophisticated seed phrase backup strategies.
Hardware Specifications
Both Keystone models share:
The 4-inch touchscreen is notably larger than competing hardware wallets. This makes a genuine difference when verifying transaction details — you can read recipient addresses and amounts clearly rather than squinting at a small display.
Open Source Firmware
Keystone’s firmware is fully open source. The complete codebase is available on GitHub, where security researchers can audit it, submit issues, and propose improvements.
This is a significant differentiator. Ledger’s secure element firmware is partially proprietary (the secure element manufacturer’s requirements). Trezor is fully open source. Keystone is fully open source.
For users who consider security auditability a core requirement — and for any large holding, this matters — Keystone’s open source commitment provides meaningful assurance.
Keystone Integration With Popular Wallets
Keystone’s value is multiplied by its deep integration with software wallets you already use. The QR code protocol (based on the CBOR-UR standard) is supported by an expanding ecosystem:
MetaMask Integration
Keystone offers one of the best MetaMask hardware wallet integrations available. The setup:
- In MetaMask, go to “Add hardware wallet” and select “Keystone”
- MetaMask displays a QR code containing your account derivation request
- Scan with Keystone — it displays the accounts it can derive
- Select the account to add
- Keystone’s account appears in MetaMask with a hardware wallet badge
For every subsequent transaction, MetaMask shows the unsigned transaction as a QR code, Keystone scans and signs it, Keystone displays the signed transaction as a QR code, and MetaMask scans to broadcast.
The workflow is fluid once practiced, and the security improvement over a Ledger connected via USB is meaningful for users who are concerned about USB attack surfaces.
BlueWallet Integration (Bitcoin)
Keystone integrates with BlueWallet via PSBT (Partially Signed Bitcoin Transactions) and QR codes:
- Add a watch-only Bitcoin wallet in BlueWallet using your Keystone’s xpub (exported via QR)
- Create Bitcoin transactions in BlueWallet
- Export the unsigned PSBT as a QR code
- Scan with Keystone, sign on device, Keystone displays signed PSBT as QR
- Scan with BlueWallet to broadcast
This creates a completely air-gapped Bitcoin transaction workflow from a mobile app.
Phantom Integration (Solana)
Phantom’s desktop browser extension supports Keystone via QR code signing:
- In Phantom, select “Connect hardware wallet” and choose Keystone
- Scan the account derivation QR code from Phantom with Keystone
- Keystone-secured Solana account appears in Phantom
All Solana transactions (DeFi, NFTs, staking) are then signed via QR exchange between Phantom and Keystone.
Solflare Integration
Solflare (the leading Solana staking wallet) also integrates with Keystone for hardware-secured staking and DeFi.
Other Integrations
Keystone also integrates with:
- Sparrow Wallet (Bitcoin desktop)
- Specter Desktop
- Nunchuk (multisig)
- Rabby (Ethereum DeFi)
- Various other PSBT-compatible and QR-code-compatible wallets
Setting Up Keystone
Initial Setup
Connecting to MetaMask
- Open MetaMask in your browser
- Click the account selector → “Add account or hardware wallet” → “Add hardware wallet”
- Select “Keystone”
- MetaMask shows a QR code — scan it with your Keystone device using the camera
- Keystone displays available Ethereum accounts — select one
- The account appears in MetaMask with a Keystone hardware badge
You can now use this account with any Ethereum dApp through MetaMask, with all signing happening on the Keystone device.
Keystone vs Ledger vs Trezor
| Feature | Keystone Pro | Ledger Nano X | Trezor Safe 5 |
|---|---|---|---|
| Price | ~$169 | ~$149 | ~$169 |
| Connectivity | QR code only (air-gapped) | USB + Bluetooth | USB-C only |
| Screen size | 4-inch touchscreen | Small OLED | Color touchscreen |
| Open source | Fully | Partial (secure element proprietary) | Fully |
| Supported coins | 5,500+ | 5,500+ | 1,000+ |
| Fingerprint | Yes (Pro) | No | No |
| Shamir Backup | Yes (Pro) | No | Yes (Trezor Safe 3+) |
| MetaMask integration | QR-based | USB-based | USB-based |
| Phantom integration | Yes (QR) | Yes (USB) | Limited |
| Battery | Rechargeable (Pro) / AAA (Essential) | Rechargeable | No battery |
| Air-gap | Complete | No (USB/BT) | No (USB only) |
| Best for | Air-gap security enthusiasts | Most users | Open-source advocates |
When to Choose Keystone Over Ledger
Choose Keystone if:
- You want the strictest air-gap security model (no USB/Bluetooth attack surface)
- You use multiple software wallets (MetaMask, Phantom, BlueWallet) and want QR integration with all of them
- Open source firmware is important to you
- The larger screen for transaction verification matters
- You want Shamir Backup support (Pro)
Choose Ledger if:
- You want the most mainstream hardware wallet with the broadest ecosystem support
- Bluetooth mobile convenience is important
- You prioritize the largest company with the most resources behind it
- First-time hardware wallet users who want the most supported option
Supported Coins
Keystone supports 5,500+ coins and tokens as of 2026:
| Category | Examples |
|---|---|
| Bitcoin | BTC, BTC SegWit, Taproot |
| Ethereum | ETH, all ERC-20 tokens |
| Solana | SOL, all SPL tokens |
| BNB Chain | BNB, BEP-20 tokens |
| Polygon | MATIC, Polygon tokens |
| Arbitrum | ARB, Arbitrum tokens |
| Cosmos ecosystem | ATOM, OSMO, and IBC tokens |
| Cardano | ADA |
| Polkadot | DOT |
| Avalanche | AVAX |
| Tron | TRX, TRC-20 |
| Near | NEAR |
| And 5,400+ more | Various |
The breadth of supported assets is comparable to Ledger and exceeds Trezor in some chain categories.
Who Is Keystone Best For?
Security maximalists who want zero connection surface: The QR-only air-gap is the strictest available implementation. No USB driver vulnerabilities, no Bluetooth exploits, no supply chain USB attack possibilities.
Multi-wallet users: If you use MetaMask for Ethereum DeFi, Phantom for Solana, and BlueWallet for Bitcoin, Keystone integrates natively with all three via QR — no separate hardware wallets needed.
Open source advocates: Fully auditable firmware is a meaningful feature for users who consider software trust assumptions unacceptable.
Large holders who want transaction visibility: The 4-inch touchscreen makes verifying recipient addresses and amounts significantly easier than the small screens on Ledger/Trezor.
Advanced users who understand the workflow: The QR signing process has a slight learning curve compared to plug-in-and-press-button simplicity. Users who understand and appreciate the security trade-offs will find it worth mastering.
Keystone is probably not the first choice for:
- Complete hardware wallet beginners (Ledger is more beginner-friendly)
- Users who primarily want mobile Bluetooth convenience (Ledger Nano X)
- Users for whom price is the primary factor (Ledger Nano S Plus at $79 is cheaper)
Pros and Cons
Pros
- Complete air-gap — no USB or Bluetooth data transfer ever
- QR code signing eliminates USB and Bluetooth attack surfaces
- Fully open source firmware
- 4-inch touchscreen — largest and clearest in hardware wallet category
- 5,500+ supported coins
- Native integration with MetaMask, Phantom, BlueWallet, Solflare, Sparrow
- Shamir Backup support (Pro)
- Fingerprint authentication (Pro)
- AAA battery option (Essential) — no charging dependency
- Secure element (EAL5+)
Cons
- QR code workflow has a learning curve vs plug-in simplicity
- Slightly more physical steps per transaction (scan QR, sign, scan QR)
- More expensive than entry-level Ledger ($79 Nano S Plus)
- Smaller community and support resources than Ledger
- QR-based mobile workflow requires positioning phone camera properly
Frequently Asked Questions
How is Keystone different from Ledger?
Keystone uses QR codes only for data transfer — there is no USB or Bluetooth connection between the device and your computer. Ledger uses USB and Bluetooth. Keystone’s air-gap eliminates the attack surface that USB and Bluetooth connections represent.
Is Keystone fully open source?
Yes. Keystone’s firmware is fully open source and available on GitHub. This is unlike Ledger, which has a partially proprietary secure element.
What if I lose my Keystone device?
Your crypto is not in the device. If you have your seed phrase (12 or 24 words), you can restore your wallet on a new Keystone or any compatible hardware wallet. The device is just a signing tool.
Can Keystone be hacked remotely?
No. Keystone has no network connection, no USB data transfer, and no Bluetooth. It is physically impossible to reach the device remotely. The only way to compromise a Keystone is physical access to the device combined with your PIN, or access to your seed phrase.
Does Keystone work with MetaMask?
Yes. Keystone integrates directly with MetaMask via QR code. All transaction signing goes through the Keystone device.
What is Shamir Backup?
Shamir’s Secret Sharing splits your seed phrase into multiple shares. For example, 3-of-5 means any 3 of 5 shares reconstruct the full seed. This allows distributed backup — no single location holds the complete seed. Available on Keystone Pro.
Does Keystone support Solana?
Yes. Keystone supports SOL and all SPL tokens. It integrates with Phantom and Solflare via QR code for Solana DeFi and staking.
Is the Keystone Pro worth the extra cost over the Essential?
The fingerprint sensor and Shamir Backup are the key additions. If you want biometric authentication and advanced seed backup strategies, the Pro is worth it. For most users, the Essential’s security features are sufficient.
How does the 4-inch screen compare to Ledger?
Keystone’s 4-inch touchscreen is significantly larger than the Ledger Nano X’s small OLED screen. This makes reading and verifying transaction details (recipient addresses, amounts) considerably easier and reduces the risk of signing something without fully reviewing it.
Related guides:
Leave a Reply