Keystone Support
Official WebsiteCoin SupportBlogContact Us
English
English
  • 🧰Advice and Answers from Keystone Team
  • General Navigation Guide
  • About Keystone
  • ChangeLog
    • Keystone Firmware (Multi-Coin)
      • M-13.0(Multi-Coin)
      • M-12.6 (Multi-Coin)
      • M-12.4 (Multi-Coin)
      • M-12.2 (Multi-Coin)
      • M-12.0(Multi-Coin)
      • M-11.0(Multi-Coin)
      • M-10.8(Multi-Coin)
      • M-10.6(Multi-Coin)
      • M-10.4(Multi-Coin)
      • M-10.2(Multi-Coin)
      • M-10.0(Multi-Coin)
      • M-9.6(Multi-Coin)
      • M-9.4(Multi-Coin)
      • M-9.2(Multi-Coin)
      • M-8.8(Multi-Coin)
      • M-8.4(Multi-Coin)
      • M-8.2(Multi-Coin)
      • M-8.0 (Multi-Coin)
      • M-7.2 (Multi-Coin)
      • M-7.0 (Multi-Coin)
      • M-6.10 (Multi-Coin)
      • M-6.8 (Multi-Coin)
      • M-6.6 (Multi-Coin)
      • M-6.4 (Multi-Coin)
      • M-6.2 (Multi-Coin)
      • M-6.0 (Multi-Coin)
      • M-5.4 (Multi-Coin)
      • M-5.3 (Multi-Coin)
      • M-5.2 (Multi-Coin)
      • M-5.0 (Multi-Coin)
      • V 1.4.2 (Multi-Coin)
      • V 1.4.0 (Multi-Coin)
      • V 1.3.0 (Multi-Coin)
      • V 1.2.0 (Multi-Coin)
      • V 1.1.0 (Multi-Coin)
    • Keystone Firmware (BTC-Only)
      • B-3.6 (BTC-Only)
      • B-3.4 (BTC-Only)
      • B-3.2 (BTC-Only)
      • B-2.5 (BTC-Only)
      • B-2.0 (BTC-Only)
      • V 1.1.1 (BTC-Only)
    • Keystone Companion App
      • V1.2.3
      • V1.2.2
      • V1.2.1
      • V 1.1.2
      • V 1.1.0
      • ERC-20 Token Delisting
  • Getting Started
    • Setting Up Keystone (Legacy)
    • Setting Up Keystone (New)
    • Firmware Upgrade
      • How to Format a MicroSD Card to FAT32?
      • Verify the SHA256 Checksum of the Firmware Update File
    • Getting Started with M-10.0 or newer for Beginners
    • Keystone Mobile App Syncing
    • Receiving Cryptocurrency
    • Sending Cryptocurrency
  • Basic Features
    • Password
      • Setting Pattern Lock
      • Fingerprint Settings(Pro only)
      • Forgot or Reset a Password or Pin
    • Add Multiple Addresses
    • Add Tokens on the Mobile APP
    • Add labels to Address
    • View Transaction Details
    • Set System Settings
    • Wipe the Device
  • 3rd Party Integrations
    • Bitcoin Wallets
      • Casa
      • Enhance the security of BlueWallet
        • BlueWallet 2/3 PSBT Multi-sig: BlueWallet + Keystone + ColdCard
        • BlueWallet 2/3 PSBT Multi-sig: Keystone + ColdCard + SeedPicker
      • Specter
        • Specter 2/2 PSBT Multi-Sig
        • Specter 2/3 PSBT Multi-Sig
      • Sparrow Wallet
        • Sparrow Wallet 2/3 PSBT Multi-sig
      • Electrum
        • Electrum 2/2 PSBT Multi-sig
        • Electrum 2/3 PSBT Multi-sig
      • Wasabi Wallet
      • BTCPay Server
      • Nunchuk
      • Simple Bitcoin Wallet
    • ETH & Web3 Wallets
      • MetaMask
        • MetaMask & DeFi
        • Importing MetaMask Wallet into Keystone
        • Potential Trouble with Importing MetaMask wallet into Keystone
        • Importing Your Ledger Wallet/Account into Your Keystone Hardware Wallet
        • How to Switch ETH Path to Ledger Live / Legacy Format?
        • Configure EVM Chains on MetaMask
      • MetaMask Mobile
        • Defi with MetaMask Mobile
        • Configuring EVM Chains on MetaMask Mobile
      • OKX Wallet (Extension)
      • OKX Wallet Mobile
      • Bitget
      • Rabby Wallet
      • Core Wallet (Extension)
      • BlockWallet
      • Polkadot{.js} (DOT/KSM)
        • DOT/KSM Staking
    • Aptos Wallets
      • Fewcha Wallet (Extension)
      • Petra Aptos Wallet (Extension)
    • Arweave Wallets
      • 🦔ArConnect
    • Cosmos Wallets
      • Keplr (Extension)
        • How to Make IBC Transfers with Keystone
    • NEAR Wallets
      • Sender Wallet (Extension)
      • How to switch Near Path to Ledger format?
    • Polkadot Wallets
      • SubWallet
      • Metadata Update or Reset
    • Solana Wallets
      • Solflare Extension
      • Solflare Mobile
    • Dapp (DeFi)
      • Safe
      • Safe Mobile App
      • Zapper
      • Yearn Finance
      • SushiSwap
    • Other Coins
      • XRP Toolkit (XRP)
  • Advanced Features
    • Displaying Your NFT on the Lock Screen
    • Three BTC Address Formats Support
    • Change the derivation path of addresses
    • Export XPUB
    • Displaying ENS Names
    • Multi Signature
      • Delete Multisig Wallet
    • Staking
    • Decoding DeFi Transactions
    • Decoding Multi-Signature Transactions
    • Decoding 4-byte Function Signature
    • Recovery Phrase
      • Construct Your Own Recovery Phrase
      • Import or Create Shamir Backup
      • Use Dice to Generate Recovery Phrase
      • Recovery Phrase Check
      • Recover your Ledger Wallet
    • Passphrase
    • Self-Destruct Mechanism (Pro-only)
  • Miscellaneous
    • Security Practices
    • FAQ
    • Cobo Vault Companion App
    • Migrating from the Keystone Companion App to OKX: A Step-by-Step Guide
  • Keystone Tablet
    • Keystone Tablet Instruction Guide
    • Why does the Keystone Tablet have only 4 slots for a word?
Powered by GitBook
On this page
  • I. Unboxing
  • II. Web Authentication
  • III. Backup Recovery Phrase
  • IV. Set a Strong Password
  • V. Fingerprint Sensor (Pro only)
  • VI. Passphrase

Was this helpful?

  1. Miscellaneous

Security Practices

PreviousSelf-Destruct Mechanism (Pro-only)NextFAQ

Last updated 11 months ago

Was this helpful?

I. Unboxing

Keystone Wallet uses tamper-proof stickers in its packaging. Check that the stickers are not tampered with when you receive the device to inspect for supply chain attacks.

II. Web Authentication

If the tamper-proof stickers have been specially treated, such as through use of a hot air gun or forgery, it may be difficult to identify. Upon initialization of the device, you will be asked to perform . If the vault has been tampered with, authentication will fail.

III. Backup Recovery Phrase

Keystone Wallet is a hierarchical deterministic (HD) wallet that complied with BIP32/39/44. The recovery phase enables final ownership of all crypto assets and is always controlled by the user. If Keystone Wallet is lost or broken, assets can be recovered with the recovery phrase on any device or software that supports the BIP39 protocol.

Initialization of the Keystone Wallet is the only time the recovery phrase will be displayed. We recommend users physically record their recovery phrase with a metal storage device such as the Keystone Tablet, which has waterproof, fireproof, anti-corrosion, and pressure-resistant properties.

Tips: Please make sure you have physically recorded your recovery phrase as opposed to having saved it as a photo or other format on any device which may connect to the internet. We , laptops, and USB sticks.

,,

IV. Set a Strong Password

After you generate or import a recovery phrase, the password can be called by the private keys for signature, which means your assets can be stolen if your password is leaked. Please set a strong password. Simple passwords including names or birthdays, for example, can be more easily brute-forced to gain access to your recovery phrase.

How easy is it to brute force a password?

V. Fingerprint Sensor (Pro only)

The fingerprint function is suitable for use in public places to prevent the password from being captured by onlookers or surveillance cameras.

VI. Passphrase

Please read the or visit our for information on Passphrases and how to create them. We recommend users set a passphrase as well as enable sentinel wallet alerts if they are concerned about physical and social engineering attacks. Keystone Wallet also possesses several hardware-level defenses against physical attacks, such as the Secure Element and self-destruct mechanism.

Web Authentication
advise against using air-gapped mobile phones
Recovery Phrase
PIN code
Passphrase
Add Fingerprint
Passphrase support page
blog
About the Secure Element
Self-Destruct Mechanism (Pro only)