Keystone 3 Pro Review (2026): Three Chips, No Spec Sheet

This Keystone 3 Pro review covers the air-gapped crypto hardware wallet made by Keystone, the company at keyst.one — not a keyboard, a projector setting, or anything else that shares the name. It is a $149 device that never connects to your computer, runs published firmware, and works with more software wallets than almost anything else in its class. It also has two problems worth knowing before you order, and one of them is not the device’s fault.

Keystone 3 Pro review: the verdict

A genuinely capable air-gapped wallet with the best supply-chain verification tool in the category, undercut right now by availability and by a spec sheet that leaves out the one thing it is marketed on.

• Buy it if you want air-gapped signing across many chains, you value an open firmware you can build and check yourself, and you use wallets like MetaMask, Sparrow, Rabby, Nunchuk or Keplr.
• Don’t buy it yet if you need a wallet this week. It is pre-order only, quoted at four to six weeks, following the October 2026 breach.
• Look elsewhere if you specifically want a named, independently certified secure element. Keystone markets “3 Element Chips” but, on its product and specification pages, names none of them and states no certification level.
• Its best feature is one most buyers never think about: a working Device Verification tool that tells you whether the unit in your hand is really Keystone’s.

Keystone 3 Pro specifications

Specification	Keystone 3 Pro
Price	$149 (pre-order, quoted 4–6 weeks)
Secure element	Three chips; not named, no certification level stated
Air-gapped	Yes — no Bluetooth, NFC or WiFi
Screen	4-inch LCD touchscreen, 480 × 800
Biometrics	Fingerprint unlock and signing
Battery	1000 mAh Li-ion, 3.7 Wh
Dimensions / weight	62.44 × 103.9 × 12.08 mm / 103 g
Connectivity	USB-C (charging and firmware updates)
Firmware	3.2.0, released 23 October 2026
Firmware variants	Multi-Coin, Cypherpunk (BTC/ZEC/XMR), Bitcoin-only
Assets	5,500+ coins and tokens across 200+ blockchains, as claimed
Backup	BIP39, up to 3 seed phrases, passphrase, 20-word Shamir Backup
Open source	Firmware, hardware schematics and BOM published, with a build-and-verify guide
Authenticity check	Yes — Device Verification tool
In the box	Device, 6 seed phrase sheets. microSD card not included

Specifications and prices read at Keystone’s own store and its firmware page on 2 November 2026.

What the Keystone 3 Pro actually is

It is a fully air-gapped wallet. There is no Bluetooth, no NFC and no WiFi, and the USB-C port is used for charging and firmware updates rather than day-to-day signing. Your private keys are generated and stored on the device, transactions are confirmed on its 4-inch touchscreen, and the computer or phone holding your wallet software never touches the keys.

Physically it is closer to a small phone than to the keyring-sized devices most people picture. At 103 grams with a 1000 mAh battery and a colour touchscreen, it is built to be read and tapped rather than squinted at and clicked. The fingerprint reader unlocks it and can authorise signing.

That size is the trade. A Trezor Safe 3 fits in a coin pocket; this does not. In exchange you get a screen large enough to actually check an address and a transaction before you approve it, which is the whole point of confirming on-device.

The three chips Keystone won’t specify

Keystone’s marketing leads with “3 Element Chips”. Its store describes the device as “equipped with three security chips and a physical anti-tamper design”. Its FAQ refers to “3 secure element chips”.

Across its homepage, product page, firmware page, authentication page and open-source page, not one of those three chips is named, and no certification level appears anywhere. No part number, no manufacturer, no EAL rating, no Common Criteria or FIPS reference. Nor do those pages say what each of the three chips does — whether the roles are split between seed storage, biometrics and verification, or something else.

This matters because every serious competitor does specify. Trezor names the OPTIGA Trust M (V3) and states CC EAL6+. Tangem names a Samsung chip at EAL6+. BitBox states EAL6+. Coldcard names both of its chips, the ATECC608 and the DS28C36B, from two different vendors. NGRAVE names a customised STSAFE A100.

Keystone does publish a blog post about its triple-chip design, so a determined reader can go further than the spec pages. But a buyer comparing devices on the pages built for comparing devices will find three unnamed chips and no certification, while every rival on the shortlist hands over a part number. For a device sold substantially on that silicon, that is a strange omission.

To be clear about what this is and is not: an unnamed chip is not a bad chip. There is no evidence here of a weak secure element. The criticism is about disclosure, not about silicon — but disclosure is exactly what an air-gapped wallet’s buyer is paying for.

How signing works, and why we can’t be more precise

Keystone’s own pages describe “air-gapped (offline) transaction signing” and an “Air-Gapped Mode” with “Completely Isolation, No Network Risk”. What they do not say, anywhere we could find, is how.

The device is widely understood to pass transactions by QR code and microSD card, and the only statement to that effect on Keystone’s own homepage is a quoted third-party review, not Keystone’s own wording. The store sells a microSD bundle and notes that a card is not included, which implies microSD is used for something beyond firmware. Firmware itself can be updated by WebUSB or by card.

So the mechanism is almost certainly QR plus microSD, and in practice that is how owners describe using it. We are flagging it because a manufacturer that markets air-gapping as its headline feature should document the air gap, and this one leaves its clearest description to someone else’s testimonial.

Where it genuinely leads: the wallet ecosystem

This is the Keystone 3 Pro’s strongest and most underrated feature, and it is where it beats most of the field outright.

Keystone’s supported wallets page lists around fifty software wallets, including MetaMask, Rabby, Sparrow, Nunchuk, BlueWallet, Keplr, Solflare, Backpack, Xverse, UniSat, Petra, Eternl, imToken and Safe. MetaMask is labelled an official partner. For anyone who actually uses DeFi rather than only holding coins, that breadth is the practical difference between a wallet you use and a wallet you store.

Bitcoin users are served properly too. Sparrow, BlueWallet, Nunchuk and BULL are marked for Bitcoin-only multisig, with PSBT multi-signature supported, and there is a dedicated Bitcoin-only firmware alongside a Cypherpunk build covering Bitcoin, Zcash and Monero. Running a Bitcoin-only firmware reduces the attack surface in the same way Coldcard’s and BitBox’s Bitcoin editions do.

One honest caveat on the numbers: the wallet count does not reconcile. The page headline says “45+”, the table on that page lists fifty, and the homepage elsewhere claims “100+ leading Web3 wallets”. Three figures for one fact, with no explanation of the difference. The underlying support is real and broad; the counting is loose.

Backup options are better than most

You get standard BIP39 recovery, so a Keystone seed restores on any BIP39-compatible wallet and you are not locked in. On top of that the device holds up to three separate seed phrases, switchable by password or fingerprint, which gives you genuinely separate wallets on one device rather than one wallet with a passphrase bolted on.

Passphrase support is there as well, and the firmware supports 20-word Shamir Backup, which splits a seed into shares so no single written copy can lose or leak everything. Between multi-seed, passphrase and Shamir, the backup story is more flexible than Trezor’s or Ledger’s and closer to what Coldcard offers.

The box includes six seed phrase sheets and no metal backup. Keystone sells steel plates separately — the Tablet at $39, Tablet Plus at $49 — and for any meaningful balance a steel backup is worth the money regardless of which wallet you buy.

Device Verification: the feature that should sell this wallet

Keystone publishes a Device Verification tool, and it is the most complete authenticity check any hardware wallet maker currently offers. You scan a QR code on its verification page with the device, enter the code the device displays, and the page tells you whether the unit is genuine. Keystone describes it as based on “a cryptographic signature mechanism” and says it involves only publicly available device identification information.

Its stated purpose is defending against supply-chain attacks and against a tampered firmware download. Its guidance if the check fails is blunt and correct: stop using the device immediately and contact support.

Put that in context. When we compared the best hardware wallets across nine makers, only four published a procedure a buyer could actually run — Keystone, Coldcard, Blockstream and Tangem. Trezor, Ledger, BitBox, Cypherock and NGRAVE publish none. This is the single most useful thing on the Keystone 3 Pro, and it is buried under spec-sheet bullet points about chips the company won’t name.

The October 2026 breach, and what it means if you order now

In October 2026 an attacker reached Keystone’s website through a flaw in a third-party monitoring tool on its store and stole the WebAuth device authentication key — the key embedded at manufacture that powers exactly the verification check described above.

The important technical point is what the key is not. It plays no part in generating seeds, deriving keys or signing transactions, so existing wallets were not directly exposed and nobody’s coins moved because of it. The risk is a counterfeit device that could pass an authenticity check. Keystone’s response was substantial: it destroyed 18,835 inventory devices, moved to a replacement key, suspended shipments in favour of pre-orders, cut shipping-data retention to 90 days and notified regulators. A list of 25,964 buyer records including names, addresses and order details was also exposed.

Two things a prospective buyer should weigh. First, when we checked Keystone’s homepage, store page, authentication page and open-source page on 2 November 2026, none carried any notice of the breach. Keystone disclosed through its own social channels and to the press. Its store is taking pre-orders with no on-site mention, so someone arriving from a search engine would not learn about it there.

Second, the promised security audit does not appear to have been published yet. Keystone’s open-source page references SlowMist and Keylabs reviews behind a “View audits” link, with no dates or reports shown on the pages themselves. If the audit matters to your decision, it is worth waiting for it rather than assuming it has landed.

Our full write-up of the Keystone breach explains why the leaked shipping-address list — a filtered list of households known to hold crypto — is the part that deserves more attention than the destroyed devices.

Price, and what you should add

The Keystone 3 Pro is $149 on pre-order. The variants add a microSD card at $170.60 or a wallet pouch at $175.90, and Keystone Care+ extends coverage at $199 for two years or $249 for three. A bundle on the homepage shows $254.80 against $277.80 bought separately.

At $149 it sits between the Trezor Safe 5 at $129 and the Blockstream Jade Plus at $149, and well below the Coldcard Q at $319. Among air-gapped multi-coin wallets it is the cheapest credible option, because the Jade Plus is Bitcoin-only and the NGRAVE ZERO is €398 and sold out.

Budget for two things the box does not include: a microSD card, and a steel backup plate if the balance justifies one.

How it compares

Against the Trezor Safe 5 ($129): the Trezor names its secure element and its certification, costs $20 less and ships today. The Keystone is air-gapped and the Trezor is not, and the Keystone supports far more software wallets. If air-gapping matters to you, pay the extra and wait; if it does not, read our Trezor Safe 5 review instead.

Against the Coldcard Q ($319): the Coldcard is more paranoid in every direction — two named secure elements from two vendors, reproducible builds, duress and brick PINs, and a numbered tamper bag tied to the device at the factory. It is also Bitcoin-only and more than twice the price. For Bitcoin alone the Coldcard wins; for anything multi-chain it is not a competitor.

Against the Blockstream Jade Plus ($149): the same price, also air-gapped, also open source, but Bitcoin-only and with no physical secure element at all. The Keystone is the better choice unless you hold only Bitcoin.

Who should buy it

The Keystone 3 Pro suits someone holding a diversified portfolio across several chains who wants air-gapped signing and actually uses DeFi through MetaMask, Rabby or a chain-specific wallet. The wallet ecosystem, the large screen and the three-seed design all serve that person better than a smaller USB device would.

It does not suit someone who wants a wallet today, someone who needs a certified and named secure element on record, or someone holding only Bitcoin who would be better served by a Coldcard or a Jade Plus.

If you do order one, two rules: buy from Keystone’s own store rather than any reseller, and run the Device Verification tool before you put a single coin on it. After the year the hardware-wallet supply chain has had — Keystone’s stolen authentication key, and a Trezor shipped with an implant by a listed reseller — that check is not paranoia. It is the minimum.

How we reviewed this

We have not handled a Keystone 3 Pro, and we do not claim to have. This Keystone 3 Pro review is built from Keystone’s own technical pages, store listings, firmware changelog and open-source documentation, read and dated on 2 November 2026, plus reporting on the October 2026 breach from outlets including The Hacker News, Cryptopolitan and The Crypto Times.

Where Keystone’s own pages contradict each other or omit something, we have said so rather than filling the gap. Our methodology page explains how we research and review, and the wallets and security hub collects the rest of our wallet coverage.

There is no affiliate link on this page. We are not comfortable earning a commission on a device whose maker has not posted a breach notice on its own store, however good the device is. We will revisit that when Keystone ships again and publishes its audit.

Frequently asked questions

Is the Keystone 3 Pro worth it in 2026?

At $149 it is the cheapest credible air-gapped multi-coin hardware wallet, with the broadest software-wallet support in its class and the best authenticity-verification tool of any maker. It is worth it if you want air-gapped signing across many chains and can wait four to six weeks for a pre-order.

Is the Keystone 3 Pro safe to buy after the breach?

The stolen key was the one used to prove a device is authentic. It plays no part in generating seeds, deriving keys or signing, so existing wallets were not directly exposed. The risk is a counterfeit device passing an authenticity check. Keystone destroyed 18,835 devices and moved to a replacement key. Buy from Keystone directly and run the Device Verification tool before funding it.

What secure element does the Keystone 3 Pro use?

Keystone says the device has three secure element chips but does not name them or state any certification level on its product, specification, firmware, authentication or open-source pages. No part number, manufacturer or EAL rating appears there, which is unusual — Trezor, Tangem, BitBox, Coldcard and NGRAVE all name theirs.

Is the Keystone 3 Pro fully air-gapped?

Yes. It has no Bluetooth, no NFC and no WiFi, and the USB-C port is used for charging and firmware updates rather than signing. Keystone does not document the signing channel on its own pages, though the device is understood to pass transactions by QR code and microSD card.

Does the Keystone 3 Pro work with MetaMask?

Yes, and Keystone lists MetaMask as an official partner. It also works with around fifty other software wallets including Rabby, Sparrow, Nunchuk, BlueWallet, Keplr, Solflare, Backpack, Xverse and Safe.

Keystone 3 Pro or Trezor Safe 5?

The Trezor Safe 5 costs $129, names its CC EAL6+ secure element and ships immediately, but is not air-gapped. The Keystone 3 Pro is air-gapped, supports far more software wallets, and costs $149 on a four-to-six-week pre-order. Choose the Keystone if air-gapping matters to you, the Trezor if it does not.

Does the Keystone 3 Pro need a microSD card?

One is not included in the box. Firmware can be updated either by WebUSB or by microSD card, and Keystone sells a bundle that adds a card. Budget for one.