The Keystone 3 Pro is an air-gapped, QR-only Bitcoin hardware wallet with a 4-inch IPS touchscreen, triple Infineon secure elements, fingerprint authentication, and open-source Bitcoin-only firmware — all at $149. It's the most feature-packed air-gapped wallet at that price.
Address verification is the most important security step in using a hardware wallet, and it's the step most people rush or skip because it's tedious on small screens. The Keystone 3 Pro's 4-inch IPS display shows you the full Bitcoin address in large, readable text without any scrolling. A 34-character bech32 address fits on one screen.
For QR code scanning specifically, a larger screen also helps. When the device needs to display animated QR codes for broadcasting a signed transaction, the larger display makes the camera scanning step faster and more reliable in varied lighting conditions.
The tradeoff is size. At 103g, the Keystone 3 Pro is the heaviest hardware wallet in this comparison. It's not pocketable. It sits on a desk or goes in a bag. If portability matters, the Foundation Passport at 65g is more manageable.
Most hardware wallets use one secure element chip to protect private keys. The Keystone 3 Pro uses three Infineon EAL6+ certified chips. Each handles a specific security function, and they cross-verify each other's outputs.
In practice, this means a physical attack needs to compromise all three chips simultaneously to extract key material. It also means the device can detect when one chip behaves unexpectedly (a sign of tampering or fault injection attacks) by comparing outputs across all three.
Triple secure elements are unusual in the consumer hardware wallet space. Coldcard uses a single EAL5+ chip. Passport uses a single EAL6+ chip. Foundation has published more about its hardware design, but Keystone's triple-chip approach is a legitimate differentiator for hardware attack resistance.
The Keystone 3 Pro ships with multi-chain firmware by default. Bitcoin-only firmware is a separate download from Keystone's GitHub.
The process: download the Bitcoin-only firmware file, verify the SHA256 hash and GPG signature against the values published on GitHub, copy it to a microSD card, insert the card into the Keystone, and follow the on-device firmware update prompts. The device wipes itself before installing the new firmware.
For Bitcoin-only holders, doing this before setting up any wallet is the right approach. It's more involved than Trezor's firmware toggle in their UI, but the end result is a device with a significantly smaller attack surface.
Air-gapped signing sounds complicated. In practice with the Keystone it's pretty fast once you've done it twice. Here's how a typical Bitcoin transaction works:
The whole process takes under two minutes once you're familiar with it. The main adjustment coming from a USB wallet: you need your computer camera or phone to scan the response QR. Works fine in normal room lighting. Sunlight or bright backgrounds can cause the scan to take a few extra seconds.
Yes, and it's one of the cleaner multisig experiences available. The Keystone exports its extended public key (XPUB) via QR to coordinator software like Sparrow. Once you've added all your keys to the multisig wallet, signing works the same way as single-sig: scan the unsigned PSBT, review, approve, scan the signed output back.
One genuinely useful feature: the Keystone can store up to three separate seed phrases. This means you can hold three different keys in a 2-of-3 multisig on a single device during setup and testing, then distribute the device to different locations later. Not recommended for long-term production use, but useful for initial configuration.
The 4-inch screen also helps here. Reviewing multisig transaction details — multiple inputs, change addresses, fees — is more comfortable than on any wallet with a smaller display.
| Feature | Keystone 3 Pro ($149) | Foundation Passport ($199) |
|---|---|---|
| Screen | 4" IPS touchscreen | 1.8" color LCD |
| Air-gap | QR codes only | QR codes only |
| Open source | Firmware | Hardware + firmware |
| Companion app | Keystone app (good) | Envoy (excellent) |
| Secure elements | Triple Infineon EAL6+ | Single EAL6+ |
| Fingerprint | Yes | No |
| Multi-wallet | 3 seeds on one device | 1 seed per device |
| Made in | Hong Kong | USA |
| Weight | 103g | 65g |
Keystone wins on screen size, feature count, and price. Passport wins on companion app quality, hardware transparency, and US manufacturing. Both are strong choices for air-gapped Bitcoin storage.
At $149 for an air-gapped QR wallet with a 4-inch touchscreen, triple secure elements, fingerprint auth, and open-source Bitcoin-only firmware, the Keystone 3 Pro is exceptional value. Nothing else in this price range matches that feature set.
The concerns are real but manageable. Hong Kong manufacture is a legitimate thing to think about; the open-source firmware helps significantly because you can verify what's running. The bulk is annoying but not a security issue.
If you want an air-gapped wallet and the Foundation Passport's $199 feels like too much, the Keystone 3 Pro is the honest recommendation. Read the cold storage guide to understand how it fits into a complete self-custody setup, and the seed phrase guide before you set anything up.
$149 from Keystone's official store. 100% air-gapped with QR codes. No USB, no Bluetooth, no WiFi.
Affiliate Disclosure: Bitcoin.diy may earn a commission if you buy through our links. This doesn't affect our ratings.
Yes. The Keystone 3 Pro communicates exclusively via QR codes. There is no USB data connection, no Bluetooth, no WiFi, and no NFC. The USB-C port is power-only for charging. This is the same air-gap model as the Foundation Passport — your private keys never travel across any wired or wireless data connection. The signing workflow involves scanning animated QR codes between the device and your software wallet.
Yes. Keystone publishes the firmware source code on GitHub. The hardware design is also documented, though less comprehensively than Foundation Passport's full hardware schematics. The Bitcoin-only firmware variant is fully open source. There are also third-party audits of the firmware for the secure elements.
Keystone offers a dedicated Bitcoin-only firmware that strips out all non-Bitcoin functionality. This reduces the attack surface significantly. The device ships with standard multi-chain firmware; switching to Bitcoin-only requires downloading the Bitcoin-only firmware from Keystone's GitHub, verifying the signature, and flashing it. The process is well-documented but requires comfort with firmware verification steps.
The fingerprint sensor is used for device access and transaction authorization. Instead of entering a PIN every time, you can register your fingerprint and use it to unlock the device and approve transactions. It's an optional layer — you can use PIN-only if you prefer. The fingerprint data never leaves the secure element.
Yes, up to three separate wallets on a single device. Each wallet has its own passphrase and seed phrase. This is useful if you want to keep a 'decoy' wallet alongside your main wallet, or manage separate Bitcoin cold storage accounts for different purposes, without carrying multiple hardware wallets.
It's worth being aware of, not necessarily concerned about. Keystone's firmware is open source and auditable, which means supply chain firmware tampering can be detected. The anti-tamper mechanisms wipe the device if physical intrusion is detected. That said, some Bitcoin holders have strong opinions about hardware made in or near China for geopolitical reasons. Foundation Passport (USA-made) and BitBox02 (Swiss-made) are alternatives if origin is a dealbreaker for you.
Both are air-gapped QR-code-only wallets with open-source firmware. Keystone 3 Pro has a 4-inch IPS touchscreen — larger and brighter than the Passport's 1.8-inch color LCD. Keystone has triple secure elements and fingerprint auth. Foundation Passport has the better companion app (Envoy), is made in the USA, and publishes full hardware schematics. Keystone is better value at $149 vs $199. Passport is more polished as a consumer product.
Yes, and it's the recommended pairing for Bitcoin-only use. Sparrow supports Keystone via QR code PSBT signing. You scan a QR from Sparrow on the Keystone, it displays the unsigned transaction, you review and confirm, it shows a signed QR, Sparrow scans that QR and broadcasts. No USB data connection at any point in this flow. Connect Sparrow to your own node for complete privacy.
The Keystone 3 Pro uses three Infineon EAL6+ certified secure elements instead of one. They provide redundancy and cross-verification — the elements check each other's outputs during critical operations. Most hardware wallets use one secure element. Triple elements are unusual and add an extra layer of tamper detection. Practically, this means a hardware attack has to compromise all three chips simultaneously rather than just one.
Yes, it's one of the strongest options for multisig Bitcoin setups. The QR-based PSBT workflow means it can participate as a signer in a multisig without any cable connecting it to any computer. Pairing it with Sparrow Wallet and other signing devices (Coldcard, Passport) in a 2-of-3 multisig gives you air-gap security at every signing point. The multi-seed-phrase feature also lets you test and manage multisig configurations more easily.