Keystone 3 Pro review

Air-gapped without the austerity

Most fully air-gapped devices ask you to trade usability for isolation. Keystone does not: there is no USB data path, no Bluetooth and no NFC signing — every interaction happens through QR codes — and yet the phone-sized touchscreen makes a complex transaction easier to read than on any competitor.

Three secure elements, open firmware

PIN and biometrics are handled in hardware across three secure elements, and the firmware is published under an open licence with reproducible builds documented. That combination — physical isolation plus auditable code — is the strongest security posture in this table on paper.

The daily trade-off

QR signing is slower than a cable, and for someone signing several transactions a day that friction accumulates. The device is also physically large and carries a battery, which is one more component that ages and eventually fails.

Recovery

Standard BIP-39 with an optional passphrase plus shard-based backup, so recovery works on ordinary wallet software and does not depend on the vendor continuing to exist.

Who it suits

Multi-chain holders who want physical isolation without giving up readability, and anyone who has ever squinted at a two-line display trying to decide whether a contract call was the one they meant to approve.

What to check on arrival

Verify the firmware signature through the vendor's published process before generating a seed. On an air-gapped device that check is the one moment the supply chain can be audited.