Why KeepKey
Your Crypto Deserves Better Than a Black Box
Most hardware wallets ask you to trust them. KeepKey asks you to verify. Every line of firmware code, every circuit on the board — published on GitHub for anyone to audit.
Fully Open Source
Device OS, firmware, AND hardware schematics on GitHub — built from commodity parts anyone can source. Trezor also publishes schematics but newer models depend on vendor-specific secure elements. Ledger's device OS and hardware design are closed.
Clear Signing
Auto-detects contract calls from public ABIs. No registry opt-in needed. Shows decoded transaction details on the device screen. Two-step confirmation for blind signing.
Built-in Swaps
Trade cross-chain directly from your wallet via THORChain, ShapeShift, and ChainFlip. Decentralized protocols only — no centralized intermediaries. Your keys never leave the device.
All EVM Chains
Every EVM chain works via EIP-155. Add custom chains by chain ID — the same 'Add Network' as MetaMask but with hardware security. Ledger Live and Trezor Suite can't do this.
Scrambled PIN & Recovery
PIN entry uses a randomized grid — keyloggers capture nothing. Recovery uses scrambled cipher entry — your seed phrase never touches the keyboard.
Vault Desktop App
Free companion app for macOS, Windows, and Linux. Portfolio dashboard, cross-chain swaps, staking, activity tracking, and settings — all in one place.
Chain Support
Every Chain. No App Installs.
All chains available simultaneously from firmware. No storage limits. No switching between apps. Plus add any custom EVM chain yourself.
| Chain | KeepKey Vault | Ledger Live | Trezor Suite | OneKey | MetaMask | Coinbase |
|---|---|---|---|---|---|---|
Bitcoin | * | |||||
Ethereum | * | |||||
Solana | * | |||||
TON | * | |||||
TRON | * | |||||
Zcash | * | |||||
THORChain (RUNE) | 3rd party | |||||
Avalanche | * | |||||
Cosmos | * | 3rd party | ||||
BNB Smart Chain | * | |||||
BNB Beacon | * | |||||
Dogecoin | * | |||||
Bitcoin Cash | * | |||||
Litecoin | * | |||||
Osmosis | 3rd party | |||||
Ripple | * | |||||
Maya Protocol | 3rd party | |||||
Any EVM (EIP-155) | 3rd party | 3rd party |
*
Ledger requires installing a separate app on the device for each chain. Device storage is limited.
3rd party
The device can sign transactions for this chain, but the vendor's companion app does not support it natively. Requires an external wallet interface.
Based on official vendor documentation as of March 2026.
Cross-Chain Swaps
Decentralized Cross-Chain Swaps
Swap between chains via decentralized protocols — THORChain, ShapeShift, and ChainFlip. ETH to BTC. AVAX to SOL. Funds route through protocol vaults controlled by independent node operators, not company servers. No KYC, no account.
Decentralized-only providers: THORChain, ShapeShift, ChainFlip
No centralized exchange, no KYC, no account
Full swap transparency — route, fees, slippage visible before signing
Confirm every swap on the device screen
Resume in-progress swaps from the activity panel
PDF export for tax records
How a swap works
Select assets
Choose source and destination chains. Enter amount.
Review details
See route, fees, slippage, and estimated output.
Confirm on device
KeepKey displays exact amounts. Press button to approve.
Track progress
Monitor the swap through to completion in Vault.
Clear Signing
See What You Sign
KeepKey auto-detects contract calls using public ABIs and displays decoded transaction details on the device screen. No registry submission required. No per-DApp opt-in needed.
KeepKey
Auto-detected from public ABIs
Works on ANY EVM chain (including custom)
No DApp developer opt-in needed
Native TON clear-signing
Two-step blind signing confirmation
Ledger
ERC-7730 registry (manual opt-in)
EVM only (via ERC-7730)
Each DApp must submit metadata to registry
Falls back to blind signing when metadata missing
Metadata controlled by Ledger signing keys
Trezor
Per-chain firmware implementation
No Solana message signing (NOT_PLANNED)
No TON support
No TRON support (as of March 2026)
No custom EVM chains in Suite
Security Model
Verify, Don't Trust
Your private keys are generated on the device and never leave it. Every transaction is signed on the KeepKey and displayed on the large OLED screen for verification before broadcast.
Large OLED Display
Verify every transaction detail on-device before signing
Scrambled PIN
Randomized grid defeats keyloggers and screen-watchers
BIP-39 Recovery
12 or 24-word seed phrase. Your keys, your coins, forever
BIP-39 Passphrase
Hidden wallets for plausible deniability — separate wallets from one seed
BIP-85 Derived Seeds
Generate hot wallet seeds on-device. Re-derive them anytime from your KeepKey
Auditable Code
Firmware + hardware schematics on GitHub. Verify every circuit and every line
Hardware Transparency
What's Inside a KeepKey
KeepKey is a small, auditable computer designed to do exactly one thing: protect your private keys. Every component is a standard, off-the-shelf part with a public datasheet. No proprietary chips. No black boxes.
STM32F405 ARM Cortex-M4
Industry-standard 32-bit microcontroller from ST Microelectronics. Public datasheet, no NDA required. Sourceable from Mouser, DigiKey, or AliExpress.
256×64 SSD1322 OLED Display
High-contrast OLED for on-device transaction verification. What you see on the screen is what gets signed — no man-in-the-middle possible.
Aluminum Enclosure
Premium aluminum body on the retail device. DIY builders can 3D-print a case using published designs on Printables.
USB Connection
Standard USB for power and data. Compatible with any operating system. No proprietary cables or docks.
No Proprietary Secure Element — By Design
KeepKey uses standard commodity components that anyone can source, inspect, and verify. No proprietary ASICs or custom secure elements that require a special vendor relationship. Security through transparency, not obscurity.
Build Your Own
KeepKey's hardware schematics, PCB layouts, and bill of materials are published on GitHub. A community DIY guide at github.com/keepkey/keepkey-diy demonstrates building a KeepKey from scratch using parts sourced from Mouser, DigiKey, and AliExpress.
| Hardware Verification | KeepKey | Trezor (Safe 7) | Trezor (Safe 3/5) | Ledger |
|---|---|---|---|---|
| Firmware / Device OS | Open source | Open source | Open source | Apps open, device OS closed |
| Hardware Schematics | Published on GitHub | Published (OSHWA certified) | Published (OSHWA certified) | Not published |
| Secure Element | None (by design) | TROPIC01 — "open," not yet independently audited | Infineon OPTIGA (closed, NDA) | ST33/ST31 (closed, NDA) |
| DIY Reproducible | Yes — commodity parts | No — requires TROPIC01 from single vendor | No — requires Infineon OPTIGA | No |
| Silicon-Level Verification | N/A (no custom silicon) | Vendor claims auditable, no published RTL/GDSII | Not possible (NDA) | Not possible (NDA) |
Sources: github.com/keepkey/keepkey-diy, docs/comparison/overview/open-source-hardware-reality.md (March 2026)
Software Ecosystem
One Device. Three Free Apps.
Vault Desktop
Full-featured companion app. Portfolio dashboard, cross-chain swaps, staking, activity tracking, BIP-85 seeds, Zcash shielded transactions. macOS, Windows, Linux.
Browser Extension
Connect your KeepKey to web3 DApps with hardware security. Sign transactions in the browser with on-device confirmation.
Mobile App
Manage your KeepKey from your phone. View balances, track portfolio, and monitor activity on the go.
Comparison
KeepKey vs Ledger vs Trezor
Side-by-side comparison based on publicly available specifications and documentation. March 2026.
| Feature | KeepKey | Ledger Live* | Trezor Suite* |
|---|---|---|---|
| Price | — | $79–$399 | $79–$299 |
| Open Source Device OS | |||
| Open Source Hardware Schematics | |||
| No Proprietary Secure Element | |||
| Custom EVM Chains in Companion App | |||
| No App Install on Device | |||
| Built-in Cross-Chain Swaps | |||
| THORChain (RUNE) Support | 3rd party interface | ||
| TON Support | |||
| TRON Support | |||
| Zcash Shielded (Orchard) | |||
| Solana DApp Message Signing | |||
| Clear Signing (Auto-Detect from ABI) | |||
| BIP-85 Derived Seeds | |||
| REST API for Developers | |||
| Full Aluminum Body | Safe 7 only |
Both KeepKey and Trezor publish open-source hardware schematics. Trezor TRON status per trezor.io/coins/wallet/tron.
For Developers
REST API. Swagger Docs. Build on KeepKey.
KeepKey Vault exposes an optional REST API on localhost:1646 for developers who want to build integrations with hardware wallet security.
REST API with Swagger documentation
Audit log with sanitized signing payloads
Paired app management
Off by default — opt-in via Settings
Timing-safe API key validation
# Example: get device features
curl http://localhost:1646/api/device
# Example: get portfolio
curl http://localhost:1646/api/portfolio
# Swagger docs
open http://localhost:1646/spec/swagger.json
Get Started
Set Up in 5 Minutes
Buy KeepKey
. Premium aluminum. Available in 5 colors. Free shipping.
Download Vault
Free desktop app for macOS, Windows, and Linux. Plug in your KeepKey and the setup wizard handles the rest.
Secure Your Crypto
All chains available immediately. Send, receive, swap, and stake — all signed on your device.
FAQ