Security Policy


At KeepKey, we take security seriously. We encourage independent security researchers to contact us in order to privately report security vulnerabilities or issues. The information on this page is intended for those security researchers that are interested in reporting security vulnerabilities directly to the KeepKey security team.

If you would like to disclose a vulnerability to KeepKey, we encourage you to send a new email to security@keepkey.com with the word **[VULNERABILITY]** in the subject line.
Please include the following information in your email: - Your name, nickname, handle, or what you’d like to be called while we communicate with you. - The date/time you first identified the vulnerability. - How you identified the vulnerability. - As much detail about the vulnerability as you can. - How many times you leveraged the vulnerability during your testing (and if applicable, a list of each test you performed). - Any additional information you feel may be pertinent.
If you would like to encrypt your vulnerability report, you can use the following GPG key:
GPG Key

-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGO4eXYBEAC3uXhD/3vkkMm+sLBeVFipCRCnY+nOgwcmiQ9juAoLJl7/y3jS gOlJZXpnIlVeV/Aca0v4EkVITxdiBHQWtuOmpD/nToDkzJnAd4WBLRTYwd8WCcTo vLX0MZBx5f8JV0RqTpII5qVfmEVal7bIHbeHp8r5kYDw+3PbY10GbEYZlosXwWw2 eg2SVpZ7qG79Ak+6rHghzyVsPvvj3RSQlg4g9fs+i+K2omf6HgOXX+1+ExXARpvI PNe5GtPiwdzpnlUAqT+1rTS1m8JZ6f/8bOtVdJkTGgChu0fePkY24xiCW3VcOuVJ H1+ILjPU9sP0qUkWhUUZM4K54x/2S9hvH79I3rjoRQir2p71S02IG8ethIY4uoJU 1sJHSXxN49S2BbEYZgJHW+ZhRkqXLDdteJqOGezjy2n0aY9CiS4v5+IrO2slxPlO 69g4iQMWMVrw7FQsvWWvYgGrTtdocEVVzkkyaNHLV5qQb/9IdeUyyuAP+4UoMxcr LTJr2ixbPQBfihGPEFTZsn0t980ofroaHOjVtx3Z6/DBE/gerN0U7P6yVHaUDeTw AL6QAxFRZSf/rZjIEMjsPtGxWD8m9xAkJhUgaufMdmlUVk2SFyO528+G4Gapk7zq YHf0jRhwmmZwrXJZttcrfanS1ZYyCax+HwoyhyZmrddiSenAUO8sMb3W0QARAQAB tCdLZWVwS2V5IFNlY3VyaXR5IDxzZWN1cml0eUBrZWVwa2V5LmNvbT6JAk4EEwEI ADgWIQQdQOCfysUXSozzwVr73OGve5lq2QUCY7h5dgIbAwULCQgHAgYVCgkICwIE FgIDAQIeAQIXgAAKCRD73OGve5lq2T4hD/9AE6c5I2kG1rg/vUd6i/MZPTBnakru kWa5BJn2Qpv+e/i3D0EVfoZAtyREfAcHyqAZvdc1bUz/vmUmUslm3tXTzrYBdulO PGQ3reN7I2N/q77ZrdjW7KDHc5w+t9Dl1Ei/iLt5j3wEa04d2/t7cuv97yMi587L XmTwMbsfOtnl08oHjWtMjwX9RmIBHqveLdGsEzuJ4s+7MLPhmyDnPzzoRsTxeSU+ UuvaRvfZtNbfUK7OxvoAvreyk6JHS9AMAtyXROf9fTN+2vEzzmzNDIfHtEDasANY w21rhNSUIQ9EPMBzvrTkUToqlnahhHyOFki0WjRxsIniQClDEyRPeq6VqC2YSEOo 4w8vT7/CxS2oFReZsDQcXcPFgKV9FyBq4zKjGPrxnKwcb+82ACLYTVj5qUNX3aug qJ1yD7vLxN9J3Rolx4rdHpnAZbfvELydLcdi9qQazLsR0wR/ofj6TgJux4mVsQfr GgoYuOMJZUwcYCidu3Drpi7KvK/y0bYEeEeIxzUIgRMVTIwEbcoEgMCh3s3Cu5eU GQOhwzno0O3fSfr/1UPJUHdRAm2u1BvlzDk7GMELV7CkMHlXVfL5bf0zRERM1YqY OUMajfk8FAcAv2fPTZ57dJtwu/rIh5rNRizcHn3fFloci+ReuT2X1wlbKQnrITTg EUli2Q8sY8MLC7kCDQRjuHl2ARAAsB5mAR8btR374iaTNcLUaA/KLPoZI23tsKiU SMhJ0MiORkfYjjUD019rZQMVZG/dBxL/mXwGqlMxLZ/NjpGV38lJ+HyTq6onTq+H 1HIqJqsIvJ0nGu/j3N4lNp5NUwCAij8smKkirVTrAQ1ggCTCKjNgYVe8rr0RW9Dw pxnvOWt3rcOOnuY02ZWbiiUmpW7msGVG0MJR86IInBml7r6SN+6hnhIEhGKrKe2a LgFgT/oqEMirvv2vlcfRmKSsrghFPZsWcV+F6RSsS0tODPC5pYJ7vaqGZFLE24cS RVkKK/zbr3sI6WiFnolM3vH41de0ejYPRU5cGGseGEBfxpy0sL5yJzFZ+OBjBmys XuW/htIgCLXVdKcj/T/c1ypHJe8jOhT7A5OleTZqXeQx1HCi+n3fBTK7+KrPlq9H A3ccesTuKC5Whj6sFFs6bBhTffW+upg+T7z+DFWVz4swxsqO9tyipeCcObHMp8yi b7O5uwEvpvP/QqhocSGrR6gipjwprgcrWp5Nga+ycM1Lh5lbCTLeG6mAFovunMG4 Bt1v5nv2iCm0aiq7/CCJUYJk+ZxmTT4yyijusnklLDbm7OJ/fDYhhqrJMOSl+PrX eXcIiIdFNhoyc1e33AdbcDuYBQ4b68arw+rXA1ZJRjhvQJwYfwEZ6y4Mw2VWJfl6 3FBLr3cAEQEAAYkCNgQYAQgAIBYhBB1A4J/KxRdKjPPBWvvc4a97mWrZBQJjuHl2 AhsMAAoJEPvc4a97mWrZQvIP/iq4sXo8tYk/wF+HraSCcIeVTAGWgwn9IKwyHaq1 yf6iDAvMtUg3h74Om63INrfxEusfSrJK86f1Q1nXJoxneJKNAnpIdmv63bDghyd3 aFrtPFtB+mIxzg38/2ka3yfOx36wAc9Q5YHYPuT5jnRiwyUdTNL1BBYBFSpukUDs e0k71l+asqHQL9HHw8Ug+7B9jkXgwuwDkmH3m274XyUdmzagzPdXdQcgSNIKZG27 4NPqSirByQDRhjMai5272jZlleD/LAuh+hNf8a2MrckEhNqlfYwEvqP6T3mFdcr7 jkBXyRHWKt2X2gyfgd8Yz/0vO2kzSfwZj/Pm2sHKUAZXr8OLVyhlN/cWzjFQqR9b l3twcMdl3LuoaQWyjU1jqIvClpD7wjvpXg0RwVwtYX0Ma9RqacwdjMrIj5uSLQUS DyA6wwyMEXsHf55dNUX8jy/i0gN8mta5Ofc11B+Jtr+b5E7l8QgnOsbKxTgJOi9z salPPYoPvIQ5LNi8vfLrs2ou9LVYoElw4TNqDIT7OnN/7yaWpXjfmvrLsN4sn+Oy goi+0Shty6zGJPTsk9g1PrjGNt9+QpDHm7Dm4jYMvGM4co/tdmhxK+d5KEA5TJAT vFLvoJ8hXCfYOOfkKdo77biOs5Mf4hamdUY+Xyvtfns5mbuuIfP+DTLEXXCXypMP wemd =XEEu
-----END PGP PUBLIC KEY BLOCK-----