Keystone 3 Pro Review

The Keystone 3 Pro scores 9.6 out of 10, the highest mark in our hardware wallet ratings, rechecked against current evidence on 1 November 2026. The basis is desk research of Keystone's store page, firmware and supported-asset pages, its connection guides and the keystone3-firmware repository on GitHub. We did not test a device. It takes full marks on four of five criteria. The one point it drops is on price, and the main caveat sits inside a full mark: Keystone's sources do not agree on exactly which secure element chips it uses.

How the Keystone 3 Pro scores in hardware wallets

Five criteria apply in this category. Each is marked 0 to 10 and carries equal weight, as described in our ratings methodology.

The overall score is a plain average: (8 + 10 + 10 + 10 + 10) / 5 = 48 / 5 = 9.6.

No marks changed in this rescoring. The price, the signing design and the asset claims match the July check. The open-source mark now also rests on the repository itself, not only on Keystone's "open source" wording. The repository holds hardware files, a build-and-verify guide and releases up to 3.2.0, dated 23 October 2026.

Strongest criteria

Air-gap & verification (10)

The default workflow needs no cable or radio link. A companion wallet shows an unsigned transaction as a QR code, the 3 Pro scans it, and you check the details on the device's own screen. The device then signs and shows the result as a QR code for the wallet to broadcast. Firmware can be installed from a microSD card. Keystone's Rabby guide also documents USB signing on firmware 1.1.4 or later, so a cable is optional rather than impossible. How air-gapped a setup is depends on the method the owner chooses.

Open source (10)

The keystone3-firmware repository is public and includes a hardware folder with board files for revisions 3.1 and 3.2. Its docs/verify.md guide explains how to build a release in Docker and compare it with the official file. The firmware page publishes a checksum for each of the three tracks: Multi-Coin, Bitcoin-Only and Cypherpunk. One limit is stated in the README itself: the microcontroller vendor's MH1903 library ships as a precompiled binary because of intellectual-property restrictions, and Keystone says it currently uses only that library's QR decoder.

Asset coverage (10)

Keystone claims 5,500+ assets on 30+ blockchains. The supported-assets page lists networks including Bitcoin, Ethereum and EVM chains, Solana, Cosmos, Cardano, XRP, Tron, Sui, Aptos, TON and Zcash. These counts are Keystone's own. Device support for a coin does not guarantee that every companion wallet handles it.

Weakest criterion and an unresolved detail

Price & value (8)

$149 sits in the category's $130 to $160 band. It includes a year of Keystone Care+ coverage, which the store page lists without describing what it covers. A microSD card is not included. On 1 November the device was listed as pre-order, shipping in four to six weeks.

Secure element (10): the part-number conflict

Keystone consistently states that the 3 Pro uses three secure element chips with a physical anti-tamper design. Its sources do not consistently name them. The firmware README, the most specific primary source, names a DS28C50, a MAX32520 and an ATECC608A next to an MH1903 microcontroller. The store page names no parts. Our fact-checkers recorded a Keystone blog post with a different part list. We could not locate that post again on 1 November, and published third-party descriptions also disagree on one of the three chips. No Keystone statement we found reconciles the lists. The mark follows the README and Keystone's consistent three-chip claim, scored on the same terms as the Coldcards' two-vendor design. No certification level is published for any of the three chips. Until Keystone reconciles its own sources, treat the exact parts as unconfirmed.

What the score does not cover

• Security audits. Keystone's homepage shows logos of security firms but does not link the reports, so no audit was assessed.
• Delivery time. The pre-order status and the four-to-six-week shipping estimate are not scored.
• Battery, screen and build quality. The device needs charging, and we did not handle it.
• Companion wallets. They build the transaction, so their security is outside the device's score.

For what a secure element does and does not protect, see our guide to hardware wallet security.

Keystone 3 Pro vs the closest rated peers

The Trezor Safe 5 is cheaper and names a certified EAL6+ chip. It cannot sign air-gapped, and that five-point gap on one criterion explains most of the 1.2-point difference. The Coldcard Q matches Keystone on every security criterion but is Bitcoin-only and lists at $369.

Who it suits

On the scored evidence, the 3 Pro fits people who hold assets across several blockchains and want QR signing with no cable. It also fits anyone who wants firmware they can rebuild and compare. Bitcoin-only holders can use the Bitcoin-Only firmware track. It is less suited to anyone who wants a published chip certification, or who needs a device in hand immediately while it is on pre-order.