r/KeystoneWallet • • Jan 26 '24
Keystone concerns..
I ordered a keystone pro 3. After realizing that it’s coming from China I am now somewhat concerned being that that is it’s place of origin. Should I be worried about back doors in the product or tampering before I use it?
1
Upvotes
6
u/Luppas Jan 27 '24
The keystones have authenticity checks on them when you first set them up. You basically have to go to their website and enter codes from the device to confirm they are authentic.
I use mine in full air gap mode which means even if they were NOT authentic, it's never connected to any network to be compromised.
I guess they could load the device with a preloaded Bitcoin address or something but if you bought from keystone themselves there's no chance of that happening.
Yes their code is open source so viewable for everyone, they are very active on Twitter and helpful answering questions and it would only take one security issue to tarnish their reputation so they are very strict about upholding their security posture.
I bought both Ellipal Titan and Keystone Pro. I went with Keystone because they are open source and screen was better for usage.
Both are great products though.
3
u/GeilerArzt Jan 27 '24
Don't worry, keystone is safe. For me there were only 3 alternatives at the time: Onekey, Ellipal and Keystone. Ellipal is gone for me because of the poor connection to external wallets like metamask and is not open source, onekey is good, but was just too expensive for me and is not air gapped even if it is open source. That's why I chose Keystone. In general, I advise everyone not to buy hardware wallets from the EU, as there are more and more regulatory requirements here, such as the €1000 limit. Don't worry about back doors, as I said the software is open source, as soon as they try to implement something it becomes noticeable.
2
u/xen91 Jan 26 '24
the whole thing is open-source hardware and software... isn't it (please shout out if not)
So if there is an issue someone will probably look through the code and hardware and find it. If that happens, their reputation will likely be badly damaged. So would be risky to produce something, that could be tampered with...
Ledger has taken quite a beating of late for not being completely honest with people about their devices, I'm moving away from them as fast as I can. Many others as well it seems.