KeepKey review
A cheap, large-screen, open-source hardware wallet built on Trezor firmware. The catch is serious: no secure element, and an unpatched 2019 flaw that extracts the seed with physical access.
KeepKey is a bitcoin and crypto hardware wallet priced at $59.95. KeepKey is a well-built, low-cost hardware wallet with a standout large OLED screen and open-source firmware forked from Trezor, and at $59.95 it is cheap. But a KeepKey hardware wallet review cannot skip the security reality. The device has no dedicated secure element, and in 2019 Kraken Security Labs showed the seed can be extracted in about fifteen minutes by anyone with physical access, using roughly $75 of gear. That flaw is inherent to the chip and remains unpatched; only a BIP39 passphrase defends against it. A separate PIN side-channel was fixed in firmware. Add slowed development after the ShapeShift era, and it is hard to recommend over a Trezor Safe 3 at a similar price.
It scores 6.0 out of 10 on our fixed 40-point standard, best suited to cheapest large-screen hardware wallet, weighed on security, ease of use, supported assets, value and recovery. Strengths: Very low price at $59.95; Large screen that makes verifying transactions easy; Open-source firmware and premium build. Trade-offs: No secure element, weak against physical attacks; Unpatched 2019 seed-extraction flaw, needs a passphrase to mitigate; Slowed development since the ShapeShift era.
How it scored, out of forty
What we liked
- Very low price at $59.95
- Large screen that makes verifying transactions easy
- Open-source firmware and premium build
- Beginner-friendly setup with a desktop app
What to weigh
- No secure element, weak against physical attacks
- Unpatched 2019 seed-extraction flaw, needs a passphrase to mitigate
- Slowed development since the ShapeShift era
- No Cardano, Polkadot or Monero; mobile app is read-only
Who should buy it, and who should skip it
A great fit if you
- Want the cheapest large-screen hardware wallet
- Will set a strong BIP39 passphrase
- Store only modest amounts
- Value an open-source, easy-to-read device
Look elsewhere if you
- Store significant value on the device
- Want a certified secure element
- Need Cardano, Polkadot or Monero support
What KeepKey does well
Large OLED screen
A 3.12-inch display shows full addresses and transaction details without scrolling.
Open-source firmware
Firmware is an open-source fork of Trezor's, with public hardware documentation.
BIP39 seed and passphrase
Standard 12 or 24-word recovery seed, PIN, and an optional passphrase.
Built-in swaps
Non-custodial cross-chain swaps through the ShapeShift and THORChain infrastructure.
KeepKey is one of the original hardware wallets, and today one of the cheapest. This KeepKey review finds it gets the basics of cold storage right and looks the part, but its security architecture is a generation behind the wallets it competes with, which is the heart of the story.
KeepKey at a glance
| Specification | KeepKey |
|---|---|
| Type | USB hardware wallet (since 2015) |
| Screen | 3.12-inch OLED, shows full addresses without scrolling |
| Firmware | Open-source fork of Trezor's |
| Secure element | None (general-purpose microcontroller) |
| Custody | Self-custodial, BIP39 12/24-word seed, PIN, optional passphrase |
| Coins | Bitcoin, Ethereum, EVM tokens; no Cardano, Polkadot or Monero |
| Swaps | Cross-chain via ShapeShift and THORChain (non-custodial) |
| Notable flaw | 2019 Kraken seed-extraction attack, unpatchable in hardware; a passphrase mitigates it |
| Price | $59.95 |
| Our score | 6.0 / 10 |
What KeepKey is
KeepKey is a USB hardware wallet, a device that stores your private keys offline and signs Bitcoin and crypto transactions on the device itself, so the keys never touch your internet-connected computer. It launched in 2015, was acquired by the exchange ShapeShift in 2017, and is now run again by KeepKey LLC in Denver. Its firmware is an open-source fork of Trezor's, wrapped in its own larger hardware.
The large screen and build
The headline feature is the screen: a 3.12-inch OLED display, big enough to show full addresses and transaction details without scrolling, which genuinely helps you verify what you are signing. The aluminum body feels premium, and a single button plus the KeepKey Desktop app make setup beginner-friendly. It is bulkier and heavier than most rivals, but well made.
Self-custody, seed and PIN
Custody is entirely yours. KeepKey generates a standard BIP39 recovery seed of 12 or 24 words that you write down, protects the device with a PIN entered on a scrambled on-screen matrix, and supports an optional BIP39 passphrase, sometimes called the 25th word, that is never stored on the device. That passphrase matters more here than on most wallets, for the reason below.
The security problem: no secure element
Here is the crux of any KeepKey review. KeepKey protects your keys with a general-purpose microcontroller and has no dedicated secure element, the tamper-resistant chip that wallets like Ledger and the newer Trezor Safe line use to resist physical attacks. In 2019, Kraken Security Labs demonstrated that with about fifteen minutes of physical access and roughly $75 of equipment, an attacker could glitch the chip and extract the encrypted seed, then brute-force the short PIN. The flaw is inherent to the microcontroller and cannot be fully fixed without new hardware, so it remains unpatched. The only real defense is setting a strong BIP39 passphrase, which is not stored on the device and defeats the attack. A separate PIN side-channel attack was patched in firmware, but the seed-extraction issue was not, and it is why the score is 6.0.
Coins, swaps and fees
KeepKey supports Bitcoin, Ethereum and a range of other coins and EVM tokens through the KeepKey Desktop app, with built-in cross-chain swaps routed through the ShapeShift and THORChain decentralized infrastructure, so trades stay non-custodial. It does not support some major chains like Cardano, Polkadot or Monero, and the mobile app is read-only. The device is a one-time $59.95 with no subscription; you pay only network fees, plus swap-protocol fees when you trade.
KeepKey vs the alternatives
The awkward truth is that a Trezor Safe 3 or 5 costs about the same or a little more and adds a secure element KeepKey lacks. Ledger's Nano S Plus also brings a certified chip at a similar price. Even the older Trezor Model One shares the no-secure-element limitation but is cheaper. KeepKey's only real edge is its big screen and low price.
| KeepKey | Trezor Safe 5 | Ledger Nano S Plus | Trezor Model One | |
|---|---|---|---|---|
| Secure element | None | Yes | EAL5+ | None |
| Screen | 3.12" OLED | Touchscreen | Small | Small |
| Open source | Yes | Yes | Closed firmware | Yes |
| 2019 seed flaw | Unpatched | N/A | N/A | Similar (no SE) |
| Price | $59.95 | $169 | $79 | $49 |
| Score | 6.0 | 9.1 | 8.2 | 8.4 |
See our best hardware wallets and best bitcoin hardware wallets guides for devices with a secure element.
Price and value
At $59.95 KeepKey is cheap, and the big screen is a genuine plus, but the value math is difficult: for roughly the same money a Trezor Safe 3 or Ledger Nano S Plus adds the secure element KeepKey is missing, which is the single most important thing a hardware wallet can have. So the low price is real, but it buys you a device with a known, unpatchable physical weakness, which only makes sense for small amounts protected by a strong passphrase.
Who should buy KeepKey
KeepKey suits someone who wants a cheap, large-screen cold-storage device, will store only modest amounts, and will set a strong passphrase to cover the hardware weakness. For anyone storing meaningful value, a Trezor Safe 3 costs about the same and adds a secure element, which makes it the safer buy.
How to check it before you trust it
Never a marketplace reseller. Tampered devices are the main real-world risk.
Run the maker's authenticity check on first connection. Do not skip it.
A genuine device shows a fresh, un-initialised state. Never accept a pre-set phrase.
Send a little, wipe, restore from your phrase, and confirm it returns before going big.
Pricing
What each model costs, bought direct from KeepKey. Prices below are what KeepKey lists at the time of writing.
A low-cost large-screen hardware wallet
Strong alternatives
9.1/10Trezor Safe 5
Trezor at its best: fully open-source firmware paired, at last, with an EAL6+ secure element and a color touchscree...
Read review →
8.8/10Tangem Wallet
A tap-to-use cold wallet in a card that sets up in about ninety seconds, with an EAL6+ secure chip and no seed phra...
Read review →
8.7/10Ridge Wallet
A slim metal cardholder with genuine RFID shielding and a lifetime build. The reference point for minimalist everyd...
Read review →Compare KeepKey
KeepKey FAQ
Is KeepKey safe?
It is self-custody and open source, but it has no secure element, and a 2019 Kraken Security Labs attack showed the seed can be extracted with about fifteen minutes of physical access. That flaw is unpatched and inherent to the chip, so a strong BIP39 passphrase, which is not stored on the device, is essential to defend against it.
Does KeepKey have a secure element?
No. KeepKey uses a general-purpose microcontroller with no dedicated secure element, which is the main reason it is weaker against physical attacks than a Ledger or a newer Trezor.
What coins does KeepKey support?
Bitcoin, Ethereum and a range of other coins and EVM tokens through the KeepKey Desktop app, with built-in non-custodial swaps. It does not support Cardano, Polkadot or Monero, and its mobile app is read-only.
How much does KeepKey cost?
A one-time $59.95 from the official store, with no subscription. You pay only network fees, plus decentralized swap-protocol fees when you trade.
Is KeepKey still supported in 2026?
Yes, it is still sold and maintained by KeepKey LLC after being spun back out of ShapeShift, though development has clearly slowed compared with its early years.
KeepKey or Trezor?
A Trezor Safe 3 costs about the same and adds a secure element, which makes it the safer choice for most buyers. KeepKey's edge is its large screen and low price, not its security.
Does a passphrase really protect KeepKey?
Yes. Because the passphrase is never stored on the device, it is not exposed by the physical seed-extraction attack. A strong, memorable passphrase is the practical way to use KeepKey more safely.
Is the KeepKey firmware open source?
Yes. Its firmware is an open-source fork of Trezor's code, and its hardware documentation is public, which allows independent review even though the hardware lacks a secure element.
KeepKey reviews from real users
Verified reviews from people who actually run the device. Every one is read by our team before it goes live, so this is honest signal, not spam.
No user reviews yet. If you own the KeepKey, be the first to share your honest experience.
Sign in or create an account to write a review.
We bought it
This device was purchased at our own cost, not sent by the maker.
We used it for a week
Set up, funded and carried daily before a single mark was given.
No paid placement
Affiliate links fund the work but never change a score or ranking.