Skip to Content
DocumentationIntroduction

Welcome to KeepKey

KeepKey is a hardware wallet — a small physical device that holds the private keys to your cryptocurrency. Your keys are generated on the device and never leave it. Every transaction is reviewed and approved by pressing a button on the device itself, with the device designed to keep signing keys separate from the host. Understanding what you approve and keeping the recovery phrase safe remain essential.

If you just unboxed a KeepKey, start here. Brand new to crypto? Read Crypto Basics first — it explains wallets, keys, and recovery phrases in plain language. If you’re building an app that talks to a KeepKey, jump to the developer section at the bottom.

New here? Start with the basics

Three things every KeepKey owner should understand before doing anything else:

1 · Your Recovery Phrase
12 or 24 words the device shows you during setup. Whoever has these words owns the wallet — forever. Write them on paper and store them somewhere safe. Never type them into a computer.
2 · Your PIN
Protects the physical device. The number grid shuffles every time you enter it, so screen-watchers and screen recorders learn nothing useful. Pick something you’ll remember.
3 · Verify on the Device
Use the device screen to verify the request independently of the computer. Always read the address and amount on the KeepKey before approving a transaction. Every character, not just the ends.

Set up your KeepKey

  1. Download the desktop application for macOS, Windows, or Linux from keepkey.com/desktop .
  2. Plug your KeepKey in with the USB cable and launch the application.
  3. Follow the onboarding flow. The app walks you through creating a new wallet (or recovering an existing one), writing down your recovery phrase, and setting a PIN.
  4. Write your recovery phrase on paper. Not in a password manager, not as a photo, not typed into a computer. Paper. In a safe place.
  5. Receive a small test amount first. Before sending anything meaningful to your new wallet, try a small deposit and confirm it arrives — verify the receive address on the device screen before you share it.

Full onboarding guide →

Find the guide for your task

I want to…Start here
Understand cryptoCrypto Basics → Networks and tokens
Set up a new deviceInstall → Onboarding → Verify backup
Receive or sendSend and receive → Verify on device
Understand an approvalSigning and approvals
Fix a problemTroubleshooting
Evaluate securitySecurity → Test Atlas
Build an integrationQuickstart → API reference

The KeepKey apps

Start with the desktop application for device setup and wallet operations. The browser extension and mobile companion serve different tasks; their availability and requirements are documented separately.

DesktopDesktop Application
The main way to use your KeepKey. Portfolio, swap, send/receive, firmware updates. macOS, Windows, Linux.
Browser ExtensionBrowser Extension
Connect supported browser dApps through the desktop bridge. Signing and decoding coverage depend on the request and firmware.
MobileMobile App
View your portfolio and receive funds on the go. Pairs with the desktop app via QR code. iOS; Android coming soon.

Common questions

  • I lost my KeepKey. Are my funds gone? No. Your funds live on the blockchain, not the device. As long as you still have your recovery phrase, buy another KeepKey (or any BIP39-compatible wallet) and recover the wallet with those words.
  • I forgot my PIN. Wrong PIN attempts don’t wipe the device — after three failures it makes you wait, and the wait doubles with every further wrong guess. To get back in, wipe the device from KeepKey Desktop (Forgot your PIN?) and recover it from your recovery phrase on the same device or a new one.
  • Someone might have seen my recovery phrase. Move your funds to a new wallet on a new device immediately. Recovery phrases can’t be rotated — once exposed, the wallet is no longer safe.
  • Do I need to trust KeepKey the company? No. The firmware is open source, cryptographically signed, and runs only on the device. KeepKey (the company) has no way to move your funds.

Support

For developers

Building an app that talks to KeepKey? The desktop application exposes a local REST API on http://localhost:1646 when it’s running. Any app — web, native, CLI, or bot — can pair with it and request signatures from the hardware device.

npm install keepkey-vault-sdk
Last updated on
Security