Keystone Wallet Backup: A Plain English UK Guide

By Simon Bumford, Founder · · 9 min read

Keystone wallet backup explained for UK holders: how to record your Keystone 3 Pro recovery phrase, store it safely and restore if the device fails.

What a Keystone wallet backup actually is

Your Keystone wallet backup is the recovery phrase: the numbered list of words the device shows you, on its own screen, when you first set it up. Write those words down by hand, keep them somewhere safe and offline, and you have a complete backup. That is the short answer, and everything else in this guide is detail. The Keystone 3 Pro itself is replaceable. If it is lost, stolen, dropped in the bath or simply dies of old age, your bitcoin is untouched, because the coins never lived on the device. What the device holds is your private keys, and the recovery phrase can regenerate every one of them on a new device. The phrase is the real vault. The gadget is just a very secure window onto it. That cuts both ways. Anyone who reads your recovery phrase can take everything, from anywhere in the world, without ever touching your Keystone. So a good Keystone wallet backup has two jobs at once: make the words impossible for you to lose, and impossible for anyone else to find. The rest of this article walks through both, and the same logic applies to any device in our wider guide to backing up a hardware wallet.

How the Keystone 3 Pro keeps your keys offline

It helps to know what you are actually backing up. Bitcoin never sits inside any wallet. The coins are records on the blockchain, and what your Keystone holds is the private keys that authorise them to move. Protect the keys and you protect the coins. If that idea is new to you, our plain English page on how it works covers it in a few minutes. The Keystone 3 Pro, launched in August 2023 and still the flagship model in 2026, takes key protection unusually seriously. It uses three separate secure element chips, each certified to EAL5+: one stores the recovery phrase, one runs the trusted environment, and one holds fingerprint data. An anti-tamper mesh wipes the device if someone tries to open it up. Its other defining feature is the air gap. The Keystone never plugs into your computer to sign transactions and has no radio data path. Instead it communicates through animated QR codes shown on its 4 inch colour touchscreen, which you scan with a phone or laptop camera. The USB-C port is for charging, and firmware updates arrive by microSD card. For a backup guide this matters for one reason: your recovery phrase is generated and stored entirely offline, and the aim of everything below is to keep it that way for life.

How to back up your Keystone 3 Pro step by step

When you set up a new Keystone 3 Pro and choose to create a wallet, the device generates a recovery phrase and displays the words on its own screen. This is the moment your backup is born, so give it ten unhurried minutes. Write the words down by hand, in order, on paper or straight onto a metal plate. Check the spelling of each one, because recovery words are precise and a guessed word later can be painful. The device will then quiz you on some of the words to confirm your copy is correct. Do not skip that check. Now the rules that actually keep people safe. Never type the recovery phrase into a computer or phone, not even once, not even into a note you plan to delete. Never photograph it. Never store it in cloud storage, email or a password manager, because anything that touches the internet can be stolen from the other side of the world. The whole point of an air gapped QR wallet is that the words never meet a connected device, and one photo undoes all of it. Paper burns and fades, so for long term storage many owners stamp the words into steel. Keystone sells its own steel seed plates, the Keystone Tablet range, and any reputable steel backup product does the same job.

Where to keep your Keystone recovery phrase

Keep the phrase physically separate from the device. A thief who finds both in the same drawer has everything; a thief who finds only the Keystone faces a PIN, a fingerprint sensor and an anti-tamper mesh, and your coins stay safe while you restore elsewhere. A sensible pattern for most UK holders is two copies in two locations: one at home in a safe or a well hidden spot, and one somewhere you trust, such as a family member's house or with a solicitor. Do not label it "bitcoin recovery phrase". A plain envelope inside something dull draws no attention at all. Resist the temptation to be clever. Splitting the words in half and storing each half in a different place sounds safer but actually weakens things: losing either half loses everything, and finding either half gives an attacker a big head start. If you want a backup that genuinely splits the secret, a proper Shamir scheme does it with mathematics rather than scissors, and we cover that in the FAQ below. Finally, tell one trusted person that a backup exists and roughly where it lives, even if you tell them nothing else. A perfectly hidden backup that nobody can ever find is indistinguishable from no backup at all, a problem we come back to at the end.

What happens if your Keystone breaks or is lost?

Nothing happens to your bitcoin. The coins stay exactly where they are on the blockchain, and your recovery phrase can bring them back under your control on a new device. To restore a Keystone, buy a replacement from the official Keystone shop, choose the import option during setup, and enter your recovery words on the device's own screen and nowhere else. Set a fresh PIN, then send yourself a small test amount and check it arrives before treating the wallet as fully back in service. Verify the receive address on the device screen, not just in the companion app. You are not locked into the brand either. The recovery phrase follows the BIP39 standard, so it can be restored on other BIP39 compatible wallets. One wrinkle to know about: different wallets sometimes derive addresses along different paths, so if a restore shows an empty balance, do not panic. The coins are not gone; the new wallet is simply looking in a slightly different place, and Keystone's official help page explains how to match derivation paths. The one disaster with no fix is losing the device and the phrase together. That is why the storage section above matters more than any hardware feature.

Is Keystone safe to use when it is made in China?

This is the question UK buyers ask most, so here is the honest answer. The company began in 2018 as Cobo Vault, the hardware arm of Chinese custody firm Cobo, and was spun out as Keystone in 2021 when hardware lead Lixin Liu bought the rights. The team is headquartered in Shanghai and the devices are manufactured in China. For some people that is a jurisdictional and supply chain concern, and it is fair to say so out loud. Set against that, the verifiable record is strong. The firmware is published on GitHub, including, unusually, the secure element firmware, and it has been audited by SlowMist, Keylabs and Offside Labs. When Offside Labs found a hidden firmware vulnerability during a commissioned review, Keystone disclosed it itself and fixed it in firmware V1.2.8, announced on 30 January 2024, urging all users to update. There is no known customer data breach and no known in the wild seed extraction. Two caveats keep the picture honest. The open source claim carries an asterisk, because reviewers note the main MCU library and some secure element internals are not fully published. And the China question is about trust models, not documented misconduct, of which there is none on record. The air gap helps here too: a device that only ever speaks in QR codes has very little room to phone home.

Who the Keystone 3 Pro suits, and where to buy it in the UK

The Keystone 3 Pro has become one of the most recommended air gapped cosigners for bitcoin multisig, with documented QR signing flows for Sparrow, Nunchuk, BlueWallet and Electrum. If you are building a multisig setup, or holding a sum large enough that you want no USB or radio data path at all, it is a natural fit. The 4 inch touchscreen also makes transaction details genuinely readable, which matters more than it sounds when you are checking an address character by character. A flashable Bitcoin only firmware strips out altcoin code for a smaller attack surface. You can see how it stacks up against other devices on our comparison page. On price, the official shop listed it at about $149 in July 2026, a UK reseller at about £114, and it is also on Amazon.co.uk sold by KeystoneHQ. Wherever you buy, buy new, and buy from the official store or an official reseller. Tampered second hand hardware wallets are a real risk, and no discount is worth it. Avoid the discontinued older models, the Keystone Essential and Keystone Pro, entirely. One practical note: the 3 Pro contains a battery, and batteries age, which is one more reason the recovery phrase, not the gadget, is your real long term store of value.

Phishing, fake emails and the habits that keep you safe

Most people who lose coins from a hardware wallet are not hacked through the device. They are talked out of their recovery phrase. Both Trezor and Ledger have had customer data leaks that were later used for convincing phishing emails, so the safe assumption is simple: treat every email that appears to come from a wallet company, Keystone included, as potential phishing. No legitimate wallet company will ever ask for your recovery words, by email, in an app, on a website or over the phone. Anyone who asks is a thief, full stop. Two habits close most of the remaining gaps. First, always verify a receive address on the Keystone's own screen before accepting money to it, because a compromised computer can silently swap the address shown in an app. Second, whenever you set up, restore or change anything, move a small test amount first and confirm it arrives before sending the rest. None of this needs to feel paranoid. It is a short checklist you run rarely, and it becomes routine after the second time. Our security overview collects these habits in one place if you want the full list to keep.

The backup that survives you

There is one failure mode this guide cannot fix with steel plates or secure elements. A Keystone wallet backup protects you while you are alive and well. If you die, or lose capacity, a perfectly executed backup that nobody else can find, recognise or use is worth exactly nothing to your family. The coins would be safe forever, and no one could ever reach them. Solving that does not mean handing anyone your words today. It means leaving a clear, secure trail that the right person can follow at the right time, and nobody else can follow early. That is what crypto inheritance planning is for, and our free inheritance scorecard takes ten minutes and shows you exactly where your current setup would break.

Frequently Asked Questions

What happens if my Keystone wallet breaks or is lost?

Your bitcoin is unaffected, because the coins live on the blockchain, not in the device. Buy a new Keystone 3 Pro from the official store, choose the import option during setup and enter your recovery phrase on the device's own screen. Your addresses and balances reappear. Send a small test amount to confirm everything works. The only unfixable situation is losing the device and the recovery phrase at the same time.

Can I restore my Keystone recovery phrase on a different brand of wallet?

Yes. Keystone uses the BIP39 standard, so the phrase can be imported into other BIP39 compatible wallets. Be aware that different brands sometimes use different derivation paths, so a restore can initially show an empty balance. Your coins are not gone; the new wallet is simply looking at different addresses. Keystone's help centre explains how to set the matching path, or you can restore onto a replacement Keystone and avoid the issue.

Does the Keystone 3 Pro support Shamir backup?

Keystone has advertised Shamir style backups, which split your secret into multiple shares with a threshold, for example any three of five shares can restore the wallet. Support varies by firmware version and we could not verify the current state while writing this guide, so check Keystone's current documentation before relying on it. Every share still needs the same careful storage as ordinary recovery words, and for most holders a well protected standard backup is simpler and battle tested.

Can I keep my Keystone recovery phrase in a password manager or cloud storage?

No. Never type the words into any computer or phone, never photograph them, and never store them in cloud drives, email or password managers. Anything connected to the internet can be compromised remotely, and a stolen phrase means stolen coins with no recourse. The phrase should exist only in physical form, written on paper or stamped in metal, in places you control. This one rule prevents the majority of catastrophic losses.

Is it safe to buy a Keystone 3 Pro second hand or on eBay?

No, and this applies to every hardware wallet brand. A second hand device can be tampered with in ways that are very hard to detect, including pre-filled recovery phrases designed to steal whatever you deposit. Buy new from the official Keystone shop, an official reseller or the KeystoneHQ listing on Amazon.co.uk. At about $149, or about £114 from a UK reseller in July 2026, buying new is cheap insurance.

Does my Keystone backup include an optional passphrase?

No. A BIP39 passphrase is an extra word or sentence you choose yourself, layered on top of the recovery phrase, and it is never shown or stored by the backup process. If you use one, the recovery words alone will restore a different, empty wallet. Record the passphrase separately from the words, and make sure your future self, or your executor, knows that both parts exist.

Sources

Ready to plan your crypto inheritance?

Speak to our UK-based team about your situation. No obligation, no pressure.

Speak to us