Open-source firmwareShips to anywhereBitcoin-only mode available7,000+ supported assetsFree firmware updates for lifeSince 2014Fully auditable hardwareTHORChain swaps built-inOpen-source firmwareShips to anywhereBitcoin-only mode available7,000+ supported assetsFree firmware updates for lifeSince 2014Fully auditable hardwareTHORChain swaps built-in
Security

Security overview.

We take security seriously and encourage responsible disclosure from independent researchers.

Security Policy

At KeepKey, we encourage independent security researchers to contact us privately to report vulnerabilities or issues. This page is intended for those interested in reporting directly to the KeepKey security team.

Reporting a Vulnerability

Send an email to security@keepkey.com with [VULNERABILITY] in the subject line. Include:

  • 01Your name, nickname, handle, or what you'd like to be called.
  • 02The date/time you first identified the vulnerability.
  • 03How you identified the vulnerability.
  • 04As much detail about the vulnerability as you can provide.
  • 05How many times you leveraged the vulnerability during testing.
  • 06Any additional information you feel may be pertinent.

PGP Public Key

To encrypt your vulnerability report, use the following GPG key:

-----BEGIN PGP PUBLIC KEY BLOCK-----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=XEEu
-----END PGP PUBLIC KEY BLOCK-----
Security Policy - Responsible Disclosure | KeepKey | KeepKey Hardware Wallet