Trezor vs Keystone: Honest Hardware Wallet Comparison

If you came here looking for a clean winner in Trezor vs Keystone, you will leave disappointed. Both wallets solve the cold storage problem in different ways, both have made mistakes that hurt customers, and both have legitimate threat models they fail against. This page is for readers who have either been burned before or are about to spend three figures on a device and want the version of the comparison that does not read like an affiliate funnel.

We are not selling either device. We have no referral relationship with SatoshiLabs (Trezor) or with Keystone. The links below go to our other research notes and to manufacturer pages so you can verify the claims yourself.

The short version

• Trezor is the older brand (founded 2013, Czech Republic). It is connected by USB and signs transactions on-device. The newer Safe 3 and Safe 5 added a secure element after years of criticism. Older models (Model One, Model T) are still sold and still lack one.
• Keystone is air-gapped (no USB, no Bluetooth, no Wi-Fi). It signs transactions by scanning QR codes between the device and a phone or desktop wallet. It uses three separate secure element chips for redundancy.

The argument is essentially: a USB-connected device with a screen and buttons (Trezor) versus an air-gapped QR scanner with a camera (Keystone). Both store seeds offline. The attack surfaces differ.

Security model differences that actually matter

Connection method

Trezor connects over USB-C. The host computer talks to it via the Trezor Suite app. If your host computer is compromised, the device still requires you to physically confirm the transaction on its screen, but address-substitution malware has tricked users into approving the wrong destination by abusing tiny screen real estate. This is a documented retail loss vector and we cover it in our signing UX failure analysis.

Keystone never plugs into anything. You scan a QR from your phone wallet, the device displays the transaction, you approve, and the device shows a signed-transaction QR back. There is no USB driver, no Bluetooth pairing, no firmware update over wire. The downside: you depend on a working camera and you carry the slowness of QR animation for large transactions.

For a reader whose threat model is “my laptop has malware on it I don’t know about”, the air-gap is a real advantage. For a reader whose threat model is “I might lose the device” or “the manufacturer might ship me a tampered unit”, connection method matters less than supply chain.

Secure element story

Trezor was famous for years for refusing to use a secure element, arguing the closed-source NDAs around SE chips were worse than the protection they provided. After the 2022 Kraken Security Labs voltage-glitching attack on the Model T, that position became harder to defend. The Safe 3 (2023) and Safe 5 (2024) ship with an EAL6+ Optiga Trust M chip that protects the PIN. The seed itself still lives in regular flash; the SE gates access. See the Trezor Safe 5 specs.

Keystone 3 Pro uses three secure element chips (one ST, one Microchip, one Maxim) with the seed split across them. This is a marketing claim more than a verifiable security improvement, but the underlying point is real: a single-SE compromise does not give an attacker the seed. See Keystone hardware overview.

If you still own a Trezor Model One or original Model T, the comparison is more lopsided. Those devices have known physical-extraction attacks and we would not recommend them for amounts you cannot afford to lose.

Open source claims

Both companies say “open source” loudly. Neither is fully open.

• Trezor publishes firmware and bootloader code. The new secure element firmware (the part talking to the Optiga chip) is not fully auditable because Infineon’s NDA covers parts of it.
• Keystone publishes firmware and hardware schematics on GitHub. The secure element interaction layer is partially closed.

For practical purposes, both are about as open as a hardware wallet with modern SE chips can be. Anyone telling you Keystone is “fully open” and Trezor is “closed” is selling you something. Same in reverse.

Supply chain and human factors

Trezor had a security incident in January 2024 where attackers got user contact data via a third-party support tool and ran a phishing wave. No seeds were stolen via that path, but recovery-phrase phishing emails followed.

Keystone’s main human-factor risk is users buying from Amazon or eBay resellers and receiving pre-initialized devices. We cover this pattern in our supply chain checklist — buy direct from the manufacturer, full stop, both brands.

What we could not verify

We could not independently audit either company’s claim about secure element behavior at the silicon level. We are taking the manufacturers’ word, cross-referenced with public researcher writeups. If your portfolio is large enough that the difference between EAL6+ and “three SE chips” matters at a chip-design level, you should be running a multisig setup across both vendors anyway, not picking a winner. Our multisig basics guide walks through the simplest version.

We also could not verify long-term firmware support promises from Keystone. Trezor has a longer track record of pushing firmware to old devices. Keystone is younger and we do not yet know how it handles a device five or seven years post-purchase.

Price and practical use

At time of writing (May 2026), Trezor Safe 5 retails around $169 and Keystone 3 Pro around $149 direct. Both ship globally. Trezor has better integration with desktop ecosystems (Trezor Suite, Electrum, Wasabi, MetaMask via bridge). Keystone integrates with mobile-first wallets (Rabby, BlueWallet, Sparrow, MetaMask via QR) and the air-gap workflow is genuinely slower for daily use.

If you sign transactions weekly, you will feel the QR friction. If you sign quarterly, you will not.

For readers comparing more options before deciding, see our hardware wallet shortlist and our presale custody guidance which covers what to do once tokens unlock.

Honest summary

Neither device is a magic answer. Trezor gives you a more mature ecosystem, longer firmware history, and a USB workflow that is faster but exposes more attack surface. Keystone gives you a cleaner air-gap story and a triple-SE design that sounds reassuring, with a younger company behind it and a slower daily signing experience. If you are choosing one, match it to your real threat model, buy direct, verify the seal, and consider running both in a multisig if the stack you are protecting is worth more than the devices combined.