This article details how to set up (initialize) your Keystone hardware device out of the box for use with Casa.
Keystone is compatible with Casa BTC vaults. It is not currently compatible with Casa ETH vaults.
Not a Casa member yet? You can sign up here.
Already initialized your Keystone device? You can skip ahead to Adding Keystone to your Casa keyset.
Prior to setting up your Keystone device and adding it to Casa, you will need:
- Keystone device
- Micro SD card
- Micro SD card adapter (if your computer does not have a micro SD card slot)
To begin, unwrap and open your Keystone box; inside are two smaller boxes. Verify the integrity of the first box (the device box) to ensure that it is free from tampering. This box has tamper-evident holographic stickers securing the box closed.
Open the first box with the hologram stickers and remove the Keystone device.
The second box contains an optional rechargeable battery pack and a charging cable for the battery. This box will NOT normally have a tamper-evident seal on the side. You can use this battery, or you can use the normal battery pack connected to the Keystone by default, which is powered by four AAA batteries. If you choose to use the AAA battery pack, we recommend you remove the batteries when you are storing the device to avoid battery drain and possible corrosion, which may damage the battery pack.
Connect either battery pack and boot up your Keystone by holding the power button on top of the device.
When you first boot up the device, you'll choose your preferred language, then be prompted to complete a quick verification process to ensure that your Keystone device is authentic.
From any other device with an internet connection, go to https://keyst.one/auth to verify the device. On that website, you'll get a QR code to scan using the Keystone device. Scan it, and enter the code displayed on your Keystone device on the above website.
NOTE: If the above authentication fails, you should not use the device, and you should notify Casa immediately!
After you complete the device authentication, you will be asked to set a password for the Keystone device. The password must contain at least 10 characters. Symbols are allowed, and the password is case-sensitive.
Whatever password you set, it's very important that you do not forget the password! We recommend saving the password either by writing it down or by keeping it stored in a password manager.
Seed phrase backup
Once you've set your password, you'll then choose "Create Wallet" to generate a recovery phrase or a "seed phrase."
At the next step, select "Create a Wallet with Single Backup."
In a Casa multisig setup, we consider retaining the seed phrase to be optional. However, while it's optional to retain the seed phrase, you do need to write it down at this step, because the Keystone will do a check to ensure that it's written down.
Your seed phrase is a copy of your private key. DO NOT show or share this with anyone (below GIF image is only for demonstrative purposes and the key will never hold real funds)! DO NOT take an image of the seed phrase with your phone or other internet-connected cameras. If at any point you believe the seed phrase may have been compromised, you must complete a key rotation to regain full security. We strongly recommend you destroy this seed phrase after your setup of the Keystone device, or keep it secure.
Once you've written down and confirmed your seed phrase, the next screen will show a "Select Companion App" option. Select "Keystone App."
When prompted to "Add cryptocurrency," select BTC Bitcoin and then the checkmark in the upper-right corner.
BTC-only firmware update
In order for the device to be used by Casa, you must update your Keystone device to the latest BTC-only firmware version.
To find Keystone's latest BTC-only firmware, visit their site here:
On Keystone's website, scroll down to where it says "BTC-Only Firmware." The standard multicoin firmware will not work.
Note that the firmware upgrade instructions will vary depending on if you are installing the firmware as an update to the standard, out-of-the-box multicoin firmware (majority of users), or upgrading from a previous version of BTC-only firmware. If you've just opened your Keystone for the first time, you will be upgrading from the existing multicoin firmware that is standard on new Keystone devices.
Once you're running the proper firmware on your Keystone device, you can do this by following the instructions outlined in Keystone's support article on Firmware Upgrading.
Destroying the seed phrase
Remember, retaining a copy of your seed phrase is optional. If you choose to retain your device's seed phrase, keep it in a safe place, preferably in tamper-evident packaging.
If you choose NOT to retain the seed phrase backup for your Keystone device, and plan to use the device exclusively in a Casa vault setup, then the seed phrase can be destroyed with fire or other destructive element of your choosing.
That's it! Your Keystone device is now ready to be added to Casa.
