WebUSB Firmware Update
Keystone frequently updates it's firmware to add additional features to enhance user experience and also to support integration with newer chains, wallets and assets.
*Before updating your wallet, be sure to back up your seed phrase.
*After connecting, do not leave the page, refresh, or switch languages.
After connecting the device, it must be unlocked and authorized to detect device information.
Frequently Asked Questions
How can I confirm the firmware version is correct after the upgrade?
After a successful upgrade, the device screen will display the updated version number upon restart. You can also go to "Settings > About device" on your device to check the current firmware version and compare it with the latest version shown on firmware page - if they match, the upgrade is successful.
Will the WebUSB upgrade affect my wallet settings and linked software wallets?
Firmware upgrades do not erase wallet settings on the device. Your account information and linked software wallet connections remain valid after upgrading. However, some major version updates (such as v2.0.0 and above) may adjust the UI or certain functional interactions. It is recommended to check the connection status of your software wallets after upgrading by referring to the latest tutorials.
What happens if there is a power outage or disconnection during a WebUSB upgrade? Will assets be lost?
An interrupted upgrade will not cause asset loss. Your assets are stored in your recovery phrase, not on the device hardware itself. If this happens, you can restart the device and try the upgrade again. Before upgrading, make sure the device has sufficient battery power (50% or higher is recommended) and use a stable USB connection.
Do I need to unlock the device before upgrading? What if the device is not recognized after connecting?
Yes. After connecting the device to a computer, you must first unlock it by entering the PIN and authorize the connection on the device before it can be recognized by the browser. If the device is not detected, please check:
1) whether you are using a USB cable that supports data transfer rather than a charge-only cable;
2) whether your browser is Chrome or Edge;
3) whether the device has been unlocked and authorized;
4) whether Air-Gap Mode is disabled under [···] > [Device Settings] > [Connection]. If the issue persists, try using a different USB cable or USB port, refresh the page, or retry in the browser's incognito mode.
1) whether you are using a USB cable that supports data transfer rather than a charge-only cable;
2) whether your browser is Chrome or Edge;
3) whether the device has been unlocked and authorized;
4) whether Air-Gap Mode is disabled under [···] > [Device Settings] > [Connection]. If the issue persists, try using a different USB cable or USB port, refresh the page, or retry in the browser's incognito mode.
What browser is required for WebUSB upgrade? Are there compatibility requirements?
WebUSB currently supports Chromium-based browsers. Google Chrome or the latest Microsoft Edge is recommended. Safari and Firefox do not support the WebUSB protocol. Please ensure your browser is up to date and use Windows or macOS. During the upgrade process, do not leave the page, refresh, or switch languages.
What is the difference between WebUSB upgrade and SD card upgrade? Which method is recommended?
WebUSB upgrade connects the device directly through a browser for online upgrading without needing an SD card, making it more convenient and suitable for most users. SD card upgrade requires downloading the firmware package to a MicroSD card and inserting it into the device, which is better suited for offline environments. Both methods are equally secure; choose based on your preference.
Can viruses on my computer infect the Keystone device during a WebUSB firmware upgrade?
In WebUSB upgrade mode, Keystone only accepts officially signed firmware packages. The device's built-in firmware signature verification mechanism will reject any file that is not signed with Keystone's private key. Even if the computer is infected with malware, malicious programs cannot forge a valid firmware signature, meaning they cannot install malicious firmware onto the device. However, it is still recommended to perform upgrades in a clean network environment and download firmware packages directly from the official website rather than third-party sources.


