Skip to Content
DocumentationDesktop ApplicationFirmware Updates

Firmware Updates

The desktop application checks for firmware updates automatically and notifies you when a new version is available. Updating firmware adds security fixes, new features, and support for additional chains.

Firmware update available

Before you update

Write down your recovery phrase first (or confirm you’ve already written it down and stored it somewhere safe). Firmware updates are low-risk — they’re cryptographically signed by KeepKey and verified by the device before installation — but if something goes wrong, the recovery phrase is your way back.

If your device contains meaningful value and you haven’t tested your recovery phrase recently, consider doing that before updating. You can wipe the device and recover it from the phrase as a dry run.

Signed firmware

KeepKey firmware is signed. The device’s bootloader refuses to install firmware that isn’t signed by a KeepKey signing key. This means:

  • You can’t be tricked into installing malicious firmware — the device will reject anything that isn’t signed.
  • You can download firmware from anywhere and it’s still safe; the device does the verification, not your computer.
  • A modified desktop application that tries to install altered firmware will fail at the device level.

You should still only download firmware from official KeepKey sources (the built-in updater is the easiest path), but the signing layer protects you even if you accidentally use an unofficial source.

The update flow

When a new firmware is available, the desktop application shows an update prompt. Click Update Firmware to start.

1. Confirm on device

The device asks you to confirm the update on its own screen.

Confirming firmware update on device

Read the new firmware version on the device screen — it should match what the desktop application said was available. Approve if it looks right.

2. Download and install

The desktop application downloads the firmware, verifies its signature, and writes it to the device. Do not unplug the device during this step. Interrupting a firmware write can leave the device in an unusable state (it can still be recovered, but it’s a hassle).

3. Restart

After the new firmware is installed, the device restarts.

Device restarting after firmware update

You’ll be prompted to enter your PIN (if you have one set) and then you’re back in the portfolio view, now running the new firmware.

If the update fails

Firmware updates are designed to be safe even when things go wrong, but occasionally the device can end up in bootloader mode — a recovery state where it’s waiting for a new firmware to be flashed.

If this happens:

  1. Don’t panic. Your recovery phrase still reproduces the wallet.
  2. Leave the device plugged in.
  3. Restart the desktop application.
  4. It should detect the device in bootloader mode and offer to re-install firmware.
  5. Follow the prompts to complete the update.

If the desktop application can’t detect the device after a failed update, unplug it, wait 10 seconds, and plug it back in while holding the device button. This re-enters bootloader mode cleanly.

Checking your current firmware

You can check your current firmware version at any time in Settings → Device Overview. The version number is shown alongside the device model.

Last updated on
BIP85 Derived SeedsBrowser Extension