Keystone and Shielded ZEC: Set Up a Keystone 3 Pro With Vizor on iPhone, Android or Desktop

Updated November 4, 2026.

A Keystone 3 Pro keeps your Zcash keys offline and signs shielded transactions over QR codes. Pair it with Vizor on your phone or computer and you can send, receive, shield, swap, vote, and send to exchange TEX addresses, with every spend approved on the device. Keystone's own guide covers connecting Keystone to Vizor on desktop and mobile. This page goes further: firmware, what works, NU7 status, and what the October 2026 Keystone breach means for you.

Quick answer: Keystone + Vizor in 4 steps

1. Install Cypherpunk firmware on the Keystone 3 Pro, from keyst.one/firmware. Use 3.0.2 or later for Ironwood.
2. Install Vizor on iPhone, Android, or desktop.
3. On the Keystone: menu (…) > Connect Software Wallet > Vizor. A QR code appears.
4. In Vizor: tap Connect Keystone, scan the code, confirm the account, enter the wallet creation time, and set a password.

Your recovery phrase never leaves the Keystone. Keystone says you never need to enter it on a computer, phone, browser, or software wallet.

What you need

Cypherpunk vs Multi-Coin firmware

Keystone ships three firmware editions. Cypherpunk is the privacy edition and supports BTC, ZEC, and XMR. It's the one that handles shielded ZEC. On Multi-Coin firmware, Keystone says you can use Keystone Nexus for transparent Zcash only.

Read the notes before switching. Keystone warns that after upgrading to Cypherpunk 3.0.2 you can't downgrade to the 3.0.0 Multi-Coin or BTC-Only firmware. Cypherpunk 3.1.4 added Zcash shielded address verification on the device.

Step by step: connect Keystone to Vizor

These steps follow Keystone's Vizor guide. Do them on your phone or computer. The flow is the same.

On the Keystone 3 Pro:

1. Tap the … icon in the top-right of the home screen.
2. Choose Connect Software Wallet, then Vizor. The device shows a QR code.

In Vizor:

1. Tap Connect Keystone, read the instructions, and tap I'm ready now.
2. Allow camera access and scan the Keystone's QR code.
3. Tap Confirm selection.
4. Enter the wallet creation time. This is the birthday, where Vizor starts scanning. If unsure, pick an earlier date. See what a wallet birthday is.
5. Set a password and let the sync finish.

Keystone's tip applies throughout: don't scan QR codes on the Keystone that weren't generated by your own wallet.

Sending shielded ZEC with a Keystone

1. In Vizor, open Send, enter the address and amount, and review.
2. Scan Vizor's QR code with the Keystone.
3. Check the recipient and amount on the Keystone screen, then approve.
4. In Vizor, tap Get Signature and scan the signed QR code from the Keystone.
5. Vizor broadcasts the transaction.

Nothing travels over USB or Bluetooth. Only QR codes cross the gap. Vizor has made this lighter over time: Keystone sends use compact batch signing, which shares less transaction data with the device and shrinks the return QR codes. Keystone accounts can also generate a fresh shielded receive address from the Receive screen.

What works with Keystone in Vizor

A note on TEX. Vizor's v0.0.31 notes said "Keystone does not support TEX sends yet." That changed in v0.0.52: Keystone now sends to TEX addresses through a guided flow with two QR signatures. The payment goes through a one-time transparent address, so you pay two network fees and can't add a memo. Background in how to send ZEC.

Interrupted signing. If you close Vizor or cancel mid-approval, later releases fixed reduced balances after a pending approval, cancelled approvals blocking TEX sends, and recovery of interrupted Keystone shielding. Keep Vizor updated.

Moving Keystone funds from Orchard to Ironwood

Ironwood activated with NU6.3 on July 28, 2026. Orchard funds don't expire, but moving them into Ironwood takes a migration. Keystone's guide documents the Vizor flow on desktop:

1. Update the Keystone to Cypherpunk 3.0.2 or later.
2. Open the Keystone account in Vizor, let it sync, and open Ironwood Migration.
3. Review the amount, plan, estimated duration, and privacy explanation.
4. Scan the unsigned QR code with the Keystone. Keystone says this can take up to about six minutes, plus up to two more for parsing, because the device batch-signs several transactions. A stand helps.
5. Check the details on the Keystone, sign, and scan the signed QR back into Vizor.
6. Let Vizor broadcast on schedule. Confirmed Ironwood funds are spendable while the rest continues.

Keystone notes the entry point only appears above roughly 0.01095 ZEC in Orchard. Smaller balances stay in Orchard and don't disappear. Vizor shows the exact number of QR signing rounds before you start. Full walkthrough in Orchard to Ironwood.

Keystone and NU7

NU7 is expected around November 5, 2026 (UTC), at block 3,543,405. Vizor switches to NU7 automatically at that height.

As of November 4, Keystone's latest Cypherpunk release (3.2.0, October 23) lists UI performance improvements and no NU7-specific notes. On the Zcash forum, developer str4d wrote that existing Keystone firmware will work fine post-NU7, because NU7 doesn't change transaction formats or signing and the signing data (PCZTs) carries the network's branch ID. Keep Cypherpunk current and check keyst.one/firmware for updates. More in Zcash NU7.

The October 2026 Keystone breach: what to do

Keystone said an attacker got into its Shopify-based store. The Block reports that Keystone detected unauthorized access to its official website on October 20, 2026, and later confirmed a third party had obtained customer names, contact details, shipping addresses, and order details, including the items purchased and their prices. The Block reports that Keystone said payment cards, bank details, recovery phrases, private keys, and wallet passwords were not exposed. Keystone did not say how many customers were affected. Keystone later posted a follow-up statement on X.

What The Block reports Keystone told customers:

• Scammers may pose as the company by phone, text, email, or mail, offering refunds, replacement devices, or "fixes."
• Never enter a recovery phrase into a device you didn't order.
• Don't follow links in messages that claim to be from Keystone.

More patterns to watch for in Zcash wallet scams.

Keystone or Ledger?

Both keep keys off your phone. Keystone uses QR codes with no cable or radio. Ledger connects over Bluetooth on phones, and over USB on desktop (or Bluetooth on macOS). In Vizor, both work for shielded sends, voting, and Ironwood migration. See Ledger with shielded ZEC on mobile and how to store ZEC safely.

FAQ

Does Keystone support shielded Zcash?

Yes. The Keystone 3 Pro signs shielded ZEC on Keystone's Cypherpunk firmware. Keystone's Vizor guide asks for Cypherpunk 2.5.0 or later, and Ironwood support needs Cypherpunk 3.0.2 or later. The Multi-Coin firmware handles transparent ZEC only, through Keystone Nexus.

How do I connect Keystone to Vizor?

On the Keystone, tap the menu icon on the home screen, choose Connect Software Wallet, then Vizor. In Vizor, tap Connect Keystone, tap I'm ready now, scan the QR code on the Keystone, confirm the account, then enter the wallet creation time and set a password.

Can I send ZEC from a Keystone to a Binance TEX address?

Yes, in Vizor. Since v0.0.52, Keystone can send to TEX addresses through a guided two-transaction QR signing flow. The funds pass through a one-time transparent address, so you sign twice and pay two network fees.

Do I need new Keystone firmware for NU7?

Keystone had not published NU7-specific firmware notes as of November 4, 2026. Zcash developer str4d wrote that existing Keystone firmware will work after NU7 because the signing data carries the network's branch ID. Keep Cypherpunk current and check keyst.one/firmware.

Can I vote with a Keystone?

Yes. Vizor supports Keystone for coinholder voting with QR signing, and since v0.0.49 one approval can sign several voting bundles. The Zcash coinholder voting page also confirms Keystone works with the voting system.

Was Keystone affected by a security incident?

Yes. The Block reports that Keystone said an attacker accessed its website store on October 20, 2026, and obtained customer names, contact details, shipping addresses, and order details. Keystone said payment cards, bank details, recovery phrases, private keys, and wallet passwords were not exposed. Ignore unsolicited offers of refunds, replacement devices, or fixes, and don't follow links in messages claiming to be from Keystone.

---

Ready to pair your Keystone? Get Vizor for iOS, Android, or desktop. It's free and open source, and it works with Keystone and Ledger. Questions? Visit Vizor support or browse the code on GitHub.