KeepKey ClearSign

What happens

KeepKey can authenticate transaction descriptions for every scope marked ready below, without blind signing.

The service recognizes a reviewed protocol action and signs a description. Your KeepKey independently checks the root certificate, signer fingerprint, program or contract, decoded fields, and the exact transaction binding. You still approve the final transaction on the device.

Trust status

Device label

Authenticated by KeepKey

Signer

KeepKey Alpha 716 · a9531b9d

Ethereum

ready

Solana

ready

Earliest certificate expiry

2026-09-30T00:00:00.000Z

Reviewed protocols

Relay · Ethereum and Solana deposits for cross-chain swaps.

Portals · Native ETH swaps through the verified Ethereum router. KeepKey reads the output token, minimum output, recipient, and input amount from the transaction itself.

Only exact catalog matches are certified. Unknown programs, contracts, selectors, instruction sizes, or lookup-table accounts are refused.

Privacy and provenance

Ethereum requests contain only transaction shape. Solana lookup-table requests contain the unsigned transaction so this service can resolve and bind its accounts. Wallet seeds, private keys, PINs, passphrases, and device signatures never leave your KeepKey. This service writes no transaction database.

How Relay works · Relay security · Portals documentation · Verified Portals router · KeepKey firmware · Vault source