How to connect Keystone hardware wallet to UniSat? (Cold Storage)

Understanding Keystone and UniSat Integration

1. Keystone is a non-custodial hardware wallet designed for Bitcoin and Ordinals storage, emphasizing air-gapped security through QR code-based transaction signing.

2. UniSat Wallet serves as a browser-based interface supporting Bitcoin, BRC-20 tokens, and inscriptions, enabling users to view balances, send transactions, and manage NFTs.

3. Connecting Keystone to UniSat does not involve direct USB or Bluetooth pairing; instead, it relies on offline signing workflows where UniSat generates unsigned transaction payloads and Keystone signs them via QR scanning.

4. This integration preserves cold storage integrity—private keys never leave the Keystone device, and no internet-connected software gains access to signing material.

5. The process supports both standard UTXO transfers and inscription-specific operations like transferring inscribed satoshis or BRC-20 tokens, provided the Keystone firmware version is 4.2.0 or higher.

Prerequisites Before Connection

1. A fully set up Keystone Pro or Keystone Classic with verified recovery phrase and updated firmware (check via Keystone mobile app or desktop utility).

2. UniSat Wallet extension installed in Chrome or Edge, with an active wallet profile initialized using a software-based seed or imported address—not derived from Keystone directly.

3. A compatible QR code scanner—either the built-in camera on Keystone’s touchscreen or an external device capable of rendering UniSat’s unsigned PSBT QR codes without distortion.

4. Stable internet connection for UniSat’s interface, while ensuring the Keystone remains physically disconnected from any network during signing.

5. Sufficient knowledge of PSBT structure and confidence in verifying output addresses and fee rates manually on Keystone’s screen before finalizing signatures.

Step-by-Step Connection Workflow

1. Open UniSat Wallet, navigate to the “Send” tab, and enter recipient address, amount, and optional inscription ID if transferring an inscribed satoshi.

2. Click “Generate PSBT”, then select “Export via QR Code”—UniSat renders a multi-frame animated QR sequence containing the full PSBT payload.

3. On Keystone, go to “Sign Transaction” > “Scan QR Code”, and align the device’s camera with UniSat’s QR animation until all frames are captured successfully.

4. Review each output, change address, fee, and associated inscription details carefully on Keystone’s E-Ink display; confirm only after full verification.

5. After approval, Keystone outputs a signed PSBT QR code sequence; return to UniSat, click “Import Signed PSBT”, scan the response, then broadcast.

Security Considerations and Common Pitfalls

1. Never use third-party QR scanners outside Keystone’s official interface—malicious tools could intercept or alter PSBT data mid-scan.

2. Avoid screenshotting or saving UniSat’s unsigned QR frames; exposure risks unauthorized signing attempts if PSBT contains sensitive inputs.

3. Do not skip output validation—even if the sending address matches expectations, verify that change outputs point to correct internal addresses derived from your Keystone’s xpub.

4. Firmware mismatch may cause QR decoding failure; downgrade or upgrade Keystone firmware using the official Keystone Utility before attempting complex inscription transfers.

5. UniSat does not store or interpret signature metadata—users bear sole responsibility for confirming inscription IDs, ordinal numbers, and sat ranges prior to broadcasting.

Frequently Asked Questions

Q: Can I import my Keystone’s xpub into UniSat to auto-generate receiving addresses?A: No. UniSat does not support xpub import for address derivation from hardware wallets. Receiving addresses must be generated and verified on Keystone itself, then manually noted or scanned via QR.

Q: Why does UniSat show “Invalid PSBT” after scanning Keystone’s signed QR?A: This typically occurs due to incomplete frame capture, corrupted QR animation timing, or firmware incompatibility. Retry with reduced screen brightness and steady camera alignment.

Q: Does this method support sending multiple inscriptions in one transaction?A: Yes, provided all inscriptions reside in spendable UTXOs controlled by the same Keystone account and UniSat correctly parses their outpoints during PSBT generation.

Q: Can I use Keystone with UniSat on mobile browsers?A: Not reliably. Mobile browser limitations prevent stable PSBT QR animation rendering and scanning. Desktop Chrome/Edge with external webcam or Keystone’s native camera is required.