Keystone 3 Pro: Generate Your Seed Phrase with Dice Rolls
When you use a hardware wallet, you are inherently trusting that the device's Random Number Generator (RNG) is secure. As we've seen with past firmware bugs on other devices, a compromised RNG can lead to devastating loss of funds. To minimize this trust, you can generate your own entropy using physical dice rolls. In this guide, I'll show you exactly how to do this natively on the Keystone 3 Pro.
Exclusive Discount Code
If you're interested in the Keystone 3 Pro for its built-in dice roll capabilities, you can get 5% off your purchase by using the promo code ForrestHODL at checkout!
Get the Keystone 3 Pro →Preparing Your Device
If you already have a wallet set up on your Keystone, you have two choices: you can either add a completely separate wallet to the device (it supports up to three, each protected by a unique PIN), or you can completely factory reset the device to start fresh.
To wipe the device and start fresh:
- Tap the three dots at the top right of the screen.
- Go to Device Settings, then System Settings.
- Scroll down and select Wipe Device.
- Enter your current PIN to authorize the reset. Ensure the device is plugged in during this process!
Initiating the Dice Roll Process
Once your device is wiped (or if it's brand new), proceed through the initial language and verification prompts until you reach the "Create Wallet" screen.
- Select Create Wallet and establish a strong PIN.
- Give your wallet a name.
- Instead of pressing "Standard Seed Phrase" right away, tap the three dots at the top right corner.
- Select Change Entropy, then choose Dice Roll, and press continue.
- Select "Standard Seed Phrase". You are now ready to begin rolling!
Rolling the Dice
Make sure you are in a private environment with no cameras pointing at your workspace.
You will need standard 6-sided dice. Roll the dice thoroughly (using a cup or box is a great idea for maximum randomness). Input the resulting numbers into the Keystone's interface as you roll them.
- For a 12-word seed phrase, you must input a minimum of 50 rolls.
- For a 24-word seed phrase, you must input a minimum of 100 rolls.
The Keystone is incredibly flexible. You can actually input far more than the minimum required rolls (I tested up to 239 rolls!) and the device will compute the additional entropy perfectly.
Verifying the Keystone is Not Lying (Optional, but Recommended)
How do you know the Keystone isn't secretly ignoring your dice rolls and just generating a random phrase anyway? You can test it!
To verify the math, you can perform a test run. Roll your dice and generate a seed phrase on the Keystone. Then, take those exact same dice rolls and input them into a trusted third-party tool, like another hardware wallet with a dice roll calculator (like the Coldcard) or an open-source tool like Ian Coleman's BIP39 tool.
If the seed phrases match, you have mathematically proven the Keystone is computing your physical entropy accurately.
CRITICAL WARNING: If you use an online tool or a separate device to verify the rolls, that specific seed phrase is now considered compromised! You must discard that test phrase, reset the process on your Keystone, and do a fresh batch of dice rolls for your real wallet without verifying them anywhere else!
Finalizing Your Wallet
Once you have completed your final, un-verified batch of dice rolls, follow the prompts on the Keystone to finalize the wallet. Write down your seed phrase on a physical backup, confirm the words on the device, and you are good to go!
I highly commend Keystone for building physical entropy tools directly into their software. It is a fantastic feature that significantly reduces the trust you have to place in the manufacturer.
Is Your Setup Secure?
Securing your seed phrase and generating physical entropy can be daunting. Let's make sure you get it right the first time.
Book a 1:1 Security SessionWatch the Full Dice Roll Tutorial
Watch the comprehensive video walkthrough where I demonstrate the entire dice rolling process and verify the entropy on a separate device.