KeepKey Vault v1.4.7
KeepKey Vault v1.4.7
Patch release. Emulator seed-restore reliability and watch-only fixes.
Bug Fixes
- Emulator: reload the saved seed when the persisted flash boots a stale/wrong seed (#287). The emulator flash is not a trustworthy seed store — the firmware's storage wrapping key changes per init, so a persisted flash could boot a different seed than the one saved. The connect smoke-test passes on any valid seed, so the wrong wallet could be presented as ready. Vault now compares the live BTC xpub against the saved mnemonic and deterministically reloads the saved seed on mismatch (or on a blank-flash boot), and verifies the result before reporting success.
- Watch-only: show the cached receive address instead of "No device connected" (#286).
- Watch-only: Refresh re-fetches balances from cached addresses (#285).
- Updates: route to keepkey.com/update, no misleading in-app "Downloading…" state (#284).
- Emulator: show Accept/Reject for the Enable Policy confirm (#283).
- Auth: stop re-approve churn — idempotent pairing, LRU + sliding TTL, 600s timeout.
Downloads
| Platform | File | SHA-256 |
|---|---|---|
| macOS (Apple Silicon) | KeepKey-Vault-1.4.7-arm64.dmg |
f533c9a57b8540be75daba5b39fac6d83bc93d5b0361ff8fdc716c256dc34041 |
| macOS (Intel) | KeepKey-Vault-1.4.7-x86_64.dmg |
800b7387c7115ed4f9bf130028d034485fe0735c31585dbbd7a51fcda11c4acc |
| Linux (AppImage) | KeepKey-Vault-x86_64.AppImage |
fe41baf3a826cde14ace174b9a3700b55e905702a10b21946e63f58f86bcae44 |
| Linux (deb) | keepkey-vault_1.4.7_amd64.deb |
03c1740457e675cb3ad33a6494fe65671aff55d172b6ebff6a5d9a8e58ad323d |
Windows installer is signed and added separately by the Windows build machine.
Verification
shasum -a 256 -c SHA256SUMS.txt
macOS DMGs are signed with Developer ID (KEY HODLERS LLC) and notarized + stapled by Apple.