KeepKey Vault v1.5.2
Pre-releaseA maintenance release: the desktop shell moves up five versions, and QR scanning on macOS starts working again.
Bug Fixes
- Camera QR scanning was broken on macOS. The app never declared
NSCameraUsageDescription, so macOS had no reason to grant camera access when you opened the QR scanner. Scanning an address by camera now prompts properly, with an explanation of why a wallet is asking. Affected every macOS build up to and including 1.5.1.
Under the Hood
- Electrobun 1.13.1 → 1.18.1. The desktop runtime was five stable releases behind. Brings upstream fixes to window handling, the updater, and platform packaging.
- The build's patch layer now fails loudly instead of silently. Several small runtime patches were being skipped without warning whenever upstream moved the code they attach to — which is exactly how the camera declaration went missing. Each one now breaks the build if it can no longer apply, and the release pipeline verifies the patches actually made it into the shipped app rather than trusting that they did.
No changes to signing, transaction construction, or device communication.
Downloads
| Platform | File | SHA-256 |
|---|---|---|
| macOS (Apple Silicon) | KeepKey-Vault-1.5.2-arm64.dmg |
9a404cc11a7a36ed8ec291150f048a6e4f96d323a27b32257db3353d2e6ea171 |
| macOS (Intel) | KeepKey-Vault-1.5.2-x86_64.dmg |
6680efd1a3cc4983a65d063cd493c1a4d426f1868fae13d5ffc36e8bc669221a |
| Linux (AppImage) | KeepKey-Vault-x86_64.AppImage |
ae693399afdfafc0b56a87ad39c44326aa5094039c000eb7d7fcd9e07bbb37d5 |
| Linux (deb) | keepkey-vault_1.5.2_amd64.deb |
7dd6644cb82e2ea94245199bfbd7a1b633a210dd48383f0d8efa4330b696fe9a |
To verify: shasum -a 256 <filename>
Both macOS DMGs are signed, notarized, and stapled.
Windows is published separately from the Windows build machine.
Also included
This is the first release to reach master since v1.4.11, so it carries everything from the v1.5.0 and v1.5.1 lines — ClearSign Studio, hardware-verifiable x402 payments, reusable clear-sign schemas for Relay swaps, Zcash NU6.3 (Ironwood), firmware 7.15 Taproot and entropy host acceptance, swap reconciliation, and the EVM account-path fix. See the v1.5.0 and v1.5.1 release notes for the full list.
The clear-signing note from v1.5.1 still applies: clear-sign verification requires the AdvancedMode policy on the device, because firmware verifies clear-sign metadata only against a signer loaded at runtime. Without AdvancedMode the device falls back to its normal confirmation screens — it never displays unverified decoded detail.