KeepKey Desktop v1.6.5

KeepKey Desktop v1.6.5 — prerelease

A lighter dashboard

• Choose your networks. On a multi-chain KeepKey, Desktop now asks once which networks to load. Networks you turn off aren't read from the device, fetched, scanned or watched, so the dashboard loads faster. Bitcoin is always on. Change it any time in Settings → Networks.
• Add network replaces "Add EVM chain": turned-off networks are listed first with Turn on, custom EVM networks below.
• New docs page: Performance and network calls explains what Desktop asks your KeepKey and KeepKey's servers for, with measured timings.

Setup and recovery

• Forgotten PIN: wiping from the PIN screen now owns the device until it answers; other requests no longer break the on-device confirmation.
• Bitcoin-only ↔ multi-chain: a wiped multi-chain KeepKey can switch to Bitcoin-only from the wallet page. If multi-chain firmware is installed over a Bitcoin-only wallet, Desktop explains that the Bitcoin-only wallet is still on the device (hidden), offers to reinstall Bitcoin-only firmware to get it back, or wipes and continues once you confirm you hold its recovery phrase.
• Bootloader updates: after the upload, Desktop now tells you to keep the KeepKey plugged in until its own screen says the update is complete. It previously said to unplug while the device was still installing.
• "Create New Wallet" is only shown for a device that reports it has no wallet; the firmware update step no longer has a Next button that led there.
• Closing recovery cipher entry cancels recovery on the device instead of leaving the app stuck until a replug.

Sending

• The send review shows the full recipient address (it was cut off) and, for a MAX Bitcoin-style send, the amount actually being sent instead of "MAX", so it can be checked against the device.
• Bitcoin-only firmware is no longer asked for an Ethereum address on every connect.

Learn

• KeepKey Academy in Explore opens the KeepKey video course. The KeepKey tile now reads KeepKey.com, and Docs opens the written docs in your browser.
• Send, receive, swap, address book, reports, audit, activity, PIN, passphrase, recovery, signing, pairing, WalletConnect, BIP85 and the Settings sections link their docs page and, where one exists, a video. Several links that did nothing when clicked now open.

Includes everything in v1.6.4 plus its post-release fixes (offline and unsupported balances are marked unverified; balances and signing context are preserved).

Known limits

• The network picker's load estimate comes from one measured first load (firmware 7.16.0, 35.7 s with every network on). Warm loads are faster; timings vary by device and firmware.
• Turning EVM networks off tidies the dashboard but doesn't shorten load time: their shared address is always read.
• A forgotten-PIN wipe can still fail if other apps (browser extension, SDK) have requests queued behind the PIN prompt when the wipe starts. Close them first.

Platform builds

macOS builds target macOS 13.0 or later, with separate Apple Silicon (arm64) and Intel (x86_64) downloads. Linux downloads target x86_64. The Windows installer is built and signed separately on the Windows release machine.

Candidate status

Prerelease. The Apple Silicon and Intel installers are Developer ID signed (KEY HODLERS LLC), notarized and stapled, pass Gatekeeper, and match their SHA-256 after a fresh download. Linux builds come from the official CI release job. Hardware-tested on the development build: forgotten-PIN wipe, Bitcoin-only wallet → multi-chain → wipe → new wallet, and the network picker. Post-sign physical Mac/KeepKey tests remain pending.

The Windows installer is a single EV-signed (KEY HODLERS LLC), timestamped installer; Inno signs its setup engine and uninstaller during compilation, and every bundled EXE/DLL is signed. It bundles the offline WebView2 runtime for Windows 10. Verified on Windows 11 with Smart App Control on: upgrades 1.6.4 → 1.6.5 with no Code Integrity blocks, launches, and matches its SHA-256 after a fresh download. Post-sign physical KeepKey tests on Windows, and a clean Windows 10 install, remain pending.

Downloads

File	Platform	SHA-256
KeepKey-Vault-1.6.5-arm64.dmg	macOS Apple Silicon	fd220f9642213447a4f5f41c46e43f5b469e15ed86409e6189f2aa8e540e4281
KeepKey-Vault-1.6.5-x86_64.dmg	macOS Intel	f4b64ed3abd9ab836f7ed30befbc191f56ca9d3b51bb5379404b840b7efac2a5
KeepKey-Vault-x86_64.AppImage	Linux x86_64	ea607a82943dc5aef98a89dddc425f31685f3854f6d493021bd80a9781728510
keepkey-vault_1.6.5_amd64.deb	Linux x86_64 (Debian/Ubuntu)	c7fe776e4a235d068b85b6303df412e6f2dad42191900448ae127afcc5ddce50
KeepKey-Vault-1.6.5-win-x64-setup.exe	Windows 10 (1809+) / 11 x64	d5a8c79cdf2ff6c70e96e207c633b3cc89cc27fd788f9188d981603f30358ab3

macOS update archives are listed in SHA256SUMS-macos.txt; Linux in SHA256SUMS.txt; Windows in SHA256SUMS-windows.txt.

To verify: shasum -a 256 <filename>