Keycard Pal
mmlado/keycard-pal
Install Keycard Pal
Download Zapstore
Download
- Scan the code with your phone’s camera
- Tap Download anyway if the browser warns about the file
- Allow your browser to install unknown apps if Android asks
- Open Zapstore and finish the onboarding
Open Keycard Pal in Zapstore
Open
- Scan the code to open Keycard Pal in Zapstore, or search for it there
- Tap Install, and Download if Zapstore asks you to confirm the developer
- Confirm in Android’s install dialog. Allow Zapstore to install unknown apps if Android asks
Unclaimed app
The catalog lists Keycard Pal from
mmlado/keycard-pal
and signs its releases. The developer has not claimed it.
The file is still checked before you install it.
Are you the developer? Cryptographically prove you hold the key that signs it.
Hardware wallet companion app. It works with a Keycard NFC smart card to sign Ethereum and Bitcoin transactions, and the key on the card never leaves it.
Keycard Pal is a hardware wallet companion app. It works with a Keycard NFC smart card to sign Ethereum and Bitcoin transactions, and the key on the card never leaves it.
Requires a Keycard hardware smart card (keycard.tech). The app talks to the card over NFC: no USB, no Bluetooth.
Your wallet and Keycard Pal talk through animated QR codes. The wallet shows a request, you review it in Keycard Pal, tap your card, and show the signature back. No network connection is needed for any of it.
The phone handles key material only when you ask it to: a recovery phrase or SLIP-39 shares while you generate, import or verify them, and secrets you derive with BIP-85.
Features:
- Sign Ethereum transactions (legacy, EIP-1559, EIP-2930)
- Sign EIP-712 typed data with decoded preview before approval
- Sign personal messages (EIP-191 / SIWE)
- Sign Bitcoin transactions via PSBT
- Sign Bitcoin messages (BIP-322)
- Export wallet keys to MetaMask, Rabby, Ledger Live, Sparrow, BlueWallet, and Bitget via UR QR codes
- Generate a key pair on the card, or import a recovery phrase (BIP-39) or SLIP-39 shares
- Derive BIP-85 secrets from the card's key and show them on the phone: recovery phrases, WIF and XPRV keys, hex entropy and passwords (needs a Keycard with applet 4 or later)
- Genuine Keycard check
- No telemetry, no analytics, no account
Keycard Pal comes in two builds:
- Keycard Pal Offline (com.keycardpal.offline) has no internet permission. It cannot make a network connection.
- Keycard Pal (com.keycardpal) has the internet permission for optional features: WalletConnect, ENS names, transaction simulation with Tenderly, token images, and downloading the clear-signing descriptor registry. Each one is off until you turn it on in Settings. WalletConnect needs your own Reown Project ID and simulation needs your own Tenderly API key.
Keycard Pal is free and open-source software.
Advertisement: the Buy a Keycard links in this app are affiliate links. The developer earns a commission on purchases made through them. No app feature depends on buying through them, and every feature of the app is free.
Summary generated by Zapstore from source.
Original description, as the developer published it.
Latest release
The catalog lists this app from
mmlado/keycard-pal
and signs its releases. The developer has not claimed it.
Are you the developer? Claim your app
Uses the camera to scan QR codes for transaction signing and key export. Communicates with a Keycard NFC smart card to sign Ethereum and Bitcoin transactions without exposing private keys.
Permissions
- Camera CAMERA Take photos and record video CAMERA
Release notes
What's Changed
- fix: write the coin network in Bitcoin exports by @mmlado in https://github.com/mmlado/keycard-pal/pull/568
- chore: say that the Keycard team has provided equipment by @mmlado in https://github.com/mmlado/keycard-pal/pull/571
- feat: replace the affiliate link with keycard.tech by @mmlado in https://github.com/mmlado/keycard-pal/pull/572
- fix: zero seed and key buffers on every exit path by @mmlado in https://github.com/mmlado/keycard-pal/pull/576
- fix: link contributors who committed under a personal email by @mmlado in https://github.com/mmlado/keycard-pal/pull/593
- fix: show another chain's 32-byte address as written, and unnamed enum values in decimal by @mmlado in https://github.com/mmlado/keycard-pal/pull/595
- feat: custom ERC-20 tokens by @mmlado in https://github.com/mmlado/keycard-pal/pull/596
- build: update vulnerable dependencies flagged by Dependabot by @mmlado in https://github.com/mmlado/keycard-pal/pull/597
- chore: update the bundled clear-signing registry by @mmlado in https://github.com/mmlado/keycard-pal/pull/598
- chore: release 1.17.0 by @mmlado in https://github.com/mmlado/keycard-pal/pull/599
Full Changelog: https://github.com/mmlado/keycard-pal/compare/v1.16.0...v1.17.0
APK SHA256 checksums
49782fdad5bace15355ab14a0687ae622f5bd6af223c1c2bf554549c42389458 keycard-pal-full-release-arm64-v8a.apk
66974d48c1f0c82931c2f47203390dd3d285a7cb3506325f13a06de4f2dad893 keycard-pal-full-release-armeabi-v7a.apk
c38d62691e3ef38cd6c77a7db4c8c00696592244cfea7f455326adfa5b17926e keycard-pal-full-release-universal.apk
4e7398a20f928438d26f7f177f13877a24192b783287f1e4d4c3409075d38796 keycard-pal-offline-release-arm64-v8a.apk
1af65c683f202269952fd7a3b0495d27546edcc2c3ebc53b6da7255a36a31760 keycard-pal-offline-release-armeabi-v7a.apk
8012dc69f49f543261ed55885408b24654e6d1fa7a9b4b65e5e90b99a02ebfba keycard-pal-offline-release-universal.apk
Comments
Loading comments…
More security apps
See more-
M
My Signet
by TheCryptoDonkey
Family identity and signing for the Signet protocol
-
O
OTG Master
Mount VeraCrypt, LUKS, BitLocker and APFS USB drives on non-rooted Android
-
H
Haven
Private and censorship-resistant location sharing.
-
B
Bitmask
Encrypted communication for mere mortals (superheroes welcome, too).
-
R
Riseup VPN
RiseupVPN, anonymous VPN. Powered by Bitmask.
-
I
I2P
I2P anonymous network
Get Keycard Pal the private way
Updates checked on your device, and every release verified before it installs.