Regulatory Update

Withdrawal Security Update &
Updated Policy Agreement

We are updating our withdrawal verification protocols and Terms of Service to align with the EU Cyber Resilience Act (CRA) and DORA requirements. These changes strengthen how we protect your assets.

Review Updated Policy What is Changing
Keycard — Open source hardware wallet with secure-element chip and NFC
Action required by September 22, 2026
You have 10 business days to review and accept the updated agreement. Non-compliant accounts may face restricted withdrawal access.

Why this is happening

In 2026, the EU Cyber Resilience Act and Digital Operational Resilience Act (DORA) introduced mandatory security and compliance standards for hardware wallets and crypto custody devices. As an open-source, air-gapped wallet, Keycard must meet these standards to continue serving users in regulated markets.

Stronger Withdrawal Verification
All outgoing transactions now require multi-factor confirmation through your Keycard Shell or NFC tap, plus a time-delayed approval for withdrawals above configured thresholds.
Updated Terms of Service
Our policy now reflects new disclosure requirements for hardware wallet providers, incident reporting timelines, and clear liability frameworks for open-source firmware.
Open-Source Compliance
We have submitted our MIT-licensed firmware and CERN-OHL-S v2 hardware designs for independent security audit under the new CRA certification pathway.
Geographic Policy Alignment
Users in the EEA, UK, and Switzerland will see region-specific terms that satisfy MiCA, FCA, and FINMA guidelines for self-custody hardware devices.

Don't take our word for it. Take theirs.

@SchorLukas avatar

@SchorLukas

Co-founder, Safe

on X

“Amazing piece of open-source hardware and surprisingly good UX.”

Photo shared by @SchorLukas
Hardware Wallets logo

Hardware Wallets

Independent reviewer

93%

“[...] a unique approach to hardware wallet security with its modular design and open-source architecture.”

Hardware Wallets review photo
@Pol_Lanski avatar

@Pol_Lanski

Co-founder, Dappnode

on X

“Impressed by how the project is thought out.”

Photo shared by @Pol_Lanski

Timeline

Here is what to expect over the next two weeks.

September 8, 2026
Policy Update Announced
You receive this notification. Review period begins.
September 22, 2026
Acceptance Deadline
All users must accept the updated agreement to maintain full withdrawal access.
September 23, 2026
Grace Period Begins
Non-compliant accounts enter restricted mode. Deposits and viewing remain active.
October 6, 2026
Full Enforcement
Updated verification protocols become mandatory for all outgoing transactions.

Your funds are unaffected

This is a policy and procedural update only. Your private keys remain on your Keycard secure element. Your balances, transaction history, and card backups are unchanged. Nothing about how you hold your assets changes — only how we verify withdrawals at the service layer.