Questions

Inside the wallet, from the hardware random number generator in the Raspberry Pi's Broadcom chip, which samples the timing jitter of free-running oscillators. Broadcom publishes no manual for it, so the wallet follows Broadcom's own driver code. Before every start, a check run as administrator confirms that /dev/hwrng is that generator and that its control register holds the setting Broadcom's code uses. The first 1 MB after start-up is thrown away, as Broadcom's code does.

Every byte then goes through the start-up and continuous health tests from NIST SP 800-90B, and four times as many bytes as needed are condensed into each output with SHA-256. 32 bytes from Linux's own generator are mixed in for every block, which can only add unpredictability; the hardware generator is still required. If it is missing, set up differently or fails a test, the wallet stops instead of creating a phrase.

You can test the generator yourself in step 5 of the guide, before you create a wallet.

Safer in one way, weaker in another. You don't have to trust a factory or a courier, because you built it from generic parts and installed every piece of software yourself.

But it has no secure chip, so it protects you less if someone steals it. A passphrase closes most of that gap. The guide's last step, Keep it safe, goes through both sides.

Because it isn't a OneKey device, and the check is telling the truth. OneKey's devices carry a certificate from the factory that the app verifies. Yours can't have one.

Not easily. The official app stops at the genuine-device check, which your wallet can never pass. Building the app yourself with that one check turned off is the way through, and it means the app on your computer also comes from source you could read.

To run on a Raspberry Pi, the firmware has to be built as a program for a normal computer instead of for OneKey's own chip. Today the newest version whose code builds that way is 3.12.0, from June 2025. The guide will move to a newer version when one builds.

When the firmware can be built for them safely. The Pro firmware's current code doesn't build for a Raspberry Pi, and no OneKey firmware has been ported to ESP32 chips yet. There is no date.

No. It connects to a computer by USB only. Its Bluetooth is switched off, and the phone app talks to hardware wallets over Bluetooth.

Partly. Everything on the Pi works from Windows, since you only log in to the Pi over SSH. Building the app needs a Mac or a Linux computer for now, because its build scripts use Unix tools that Windows doesn't have.

Only during setup, to download the code. At the end of the installation Wi-Fi and Bluetooth are switched off and it never goes online again.

The guide is written for the Pi Zero 2 W with the Waveshare 1.3inch OLED HAT. Its USB port can act as a wallet, which most Raspberry Pi models can't. The screen has the same 128×64 resolution as the OneKey Classic, so everything fits. Other combinations would need changes to the code.

Nothing, as long as you have your recovery phrase. It is a standard 12- or 24-word phrase that works in any compatible wallet, including OneKey's own devices. Your money lives on the blockchain, not on the device or this site.