#Updating Firmware

#Keycard applet (JavaCard)

Keycard applet updates are done by reinstalling the applet CAP using a smartcard reader.

• Use the Keycard CLI with a USB reader.
• Download the latest applet version from GitHub releases and follow the reinstallation scripts.

#Keycard Shell firmware and database

Keycard Shell firmware and its clear-signing database are updated separately.

• Online: Use the WebHID updater at https://shell.keycard.tech/update (requires USB data transfer enabled).
• Offline: Use the Keycard Shell updater on an offline computer.
• From source: Build and sign firmware from the Keycard Shell repo. Official devices accept only signed firmware; custom firmware requires a bootloader key you control on a self-built device.

For step-by-step user flows, see the help pages:

• Update your Keycard Shell online
• Update your Keycard Shell offline