How to update your hardware device firmware safely

TL;DR — Firmware updates can occasionally wipe a hardware device. Before updating, perform a health check on your other keys to confirm you can still meet your signing quorum (the minimum number of keys required to send bitcoin) if the device being updated is wiped. Update one device at a time and perform a health check after each update.

Why firmware updates matter

Hardware device manufacturers periodically release firmware updates. Not every update is essential, but some address security vulnerabilities and others ensure continued compatibility with third-party software and Sovereign Recovery (Casa's open-source tool for accessing your bitcoin without the Casa app).

Casa recommends staying reasonably current with firmware, but updating with care once a device is part of your vault.

YubiKey devices do not support firmware updates because they are designed without this capability. If your device is not supported as a vault key, you will need to purchase a new YubiKey. To check the firmware version of your YubiKey, see this article.

Before you update: check your other keys first

Some firmware updates wipe the device during the process. This is not common, but it does happen. If it occurs and you are not prepared, you could temporarily be below your signing quorum.

Before updating any hardware key, confirm that your remaining keys are healthy and accessible.

Standard members (3-key vault):

Perform a health check on your mobile key
Verify your answers to the Casa Recovery Key security questions
This confirms you can meet your 2-of-3 signing quorum even if the updated device is wiped

Premium or Private Client members (5-key vault):

Perform a health check on your mobile key
Perform a health check on at least one additional hardware key
You can also verify the Casa Recovery Key via video call with your Client Advisor
This confirms you can meet your 3-of-5 signing quorum even if the updated device is wiped

How to update safely

Complete the health checks outlined above before touching the device you plan to update.
Update one hardware device at a time. Do not update multiple devices in the same session.
Follow the firmware update instructions from your device manufacturer (see device-specific links below).
After the update completes, perform a health check on the updated device to confirm it is still signing correctly in your Casa vault.
Only proceed to update a second device after the first has passed its health check.

What to do if your device is wiped during an update

If your device has a seed phrase (the 12- or 24-word backup of the hardware device's private key), you can use it to restore the device to its previous state.

If you are a mostly seedless member, meaning you have not recorded a seed phrase for this device, do the following:

Reinitialize the device to generate a new hardware key.
Use your remaining keys to perform a key rotation (the process of replacing one key in the vault with a new one), replacing the wiped key with the newly initialized device.

Your bitcoin in your Casa vault is not affected by a wiped device as long as your remaining keys meet your signing quorum.

Device-specific firmware update guides

Please read the articles below before updating a Ledger device:

Still need help?

If you have followed these steps and are still experiencing an issue:

Standard members: email help@team.casa with a description of the problem and a screenshot if possible.
Premium and Private Client members: contact your Client Advisor directly.

How to update your hardware device firmware safely

Updating hardware can be risky business. It is good to health check your other devices prior to making changes.