diff --git a/Cargo.toml b/Cargo.toml
index 3de49be5..0b4964d2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -180,7 +180,7 @@ logos-blockchain-chain-service = { git = "https://github.com/logos-blockchain/lo
 logos-blockchain-zone-sdk = { git = "https://github.com/logos-blockchain/logos-blockchain.git", rev = "d8711bbc3d43d3ef9755ef9b73af32fd0f703160" }
 logos-blockchain-http-api-common = { git = "https://github.com/logos-blockchain/logos-blockchain.git", rev = "d8711bbc3d43d3ef9755ef9b73af32fd0f703160" }
 
-keycard-rs = { git = "https://github.com/keycard-tech/keycard-rs" }
+keycard-rs = { git = "https://github.com/keycard-tech/keycard-rs", rev = "9535a657ba04b1e6916de51777e22b4837c1a84d" }
 
 rocksdb = { version = "0.24.0", default-features = false, features = [
   "snappy",
diff --git a/docs/LEZ testnet v0.1 tutorials/keycard.md b/docs/LEZ testnet v0.1 tutorials/keycard.md
index 8b4711e6..66d5aacf 100644
--- a/docs/LEZ testnet v0.1 tutorials/keycard.md	
+++ b/docs/LEZ testnet v0.1 tutorials/keycard.md	
@@ -132,14 +132,9 @@ Keycard PIN:
 ✅ Mnemonic phrase loaded successfully.
 ```
 
-5. `factory-reset` and `get-private-keys` (**debug builds only**)
+5. `factory-reset`
 
-Both require building the wallet with the `keycard-debug` feature:
-```bash
-cargo install --path lez/wallet --force --features keycard-debug
-```
-
-`factory-reset` wipes the card's PIN, PUK, and loaded keys back to an uninitialized state, so it can be re-`init`ialized — the counterpart to `init`. It does **not** remove the identity certificate, so the card doesn't need re-personalizing afterward. Irreversibly destroys any keys currently on the card, so it requires `--confirm`:
+Wipes the card's PIN, PUK, and loaded keys back to an uninitialized state, so it can be re-`init`ialized — the counterpart to `init`. It does **not** remove the identity certificate, so the card doesn't need re-personalizing afterward. Irreversibly destroys any keys currently on the card, so it requires `--confirm`:
 ```bash
 wallet keycard factory-reset --confirm
 
@@ -147,7 +142,14 @@ wallet keycard factory-reset --confirm
 ✅ Keycard factory-reset. Run `wallet keycard init` to reinitialize it.
 ```
 
-`get-private-keys` exports the raw NSK and VSK for a derivation path. NSK gates nullifier creation and VSK gates note decryption — either key is sufficient to fully compromise that account's privacy. Requires `--reveal` to confirm intent:
+6. `get-private-keys` (**debug builds only**)
+
+Requires building the wallet with the `keycard-debug` feature:
+```bash
+cargo install --path lez/wallet --force --features keycard-debug
+```
+
+Exports the raw NSK and VSK for a derivation path. NSK gates nullifier creation and VSK gates note decryption — either key is sufficient to fully compromise that account's privacy. Requires `--reveal` to confirm intent:
 ```bash
 wallet keycard get-private-keys --key-path "m/44'/60'/0'/0/0" --reveal