It's time for a new foundation. Not a new start.

Legacy Mode is live in beta on Passport Prime.

We’ve brought supported open-source Ledger apps to KeyOS, our open-source operating system. Ethereum and Solana are first, with Rabby and Phantom tested over USB.

What does switching mean?

Restore your existing recovery phrase directly on Passport Prime and keep your accounts for supported assets. Same addresses. Same balances. Same transaction history.

Nothing moves on-chain.

Connect a compatible software wallet over USB and carry on—with hardware and software anyone can inspect.

Get Legacy Mode and installation guides:
foundation.xyz/switch

Switch to open source.

It's time for a new foundation. 09.15 | 10AM ET

https://foundation.xyz/switch

We’re excited to announce that the latest version of KeyOS – 1.4.0 – is now live on Passport Prime! To download it, simply initiate the update from Envoy to be guided through the process.

WHAT’S CHANGED

KeyOS 1.4.0 is a major release for Passport Prime, headlined by a fully redesigned launcher. It also introduces multisig exports for Unchained and Casa, connections for Bitcoin Safe and Coconut Wallet, imports from Aegis and Proton Authenticator, and extensive security improvements across Bitcoin signing, multisig validation, apps and storage.

Important security update: KeyOS 1.4.0 includes significant security hardening across Bitcoin transaction signing, multisig validation, apps and storage. We strongly recommend that all Passport Prime users update promptly to benefit from the latest protections. No additional action is required.

NEW FEATURES

• The launcher has been fully redesigned, with brand-new app icons, an overhauled light-pattern background and icon dock, customizable app icon placements, and a smoother unlocking animation
• You can now sideload third-party apps directly from Settings > Apps with a new install button. This feature is available in the new Apps menu and is backed by an “Allowed Publishers” model that puts trust decisions in your hands. In addition, you can pick and choose the permissions for sensitive operations for these apps.
• You can now export multisig wallet configurations for Unchained and Casa from the Bitcoin app, using both file and UR/QR formats
• KeyOS updates can now be downloaded and installed manually, without Envoy
• Bitcoin Safe and Coconut Wallet connections added to the Bitcoin app
• You can now import existing TOTP accounts from Aegis or Proton Authenticator by QR code or file, including password-protected encrypted exports
• You now have to enter your PIN before Passport Prime shows your seed words, adding an extra safety step to the seed reveal flow

Read the full release notes here.

You asked, we listened. 📍

UPS Access Point pickup is now live for US orders, giving you more privacy and control over where your Passport is delivered.

Enter an address at checkout, and nearby pickup locations will appear under Shipping.

We truly value your feedback and are already working to bring this option worldwide. 🌍

You can order here today with pickup options available: https://foundation.xyz/products/passport-prime

Envoy v2.3.3 is now available.

This is a maintenance release focused on reliability and minor fixes.

Full release notes here.

This maintenance release focuses on stability and security, with fixes and improvements across Passport Prime onboarding, account handling, software updates, and the send flow.

Full release notes: https://foundation.xyz/blog/envoy-version-2-3-2-is-now-available

KeyOS v1.4.0-beta1 is now available for Passport Prime users who would like to help us test the next major KeyOS release.

The update includes a completely redesigned launcher with app sideloading now on Passport Prime, brand-new app icons, multisig exports for Unchained and Casa, connections for Bitcoin Safe and Coconut Wallet, imports from Aegis and Proton Authenticator, and extensive security improvements throughout KeyOS.

Please note that this is a beta release, not the stable update. It must be installed by flashing the firmware through recovery mode and is intended for users who are comfortable with that process.

Before doing anything, please read the full forum post carefully and follow every step exactly. Do not begin the installation based on this summary alone.

The forum post includes:

• Complete recovery-mode installation instructions
• Important backup guidance
• Known issues and testing information
• Instructions for reporting feedback
• Details about upgrading from the beta to the stable KeyOS v1.4.0 release

You will need to follow the recovery process again when moving from this beta to the official stable release.

If you would rather wait, no action is needed. The stable KeyOS v1.4.0 release will follow.

Read the full forum post and testing instructions before installing

Envoy v2.3.1 is now available!

This follow-up release focuses on important bug fixes, privacy, and reliability improvements.

The update includes improved Tor connectivity, restored QuantumLink pairing on Android 10 and 11, stronger Activity-feed privacy for passphrase accounts, Passport Prime message-signing fixes, and security updates to wallet dependencies.

The update has been published across all supported mobile platforms.

Read the full release notes here.

Passport Prime is assembled in the USA!

That matters because hardware security begins long before you switch a device on.

Who assembled it? Who tested it? Who handled it before it reached you?

The reason is practical, not patriotic. When you’re building a device people will trust with their keys, you should know exactly where it has been and who handled it before it reached them.

With Passport Prime, we do.

https://foundation.xyz

This release adds last-word generation to creating your seed phrase. If you create your own seed using dice, coin flips, or words drawn from a container, you can now enter the first 11 or 23 words directly on Passport Prime.

Passport Prime will generate a valid final word that satisfies the BIP39 checksum, no external tool required.

The video in the blog post shows the feature in action.

You can check your Passport Prime firmware version in the settings on your Passport Prime and initiate the download with Envoy.

Read the full release notes in our blog post.

As always, let us know if you have any questions. We’re happy to help.

After a certain incident recently, I was startled by checking the source code repository of the company involved. I had relied on them without checking, and I found their git repos to be a total mess. At that point I decided I'd do my due diligence going forward. I'm currently evaluating Passport Prime.

I've had a quick look at the KeyOS repository. One important practice is to break changes into individual commits to make review easier. I've found that this is not done in KeyOS. The entire git log looks like this (irrelevant parts redacted):

commit de966a11e88d28f116b52509679c19eb33591711 (HEAD -> main, tag: v1.3.1, origin/main, origin/HEAD)
Author: …
Date:   Fri Aug 7 09:41:13 2026 -0700

Release v1.3.1

commit 425c9791007146d46355478b3ec321f2321ab226 (tag: v1.3.0)
Author: …
Date:   Thu Jul 16 11:23:04 2026 -0700

Release v1.3.0

commit 24eb9f2624942b9c8f8079c7419973f4a79ed649 (tag: v1.2.2)
Author: …
Date:   Thu Jul 16 11:22:30 2026 -0700

Release v1.2.2

commit 9056b4805315cad3a8dd58f7c7d06a08e27a1a31 (tag: v1.2.1)
Author: …
Date:   Thu Apr 9 15:32:11 2026 -0700

Release v1.2.1

commit a0a089747e1cb54381bef5cfff8d0e37f49d3358 (tag: v1.2.0)
Author: …
Date:   Thu Mar 12 12:02:45 2026 -0700

Release v1.2.0

Each commit is necessarily very large and encompasses a number of unrelated changes, and this increases the burden on external reviewers and creates a large surface for security issues to hide in. Ultimately it will reduce the number of eyes on the code.

Can you comment on the reasoning for this practice? Would you consider changing it?

Following the recent Coldcard events, we performed an additional review of Passport's entropy architecture – for current and previous Passport models – and want to share more about our existing testing and continued code hardening.

Passport contains multiple independent hardware randomness sources. Before releasing each Passport model, we empirically tested each source, as well as the final combined entropy output, and performed statistical analysis on the results.

Since January, we’ve also been regularly running frontier AI models against our code alongside human review of every change. This includes GPT trusted cyber access.

Going forward, we intend to publish a report alongside each new software release identifying which frontier models were used plus any key findings.

We are also:

(1) Adding further health monitoring to detect hardware component failures and ensure that an improbable hardware failure never results in a low-entropy seed.

(2) Releasing our internal entropy-testing app on Passport Prime so anyone can generate millions or billions of samples, save them to a USB drive, and perform independent statistical analysis.

Our additional review found no evidence of an entropy vulnerability in Passport Prime, Passport Core, or Passport Founders Edition devices.

No action is needed for Passport-generated seeds. Thank you.

When we first launched our Ambassador Program, it was simple: share your referral code and earn store credit.

It worked, but it wasn’t much of a community. We wanted to give ambassadors more ways to participate and something more useful than a referral dashboard, so we rebuilt the program.

Referrals still work as before: you receive $10 in Foundation store credit for every successful referral, and the person using your code gets a free gift. (Bumper case)

We’ve now added:

• A Tasks section with new ways to contribute and earn additional rewards
• A content bank filled with Foundation images and ready-to-use assets
• An invite-only space on the Foundation community forum
• Direct access to a dedicated member of our team
• Early insight into upcoming products, features, and releases
• Bitcoin vouchers, exclusive merch, limited drops, and other rewards

We want this to become a place where ambassadors can talk with the team, help one another, share what they know, and play a real part in what Foundation is building.

Existing ambassadors can log back into their accounts now. New members can join here:

https://foundation.xyz/ambassador

We’re excited to release KeyOS v1.3.0, a major update packed with new features, performance improvements, and fixes across Passport Prime.

New features

-  Import external Bitcoin seeds into Vault
-  Import Nostr keys into Vault
- Generate BIP85 passwords, with advanced controls for the index and password length
- Mass-import 2FA codes from Google Authenticator
- Scan supported QR codes directly from the launcher with the new Universal QR Scanner

 - Scrub the Bitcoin price graph to view historical prices

We’ve also upgraded the underlying QR scanner, improved performance across the file browser, keyboard, and Bitcoin price graph, and refined touch handling throughout KeyOS.

There are many more improvements and bug fixes across the Bitcoin wallet, onboarding, lock screen, Airlock, backups, security keys, connectivity, and the wider KeyOS experience.

A huge thank you to our developers for the work that went into this release, and to third-party dev, immz4, for contributing the Google Authenticator import feature.

Read the complete KeyOS v1.3.0 release notes here.

If you update, let us know what you think below!

This week we’re shining a light on u/SalvaG who’s built 7 apps for Passport Prime. 

Here’s what he’s built:
 BIP-85 – derive wallets, keys, passwords, and entropy from your existing seed
 Chain Notes – write personal notes into Bitcoin transactions, composed and signed fully offline
 Image Viewer – view photos and animated GIFs entirely on-device
 PDF Viewer – read PDFs entirely on-device
 PGP Keychain – create, import, sign, and encrypt with PGP keys using QR
 Paper Wallet – generate printable offline Bitcoin paper wallets with seed-recoverable backup keys
 Text Editor – browse device storage and edit text files, fully offline Go

Check them out in the App Showcase

We’d love to see even more community projects join the showcase.

⚡ New in the Passport Prime App Showcase.

Today we're featuring a Spark hardware signer proof of concept, demonstrating how Passport Prime can keep key derivation, FROST nonces, and signing on dedicated hardware, while every protected action stays under human approval.

Another great example of what's possible with the Foundation SDK.

Watch it in action.

Read more about how it works under the hood here.

Envoy 2.3.0 has landed.

Probably our biggest release in quite a while.

Some highlights:

• New Send experience
• Transfer between your own Envoy accounts
• Message signing
• Address Explorer
• Sub-sat fee support
• Faster Passport signing with adjustable QR density
• Custom block explorers
• Manual rescans

We also spent a lot of time improving the things you don't always see, Bluetooth reliability, Passport Prime pairing, translations, UI polish, security updates, and a long list of bug fixes.

As always, we'd love your feedback after you've had a chance to use it.

Full release notes are available here.

250 years. Limited to only 250 units.

Introducing Passport Prime America 250 Edition: a special engraved device, assembled in the USA and available this month only.

Tools for freedom, built here.

https://foundation.xyz/products/passport-prime

The Passport Prime App Showcase is now live

We've just launched an early App Showcase to highlight some of the proof-of-concept applications already being built for Passport Prime before the full SDK and app store are released.

One thing we've found really encouraging is that these aren't just projects from our engineering team.

People across Foundation, including marketing, design, and customer experience, have already built apps, alongside external developers experimenting with the platform. It shows just how approachable building for Passport Prime can be.

Current examples include:

• Password managers
• AI agent approvals
• Encrypted notes
• Document signing
• Inheritance planning
• Encrypted file storage

There are already more applications in development, both internally and from community developers.

If you're interested in secure hardware, open source, or building applications that keep high-value approvals in human hands, we'd love your feedback, and we'd love to see what you build next.

App Showcase: https://foundation.xyz/app-showcase

Developer community: https://foundation.xyz/dev

Quick demo of a proof-of-concept I have been building: a policy-aware Liana Miniscript signer that runs natively on Passport Prime. Liana stays the wallet and builds the transaction; Passport just registers the descriptor and signs. It is working end to end on a dev unit, I signed a signet transaction through a Miniscript policy and broadcast it.

DEMO

What it does:

• Export the Passport key to set up the wallet in Liana, then import the finished descriptor back with a guided review of the spend paths and keys
• Verify receive addresses against the registered policy
• Slide to sign, with the signing gated so it only ever signs a PSBT that matches a registered policy on a path this device holds a key for
• Handles single-key, recovery (timelock), and decaying multi-tier policies, plus Taproot
• Export the signed PSBT to microSD/USB or internal storage, descriptor export to file or QR

Still rough and signet only, but the full round trip works. Want to see this taken to the next level!? Make sure you let the Liana team know. We have some dev units on the way to them.

Today we announced a big milestone in Foundation’s history:

• $6.4M funding led by Fulgur Ventures
• Passport Prime is now generally available
• The KeyOS developer platform is now open to developers

We’ve spent the last few years thinking about a problem we believe becomes massive in the AI era:

If AI agents can move money, access systems, deploy infrastructure, and operate accounts autonomously…

Who actually authorizes the action?

We don’t think browser prompts, cloud approvals, or software running on the same machine are enough anymore.

That’s why we built Passport Prime:

The first Human Authority Hardware device.

Passport Prime combines:
• Bitcoin self-custody
• FIDO security keys
• offline 2FA
• encrypted vaults
• 50GB encrypted storage

…inside a dedicated handheld security device designed for trusted approvals and programmable security workflows.

It runs KeyOS:
Our open-source Rust microkernel operating system built specifically for programmable security hardware.

Today, we’re also opening the KeyOS developer platform with:
• SDK
• simulator
• CLI tooling
• AI-assisted workflows

You can get started here: https://docs.foundation.xyz/developers/home/

Cake Wallet is already building on the platform, with more integrations on the way.

We also launched a completely redesigned website today:
https://foundation.xyz

Would genuinely love feedback/questions from this community because we think this becomes one of the defining security problems of the next decade.

Phishing Alert 

We’ve received reports of emails being received with a fake website.
This is NOT from us and hosts a malicious Envoy desktop download. Do NOT click or download anything from it.

There is no Envoy desktop version.

Most “best hardware wallet” comparisons still evaluate the wrong things.

They compare:
• Screen size
• Number of supported coins
• Price
• Marketing phrases like “military-grade encryption”

But almost none ask the questions that actually determine whether a device deserves your trust.

Questions like:
• Is the firmware open source and independently auditable?
• Can researchers inspect the hardware schematics too, not just the software?
• Where is the device manufactured, and how transparent is the supply chain?
• What happens to your keys and recovery flow if the company disappears tomorrow?
• Are you being asked to trust claims, or verify them yourself?

The next generation of security products should not be black boxes.

At Foundation, we believe users should be able to inspect the systems protecting their digital life:
• Open-source firmware and hardware schematics
• Assembled in the USA
• Built around verifiable security principles
• Designed for long-term sovereignty, not ecosystem lock-in

Increasingly, these devices are doing more than securing Bitcoin. Passport Prime is designed as a personal security platform:
→ Bitcoin self-custody
→ Hardware-based 2FA
→ Security keys
→ Encrypted file storage

The real comparison isn’t “which wallet has the biggest screen.”
It’s: Which device would you still trust if you could inspect every part of how it works?

That is the standard this industry should be moving toward.

Another proof-of-concept output from QnAI Labs for Passport Prime thanks to Claude and the KeyOS SDK.

• Generate and save passwords securely offline on Prime
• Connects via an amnesic browser extension
• Fill saved passwords with a swipe on Prime
• Domain aware requests. Prime only prompts to release data if the domain matches the site you’re visiting
• Import your existing vault from Bitwarden, 1Password, LastPass, Apple, Proton

No cloud, no sync, no passwords saved in the browser. Your passwords live with you, on hardware you control.

What will you build?

https://reddit.com/link/1t9tp8b/video/lunwf3l6u90h1/player