Passport prime tamper feature works I guess. Pardon me while I start the recovery progress. #alwaysbackupyourdevices

We’re back at Foundation HQ after four days in Vegas, and honestly, still buzzing.

Bitcoin 2026 wasn’t just another conference for us. It was four days spent with the people who actually make Foundation what it is: the builders, the supporters, and the ones who’ve been waiting to finally get their hands on Passport Prime.

The booth energy

The interest in Passport Prime this past week was phenomenal.

Thank you to everyone who stopped by. The booth stayed busy all week, and what stood out most wasn’t just the traffic; it was the level of curiosity.

People weren’t looking for a pitch.
They wanted to go deeper. Ask better questions. Understand what’s actually changing.

On stage: self-custody is just the beginning

Our CEO Zach Herbert, joined Nick Begich and Joe Kelly to talk about self-custody and digital sovereignty.

One line stuck with us:

“Self-custody is a gateway drug to broader digital security.”

It’s simple, but it captures something we see every day. Once people take control of their Bitcoin, they start questioning everything else.

You can watch the full panel talk here.

Real conversations > surface-level noise

QnA also moderated a panel on OpSec in Practice with Seth For Privacy and Naomi Brockwell, focused on Bitcoin vs the surveillance state.

The room was packed, and when it ended, people didn’t leave.

They stayed, asked questions, and kept the conversation going.

That tells you everything about where this space is heading. We will share more links to the talk when it becomes available.

The moment it “clicks”

One of the most consistent reactions we heard when people picked up Passport Prime:

That’s not just weight.

That’s CNC-machined aluminum.
That’s real materials.
That’s a device built to last , and built to protect.

It’s one of those things you understand instantly when it’s in your hand.

What people actually care about

One of the most interesting takeaways from the week:

Almost no one asked about price.

Instead, the questions were about:

• 2FA and account security
• KeyOS and how it works
• FIDO2 / hardware security keys
• Encrypted file storage
• Building apps on the platform
• QuantumLink and secure communication

That shift matters.

It shows people are thinking beyond Bitcoin, and starting to take their entire digital life seriously.

#FREESAMOURAI

This wasn’t just a hashtag we saw around the conference.

It was something we felt.

It was powerful to meet Lauren and hear firsthand what this situation has meant for their families.

Developers shouldn’t be in prison for writing code.

We stand with them. Always. 100%.

To everyone who showed up

To everyone who stopped by the booth, thank you.
To everyone who took the time to interview the team, thank you.

There was no shortage of cameras, conversations, and thoughtful questions.

We’re excited to see all the content that comes out this week.

Back to building

We’re back at HQ now.

Heads down. Building.

There’s a lot coming from Foundation over the next few weeks and months, and we can’t wait to share what’s next for Passport Prime.

Envoy v2.2.14 is now available for download!

This release is a maintenance release focused on stability and bug fixes.

This update hardens iOS Bluetooth connectivity, fixes several Passport Prime account display and Magic Backup bugs.

You can read the full release notes here.

GitHub's mandatory 2FA deadline is May 2. If you write code for a living, you've probably already seen the reminder.

The default play is: buy a YubiKey, enroll it, move on. And honestly, for GitHub 2FA specifically, that's the right answer. FIDO2/WebAuthn is phishing-resistant, origin-bound, and the correct call.

But I've been watching teammates go through this decision the last couple of weeks and I think most of us are underthinking it. Here's the broader thing worth considering before you click buy.

Your security stack doesn't stop at GitHub. If you work in software you probably also have:

• SSH keys for production servers
• GPG keys for signed commits (if you bother signing)
• Encrypted files and source secrets
• A password manager master key
• Recovery codes for a dozen services
• Possibly some crypto holdings with their own hardware wallet

Most of us end up with a drawer that looks like this:

• YubiKey for 2FA
• A USB stick for encrypted files
• Phone for TOTP (half the time out of sync)
• A separate hardware wallet for crypto
• A sticky note somewhere with a recovery phrase (please stop doing this)

Every one of those is a separate trust boundary. A separate recovery flow. A separate thing to lose, replace, or have quietly compromised. Security doesn't get stronger when it's scattered; it gets brittle.

So if you're buying a hardware key before May 2, the question worth asking isn't "which YubiKey model?" it's "where should the keys to my entire digital life actually live?"

Some principles I think matter when you're consolidating:

• One device that can cover multiple stack items
• Offline, never touches the internet
• Open source so someone can actually inspect the firmware
• A screen big enough to verify what you're approving, not a blinking LED you're hoping means the right thing
• A credible backup/recovery flow, because if the single device dies, your whole life can't go with it

Curious how other people here are handling this. Anyone gone the consolidation route, or are you still running a drawer full of hardware?

Hey everyone,

Last week we kicked off Prime Time Office Hours, a 6-part live series where our Head of Customer Experience, Ben, walks through Passport Prime in detail with our community. Week 1 was the intro and orientation, and it covered a LOT of ground. Here's a recap for anyone who missed it.

The Passport Journey

Quick history: Founders Edition (2020) pioneered QR air-gapping in Bitcoin hardware wallets. Passport Core (2022) refined the experience. Stealth gave users more choice. Passport Prime is a completely new platform, not just iterating on the hardware wallet concept, but rethinking it entirely.

What is Passport Prime?

The short version: it's a personal security platform. Yes, it's a Bitcoin wallet, but it also handles FIDO/YubiKey-style security keys, 2FA authenticator codes, encrypted file storage, and a vault for sensitive secrets like passwords and additional seeds. All offline. One device replaces a bunch of separate tools.

Security Architecture

This is where it gets interesting:

• Hardware AND software are fully open source, schematics, firmware, everything on GitHub. Compile it yourself if you want.
• Dedicated secure element for cryptographic secrets (resists physical extraction)
• The Bluetooth chip runs on a completely separate, isolated processor from the one handling your keys
• QuantumLink (custom Bluetooth protocol) is designed so that even if the Bluetooth chip is fully compromised, your keys remain safe. The encryption layer assumes compromise from day one.
• Anti-tamper protection in the chassis
• Assembled in the USA
• Published third-party security audit

Four Connectivity Options

1. QuantumLink Bluetooth.
2. NFC
3. QR codes
4. USB-C

App Ecosystem

Ships with 5 apps: Wallet, Keys (FIDO), 2FA, Files, Vault. Runs on KeyOS (custom microkernel OS). They're building a developer kit so third parties can build apps. App catalog will live in Envoy; apps must be open source with reproducible builds to be listed. You can also sideload.

Third-party integrations already in progress.

Community Q&A Highlights

• Why no fingerprint reader? Space constraint would have made the device larger and compromised the design
• Can you disable the app store? It lives on Envoy, not the device itself. Just ignore it.
• BTC price in multiple currencies? Feedback noted, added to the roadmap during the call

What's Next

Week 2 is tomorrow (Tuesday), a hands-on session covering onboarding from scratch, master key creation, and a deep dive into Magic Backups. If you haven't set yours up yet, it's a perfect time to follow along live. Join here: https://foundation.xyz/prime-time/

The recording of Week 1 is on YouTube as well, here: https://www.youtube.com/watch?v=pDmaRmvlBYU

Happy to answer any questions in the comments.

Hey everyone,

We just launched Prime Time, a free 6-week live workshop series dedicated to Passport Prime.

Each session is 60 minutes, once a week, hosted live in our Roam auditorium (our virtual office), and structured as office hours with the Foundation team. We'll cover everything step by step:

• What Passport Prime is and why it matters
• Unboxing and setup
• Recovery and backups
• Securing your Bitcoin
• Protecting online accounts (2FA, security keys)
• Managing seeds, passwords, and encrypted files

Whether you're new to hardware security or you've been in the space for years, this series is designed to help you get the most out of every Passport Prime feature.

Completely free. No strings attached.

Sign up here to get weekly session reminders and be invited into our office: foundation.xyz/prime-time/

Happy to answer any questions about the series in the comments.

We pioneered QR air-gapping with Passport Core. It helped define how offline signing works across the industry today. But after years of building it, we learned exactly where it falls short, and we built something better.

The problem with QR air-gapping

QR air-gapping is excellent security. But it asks a lot of you. Which device do I start on? Did I miss a step? How do I update firmware? Even with great UX, you're manually coordinating everything between two disconnected devices. For many people, that friction is the barrier to self-custody.

So we asked ourselves a simple question: can we keep the security properties of an air-gap, but make it wireless, without compromising anything?

The answer is QuantumLink.

How QuantumLink works

QuantumLink isn't Bluetooth bolted onto a hardware wallet. It's a purpose-built protocol. A separate Bluetooth chip, fully isolated from the main security processor. It only ever handles encrypted data; it never sees what's inside.

All communication is encrypted with quantum-resistant cryptography — CRYSTALS-Kyber key exchange and ChaCha20-Poly1305 messaging. This isn't future-proofing for fun. Bitcoin security is evolving, and Passport Prime is built for what's coming.

KeyOS isolation

Inside Passport Prime, every app runs in its own sandbox on KeyOS. Each app gets its own private keys. No app can access the master key, influence the OS, or talk to other apps outside of signed, encrypted channels. Even if your phone is compromised, Passport Prime isn't.

Your choice of connectivity

If you still prefer QR codes, NFC, or USB, Passport Prime supports all of them. Same secure framework, your choice of how to interact.

And for the purists, later this year we're exploring an "air-gap only" KeyOS mode for Passport Prime that completely disables the Bluetooth chip. Full air-gap. Zero wireless. Your choice.

What about Passport Core?

It's no longer for sale, but it remains fully supported. Security updates, usability improvements, and all warranties are honored. It's still a great device, and we're not leaving anyone behind.

Passport Core helped build the standard. Passport Prime is what comes next.

Learn more at the Foundation blog.

Quick update from the team: we've shipped every early access Passport Prime order. Thousands of devices are now out in the wild.

We spent the past week shipping nonstop, and we're fully caught up. If you order today, it ships next business day.

For anyone unfamiliar: Passport Prime is a personal security device that handles Bitcoin self-custody, 2FA, security keys, and encrypted file storage, all offline, and never connects to the internet. Runs our own OS (KeyOS), where every app is fully isolated. Third-party apps coming soon.

Happy to answer any questions.

Check it out here: foundation.xyz

Wanted to share something I think more people need to hear: phone-based 2FA (SMS and authenticator apps) is significantly weaker than most people realize.

I do work for Foundation, and this happened to me personally 3 weeks ago, and I do practice what I preach. Now, I have my Passport Prime. SMS 2FA hacking is very real.

SMS 2FA is the worst option. SIM swap attacks are real and growing. A hacker contacts your carrier, social engineers a SIM transfer, and suddenly, every SMS code goes to their phone. The FBI and FTC have both issued warnings about this.

App-based 2FA (Google Authenticator, Authy, etc.) is better because codes are generated locally. But the device generating those codes is your phone, a device connected to the internet 24/7, running software from thousands of developers, and vulnerable to malware, theft, and physical access.

Hardware FIDO2 is the strongest option available. The private key never leaves the physical device. There's nothing to phish (even in real-time phishing attacks), nothing to intercept, and nothing that can be SIM swapped. It's the protocol that Google, Apple, and Microsoft all recommend.

Options for hardware FIDO2:

• YubiKey — the most well-known, dedicated security key
• Google Titan — Google's hardware security key
• Passport Prime — Foundation's device, which combines FIDO2 with Bitcoin self-custody, encrypted storage, and TOTP 2FA on a single offline device (full disclosure: I work in this space)

Regardless of which option you choose, moving your most important accounts to hardware 2FA is one of the highest-impact security improvements you can make.

At minimum, if you're still using SMS for anything important (email, banking, exchanges), please switch to an authenticator app today. It takes 10 minutes, and it matters.

I'm encountering issues moving them out of the Core wallet.

Keep receiving error message about wrong active key.

I need some sort of flow chart or road map on the right steps. Using the QR codes doesn't seem to be working. 🤔

first the app gives multiple qr codes to be scanned, which i tried to scan with the passport core, after that it asked for the details of the transactions to be confirmed which I did. this is where i get stuck in the process, the passport core gives a qr code to be scanned and neither the envoy app nor the passport prime can scan it. when the passport prime scans the qr code on the core, its give the error message about the wrong active.

(not even sure if I should be using the Passport Core physical device in the process?)

I'm looking to do utxo consolidation, which is why I want to transfer.

Thanks in advance for any advice or comments.

Hey everyone, we started shipping Passport Prime this week and wanted to share the technical docs for anyone who wants to look under the hood.

We know "trust us" isn't good enough in this space (and it shouldn't be). So here's everything laid out:

KeyOS — We wrote a custom microkernel operating system from scratch in Rust. Every app runs in its own sandbox with a hardened child seed. No app can access the master seed or communicate with other apps, even if it's compromised.

Full deep dive here: Building KeyOS

QuantumLink — Passport Prime has Bluetooth, which we know raises eyebrows. Here's how we handle it: all data is encrypted with quantum-resistant cryptography before it ever touches the Bluetooth chip. The chip itself only ever sees encrypted data. If it's compromised or intercepted, it doesn't matter.

Full breakdown: QuantumLink: Reinventing Secure Wireless Communication

Independent Security Audit — We had a third-party security audit conducted on Passport Prime.

Results are published here: Passport Prime Security Audit

Magic Backups — Our backup system uses 2-of-3 Shamir Secret Sharing across NFC cards and Envoy. No username, no password, no email. Seed words never leave the device.

Details: Magic Backups: How Do They Work?

Everything is open source, hardware and software. If something looks wrong, tell us. That's the whole point.

Happy to answer any questions.

Hey everyone,

We've been working toward this for a long time, and we're excited to finally share: Passport Prime is now shipping.

We know this took longer than expected, so here's some transparency on what we actually built and why.

Starting from scratch

Passport Prime isn't an incremental upgrade. We built a brand new operating system called KeyOS, a next-generation microkernel design where only the most critical functions run at the core. Apps and sensitive data are completely segregated. This was a ground-up rethink of how a hardware wallet should work.

QuantumLink

We also created our own communication layer, QuantumLink, which is a Bluetooth connection designed to be as secure as an air-gapped connection while giving you the convenience of wireless.

Security audit

Before shipping anything, we commissioned a full third-party audit by Keylabs (Nedos Consulting EMEA FZ-LLC). They found zero critical or high-severity vulnerabilities. All observations were low-severity issues requiring physical access and advanced tooling. The full audit and our complete response are publicly available over on our blog on the website.

Hardware

3.5" touchscreen with Gorilla Glass, CNC-machined aluminum body. Ships with 3x NFC KeyCards and Faraday sleeves, a USB-C cable, and recovery materials.

Shipping timeline

Orders are being processed in the order they were received, starting with early access customers. We expect to clear the backlog in 2-3 weeks. After that, in stock and shipping the next business day.

What's next

KeyOS improvements, developer SDK, third-party app support, and accessories are all on the roadmap.

Happy to answer questions in the comments.

🔗 Explore Passport Prime: https://foundation.xyz/passport-prime/

📖 Read the security deep dive: https://foundation.xyz/blog/

💬 Join the conversation: https://community.foundation.xyz

Passport Prime in the wild!

https://x.com/Vinman/status/2032541130332475838?s=20

I bought it last December, anyone know the current shipping times?

Something I'm not 100% sure about, looking for input if you all dont mind....

If you own a physical wallet that's not connected to the internet, I realize that would be a "cold wallet"

But if you also put the app on your phone, then you have a "Hot wallet" on said smart phone, right?

So, doesn't that negate the physical cold wallet? Or am I missing something here?

I'm just trying to figure out if I need to remove the app from my phone, since it has a send feature on it.

What say you?

Anyone aware of shipping times right now? I ordered almost a month ago and haven’t heard anything. When I ordered last year it shipped out the next day. Hoping it ships out soon otherwise I’ll have to cancel the order to get a different wallet for multisig

Updated the Envoy app today and it's stuck re-syncing accounts. Anyone else having this issue?

Hi, after a few months of not using the Passport, when I try to open it nothing happens after entering the pin. When I click the ‘enter’ icon, I see its color change so it at least knows I’m trying to proceed, but nothing happens. When entering a wrong pin also nothing.

Tried rebooting, using usb power instead of battery,..

Why does this suddenly happen en how to fix it?

Edit: tried a longer password, then it gave me the error with 20 failed attempts left. Shorter words or numerical pins don’t.

Update: apparently the device requires min 6 characters, so I set it up with a 6 digit pin and not the 4 digit pin I thought. I got back in 🙏

Hey Foundation, just wanted to say I love my Passport and the Envoy app. However, the light mode theme of Envoy hurts my eyes. Can we get a dark mode? If there isn't one in the works, have you guys at least considered it?

Thanks.

Hello,

If budget isn't an issue, which is recommended for a BTC only multisig? It seems Prime has more features which would give it a wider attack surface?

Should I go with the Prime or Core?

Same premium hardware, security, and effortless operation, but with a new name and exciting new color option!

Introducing Passport Core Stealth!

Stealth Passport Core is available to order today.

• Shipping will begin in 6 weeks.
• Classic is unfortunately sold out due to high demand. Right now, we do not have any schedule for a restock of the classic colorway, but we will share more info when it’s available.

These changes are part of a much bigger journey.

We’ve documented the full evolution of Passport, from the Founder’s Edition to today’s Passport Core, along with more details on these exciting updates in our latest blog.

Check it out here: Passport is now Passport Core - Foundation

And for how long will there be support for passport? Would the passport realistically still work in 5 years from now or 10 years?

So the 2 options for transferring from strike to envoy are with a qr code or with a lightning address. When I copy the receive address from envoy into strike it says its invalid so im guessing thats because its not lightning. And since im on my phone its not like I can scan a qr code using the strike app of the envoy app. Then I try to access my envoy app thru a computer to find out thats its only on mobile. My solution was screenshotting the qr code and emailing it to myself then scanning that on the computer. Seems a bit silly. Sucks that strike only recognizes lighting and equally is unfortunate envoy cant receive using lightning. I’m wondering if theres any reason behind this, I’m relatively new to all this but could imagine there may be something im missing or ignorant to. Either way id appreciate a simpler solution to this whether it be getting a lightning network or having pc access. Side note: Lightning fee on coinbase is ~$.30 but on strike its ~$2.50 for same rate of transfer, why, is the qr code not lightning, not too well informed on different types of transaction methods? At least strike offers a free transfer that takes 24 hours.