Foundation Passport: keys, security, fees and reviews

In short

Key control: Self-custody: master keys stay on dedicated hardware; apps run sandboxed without access to the master key.
Fees: Device price: Passport Prime from $349 on the official site (archived home page of 26 October 2026).
Risks and caveats: Phishing emails impersonating Foundation circulated in October 2026; Foundation never asks for seed words or the PIN.
Checked: 31 October 2026

Visitor ratings: do you like Foundation Passport?

Key facts

Official site: foundation.xyz

Key facts checked on 31 October 2026 against official sources.

What is Foundation Passport

Passport is a hardware wallet line from Foundation Devices, Inc. of Boston, USA. The current model, Passport Prime (generally available since 21 May 2026), is a touchscreen device running the open-source KeyOS operating system that combines a Bitcoin hardware wallet with 2FA codes, FIDO security keys and 50 GB of encrypted storage. Earlier models were the air-gapped, Bitcoin-only Passport Founder's Edition and Passport Core.

Who holds the keys

Who holds the keys — Foundation Passport
Parameter	Details
Key control	Self-custody: master keys stay on dedicated hardware; apps run sandboxed without access to the master key.
Recovery	Backups via NFC keycards and encrypted backups; the device erases itself after 10 wrong PIN attempts.
Seed phrase	Foundation never asks for seed words or the device PIN.

Features and supported networks

Features and supported networks — Foundation Passport
Parameter	Details
Supported networks	Bitcoin (hardware wallet app with multisig); third-party apps on KeyOS such as Cake Wallet.
Secure element	Passport Prime: Microchip SAMA5D2 security processor plus an ATECC608C secure element; Passport Core: STM32 processor and Microchip 608B secure element.
Connectivity	Encrypted Bluetooth through a dedicated chip (QuantumLink), NFC, USB-C and camera for QR codes.
Display	3.5-inch IPS touchscreen with Gorilla Glass; aluminium body; integrated 1,100 mAh battery.
Platforms	Set up and updated with the Envoy app (iOS, Android); KeyOS SDK for third-party apps.
Other products	2FA (TOTP) codes, FIDO security keys and 50 GB of encrypted file storage on the same device.

Security and audits

Firmware is open source on GitHub: Passport Core firmware (passport2) is under multiple licences including GPLv3 and is treated as copyleft; KeyOS for Passport Prime is under multiple copyleft and permissive licences per file.
Keylabs audited Passport Prime (report dated 2 September 2025) and found five low-severity issues; Keylabs also audited Passport Core in 2021. Both reports and Foundation's responses are published.
No Common Criteria certification is claimed; the Prime's ATECC608C secure element is named in the Keylabs report.
In October 2026 Foundation warned that emails claiming 'Your Passport funds are at risk' are phishing and said it was investigating.

Security incidents

Security incidents — Foundation Passport
Date	What happened	Source
26 October 2026	Key compromise: Foundation announced on X that spam (phishing) emails had been sent that appeared to come from official Foundation domains; it traced this to one or more compromised Cloudflare API keys, revoked all API keys and had the malicious domain in the email taken down. Its website banner calls emails claiming 'Your Passport funds are at risk' a phishing scam and says it is investigating. No device compromise or loss figure is stated by Foundation. Funds returned: not stated	x.com

Fees

Fees — Foundation Passport
Parameter	Details
Device price	Passport Prime from $349 on the official site (archived home page of 26 October 2026).

History

History — Foundation Passport
Date	Event
2021	Keylabs security audit of Passport Core hardware and firmware.
2 September 2025	Keylabs Passport Prime security audit report.
March 2026	Passport Prime begins shipping to pre-order customers.
21 May 2026	Passport Prime generally available; $6.4 million funding round led by Fulgur Ventures; KeyOS opened to outside developers.

Risks and caveats

Phishing emails impersonating Foundation circulated in October 2026; Foundation never asks for seed words or the PIN.
Ten wrong PIN entries erase the device, so a working backup is essential.
Passport Prime extends beyond Bitcoin into authentication and storage; some features (full stateless mode) were listed as coming soon.

About the developer

Legal entity: Foundation Devices, Inc.
Headquarters: 6 Liberty Square #6018, Boston, MA 02109, United States.
Founders: Zach Herbert (cofounder, CEO), Ken Carpenter (cofounder, CTO), Jacob Johnston (cofounder, VP of Operations).
Parent company: Privately funded; total funding $16.5 million after the May 2026 round (Fulgur Ventures, Arche Capital, Polychain Capital).

Official links

Website: foundation.xyz
Security: foundation.xyz/security
Docs: docs.foundation.xyz
Source code: github.com/Foundation-Devices
Blog: foundation.xyz/blog

Questions and answers

Is Foundation Passport self-custodial?

Yes. Keys stay on the device; Foundation never asks for seed words or the PIN.

Is Passport open source?

Yes. Passport Core firmware (copyleft, includes GPLv3) and KeyOS for Passport Prime are public on GitHub under multiple open-source licences.

Has Passport been audited?

Keylabs audited Passport Core in 2021 and Passport Prime in 2025, finding five low-severity issues in the Prime; reports are published.

What does Passport Prime cost?

From $349 on the official site (October 2026).

Who makes Passport?

Foundation Devices, Inc. of Boston, USA.

Sources

How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31