[Wallets](https://revain.org/wallets/) › Foundation Passport

# Foundation Passport: keys, security, fees and reviews

## In short

- **Key control**: Self-custody: master keys stay on dedicated hardware; apps run sandboxed without access to the master key.
- **Fees**: Device price: Passport Prime from $349 on the official site (archived home page of 26 October 2026).
- **Risks and caveats**: Phishing emails impersonating Foundation circulated in October 2026; Foundation never asks for seed words or the PIN.
- **Checked**: 31 October 2026

## Key facts

- **Official site**: [foundation.xyz](https://foundation.xyz/)

Key facts checked on 31 October 2026 against official sources.

## What is Foundation Passport

Passport is a hardware wallet line from Foundation Devices, Inc. of Boston, USA. The current model, Passport Prime (generally available since 21 May 2026), is a touchscreen device running the open-source KeyOS operating system that combines a Bitcoin hardware wallet with 2FA codes, FIDO security keys and 50 GB of encrypted storage. Earlier models were the air-gapped, Bitcoin-only Passport Founder's Edition and Passport Core.

## Who holds the keys

| Parameter | Details |
|---|---|
| Key control | Self-custody: master keys stay on dedicated hardware; apps run sandboxed without access to the master key. |
| Recovery | Backups via NFC keycards and encrypted backups; the device erases itself after 10 wrong PIN attempts. |
| Seed phrase | Foundation never asks for seed words or the device PIN. |

## Features and supported networks

| Parameter | Details |
|---|---|
| Supported networks | Bitcoin (hardware wallet app with multisig); third-party apps on KeyOS such as Cake Wallet. |
| Secure element | Passport Prime: Microchip SAMA5D2 security processor plus an ATECC608C secure element; Passport Core: STM32 processor and Microchip 608B secure element. |
| Connectivity | Encrypted Bluetooth through a dedicated chip (QuantumLink), NFC, USB-C and camera for QR codes. |
| Display | 3.5-inch IPS touchscreen with Gorilla Glass; aluminium body; integrated 1,100 mAh battery. |
| Platforms | Set up and updated with the Envoy app (iOS, Android); KeyOS SDK for third-party apps. |
| Other products | 2FA (TOTP) codes, FIDO security keys and 50 GB of encrypted file storage on the same device. |

## Security and audits

- Firmware is open source on GitHub: Passport Core firmware (passport2) is under multiple licences including GPLv3 and is treated as copyleft; KeyOS for Passport Prime is under multiple copyleft and permissive licences per file.
- Keylabs audited Passport Prime (report dated 2 September 2025) and found five low-severity issues; Keylabs also audited Passport Core in 2021. Both reports and Foundation's responses are published.
- No Common Criteria certification is claimed; the Prime's ATECC608C secure element is named in the Keylabs report.
- In October 2026 Foundation warned that emails claiming 'Your Passport funds are at risk' are phishing and said it was investigating.

## Security incidents

| Date | What happened | Source |
|---|---|---|
| 26 October 2026 | Key compromise: Foundation announced on X that spam (phishing) emails had been sent that appeared to come from official Foundation domains; it traced this to one or more compromised Cloudflare API keys, revoked all API keys and had the malicious domain in the email taken down. Its website banner calls emails claiming 'Your Passport funds are at risk' a phishing scam and says it is investigating. No device compromise or loss figure is stated by Foundation. Funds returned: not stated | [x.com](https://x.com/FoundationHQ/status/2114564656199069844) |

## Fees

| Parameter | Details |
|---|---|
| Device price | Passport Prime from $349 on the official site (archived home page of 26 October 2026). |

## History

| Date | Event |
|---|---|
| 2021 | Keylabs security audit of Passport Core hardware and firmware. |
| 2 September 2025 | Keylabs Passport Prime security audit report. |
| March 2026 | Passport Prime begins shipping to pre-order customers. |
| 21 May 2026 | Passport Prime generally available; $6.4 million funding round led by Fulgur Ventures; KeyOS opened to outside developers. |

## Risks and caveats

- Phishing emails impersonating Foundation circulated in October 2026; Foundation never asks for seed words or the PIN.
- Ten wrong PIN entries erase the device, so a working backup is essential.
- Passport Prime extends beyond Bitcoin into authentication and storage; some features (full stateless mode) were listed as coming soon.

## About the developer

- **Legal entity**: Foundation Devices, Inc.
- **Headquarters**: 6 Liberty Square #6018, Boston, MA 02109, United States.
- **Founders**: Zach Herbert (cofounder, CEO), Ken Carpenter (cofounder, CTO), Jacob Johnston (cofounder, VP of Operations).
- **Parent company**: Privately funded; total funding $16.5 million after the May 2026 round (Fulgur Ventures, Arche Capital, Polychain Capital).

## Official links

- Website: [foundation.xyz](https://foundation.xyz/)
- Security: [foundation.xyz/security](https://foundation.xyz/security)
- Docs: [docs.foundation.xyz](https://docs.foundation.xyz/)
- Source code: [github.com/Foundation-Devices](https://github.com/Foundation-Devices)
- Blog: [foundation.xyz/blog](https://foundation.xyz/blog)

## Questions and answers

**Is Foundation Passport self-custodial?**

Yes. Keys stay on the device; Foundation never asks for seed words or the PIN.

**Is Passport open source?**

Yes. Passport Core firmware (copyleft, includes GPLv3) and KeyOS for Passport Prime are public on GitHub under multiple open-source licences.

**Has Passport been audited?**

Keylabs audited Passport Core in 2021 and Passport Prime in 2025, finding five low-severity issues in the Prime; reports are published.

**What does Passport Prime cost?**

From $349 on the official site (October 2026).

**Who makes Passport?**

Foundation Devices, Inc. of Boston, USA.

## Sources

- [Foundation — Home](https://foundation.xyz/)
- [Foundation — About](https://foundation.xyz/about/)
- [Foundation — Security](https://foundation.xyz/security)
- [Foundation — Imprint](https://foundation.xyz/policies/imprint)
- [Foundation — Passport Prime](https://foundation.xyz/products/passport-prime)
- [Foundation blog — Foundation Raises $6.4M and Launches Passport Prime (21 May 2026)](https://foundation.xyz/blog/foundation-raises-6-4m-human-authority-hardware-launch)
- [Keylabs — Passport Prime Security Audit (2 September 2025, PDF)](https://foundation.xyz/security/passport-prime-keylabs-audit-2025.pdf)
- [Foundation Docs](https://docs.foundation.xyz/)
- [GitHub — Foundation-Devices/passport2](https://github.com/Foundation-Devices/passport2)
- [GitHub — Foundation-Devices/KeyOS](https://github.com/Foundation-Devices/KeyOS)

## More in this section

- [BitBox](https://revain.org/wallets/bitbox/)
- [COLDCARD](https://revain.org/wallets/coldcard/)
- [Blockstream Jade](https://revain.org/wallets/blockstream-jade/)
- [OneKey](https://revain.org/wallets/onekey/)
- [Arculus](https://revain.org/wallets/arculus/)
- [Armory](https://revain.org/wallets/armory-wallet/)
- [All Wallets →](https://revain.org/wallets/)

## Related

- [Xverse](https://revain.org/wallets/xverse/)
- [Wallet of Satoshi](https://revain.org/wallets/wallet-of-satoshi/)
- [UniSat Wallet](https://revain.org/wallets/unisat/)
- [Phoenix Wallet](https://revain.org/wallets/phoenix/)
- [Muun](https://revain.org/wallets/muun/)
- [Leather](https://revain.org/wallets/leather/)
- [Bitcoin Wallet](https://revain.org/wallets/bitcoin-wallet/)
- [Zengo](https://revain.org/wallets/zengo/)

## How voting works

Votes are anonymous and carry no text. Each device has one vote per item; press the same button again to remove it. Cloudflare Turnstile checks that a person is voting. We keep a random device ID in a cookie and a salted hash of the IP address to limit abuse — no names, no accounts. Votes are visitors’ opinions, not investment advice.

Page updated: 2026-10-31

---
Source: https://revain.org/wallets/foundation-passport/