Skip to content
buybitcoinsmart

Foundation Passport review

Last reviewed 2026-08-25

Security warning

Keys sit on dedicated hardware behind KeyOS, a Rust microkernel that sandboxes apps and isolates them from the master key, and Bluetooth is handled by a separate chip rather than the main processor. Foundation publishes an audit quote from Keylabs founder Dmitry Nedospasov, an auditor it engaged. No breach or firmware exploit specific to Passport has been publicly documented.

Foundation Passport is a bitcoin-only hardware wallet from Foundation Devices, and the model you can buy today is the Passport Prime at $349. Foundation has widened what the device is for: it sells Prime as one piece of hardware doing four jobs, holding your bitcoin keys, your two factor codes, a hardware security key for logins over NFC or USB, and 50GB of encrypted storage.

The architecture is the interesting part. Prime runs KeyOS, a microkernel operating system written in Rust, where apps run sandboxed and isolated from each other and from the master keys, and those apps are open source. Bluetooth, which plenty of bitcoiners refuse on principle, runs through a dedicated chip Foundation calls QuantumLink rather than through the processor holding your secrets. Foundation publishes an audit quote from Dmitry Nedospasov, founder of the hardware security firm Keylabs, calling it a hardware architecture that exceeds industry standards for protecting users' digital assets. Foundation engaged that auditor, so weigh it accordingly, but a named auditor with a public quote is more than most vendors offer. Setup and firmware updates run through Envoy, Foundation's companion app, which is published on the App Store, Google Play and F-Droid.

If you are shopping second hand or reading older reviews, be clear about one thing: Passport Core, the earlier and cheaper bitcoin-only device, has been discontinued. Foundation's terms of service, effective May 21, 2026, say so directly, and add that existing Core devices keep their product-specific terms and warranty rights.

Foundation publishes no list of countries it ships to. Its terms do reserve the right to reject or cancel an order over export restrictions or sanctions concerns, which is a clause almost every hardware vendor carries, so the checkout is the only reliable test.

Made by
Foundation Devices
Type
Hardware device
Price
$349
Runs on
iOS, Android
Who holds the keys
self-custodial, keys held on dedicated hardware and isolated from sandboxed apps by the KeyOS microkernel
Bitcoin only
Yes
Connectivity
QuantumLink encrypted Bluetooth through a dedicated chip, plus NFC and USB for security key use; setup and updates run through the Envoy app
Coin support
Bitcoin only. Prime also stores two factor codes, hardware security keys and 50GB of encrypted files

Pros and cons

What works

  • Bitcoin only, with open source apps and a published independent audit quote
  • KeyOS sandboxes apps so a compromised app cannot reach the master keys
  • Bluetooth runs through a dedicated chip rather than the processor holding your secrets
  • Envoy is distributed on F-Droid as well as the App Store and Google Play
  • Assembled in the USA, which matters if supply chain provenance is part of your threat model

What to watch

  • $349 is well above most bitcoin-only signers
  • Passport Core, the cheaper earlier model, has been discontinued
  • Foundation publishes no list of countries it ships to, and its terms let it refuse an order over export or sanctions concerns
  • A smaller company with a shorter public track record than Ledger, Trezor or Coinkite

Worth comparing

Frequently asked questions

Is Passport Core still sold?

No. Foundation's terms of service, effective May 21, 2026, state that Passport Core has been discontinued and is no longer sold, while existing Core devices keep their product-specific terms and warranty rights. Passport Prime is the current device.

What can Passport Prime do besides hold bitcoin?

Foundation lists four jobs: bitcoin keys, offline two factor codes, a hardware security key for logins over NFC or USB, and 50GB of encrypted storage. Apps run sandboxed on KeyOS, its Rust microkernel operating system.

Do I need the Envoy app to use a Passport?

Yes, for setup and firmware updates. Envoy is published on the App Store, Google Play and F-Droid, so you can install it without a Google account if you prefer.

Has Foundation Passport been independently audited?

Foundation publishes an audit quote from Dmitry Nedospasov, founder of Keylabs, describing the hardware architecture as exceeding industry standards for protecting digital assets. Foundation engaged the auditor, so read it as a vendor-commissioned review rather than an independent test.