Foundation Passport Prime

The Foundation Passport Prime is Foundation's next-generation flagship — branded as the world's first Human Authority Hardware device. Where the original Passport was a Bitcoin-only hardware wallet, Passport Prime goes further: one dedicated, US-assembled device that consolidates Bitcoin self-custody, 2FA authenticator codes, FIDO security keys, encrypted file storage, Keycard backups and high-stakes digital approvals into a single Gorilla-Glass touchscreen device you control.

Hardware engineered for authority. Passport Prime runs a custom KeyOS microkernel written in Rust, with app sandboxing and process isolation so a vulnerability in one app cannot leak secrets to another. The device is built around a Microchip SAMA5D2 security processor plus a separate secure element, with active tamper protection, PIN or password device protection, automatic erase after 10 PIN attempts, and security words that defend against evil-maid attacks. A 3.5" Gorilla-Glass IPS touchscreen, anodized aluminum chassis, integrated 1100 mAh Li-ion battery, home button with LEDs and haptics, and a dedicated MicroSD-free design make it both premium and durable — splash resistant, 93 g, 55.5 × 104.8 × 11 mm.

Manufactured in the USA inside an ITAR facility. Foundation assembles every Passport Prime in the United States inside an ITAR-registered facility. ITAR certification — normally reserved for defense-grade technology — imposes strict supply-chain controls, onshore manufacturing and personnel screening, materially raising the bar against supply-chain attacks. The hardware and software are open source and the design has been third-party audited by Keylabs.

Connectivity is comprehensive but never uncoupled from security. Pick the strongest workflow for the moment: camera QR scanning for the purest air-gap, or QuantumLink secure Bluetooth using post-quantum encryption over a dedicated Bluetooth chip, plus NFC tap-to-backup to encrypted Keycards and USB-C for power and data.

Bitcoin deep focus. Multisig, Taproot, SeedQR import/export, address validation, address explorer, message signing, multiple labeled accounts, collaborative custody, and Bitcoin testnet support for developers. Beyond Bitcoin: 6-digit TOTP 2FA codes, FIDO/WebAuthn security keys, a Vault app for 50GB of hardware-encrypted file storage, passphrases with plausible-deniability hidden wallets, and broad software-wallet compatibility.

KeyOS Microkernel Operating System

• Foundation's next-generation operating system built for security — a Rust microkernel architecture, app sandboxing, process isolation, and protected master keys.
• Designed so sensitive actions run in isolated environments — a vulnerability in one KeyOS app cannot bleed into another.
• Hardware and software are both open source.

Bitcoin Hardware Wallet — Deep Feature Coverage

• Multisig support, collaborative custody supported, full stateless mode coming soon.
• Address validation via QR-code scan to prevent address-manipulation attacks.
• Message signing from your wallet for cryptographic attestation.
• Address explorer to view all receive addresses under a wallet.
• SeedQR import and export for portable, durable recovery.
• Multiple accounts with labels for organized coin control.
• Taproot send and receive support.
• Bitcoin testnet support for developers and learners.

Beyond Bitcoin — Human Authority Hardware

• 2FA codes: 6-digit TOTP authenticator built into the device — move your Google Authenticator-equivalent secrets off your phone.
• Security keys: FIDO U2F / WebAuthn security key support for passwordless login on supported services.
• Vault app: 50GB of hardware-encrypted file storage on the one device, protected by PIN or password.
• Passphrases with plausible deniability for hidden-wallet protection under coercion.
• Software wallets with broad compatibility — connect Passport Prime to popular desktop and mobile wallets as the signing layer.
• Third-party apps coming soon under KeyOS sandboxing.

Connectivity — Four Independent Options

• Camera for QR scanning — the strongest air-gap workflow.
• QuantumLink secure Bluetooth — post-quantum encryption over a dedicated, separate Bluetooth chip.
• NFC for tap-to-backup to Keycards.
• USB-C for power and data.

Encrypted Backups & Recovery

• Keycards — encrypted NFC backup cards, written on-device, shipped with Faraday sleeves.
• Magic Backups in the Envoy app — Foundation's encrypted backup system for easy wallet backup and restore. Recovery data stays encrypted so Foundation cannot access your Bitcoin or secrets.

KeyOS Microkernel Operating System

• Foundation's next-generation OS built in Rust with a microkernel architecture, app sandboxing, process isolation, and protected master keys.
• A vulnerability in one KeyOS app cannot leak secrets to another — the strongest app-isolation architecture available in a consumer hardware wallet.
• Hardware and software are both open source for community review.

Security Processor + Secure Element

• Built around a Microchip SAMA5D2 security processor paired with a separate secure element for key storage.
• The security processor handles user authentication, PIN enforcement and on-device verification.
• The secure element stores cryptographic secrets isolated from the main application processor.

Automatic Erase After 10 PIN Attempts

• Passport Prime auto-wipes secrets after 10 wrong PIN attempts to defeat brute-force attacks.
• PIN or password device protection — you can pick whichever model fits your threat surface.

Active Tamper Protection & Security Check

• Active tamper protection detects physical intrusion attempts.
• Security Check on every boot verifies supply-chain integrity of firmware and hardware.
• Security words shown on screen defend against evil-maid attacks — a tampered device cannot reproduce them.

Audited & US Assembled

• Third-party audited by Keylabs, a respected Bitcoin-hardware security firm.
• Assembled in the United States inside an ITAR-registered facility — strict supply-chain and personnel controls reduce risk of insertion attacks.
• Hardware and software designs are open source.

Plausible Deniability & Passphrases

• BIP39-style passphrase support for hidden wallets above your master seed.
• Plausible deniability built in for coercion scenarios — a decoy passphrase unlocks a separate plausible wallet.

Foundation is a Bitcoin-hardware company founded in 2020 and based in Colorado, USA. Foundation's stated mission is to build hardware that helps people take authority back over their digital lives — first with the original Passport (a Bitcoin-only hardware wallet favorite among maximalists) and now with the Passport Prime, which Foundation positions as the first Human Authority Hardware device.

Foundation is the rare Bitcoin-hardware manufacturer that assembles every Passport Prime in the United States inside an ITAR-registered facility. ITAR certification — normally reserved for defense-grade technology — imposes strict supply-chain controls, onshore manufacturing and personnel screening, which materially raises the bar against supply-chain attacks.

Foundation publishes both its firmware and hardware designs as open source, and the third-party security firm Keylabs has audited the design. The company also maintains the Envoy companion mobile app and a growing suite of community tools including SeedQR import/export and Bitcoin testnet support.