Trading Education Platform SystemSubscribe for FreeSupport
Wallets / Foundation Passport
HARDWARE WALLET REALITY CHECK · READ 11 OCT 2026

Foundation Passport: what the sources say

Discontinued 1 disclosed weakness 0 company incidents

Key facts

The questions, with sources

QuestionWhat the sources saySource
Status
Discontinued — Foundation staff on 2026-07-16: 'Passport Core is now officially discontinued'; Passport Prime is the primary device (Prime listed at $349 on foundation.xyz compare page). Assigned device interpreted as the original Passport / Passport Core; Batch 1/2/Founder's edition status not stated in sources read. Successor: Passport Prime.
Company
Foundation Devices, Inc., United States (headquartered in Boston, MA per Nasdaq/Bitcoin Magazine article)
List price
n/v — Not sold new per Foundation staff (discontinued); no current list price verified. Original 2020 preorder price was $299 (historical only).
Secure element
Yes: Microchip ATECC608B (first production units used 608A, per Foundation staff)
Firmware code
Yes (GPLv3 and compatible licenses (alpha firmware, Dec 2020 blog); hardware designs under CERN OHL S v2); reproducible build: yes. Reproducible build guide (Docker, bit-for-bit comparison after stripping the signature header). License stated in a 2020 post about the alpha firmware; current LICENSE file not opened. Secure-element internals not described as open.
Companion app
Not verified. Companion app Envoy mentioned in sources, but its licence was not verified.
—
Connections
USB: USB-C, charging only (no data pins). Bluetooth: n/v. NFC: n/v. QR: yes (camera; QR signing). microSD: yes.
Screen
Sharp Memory LCD (per 2020 announcement); size not stated in pages read; touch: no (keypad input per docs)
Assets
Bitcoin only (docs show Bitcoin mainnet/testnet settings only)
Multisig and PSBT
Yes. Multisig configurations import via QR or microSD; signing via QR/microSD (PSBT term not checked in docs).
Passphrase
Yes. Passphrase entered on keypad; from firmware 2.3.0 multisig configs are tied to the active passphrase.
Shamir backup (SLIP-39)
Not verified. Backup page does not mention Shamir.
Recovery phrase standard
BIP39
Optional recovery service
None. Docs describe only user-held backups and say Foundation never asks for seed words or PIN; docs do not say Foundation stores backups.
FIDO / passkeys
Not verified. Security-key/FIDO functions are described for Passport Prime, not verified for Core.
Bug bounty
Not verified
—

"n/v" or "not verified" means we could not confirm it from a source we could read. Maker claims are marked as such. Confirm on the maker's site before you buy. Education only, not investment advice.

Summary

Five facts

  • Foundation staff stated on 2026-07-16 that Passport Core is officially discontinued and Passport Prime is the primary device [source 1].
  • Passport is air-gapped: QR via camera and microSD, with a USB-C port that has no data pins [source 3].
  • It uses a Microchip ATECC608B secure element (first units 608A) per Foundation staff [source 4].
  • Firmware is described as open source (GPLv3, hardware CERN OHL S v2) with a documented reproducible build [source 5][source 6].
  • Foundation stated on 2026-07-31 that seeds generated by Passport are not affected by the Coldcard seed flaw; a seed created on an affected Coldcard stays affected after import [source 9].
Independent checks

Audits

  • 2021-04 Keylabs. Scope: Pre-production Passport: boot, firmware verification and login processes (14 findings, no severity ratings); Foundation published a response saying most were fixed, one disputed, several under investigation source
Device record

Publicly disclosed weaknesses

  • 2021-04 Keylabs audit of pre-production unit found issues incl. firmware-upgrade without PIN, downgrade-protection gaps, fault-injection exposure and STM32 read-out-protection bypass risk for supply-chain attackers. Foundation response (2021) states most items fixed, one disputed, and flash-encryption/signing and tamper detection left for investigation or future products. Funds lost: no. Mitigated source

Disclosed weaknesses are listed whatever their severity. "Funds lost" is what the sources say. "Fixed" means the source states a fix exists, which only helps if you update.

Company record

Incidents at the maker or its service providers

  • No company incident found in our search.

These affect the company or its customers and apply to every device of the brand. They are not weaknesses of this device.

Questions

Questions about Foundation Passport

Is Foundation Passport safe?

We do not give a yes or no, because safety depends on what you need to protect and on facts that change. We found 1 publicly disclosed weakness and 0 company incidents in our search. Read the sources above before you buy.

Does Foundation Passport need an internet connection?

Signing happens on the device. How the device talks to your phone or computer depends on its connections: QR. The companion app or software that builds the transaction is online.

Who found the weaknesses listed for Foundation Passport?

The page names who disclosed each one when the source does. Several were found by a competing maker's research team or by independent security firms. We cite the affected company's own statement where we found one, and label press-only reports.

Sources

Where this comes from

Not verified: Not verified: current price (discontinued); screen size; Bluetooth/NFC on Core; Shamir/SLIP39; passkeys on Core; Envoy app licence; current firmware LICENSE file; SE open/closed status and certification; bug bounty; whether Batch 1/2 or Founder's Edition units are individually discontinued. No Foundation incident or data breach was found within the search budget used (absence not proven). Foundation's 2026 'not affected' claim is the company's own statement; no independent audit of it was read. Keylabs audit was of a pre-production unit.

See how we check. To report an error, use corrections and right of reply.