FOUNDATION DEVICES
Your keys, your codes, your files. AirgappedOpenAuditedYours
Passport Prime signs Bitcoin over QR codes, holds your 2FA codes and security keys, and keeps 50 GB of files encrypted behind a secure element. Open source, top to bottom.
AIRGAP
Nothing but air
Your unsigned transaction goes in as a QR code. The signed one comes back out on the screen. Your keys never touch a cable, a computer, or the internet. That is the whole point.
KEYOS
An operating system built from scratch
KeyOS is a Rust microkernel, written by Foundation, open source and audited by Keylabs. Every app runs sandboxed. WalletScrutiny rebuilt the firmware and matched 119 of 119 components.
MORE THAN BITCOIN
Bitcoin, 2FA, security keys, files
One device holds your seeds, your 2FA codes, your FIDO2 security keys and 50 GB of encrypted storage. Multiple seeds, passphrases, multisig. What was scattered over a phone and a laptop now sits behind one PIN.
BACKUP
Backups on cards, not paper
The default backup is 2-of-3 Shamir. Two shares go on NFC KeyCards with Faraday sleeves, both in the box. The third goes encrypted into your phone backup. Foundation never holds a share.
BUILD
Aluminium, Gorilla Glass, made in America
Anodized aluminium chassis, a 3.5 inch IPS touchscreen under Gorilla Glass, 93 grams. A Microchip SAMA5D2 security processor with a 608c secure element and active tamper protection. Assembled in the USA.
“A device you can verify is worth more than one you have to believe.
Foundation Passport Prime specifications
- Display
- 3.5 inch color IPS touchscreen with Gorilla Glass
- Chips
- Microchip SAMA5D2 security processor with 608c secure element
- Operating system
- KeyOS, open source Rust microkernel
- Storage
- 50 GB encrypted
- Battery
- 1100 mAh Li-ion, integrated, not user removable
- Body
- Anodized aluminium, 55.5 x 104.8 x 11 mm, 93 g
- Connectivity
- USB-C, camera for QR, NFC, QuantumLink Bluetooth
- Origin
- Assembled in the USA in an ITAR facility, audited by Keylabs
In the box
- Passport Prime
- Three NFC KeyCards with Faraday sleeves
- USB-C cable
- Booklet and recovery sheet
Questions
Bluetooth on a hardware wallet. Seriously?
QuantumLink encrypts the message before it reaches the Bluetooth chip, and that chip is separate from the security processor. Bluetooth and NFC can be switched off in the control center. Be aware that for now, first setup and firmware updates still use it.
Can I use it fully airgapped?
Yes, for daily signing. Move PSBTs over QR codes or over a file on a USB drive, with Sparrow, Nunchuk, Specter, Electrum or Blue Wallet as your coordinator. After setup, the radios stay off if you want them off.
Is it really open source, or just marketing?
KeyOS is open and WalletScrutiny reproduced three firmware releases, 119 of 119 components matching. Two gaps remain honest to name: the bootloader sits outside that verdict, and the secure element runs Microchip's code, not Foundation's.
Why buy here instead of from Foundation?
Bitsaga is an official Foundation reseller. You pay 360 euro instead of 368.95, you buy from Belgium in euros with Belgian VAT sorted, and there is someone you can actually reach when you set it up.
Images: hero.webp · prime-front.webp · prime-darkmode-three-quarter.webp · prime-in-hand.webp · prime-arctic-copper-front-back.webp · prime-desk.webp
Own the device. Verify the code.
Passport Prime is for people who want one device holding the keys and no company to trust. Two colors, 360 euro, shipped from Belgium.