Foundation

Please be vigilant: attackers are currently sending out new waves of phishing emails.

These emails are coming from hacked domains of other companies, not from Foundation domains.

Envoy 2.3.7 is now available.

This release includes a number of improvements and fixes as part of our ongoing work on Envoy.

Full release notes: https://github.com/Foundation-Devices/envoy/releases/tag/v2.3.7

IMPORTANT REMINDER

Some fraudulent websites linked to the recent phishing emails are still active. These sites have been reported, and we are working to have them taken down.

Please DO NOT click any suspicious links in emails or visit the websites they direct you to.

Foundation will NEVER ask for your recovery or seed phrase.

Our investigation is still ongoing, and we aim to share a full report as soon as possible.

If you've been personally affected, please contact our official support team. We're here to help however we can.

Here are Foundation's official links: Website: foundation.xyz Support: foundation.xyz/support Community Forum: community.foundation.xyz

INVESTIGATION UPDATE 2

In our last update, we said we would share how many people had personal information exposed once we could confirm it. We can now share those numbers.

Across our old WooCommerce store and our current Shopify store, records containing approximately 5,600 mailing addresses and 5,200 phone numbers, along with names and email addresses, were held in systems the attackers were able to reach. We cannot say for certain whether the attackers accessed all of these records, so we are treating all of them as potentially exposed. These records are a subset of our total customers.

Why the data was still there: In our last update, we explained that copies of orders remained in old database tables after past migrations. We have since found that the 60-day redaction also did not cover every type of order, and that some customer details were stored in other parts of the store, such as abandoned carts and contact forms, that redaction never reached.

Addresses not in our records: More than 5,000 of the email addresses that received phishing emails do not appear in our WooCommerce or Shopify customer records. Some match our support and hiring inboxes. Together with reports of details that were never shared with us, this makes us confident the attackers also used data from outside Foundation. We are still tracing where these addresses came from.

What we are doing: Out of an abundance of caution, we are rotating all keys and secrets across our systems, including those we have no evidence were accessed.We are keeping a single copy of the legacy WooCommerce data offline as evidence for the investigation. Once the investigation is complete, that data will be permanently deleted.

We have found no evidence that this incident compromised Passport devices or the private keys they hold.

Never enter your recovery phrase into a website or share it with anyone, including someone claiming to be Foundation.

We will continue sharing confirmed findings and publish our full report when the investigation is complete.

INVESTIGATION UPDATE

Many of you have asked how personal information ended up in the phishing emails, particularly those who ordered from us years ago. Here is what we have found so far.

Phishing emails: We have identified more than 23,000 phishing email attempts across our email systems, including 19,057 messages delivered through Mailgun and 1,503 messages sent through Google Workspace. Some addresses received multiple messages, and some attempts failed or were stopped before delivery.

These numbers do not tell us how many people had personal information exposed. We are still determining that number and will share it once we can confirm it.

Older orders and abandoned carts (WooCommerce): Before moving to Shopify in May of this year, our store ran on WooCommerce. We had configured automatic redaction of customer details 60 days after shipping. When we viewed those orders in our store admin, the customer details were no longer visible and the orders showed as redacted.

During past database migrations, orders were copied into a new set of tables, but copies remained in the old tables. The redaction process updated the newer tables, which were also what our store admin displayed. Orders therefore appeared redacted even though older copies still contained personal information.

We also found personal information in other order and refund records, as well as abandoned carts. This included shipping details entered by someone who never completed a purchase. We are still checking the historical settings and redaction process to understand why these records retained data.

Those older records were held in systems the attackers were able to reach. We relied on the redaction shown in our admin dashboard, and we now know that was insufficient to verify that the underlying data had been removed. Whatever the shortcomings in the tools we used, protecting your information was still our full responsibility.

We plan to share our findings with WooCommerce and the relevant plugin developers. When an order is marked as redacted, its personal information should not remain in another table in the same database.

For other WooCommerce store owners: do not rely solely on what your admin dashboard shows when personal data is redacted. Have your developer or agent check the entire database for information left behind, including legacy tables, refund records, and abandoned carts. This is especially important if you have used WooCommerce for years or have been through database migrations.

Recent orders (Shopify): Customer details from orders placed on our Shopify store since May may also have been exposed. We are still investigating the extent of any unauthorized access.

These orders had not yet been manually redacted. We updated our privacy policy when we moved to Shopify and were building a tool to automate redaction, but automatic deletion was not yet active.

Other possible sources: We have received reports of phishing emails containing personal details that customers say they never shared with us. We are investigating whether the attackers combined information from our systems with data obtained elsewhere, but we have not confirmed a connection to breaches at other companies. Historical support records are also part of our investigation.

What we have done: We have revoked affected email credentials, cleared queued phishing messages, and taken affected legacy services offline while preserving evidence. Our investigation into the full extent of the compromise is continuing.

We have found no evidence that this incident compromised Passport devices or the private keys they hold. The phishing emails are designed to trick you into revealing your recovery phrase, and including your correct personal information makes them more convincing.

Never enter your recovery phrase into a website or share it with anyone, including someone claiming to be Foundation.

We will continue sharing confirmed findings and publish our full report when the investigation is complete.

ANNOUNCEMENT: SPAM EMAILS HAVE BEEN SENT THAT APPEAR TO HAVE COME FROM OFFICIAL FOUNDATION DOMAINS.

We have traced this back to one or more compromised API keys on Cloudflare, and have already revoked all API keys.

The malicious domain in the spam email has been taken down.

Funds stored on Passport are safe and Passport hardware is not compromised.

We are working nonstop to discover exactly what happened and will put out a report ASAP.

KeyOS v1.4.1 is now available to download!

Our latest KeyOS release brings: ⚡ Significantly faster firmware updates 🔋 Improved charging to reduce long-term battery wear ⚠️ Low-battery alerts before automatic shutdown 🛡️ Safer shutdowns to protect against unexpected power loss

Small improvements that make a big difference to everyday use.

Full release notes here: https://foundation.xyz/blog/keyos-v1-4-1-is-no-available

Your phone number is a terrible second factor. 📱

In a SIM swap, a scammer tells your mobile carrier to move your number to their SIM. Every text code sent to you now goes to them.

Three fixes: 1️⃣ Use an authenticator app or a security key instead of SMS codes 2️⃣ Ask your carrier for a PIN or port-out lock on your account 3️⃣ Remove your phone number as a recovery option where you can

Boring today. Priceless the day someone tries. 🧡

Foundation never stopped at open-source.

Every product we build is open-source and reproducible. Envoy is now officially listed as reproducible on WalletScrutiny

They took our public code, built it themselves, and got an exact match with the app you download.

Why both?

🔓 Open source means you can read the code. 🔁 Reproducible means you can prove the app/software you’re running was built from that exact code.

The most secure code is the code anyone can verify and re build. 🧡

You backed up your Bitcoin. What about your security keys?

With Passport Prime, Magic Backups lets you restore every key on a replacement device.

Watch the keys in action, from your first login to getting your keys back. 👇🏼

Envoy version 2.3.5 is now available!

This maintenance release focuses on improving stability, fixing issues, and adding better support for larger screens.

Full release notes here: https://foundation.xyz/blog/envoy-version-2-3-5-is-now-available

Your wallet setup took years to build. Switching shouldn’t mean rebuilding it.

“People have spent years building their wallet setups.” — Our CEO Zach Herbert, quoted in Forbes.

Legacy Mode brings that thinking to Passport Prime. Keep your existing accounts for supported assets. Choose an open-source foundation.

https://www.forbes.com/sites/boazsobrado/2026/09/15/after-a-summer-of-wallet-hacks-foundation-goes-after-ledgers-users/

You asked, we listened. 📍

UPS Access Point pickup is now live for US orders, giving you more privacy and control over where your Passport is delivered.

Enter an address at checkout, and nearby pickup locations will appear under Shipping.

We truly value your feedback and are already working to bring this option worldwide. 🌍

You can order here today with pickup options available: https://foundation.xyz/products/passport-prime

Passport Prime is an open platform.

You choose which apps live on your device and which permissions they receive. Every app runs in isolation, with its own memory and storage, so it cannot access or interfere with your other apps.

You don’t need to be a professional developer, or own a special dev unit to build something for yourself.

This community member used the latest SDK and KeyOS beta to build a Markdown editor and run it on their own Passport Prime.

Want to see what people are building, or try it yourself?

Come and join the Developer section of our forum: https://community.foundation.xyz/c/developers/13

Build with us: https://foundation.xyz/developers

Envoy v2.3.2 is now available.

This maintenance release focuses on stability and security, with fixes and improvements across Passport Prime onboarding, account handling, software updates, and the send flow.

Full release notes: https://foundation.xyz/blog/envoy-version-2-3-2-is-now-available

Passport Prime gives you 50GB of encrypted storage for your most important files.

So how do you get a file from your computer onto the device without exposing everything already there?

Normally, plugging in a drive works both ways: the computer can read everything and write anything to it. So can any malware on that computer.

Plug in Passport Prime, and the computer sees only one small, separate area: the Airlock. Your 50GB never appears. The computer can't open it, scan it, or tell what's inside.

Drop your file into the Airlock folder on your desktop, like you would with any drive. Then unplug.

Only now, on Passport Prime's screen, do you move the file from the Airlock into your encrypted storage. The last step happens after the computer is out of the picture.

Nothing travels straight from a computer into your vault. Everything passes through an airlock first.

That's why it's called Airlock🔐

KeyOS v1.4.0-beta1 is now available for Passport Prime testers! 🚀

This is a major update, headlined by App sideloading, a completely redesigned launcher, and brand-new app icons.

It also introduces: • Multisig exports for Unchained and Casa • Connections for Bitcoin Safe and Coconut Wallet • Imports from Aegis and Proton Authenticator • Extensive security improvements across Bitcoin signing, multisig validation, apps, and storage

This is a pre-release build intended for experienced users who are comfortable flashing firmware through recovery mode. The stable KeyOS v1.4.0 release will follow.

Want to help us test it? Please read the full forum post carefully before you begin and follow every step exactly. It contains the recovery-mode installation instructions, backup guidance, known issues, and important information about upgrading to the stable release later.

Read the forum post and testing instructions here: https://community.foundation.xyz/t/keyos-version-1-4-0-beta1-now-available-for-testing/1200/14

We cant wait to see what you will build!

Things are about to get very interesting.👀

Miniscript. A password manager. Tether WDK. Nostr tools. PGP. Plenty more already in the Passport Prime App Showcase.

Now sideloading is coming to KeyOS in a matter of days.

Explore the showcase: https://foundation.xyz/app-showcase

What will you build?

Envoy v2.3.1 is now available!

This follow-up release focuses on important bug fixes, privacy, and reliability improvements.

The update includes improved Tor connectivity, restored QuantumLink pairing on Android 10 and 11, stronger Activity-feed privacy for passphrase accounts, Passport Prime message-signing fixes, and security updates to wallet dependencies.

The update has been published across all supported mobile platforms.

Read the full release notes below:

https://foundation.xyz/blog/envoy-version-2-3-1-is-now-available

Passport Prime is assembled in the USA!

That matters because hardware security begins long before you switch a device on.

Who assembled it? Who tested it? Who handled it before it reached you?

The reason is practical, not patriotic. When you’re building a device people will trust with their keys, you should know exactly where it has been and who handled it before it reached them.

With Passport Prime, we do.

https://foundation.xyz

KeyOS v1.3.1 is now available for Passport Prime.

This release adds last-word generation to creating your seed phrase. If you create your own seed using dice, coin flips, or words drawn from a container, you can now enter the first 11 or 23 words directly on Passport Prime.

Passport Prime will generate a valid final word that satisfies the BIP39 checksum, no external tool required.

The video in the blog post shows the feature in action.

You can check your Passport Prime firmware version in the settings on your Passport Prime and initiate the download with Envoy.

Read the full release notes in our blog post. https://foundation.xyz/blog/keyos-version-1-3-1-is-now-available

As always, let us know if you have any questions. We’re happy to help.

"Passport combines randomness generated by separate hardware components before creating a wallet.

The firmware is also published as free and open-source software with reproducible builds, so independent researchers can verify that the software running on the device matches the published code"

See Cointelegraph newest article on Coldcard entropy flaw.

https://cointelegraph.com/magazine/does-the-coldcard-attack-mean-all-hardware-wallets-are-now-insecure

Many are reassessing their Bitcoin security. We understand why.

Passport Prime is compatible with multisig coordinators including Sparrow, Nunchuk and unchained.

Use it alongside hardware from other manufacturers. Choose your coordinator.

Build the setup that works for you.

Let us know if we can help along the way 🧡

Security claims are easy. Receipts are harder.

We hand our hardware and code to independent experts whose job is to find where we were wrong, then publish the results.

Both Passport Core and Passport Prime have undergone independent security audits by Keylabs. We publish the reports in full, including the findings and our responses.

Passport Prime

Keylabs audited the hardware and firmware, including secure boot, tamper response, wireless isolation, physical attacks, fault injection and key extraction.

No critical or high-severity vulnerabilities were identified. The five low-impact findings were addressed and documented publicly.

Audit:

https://foundation.xyz/security/passport-prime-keylabs-audit-2025.pdf

Our response:

https://foundation.xyz/security/passport-prime-audit-response-2025.pdf

Passport Core

The pre-production review found issues in the boot process, firmware handling and downgrade protections. We fixed them, Keylabs sanity-checked the fixes, and we published the unmodified report.

Audit:

https://foundation.xyz/security/passport-core-keylabs-audit-2021.pdf

Our response:

https://foundation.xyz/security/passport-core-audit-response-2021.pdf

Our ongoing bug bounty keeps the door open for researchers to report new vulnerabilities across Foundation products and services.

All security resources:

https://foundation.xyz/security

Thank you so much to those who have been submitting AI security reports to us over the last few days, especially Rob Hamilton. Since Thursday evening we have been engaged in internal code review and hardening.

We have confirmed that seed generation in all Passport models is secure. By design, Passport models use at least 2 sources of entropy (randomness).

Typically we don't post deeply technical updates, but given the events of the last few days, we will continue to post technical updates about our FOSS codebases.

All Passport models include three sources of randomness: (1) Avalanche noise source (ANS), an open architecture true random number generator (no black box silicon) (2) MCU or MPU true random number generator (TRNG) depending on the model (3) Secure Element TRNG

Passport Core uses all three sources when generating seeds. Multiple parties reported a scenario, which we also identified during our internal review on Thursday evening, where a theoretical ANS hardware failure would cause Passport Core to continue seed generation using the MCU and Secure Element TRNGs.

(We are not aware of any ANS hardware failure in any Passport Core unit)

Some AI models, specifically Kimi, are confused about this scenario and are falsely reporting that in the case of ANS hardware failure there is no additional entropy added. This is false. In this scenario, the Foundation team has confirmed that Passport Core still incorporates 2 sources of entropy during seed generation.

Two sources provide more than sufficient entropy. But the better behavior is to instead refuse to generate the seed at all if the ANS fails. So we are hardening the code accordingly.

Additionally, Passport Prime currently uses two sources of entropy for seed generation: ANS and MPU TRNG. We have confirmed that this seed generation path is secure. This is more than sufficient entropy but we are also adding in the Secure Element TRNG to the seed generation process.

The Secure Element TRNG introduces some latency (it is slower) but we have always intended to use it as a third source of entropy for seed generation on Passport Prime. We have already made this code change internally.

We will be releasing firmware updates in the coming days. All seeds generated on Passport hardware are safe. Please let us know what questions you have.

🚨 Phishing Alert 🚨

We’ve been made aware of phishing emails impersonating Foundation following the recent Coldcard security incident.

These emails attempt to trick users into downloading malicious software or visiting fake websites.

Please remember:
• Never download software from links in unsolicited emails.
• Never enter your seed phrase or any information into any website.
• Never trust messages claiming you need an “urgent security update.”

If you’re ever unsure whether a message is legitimate, stop before taking any action.

Contact us only through our official support email, Community Forum, or by sending us a DM on our official social accounts.

Foundation will never DM you first, and we’ll never ask you to reveal your recovery phrase or install unknown software to “secure” your wallet.

When in doubt, verify first. Taking a few extra minutes could save your Bitcoin.

Email: [email protected] Community Forum: community.foundation.xyz

Post from our CEO, our CTO along with Zach and our devs spent the night going through every line of code for all Foundations products, we have access to GPT Cyber program too, we pointed it to everything.

More posts to follow. Any questions please let us know.

GM Nostr 🧡

Most ambassador programs are affiliate links with a better name.

Ours was too, so we rebuilt it.

The new Foundation Ambassador Program includes more ways to earn through tasks, a ready-to-use content bank, exclusive merch and rewards, early product insights, and a private forum with direct access to our team.

Referrals remain simple: earn $10 in Foundation store credit while the person using your code gets a free bumper case.

Already an ambassador? Your account is waiting. New here? Join in less than a minute:

https://foundation.xyz/ambassador

KeyOS v1.3.0 is now available 🎉

This is one of our biggest KeyOS releases yet, with lots of new features.

What's new: 🌱 Import external Bitcoin seeds into Vault 🟣 Import Nostr keys into Vault 🔐 Generate BIP85 passwords 📲 Mass-import 2FA codes from Google Authenticator 🔍 Scan almost any QR with the new Universal QR Scanner 📈 Scrub the Bitcoin price graph to view historical prices

A huge thank you to our developers for all the work that went into this release, and to a third-party dev, immz4, for contributing to the Google Authenticator import feature.

There are many more improvements and bug fixes across the Bitcoin wallet, 2FA, security keys, onboarding, Airlock, backups, USB, Bluetooth, and the wider KeyOS experience.

Read the full release notes on our blog:

https://foundation.xyz/blog/keyos-version-1-3-0-is-now-available

So easy to build apps for Passport Prime.

Check it out: foundation.xyz/dev

👀

250 years. Limited to only 250 units.

Introducing Passport Prime America 250 Edition: a special engraved device, assembled in the USA and available this month only.

Tools for freedom, built here.

https://foundation.xyz/products/passport-prime

Big tech apps are built to watch you.

Passport Prime apps are built to protect you 💥

Bitcoin was the starting point.

The principles behind it were always much bigger.

Security. Verification. Sovereignty. Approvals.

Now we’re bringing them to the AI era.

Today we announced a big milestone in Foundation’s history:

• $6.4M funding led by Fulgur Ventures • Passport Prime is now generally available • The KeyOS developer platform is now open to developers

We’ve spent the last few years thinking about a problem we believe becomes massive in the AI era:

If AI agents can move money, access systems, deploy infrastructure, and operate accounts autonomously…

Who actually authorizes the action?

We don’t think browser prompts, cloud approvals, or software running on the same machine are enough anymore.

That’s why we built Passport Prime:

The first Human Authority Hardware device.

Passport Prime combines: • Bitcoin self-custody • FIDO security keys • offline 2FA • encrypted vaults • 50GB encrypted storage

…inside a dedicated handheld security device designed for trusted approvals and programmable security workflows.

It runs KeyOS: Our open-source Rust microkernel operating system built specifically for programmable security hardware.

Today, we’re also opening the KeyOS developer platform with: • SDK • simulator • CLI tooling • AI-assisted workflows

You can get started here: https://docs.foundation.xyz/developers/home/

Cake Wallet is already building on the platform, with more integrations on the way.

We also launched a completely redesigned website today:

https://foundation.xyz

The possibilities are going to be endless with our upcoming SDK.

What will Passport Prime do for you?

Oh hell yeah 👌

Last week, we kicked off something new at Foundation, Prime Time Office Hours.

A six-part live series where we go deep on Passport Prime with our community. No fluff. No marketing speak. Just an hour of real talk about the hardware, security architecture, and philosophy behind what we've been building for the past three years.

Week 1 was our introduction and orientation session, hosted by our Head of Customer Experience.

Here's what we covered: The evolution from our Founders Edition in 2020 to Passport Prime today. Four generations of hardware, each one informed by real customer feedback and a relentless focus on what self-custody should actually feel like.

Passport Prime isn't just a hardware wallet anymore. It's a personal security platform, Bitcoin wallet, FIDO security keys, 2FA authenticator, encrypted file storage, and a vault for sensitive secrets. All offline. All in one device.

The security model is built on layers of defense: fully open source hardware and software (audit it yourself on GitHub), a dedicated secure element, an isolated Bluetooth processor, anti-tamper protection, US assembly, and a published third-party audit. Our custom Bluetooth protocol, QuantumLink, even assumes the Bluetooth chip is already compromised from day one, and your keys are still safe.

The app ecosystem runs on KeyOS, our custom microkernel-based OS. It ships with five core apps, and we're building an open developer kit so anyone can build on it. Third-party integrations are already underway.

We also took live questions from the community, on everything from hardware design choices to app store architecture to feature requests that got added to the roadmap on the spot.

This is what building in public looks like.

Week 2 is tomorrow, we're going hands-on with onboarding, recovery, and Magic Backups. If you're curious about how Passport Prime works in practice, this is the one to join.

https://foundation.xyz/prime-time/

2026 so far: • $480M stolen from crypto users • 676M Americans' SSNs leaked • AI agent marketplace: 12% malware • Teens drove 600mi to rob $66M in Bitcoin

Thats not even all.

Your data, keys & passwords are only as safe as where they live.

Keep all those offline.

Introducing Prime Time, a free live workshop series for Passport Prime We're launching a 6-week live workshop series called Prime Time, dedicated entirely to helping people get the most out of Passport Prime.

Each session runs for 60 minutes, once a week, hosted live in our Roam virtual auditorium, in an office-hours format. We'll walk attendees through everything from initial unboxing and setup to advanced features like Bitcoin security, 2FA, and security key management, seed and password storage, and encrypted file protection.

Passport Prime is the world's first personal security device; it replaces multiple devices and apps with one offline tool. That's powerful, but it also means there's a lot to learn. Prime Time exists to make that easy.

Whether someone is brand new to hardware security or has been self-custodying Bitcoin for years, there's something here for them.

It's completely free. 😄

Sign up now to get your invite to our virtual office, and weekly reminders for each session → foundation.xyz/prime-time/

Every early access Passport Prime order has shipped.

Thousands of devices out in the wild.

We spent the week heads down shipping and we are fully caught up.

Order now, it ships next business day.

Bitcoin wallet. 2FA. Security keys. 50GB encrypted storage. One offline device.

https://foundation.xyz/buy-passport-prime/

GM.🫡

Everything we showed you this week, KeyOS, QuantumLink, Passport Prime, Envoy, is all open source and reproducible.

You don't have to trust our marketing.

Go verify it yourself :) Have a great Friday 😊

This week, we launched Passport Prime into the world.

We showed you how Passport Prime is built. KeyOS. QuantumLink. The open source hardware. The security architecture from top to bottom.

But security architecture doesn't mean much if it doesn't solve real problems for real people. So let's talk about what Passport Prime actually does for you, every single day.

Bitcoin wallet, Passport Prime is a best-in-class Bitcoin hardware wallet. Multisig. Passphrases. Temporary seeds. It supports every major Bitcoin software wallet you already use, and it pairs seamlessly with Envoy via QuantumLink. No more squinting at QR codes under bad lighting. Just tap, authorize, done.

2FA codes, offline. Right now, your two-factor authentication codes probably live on your phone. The same phone that's connected to the internet 24 hours a day. Passport Prime stores your 2FA codes in a secure, offline environment. If someone compromises your phone, your 2FA codes aren't there to find.

Security keys, Passport Prime replaces every YubiKey you own. Create multiple security keys and use them over NFC. Tap your Passport Prime to log in. No more juggling a drawer full of keys.

Encrypted file storage, 50 GB of secure, offline storage for your most important files. Tax documents. Recovery phrases. Legal records. Whatever you need to protect. Here's what makes it different: when you plug Passport Prime into your computer, it only exposes the files in your Airlock, a sandboxed folder you control. Everything else stays hidden.

Seed vault, If you're deep in Bitcoin, you know the chaos of managing seed words across multiple wallets. Passport Prime brings them all into one place. Create new seeds, temporarily load existing ones, organize them all in the Seed Vault app. You can also manually add your most secure passwords.

We're just getting started.

Everything above ships today. KeyOS, the custom operating system powering Passport Prime, was built from day one as a developer platform. Every app runs in its own sandbox. Every app receives a hardened child seed, meaning even a malicious app has zero access to your master seed and cannot communicate with other apps.

This is what unlocks everything.

We are opening the developer SDK so that any team can build apps for KeyOS. Our friends at Cake Wallet are already building the first third-party app. But think about what comes next: password managers that never touch the internet. Encrypted messaging key storage. Nostr identity management. PGP signing.

The possibilities are as wide as the developer community that builds on it. One device that starts as the most capable personal security device on the market, and only gets more powerful over time.

Passport Prime. Open source. Made in the USA.

This is what taking control of your digital life actually looks like. 🧡

What if the Bluetooth chip inside your security device were malicious?

Compromised firmware. A supply chain attack. With Passport Prime, it wouldn't matter, because we built QuantumLink.

QuantumLink is a new wireless protocol we designed from the ground up with Blockchain Commons. It encrypts every piece of data before it ever reaches the Bluetooth chip, using quantum-resistant cryptography.

Here's what that means in practice: The Bluetooth chip in Passport Prime is physically isolated from the security processor running KeyOS. All data passing through it is already encrypted using CRYSTALS-Kyber key exchange and ChaCha20-Poly1305 symmetric encryption, both designed to withstand attacks from quantum computers.

The Bluetooth chip never sees unencrypted data. It can't read what it relays. It can't inject commands. Even if it were fully compromised, it would have nothing useful to work with.

Setup takes seconds. Passport Prime displays a QR code during onboarding. Scan it with Envoy, and a fully encrypted tunnel is established, no pairing codes, no trust prompts.

From there, you get the real-time convenience of wireless communication, interacting with Envoy, updating KeyOS, and accessing new features, without compromising on security. And if you ever want zero wireless, one tap in KeyOS powers down the Bluetooth chip entirely.

We built QuantumLink because wireless and secure shouldn't be a tradeoff.

Read the full technical deep dive here:

https://foundation.xyz/2025/01/quantumlink-reinventing-secure-wireless-communication/

Great words for Passport Prime :)

We spent three years building our own operating system from scratch. No Android. No off-the-shelf firmware. Just a microkernel OS written in Rust.

KeyOS powers Passport Prime and delivers real process isolation, every app sandboxed, secure message-passing between processes, running on a 500 MHz security processor.

It's fully open-source, built on the Xous kernel, and we're opening it up to third-party developers. Every app must be open-source with reproducible builds.

Full technical deep dive: foundation.xyz/2024/12/building-keyos/

We're thrilled to announce that Passport Prime is officially shipping. 🎊

We set out to build something that didn't exist, that doesn’t fit neatly into any existing categories.

Manufactured in the USA, built on open-source principles.

New hardware. New OS. New communication layer. New software.

What makes Passport Prime different:

We built a brand new operating system from scratch. KeyOS uses a modern microkernel design where only the most critical functions run at the core, keeping apps and sensitive data completely segregated.

We created QuantumLink, a quantum-resistant Bluetooth protocol that delivers wireless convenience with air-gapped level security.

Before shipping, we commissioned a full third-party security audit by Keylabs. The result: zero critical or high-severity vulnerabilities. The full audit and our response are publicly available here: https://foundation.xyz/2025/10/passport-prime-security-audit/

Passport Prime ships in a premium package:

• 3.5" Gorilla Glass touchscreen
• CNC-machined aluminum body
• 3x NFC KeyCards with Faraday sleeves
• USB-C cable.

Looking ahead, we're continuing to build KeyOS improvements, a developer SDK, third-party app support, and accessories are all on the roadmap.

This is just the beginning.

→ Learn more: https://foundation.xyz/passport-prime/

Envoy v2.2.12 is now available! 🚀

This update adds support for pairing multiple Passport Prime devices and includes various improvements.

You can read the full release notes below for all the details.

https://foundation.xyz/2026/03/envoy-version-2-2-12-is-now-available/

🚀 Envoy 2.2.5 is now available.

This release is all about Passport Prime, improved onboarding, and several bug fixes to make the experience smoother.

Read the full release notes with all the details below.

https://foundation.xyz/2026/02/envoy-version-2-2-5-is-now-available/

🚀 Envoy v2.2.1 is live!

For this release we focused mostly on the upcoming Passport Prime integration, but we also focused efforts on improving our tor integration and fixing many bugs.

For more details on each of the changes, keep reading below!

https://x.com/foundationdvcs/status/2014679789232087542?s=12

Most 2FA apps prioritize convenience, not security.

Passport Prime makes 2FA hardware-native: – offline – no SIM swap – physical confirmation for every login

We can’t wait to get Prime in your hands. Until then, here’s a look at the 2FA flow in action.

Envoy v2.1.0 is now live!

🪄 Improved Magic Backups 🔐 Improved Tor reliability 🐞 Minor bug fixes

Full release notes availabe here: https://foundation.xyz/2025/10/envoy-version-2-1-0-is-now-available/

Before Passport Prime ships, we commissioned a full third-party security audit from Keylabs, the same team behind the well-known wallet.fail research. Their review covered every layer of Passport Prime, from hardware and firmware to system architecture to evaluate its resilience against real-world attack scenarios.

The results: no critical or high-severity vulnerabilities were found. All observations were classified as low severity, requiring physical access and advanced tools. Keylabs concluded that Prime’s architecture demonstrates “exceptional security design principles and sophisticated implementation,” and “a highly secure architecture that exceeds industry standards.”

We’ve published the full breakdown, findings, and our response here:

https://foundation.xyz/2025/10/passport-prime-security-audit/

🚨Phishing Alert 🚨

We've received reports of emails being received with a fake website.

🔗foundationenvoy(.)app

This is NOT from us and hosts a malicious Envoy desktop download. Do NOT click or download anything from it.

There is no Envoy desktop version.

👀 Ever wondered what’s on the Passport Core menu?

If you’ve never used one, you might be curious about its menus, navigation, and features.

Here’s a full breakdown of how Passport Core is structured. 👇

🔥 Privacy just leveled up.

We value every part of your digital life; that’s why we’ve partnered with Cloaked Wireless.

Every Foundation product now comes with a FREE Cloaked Wireless SIM + 1 month free plan (up to $75 value). While stocks last.

Here’s how it works 👇

1️⃣ Order any Foundation product. At checkout, enter cloaked in the coupon section.

2️⃣ Once your Foundation order ships, you’ll receive an email with your voucher code and instructions to redeem on the Cloaked Wireless website.

3️⃣ Activate your Cloaked Wireless plan and SIM in minutes: 🔷 Bring your number + device 🔷 Choose from powerful privacy features 🔷 Enjoy nationwide 5G coverage 🔷 Pay with Bitcoin if you want in the future for full privacy.

With Foundation, your keys are secure. With Cloaked Wireless, your phone line is secure. Start protecting both today 👉 https://foundation.xyz

🚨 Passport Core is BACK

The wait is over. Every backorder has shipped, and from today, new orders will ship the next business day.

The gold standard for air-gapped Bitcoin security. Made in the USA. 🇺🇸

Passport Core is ready when you are.

Secure your bitcoin the right way: https://foundation.xyz/passport-core/

Bitcoin is neutral.

Your custody and privacy choices decide whether it’s freedom or surveillance. 🔐