KeyOS v1.4.0-beta1 is now available for Passport Prime testers! 🚀 This is a major update, headlined by App sideloading, a completely redesigned launcher, and brand-new app icons. It also introduces: • Multisig exports for Unchained and Casa • Connections for Bitcoin Safe and Coconut Wallet • Imports from Aegis and Proton Authenticator • Extensive security improvements across Bitcoin signing, multisig validation, apps, and storage This is a pre-release build intended for experienced users who are comfortable flashing firmware through recovery mode. The stable KeyOS v1.4.0 release will follow. Want to help us test it? Please read the full forum post carefully before you begin and follow every step exactly. It contains the recovery-mode installation instructions, backup guidance, known issues, and important information about upgrading to the stable release later. Read the forum post and testing instructions here:

Foundation Community

KeyOS version 1.4.0-beta1, now available for testing!

Thanks, we are investigating the issue. For now you will not be able to downgrade to an older firmware version.

We cant wait to see what you will build!

Things are about to get very interesting.👀 Miniscript. A password manager. Tether WDK. Nostr tools. PGP. Plenty more already in the Passport Prime App Showcase. Now sideloading is coming to KeyOS in a matter of days. Explore the showcase:

Foundation

Built for Passport – Foundation

Take command of your digital life with Passport Prime, the world’s first Human Authority Hardware device.

What will you build?

Envoy v2.3.1 is now available! This follow-up release focuses on important bug fixes, privacy, and reliability improvements. The update includes improved Tor connectivity, restored QuantumLink pairing on Android 10 and 11, stronger Activity-feed privacy for passphrase accounts, Passport Prime message-signing fixes, and security updates to wallet dependencies. The update has been published across all supported mobile platforms. Read the full release notes below:

Foundation

Envoy version 2.3.1 is now available! – Foundation Blog

We’re excited to announce that the latest version of Envoy – 2.3.1 – is now published on all your favorite mobile platforms! To download it, ...

Passport Prime is assembled in the USA! That matters because hardware security begins long before you switch a device on. Who assembled it? Who tested it? Who handled it before it reached you? The reason is practical, not patriotic. When you’re building a device people will trust with their keys, you should know exactly where it has been and who handled it before it reached them. With Passport Prime, we do.

Foundation

Foundation – Passport Prime

Take command of your digital life with Passport Prime, the world’s first Human Authority Hardware device.

KeyOS v1.3.1 is now available for Passport Prime. This release adds last-word generation to creating your seed phrase. If you create your own seed using dice, coin flips, or words drawn from a container, you can now enter the first 11 or 23 words directly on Passport Prime. Passport Prime will generate a valid final word that satisfies the BIP39 checksum, no external tool required. The video in the blog post shows the feature in action. You can check your Passport Prime firmware version in the settings on your Passport Prime and initiate the download with Envoy. Read the full release notes in our blog post.

Foundation

KeyOS version 1.3.1 is now available! – Foundation Blog

We're excited to announce that the latest version of KeyOS – 1.3.1 – is now live on Passport Prime! To download it, simply initiate the update ...

As always, let us know if you have any questions. We’re happy to help.

Many are reassessing their Bitcoin security. We understand why. Passport Prime is compatible with multisig coordinators including Sparrow, Nunchuk and unchained. Use it alongside hardware from other manufacturers. Choose your coordinator. Build the setup that works for you. Let us know if we can help along the way 🧡

Security claims are easy. Receipts are harder. We hand our hardware and code to independent experts whose job is to find where we were wrong, then publish the results. Both Passport Core and Passport Prime have undergone independent security audits by Keylabs. We publish the reports in full, including the findings and our responses. Passport Prime Keylabs audited the hardware and firmware, including secure boot, tamper response, wireless isolation, physical attacks, fault injection and key extraction. No critical or high-severity vulnerabilities were identified. The five low-impact findings were addressed and documented publicly. Audit: https://foundation.xyz/security/passport-prime-keylabs-audit-2025.pdf Our response: https://foundation.xyz/security/passport-prime-audit-response-2025.pdf Passport Core The pre-production review found issues in the boot process, firmware handling and downgrade protections. We fixed them, Keylabs sanity-checked the fixes, and we published the unmodified report. Audit: https://foundation.xyz/security/passport-core-keylabs-audit-2021.pdf Our response: https://foundation.xyz/security/passport-core-audit-response-2021.pdf Our ongoing bug bounty keeps the door open for researchers to report new vulnerabilities across Foundation products and services. All security resources:

Foundation

Security – Foundation

Take command of your digital life with Passport Prime, the world’s first Human Authority Hardware device.

Thank you so much to those who have been submitting AI security reports to us over the last few days, especially Rob Hamilton. Since Thursday evening we have been engaged in internal code review and hardening. We have confirmed that seed generation in all Passport models is secure. By design, Passport models use at least 2 sources of entropy (randomness). Typically we don't post deeply technical updates, but given the events of the last few days, we will continue to post technical updates about our FOSS codebases. All Passport models include three sources of randomness: (1) Avalanche noise source (ANS), an open architecture true random number generator (no black box silicon) (2) MCU or MPU true random number generator (TRNG) depending on the model (3) Secure Element TRNG Passport Core uses all three sources when generating seeds. Multiple parties reported a scenario, which we also identified during our internal review on Thursday evening, where a theoretical ANS hardware failure would cause Passport Core to continue seed generation using the MCU and Secure Element TRNGs. (We are not aware of any ANS hardware failure in any Passport Core unit) Some AI models, specifically Kimi, are confused about this scenario and are falsely reporting that in the case of ANS hardware failure there is no additional entropy added. This is false. In this scenario, the Foundation team has confirmed that Passport Core still incorporates 2 sources of entropy during seed generation. Two sources provide more than sufficient entropy. But the better behavior is to instead refuse to generate the seed at all if the ANS fails. So we are hardening the code accordingly. Additionally, Passport Prime currently uses two sources of entropy for seed generation: ANS and MPU TRNG. We have confirmed that this seed generation path is secure. This is more than sufficient entropy but we are also adding in the Secure Element TRNG to the seed generation process. The Secure Element TRNG introduces some latency (it is slower) but we have always intended to use it as a third source of entropy for seed generation on Passport Prime. We have already made this code change internally. We will be releasing firmware updates in the coming days. All seeds generated on Passport hardware are safe. Please let us know what questions you have.

🚨 Phishing Alert 🚨 We’ve been made aware of phishing emails impersonating Foundation following the recent Coldcard security incident. These emails attempt to trick users into downloading malicious software or visiting fake websites. Please remember:
• Never download software from links in unsolicited emails.
• Never enter your seed phrase or any information into any website.
• Never trust messages claiming you need an “urgent security update.” If you’re ever unsure whether a message is legitimate, stop before taking any action. Contact us only through our official support email, Community Forum, or by sending us a DM on our official social accounts. Foundation will never DM you first, and we’ll never ask you to reveal your recovery phrase or install unknown software to “secure” your wallet. When in doubt, verify first. Taking a few extra minutes could save your Bitcoin. Email: hello@foundation.xyz Community Forum: community.foundation.xyz

KeyOS v1.3.0 is now available 🎉 This is one of our biggest KeyOS releases yet, with lots of new features. What's new: 🌱 Import external Bitcoin seeds into Vault 🟣 Import Nostr keys into Vault 🔐 Generate BIP85 passwords 📲 Mass-import 2FA codes from Google Authenticator 🔍 Scan almost any QR with the new Universal QR Scanner 📈 Scrub the Bitcoin price graph to view historical prices A huge thank you to our developers for all the work that went into this release, and to a third-party dev, immz4, for contributing to the Google Authenticator import feature. There are many more improvements and bug fixes across the Bitcoin wallet, 2FA, security keys, onboarding, Airlock, backups, USB, Bluetooth, and the wider KeyOS experience. Read the full release notes on our blog:

Foundation

KeyOS version 1.3.0 is now available! – Foundation Blog

We’re excited to announce that the latest version of Passport Prime firmware, KeyOS v 1.3.0, is now live! To download it, simply initiate the upd...

Bitcoin was the starting point. The principles behind it were always much bigger. Security. Verification. Sovereignty. Approvals. Now we’re bringing them to the AI era.