Foundation Passport

Foundation Passport uses an ATECC608B secure element for PIN verification and key protection, paired with an open-source STM32 microcontroller. Hardware schematics, firmware, and the companion Envoy app are all published under open-source licences and have been independently audited by multiple security firms. All transaction signing is air-gapped via QR code or microSD, with USB restricted to power-only. No confirmed security incidents have been reported.

Yes. Foundation Passport is one of the few hardware wallets where the hardware schematics, firmware, and companion mobile app (Envoy) are all published under open-source licences on GitHub. Foundation also publishes the full bill of materials, allowing independent researchers to verify component sourcing. Multiple external security audits of the firmware have been published and are publicly accessible.

No. Foundation Passport is Bitcoin-only and does not support Ethereum or other blockchains. This scope is intentional — a smaller attack surface means fewer edge cases in the firmware and a simpler, more auditable codebase. Users who need multi-coin support should choose a different hardware wallet.

Envoy is Foundation's open-source companion app for iOS and Android. It is used to manage firmware updates, verify device authenticity via a supply-chain check, and coordinate air-gapped transaction signing via QR codes. Envoy is not strictly required — Passport is also compatible with desktop wallets such as Sparrow and Specter that support PSBT and QR signing workflows. All Envoy source code is published on GitHub.

No publicly confirmed security incidents or firmware vulnerabilities have been disclosed for Foundation Passport. Foundation has commissioned independent security audits and made the results publicly available. The combination of open-source hardware, open-source firmware, and published audit reports allows the community to independently verify the device's security posture rather than relying solely on the manufacturer's claims.