Foundation is a pioneering company specializing in the creation of the Passport, a hardware wallet exclusively designed for Bitcoin. The emphasis of this wallet is on airgapped technology, ensuring there is no direct connection to the external world, thereby achieving true cold storage.

The Passport emerged in 2022 as Foundation Devices' second-generation Bitcoin hardware wallet, succeeding the 2020 "Passport Founders Edition". Assembled in the USA, it maintains air-gapped security and open-source design. Upgrades from the Founders Edition encompass a slightly increased size accompanied by a sensible reduction in thickness, a USB-C charging port, color IPS display, rectangular keypad keys, an enhanced lithium-ion battery.

In this comprehensive Foundation Passport review, we will thoroughly examine and analyze the Foundation Passport, providing insights into its features and ultimately determining whether it could be the ideal choice for your bitcoin cold storage needs.

Foundation Passport Main Features

The Passport seamlessly incorporates every feature desired by privacy-conscious Bitcoin users, presenting an unprecedented level of user-friendly functionality.

Airgap Security

The Passport ensures high security by maintaining an airgapped environment, completely isolated from the outside world. Communication relies on a camera and QR codes, offering a robust defense against potential threats.

Triple Source Of Entropy

To generate entropy for the seedphrase, the Passport uses the microcontroller MCU’s built-in random number generator and another True Random Number Generator (TRNG) located in the secure element. TRNGs derive randomness from physical processes, making the generated numbers highly unpredictable and resistant to manipulation. This is a key factor in ensuring the security of cryptographic operations, as any predictability in the generation of keys could potentially be exploited by malicious actors.

In addition to the TRNG, the Passport incorporates an open-source Avalanche Noise Source as part of its entropy sources. Avalanche noise is a type of electronic noise generated using common parts like resistors/capacitors. By utilizing these physical processes, Passport enhances the randomness of the data used in cryptographic operations, adding an extra layer of security to the device.

Rechargeable Battery

Equipped with a 1200 mAh Lithium Ion battery in a user-removable Nokia BL-5C form factor, and the battery life is long enough for many sessions. The inclusion of a power-only USB-C port ensures efficient charging without compromising the airgapped security model.

Stunning Glass Display

The Passport boasts a high-resolution color IPS display bonded to ultra-strong glass. This vibrant display not only facilitates easy QR scanning but also provides durability against scratches and damage.

FOSS

The Passport's software is released under the GNU General Public License version 3 (GPLv3). This license ensures that the freedoms of users are protected. It includes the freedom to run, study, share, and modify the software. By adhering to the principles of GPLv3, the Passport aligns itself with the broader free software movement.

The hardware is also available as open source, with all design files, both mechanical and electrical, falling under the CERN-OHL-S license. Specifically, the hardware within the Passport, covered by CERN-OHL-S v2, is a viral, copyleft, open source license tailored for hardware projects. This license shares similar goals with GPLv3 but is specifically crafted for hardware initiatives.

Wide compatibility

Compatibility extends to various software wallets, including Bitcoin Core, BlueWallet, BTCPay, Casa, Electrum, Sparrow Wallet and others.

What’s In The Box?

The package is sent by Foundation from the U.S. If you're outside the U.S., there might be import taxes. It's a small box without any mention of bitcoin. It has a tamper-evident seal that says "VOID OPENED" if opened, along with a serial number. Before opening, check that everything is in order.

The box is shielded with bubble wrap for shipping safety. I'll now unwrap it.

The box inside proudly showcases multiple Foundation logos and the "Assembled in USA" label. However, it lacks any anti-tampering measures and is simply wrapped in plastic.

Once you've taken off the wrap, you can go ahead and open the box. The Passport will be prominently visible. Lift the housing, and you'll discover the other items inside the box.

Inside the box, you'll find the following:

• x1 Passport
• x2 MicroSD Adapters for iOS/Android devices
• x1 USB Type C cable (Power Only)
• x1 8GB Micro SD Card (SanDisk Industrial X1)
• x2 Stickers
• x1 Get Started guide

Everything you need to kickstart your experience is included, and Foundation goes the extra mile by providing adaptors, although not always essential due to the prevalence of USB Type C in modern Androids and iPhones.

Foundation Passport Quick Review

This review might be lengthy for some, so if you're short on time, you can check out the summary table below. It includes the blockdyor Score, which reflects our evaluation of key aspects related to the privacy, security, and features of the Passport.

How Does The Passport Work?

The Passport lets you receive, send and store bitcoin. It works as a hardware wallet designed to provide users with secure control over their Bitcoin assets. Positioned within the broader context of digital finance, the Passport aligns with the fundamental principle in the Bitcoin community that emphasizes the importance of self-sovereignty: "not your keys, not your coins."

Opting for the Passport over traditional exchanges grants users exclusive ownership of their financial resources, minimizing exposure to the vulnerabilities inherent in centralized platforms. The Passport's security architecture is based on the Coldcard (when it was open source), a reputable hardware wallet, featuring an open-source hardware and firmware combination with a secure element for private key storage. The Foundation team has invested significant effort independently, enhancing it through measures such as security checks, including supply chain validation. This open-source approach allows for thorough scrutiny by security researchers, contributing to a transparent and resilient hardware ecosystem.

Distinguished among hardware wallets, the Passport blends advanced security features with a user-friendly design. Notable elements include a larger display, alphanumeric keypad, and an intuitive navigation pad, all contributing to a seamless user experience. The integration of a camera and microSD slot facilitates airgapped operations, a pivotal security measure. Additionally, the Passport introduces rechargeable and removable lithium-ion batteries, eliminating the need for constant connectivity to a power source. This combination of security measures and user-centric design positions the Passport as a practical choice for users with different levels of expertise.

In terms of functionality, the Passport integrates with the Envoy mobile companion app, enhancing user experience by simplifying setup, firmware updates, and overall wallet management. The Passport, from an impartial standpoint, serves as a hardware wallet solution that embodies a commitment to financial autonomy, security, and pragmatic innovation within the evolving landscape of digital asset management.

Using the Passport does not necessitate the installation of the Envoy app on your phone/tablet, as the hardware wallet is compatible with a variety of third-party software wallets, as mentioned earlier.

Setting Up the Passport

In this section, I'll turn on the Passport, download the Envoy app and establish an airgapped connection (ensuring the hardware wallet remains offline and never connects to a computer or the internet). This process involves creating a PIN to secure the device, and within Envoy, we'll set up a wallet for receiving, storing, and signing transactions (sending funds). The private key will never leave the hardware wallet.

I won't use any other apps, just the official one called "Envoy" made by Foundation. I'll download it on my iPhone. You can use different apps like Sparrow or BlueWallet, but I want to check out all the features using the official app for now.

To get the Envoy app, you can scan the QR code printed in a paper you can find in the Passport box or click on the link on the Foundation Official website (foundationdevices.com). It's important to do this to avoid the risk of downloading the wrong or, even worse, a fake app, like with anything else online.

Turn on the Passport by long pressing the button on the right side of the device. You can also open the Envoy app on your phone/tablet, as we'll use it a bit later.

The Passport will show a Welcome message. You can press the button on the top right in the keypad to go forward to the next step.

You'll be prompted to choose between configuring the Passport with the Envoy App or opting for Manual Setup. The first option sets up the hardware wallet to work with the official software wallet, so select "Envoy App" and confirm it by clicking on the top right button in the keypad. If you prefer using third-party apps, you can choose manual setup.

In this guide, I'll use the Envoy app for simplicity, but for more advanced users, I suggest considering the separation of Signer (the hardware wallet) and Wallet (the app), similar to the distinction between Church and State.

Tap on "Continue on Envoy." Now, open the Envoy app on your phone.

As I intend to use the app for handling the Passport hardware wallet, I'll select "Manage Passport" in the Envoy app.

Following that, you'll need to choose the privacy settings for the app on your iPhone. You have the option to connect Envoy to your Bitcoin node (a highly recommended choice).

Additionally, you can decide on the method of Envoy's internet connection: Tor for heightened security or Clearnet for the traditional internet. Make your selection and proceed by clicking on "Continue."

Continue by tapping on "Set up a new Passport".

To use the Passport app you have to accept the Passport Terms of Use. Accept them by tapping on the "I Accept" button.

Now, the app will initiate a procedure to ensure the security of the Passport. Tap on the "Next" button to proceed.

On the Passport, press the top right button on the keypad to activate the scanner. Simultaneously, on Envoy, tap on "Next" to display a QR code.

Using the Passport, scan the QR Code displayed on Envoy.

Now, perform the same action from Envoy. Tap on "Next" in the Envoy app.

Tap "Continue" on Envoy. On the Passport, press the top right button to reveal the QR Code.

The initial step is complete; now, let's proceed with setting up the PIN. Tap "Continue," then head to the Passport and click the top right button on the keypad.

The Passport will now notify you that there is no way to recover a lost PIN or reset the Passport without it. It's crucial to write down this PIN in a secure place. Press the top right button on the keypad to proceed.

Press the top right button on the keypad once more to proceed.

You'll need to enter the PIN twice, ensuring it's the same both times. Once completed, the Security Check Result will display as "Passed." Click on the top right button on the keypad to finalize the process.

Here, the Passport strongly recommends once again that you write or save the PIN in a secure location. This caution is essential because forgetting the PIN could potentially result in the device becoming inaccessible after 21 incorrect attempts.

After successfully establishing and saving/writing down the PIN, it's time to generate the wallet seed. The Passport allows you to save the seed on paper or create a backup on the convenient Micro SD card.

On the Passport, you have the option to import a seed or a backup (in this instance, from the MicroSD). However, for now, I'll proceed to "Create a New Seed" by using the entropy generator of the Passport.

Now, you'll generate a new seed phrase. Click on the top right button in the keypad to proceed.

The new seed has been created. Click on the top right button in the keypad to continue.

As evident, there was no prompt to write down the seed phrase, as the Passport, by default, stores the seed phrase encrypted in the MicroSD card (you can view and write down the seed phrase later if desired). Click on the top right button on the keypad to start the process.

Now, you'll receive the Backup Code required to decrypt the backup of the seed phrase. Click on the top right button on the keypad to continue.

Click again on the top right button on the keypad to continue.

Click another time on the top right button on the keypad to continue.

Here is the backup code that you need to note down. You can utilize the recovery paper included in the box, as it has a designated section for this purpose. It's important to clarify that this is not the seed phrase itself; rather, it is a backup code used to unlock the backup file containing the seed phrase. After writing it down, click on the top right button on the keypad to continue.

Enter the Backup Code shown before, and click on the top right button on the keypad to continue.

If you enter the Backup code correctly, Passport will show it. Click on the top right button on the keypad to continue and prepare the MicroSD card contained in the box.

The Passport will prompt you to insert the MicroSD card to store the backup on this external device. Insert the SD card with the Sandisk logo facing downward and the connectors oriented downwards, as shown in the photo above. After you inserted the card, click on the top right button in the keypad to create the backup.

The backup has been saved in the MicroSD memory. Click on the top right button in the keypad to continue.

You will now proceed to connect Passport with Envoy. Click on the top right button in the keypad to create the backup.

Tap on "Get Started" on the Envoy and then click on the top right button in the keypad of the Passport.

Click on "Continue" on Envoy and the top right button on the Passport.

Using the Envoy, scan the QR Code shown on the Passport.

You will receive confirmation of a successful connection, and next, you can verify the receiving address by clicking on the "Validate receive address" option.

Upon returning to the Passport, you will be prompted to scan the receiving address generated on the Envoy.

Point the camera to the QR Code and scan it.

The receiving address displayed on the passport should match the one shown in Envoy. Confirm the match and proceed by clicking the button located at the top right of the keypad.

"Connection Complete" will be displayed on the Passport. Click the top right button on the Passport and tap "Continue" on Envoy to proceed.

You have finally configured your Passport to work seamlessly with Envoy. Click the top right button on the Passport to finish.

The main dashboard of the Passport is designed for simplicity, with key functionalities easily accessible:

1. Sign with QR Code: To send funds (BTC) securely, sign the transaction by scanning the QR code in an airgapped manner.
2. Sign with microSD: If the broadcasting device lacks a camera for QR code scanning, you can utilize this option for transaction signing.
3. Verify Address: Verify and ensure the accuracy of the recipient address before proceeding with any transaction.
4. Manage Account: Access account management features to handle various account-related settings.

By navigating left and right, additional options and functionalities become available on the dashboard.

Sending/Receiving Funds with the Passport

To start the process of receiving or sending funds using the Passport, begin by setting up the transaction in Envoy. Tap on the colored wallet area to start the setup process.

Within the Account Detail view, you have the following options:

1. Receive (1): Accessing this option will provide you with a receiving address where you can receive funds. Share this address to receive payments.
2. Send (2): This option allows you to sign transactions with the Passport by scanning a QR Code that will be generated and displayed by the Passport. Use this for secure and convenient transaction signing.

Design & Hardware

This hardware wallet stands out as one of the most impressive bitcoin-only hardware wallets I've encountered to date. Resembling the compact form of early 2000s Nokia phones, it is discreet and small enough to easily pass through airport security without drawing attention.

The premium feel is accentuated by its weight of 128 grams (4.52 oz), thanks to the zinc alloy body plated in copper.