Foundation's avatar
Foundation
_@foundation.xyz
npub1s0vt...pq6j
We build Bitcoin-centric tools that empower you to reclaim your sovereignty, including Passport hardware wallet and Envoy app. Open source, USA assembled. Learn more at https://foundation.xyz
Foundation's avatar
Foundation 3 weeks ago
Passport Prime got a refresh. New launcher. New icons. New look. How are we feeling about the new UI? 👀 image
Foundation's avatar
Foundation 3 weeks ago
Switch to open source. It's time for a new foundation. 09.15 | 10AM ET foundation.xyz/switch
Foundation's avatar
Foundation 1 month ago
You asked, we listened. 📍 UPS Access Point pickup is now live for US orders, giving you more privacy and control over where your Passport is delivered. Enter an address at checkout, and nearby pickup locations will appear under Shipping. We truly value your feedback and are already working to bring this option worldwide. 🌍 You can order here today with pickup options available: image
Foundation's avatar
Foundation 2 months ago
Thank you so much to those who have been submitting AI security reports to us over the last few days, especially Rob Hamilton. Since Thursday evening we have been engaged in internal code review and hardening. We have confirmed that seed generation in all Passport models is secure. By design, Passport models use at least 2 sources of entropy (randomness). Typically we don't post deeply technical updates, but given the events of the last few days, we will continue to post technical updates about our FOSS codebases. All Passport models include three sources of randomness: (1) Avalanche noise source (ANS), an open architecture true random number generator (no black box silicon) (2) MCU or MPU true random number generator (TRNG) depending on the model (3) Secure Element TRNG Passport Core uses all three sources when generating seeds. Multiple parties reported a scenario, which we also identified during our internal review on Thursday evening, where a theoretical ANS hardware failure would cause Passport Core to continue seed generation using the MCU and Secure Element TRNGs. (We are not aware of any ANS hardware failure in any Passport Core unit) Some AI models, specifically Kimi, are confused about this scenario and are falsely reporting that in the case of ANS hardware failure there is no additional entropy added. This is false. In this scenario, the Foundation team has confirmed that Passport Core still incorporates 2 sources of entropy during seed generation. Two sources provide more than sufficient entropy. But the better behavior is to instead refuse to generate the seed at all if the ANS fails. So we are hardening the code accordingly. Additionally, Passport Prime currently uses two sources of entropy for seed generation: ANS and MPU TRNG. We have confirmed that this seed generation path is secure. This is more than sufficient entropy but we are also adding in the Secure Element TRNG to the seed generation process. The Secure Element TRNG introduces some latency (it is slower) but we have always intended to use it as a third source of entropy for seed generation on Passport Prime. We have already made this code change internally. We will be releasing firmware updates in the coming days. All seeds generated on Passport hardware are safe. Please let us know what questions you have.
Foundation's avatar
Foundation 2 months ago
Most ambassador programs are affiliate links with a better name. Ours was too, so we rebuilt it. The new Foundation Ambassador Program includes more ways to earn through tasks, a ready-to-use content bank, exclusive merch and rewards, early product insights, and a private forum with direct access to our team. Referrals remain simple: earn $10 in Foundation store credit while the person using your code gets a free bumper case. Already an ambassador? Your account is waiting. New here? Join in less than a minute: image
Foundation's avatar
Foundation 2 months ago
KeyOS v1.3.0 is now available 🎉 This is one of our biggest KeyOS releases yet, with lots of new features. What's new: 🌱 Import external Bitcoin seeds into Vault 🟣 Import Nostr keys into Vault 🔐 Generate BIP85 passwords 📲 Mass-import 2FA codes from Google Authenticator 🔍 Scan almost any QR with the new Universal QR Scanner 📈 Scrub the Bitcoin price graph to view historical prices A huge thank you to our developers for all the work that went into this release, and to a third-party dev, immz4, for contributing to the Google Authenticator import feature. There are many more improvements and bug fixes across the Bitcoin wallet, 2FA, security keys, onboarding, Airlock, backups, USB, Bluetooth, and the wider KeyOS experience. Read the full release notes on our blog: image
Foundation's avatar
Foundation 4 months ago
Big tech apps are built to watch you. Passport Prime apps are built to protect you 💥
Foundation's avatar
Foundation 6 months ago
This week, we launched Passport Prime into the world. We showed you how Passport Prime is built. KeyOS. QuantumLink. The open source hardware. The security architecture from top to bottom. But security architecture doesn't mean much if it doesn't solve real problems for real people. So let's talk about what Passport Prime actually does for you, every single day. Bitcoin wallet, Passport Prime is a best-in-class Bitcoin hardware wallet. Multisig. Passphrases. Temporary seeds. It supports every major Bitcoin software wallet you already use, and it pairs seamlessly with Envoy via QuantumLink. No more squinting at QR codes under bad lighting. Just tap, authorize, done. 2FA codes, offline. Right now, your two-factor authentication codes probably live on your phone. The same phone that's connected to the internet 24 hours a day. Passport Prime stores your 2FA codes in a secure, offline environment. If someone compromises your phone, your 2FA codes aren't there to find. Security keys, Passport Prime replaces every YubiKey you own. Create multiple security keys and use them over NFC. Tap your Passport Prime to log in. No more juggling a drawer full of keys. Encrypted file storage, 50 GB of secure, offline storage for your most important files. Tax documents. Recovery phrases. Legal records. Whatever you need to protect. Here's what makes it different: when you plug Passport Prime into your computer, it only exposes the files in your Airlock, a sandboxed folder you control. Everything else stays hidden. Seed vault, If you're deep in Bitcoin, you know the chaos of managing seed words across multiple wallets. Passport Prime brings them all into one place. Create new seeds, temporarily load existing ones, organize them all in the Seed Vault app. You can also manually add your most secure passwords. We're just getting started. Everything above ships today. KeyOS, the custom operating system powering Passport Prime, was built from day one as a developer platform. Every app runs in its own sandbox. Every app receives a hardened child seed, meaning even a malicious app has zero access to your master seed and cannot communicate with other apps. This is what unlocks everything. We are opening the developer SDK so that any team can build apps for KeyOS. Our friends at Cake Wallet are already building the first third-party app. But think about what comes next: password managers that never touch the internet. Encrypted messaging key storage. Nostr identity management. PGP signing. The possibilities are as wide as the developer community that builds on it. One device that starts as the most capable personal security device on the market, and only gets more powerful over time. Passport Prime. Open source. Made in the USA. This is what taking control of your digital life actually looks like. 🧡 image
Foundation's avatar
Foundation 6 months ago
What if the Bluetooth chip inside your security device were malicious? Compromised firmware. A supply chain attack. With Passport Prime, it wouldn't matter, because we built QuantumLink. QuantumLink is a new wireless protocol we designed from the ground up with Blockchain Commons. It encrypts every piece of data before it ever reaches the Bluetooth chip, using quantum-resistant cryptography. Here's what that means in practice: The Bluetooth chip in Passport Prime is physically isolated from the security processor running KeyOS. All data passing through it is already encrypted using CRYSTALS-Kyber key exchange and ChaCha20-Poly1305 symmetric encryption, both designed to withstand attacks from quantum computers. The Bluetooth chip never sees unencrypted data. It can't read what it relays. It can't inject commands. Even if it were fully compromised, it would have nothing useful to work with. Setup takes seconds. Passport Prime displays a QR code during onboarding. Scan it with Envoy, and a fully encrypted tunnel is established, no pairing codes, no trust prompts. From there, you get the real-time convenience of wireless communication, interacting with Envoy, updating KeyOS, and accessing new features, without compromising on security. And if you ever want zero wireless, one tap in KeyOS powers down the Bluetooth chip entirely. We built QuantumLink because wireless and secure shouldn't be a tradeoff. Read the full technical deep dive here:
Foundation's avatar
Foundation 6 months ago
We spent three years building our own operating system from scratch. No Android. No off-the-shelf firmware. Just a microkernel OS written in Rust. KeyOS powers Passport Prime and delivers real process isolation, every app sandboxed, secure message-passing between processes, running on a 500 MHz security processor. It's fully open-source, built on the Xous kernel, and we're opening it up to third-party developers. Every app must be open-source with reproducible builds. Full technical deep dive: foundation.xyz/2024/12/building-keyos/ image
Foundation's avatar
Foundation 6 months ago
We're thrilled to announce that Passport Prime is officially shipping. 🎊 We set out to build something that didn't exist, that doesn’t fit neatly into any existing categories. Manufactured in the USA, built on open-source principles. New hardware. New OS. New communication layer. New software. What makes Passport Prime different: We built a brand new operating system from scratch. KeyOS uses a modern microkernel design where only the most critical functions run at the core, keeping apps and sensitive data completely segregated. We created QuantumLink, a quantum-resistant Bluetooth protocol that delivers wireless convenience with air-gapped level security. Before shipping, we commissioned a full third-party security audit by Keylabs. The result: zero critical or high-severity vulnerabilities. The full audit and our response are publicly available here: Passport Prime ships in a premium package: - 3.5" Gorilla Glass touchscreen - CNC-machined aluminum body - 3x NFC KeyCards with Faraday sleeves - USB-C cable. Looking ahead, we're continuing to build KeyOS improvements, a developer SDK, third-party app support, and accessories are all on the roadmap. This is just the beginning. → Learn more: image
Foundation's avatar
Foundation 11 months ago
image Before Passport Prime ships, we commissioned a full third-party security audit from Keylabs, the same team behind the well-known wallet.fail research. Their review covered every layer of Passport Prime, from hardware and firmware to system architecture to evaluate its resilience against real-world attack scenarios. The results: no critical or high-severity vulnerabilities were found. All observations were classified as low severity, requiring physical access and advanced tools. Keylabs concluded that Prime’s architecture demonstrates “exceptional security design principles and sophisticated implementation,” and “a highly secure architecture that exceeds industry standards.” We’ve published the full breakdown, findings, and our response here:
Foundation's avatar
Foundation 1 year ago
🔥 Privacy just leveled up. We value every part of your digital life; that’s why we’ve partnered with Cloaked Wireless. Every Foundation product now comes with a FREE Cloaked Wireless SIM + 1 month free plan (up to $75 value). While stocks last. Here’s how it works 👇 1️⃣ Order any Foundation product. At checkout, enter cloaked in the coupon section. 2️⃣ Once your Foundation order ships, you’ll receive an email with your voucher code and instructions to redeem on the Cloaked Wireless website. 3️⃣ Activate your Cloaked Wireless plan and SIM in minutes: 🔷 Bring your number + device 🔷 Choose from powerful privacy features 🔷 Enjoy nationwide 5G coverage 🔷 Pay with Bitcoin if you want in the future for full privacy. With Foundation, your keys are secure. With Cloaked Wireless, your phone line is secure. Start protecting both today 👉 image
Foundation's avatar
Foundation 1 year ago
📊 97% of apps track your personal data. 🔎 80% share it with third parties. Foundation: 0% tracking. 0% data collection. Your privacy isn’t a product. It’s a right.
Foundation's avatar
Foundation 1 year ago
We don’t outsource your freedom. We’re on the factory floor, hands on every step — because real sovereignty starts with how your tools are made. Foundation builds open-source freedom tech. And we build it in the USA. 🇺🇸
Foundation's avatar
Foundation 1 year ago
BITCOIN IS FREE. WHY ARE YOUR TOOLS CLOSED? Bitcoin is open-source. Your tools should be too. ❌ Closed-source. Blind trust ❌ Audits? Rare. ❌Backdoors? Possible. ✅ Every Foundation product is open-source, now and forever. Auditable. Verifiable. Secure.
↑