Foundation Passport Core Review 2026: Air-Gapped Bitcoin Wallet with Open-Source Hardware

The Foundation Passport Core is a Bitcoin-only hardware wallet built around two principles: fully open-source design and complete air-gapped security. No USB data. No Bluetooth. No wireless connections of any kind. Every transaction flows through QR codes or a microSD card, keeping your private keys (the secret codes that control your bitcoin) permanently isolated from the internet.

Foundation Devices, a Boston-based company led by CEO Zach Herbert, rebranded the device from "Passport" to "Passport Core" in March 2025. The name change distinguishes it from their newer Passport Prime, a next-generation security platform shipping in early 2026 at $349. The Passport Core remains their focused, dedicated Bitcoin signing device.

At $199 from foundation.xyz (sometimes discounted to $189), it sits in the mid-range of serious hardware wallets. You are paying more than a Blockstream Jade Plus ($149) or BitBox02 ($149), but less than the Passport Prime. Is the premium justified? After extensive testing and community research, here is my honest assessment.

Key Takeaways

• Fully open-source hardware schematics and firmware, published on GitHub and audited by Keylabs
• Complete air gap via QR codes and microSD; the USB-C port carries power only, zero data
• Envoy companion app rated 4.6/5 on iOS and 4.2/5 on Google Play, with encrypted backup and Tor support
• Bitcoin-only, no altcoin support by design
• Solid build quality with zinc anodized aluminum chassis, Gorilla Glass display, and removable battery
• Latest firmware (v2.3.11) added ephemeral seed support, message signing via QR, and new wallet integrations
• Rating: 8.2/10, losing points for T-9 keyboard input speed and limited display utilization

Who Makes the Passport Core? Foundation Devices Background

Before trusting a device with your bitcoin, you should know who built it.

Foundation Devices was co-founded by Zach Herbert and is headquartered in Boston, Massachusetts. The company assembles the Passport Core in the USA. They have raised over $7 million in funding and are focused exclusively on Bitcoin sovereignty tools.

Their open-source commitment is genuine and verifiable. Both the hardware schematics and firmware source code are published on GitHub. The firmware has been independently audited by Keylabs. Any developer or security researcher can review, fork, or build from the source. With Foundation, you (or someone you trust) can verify exactly what the device does with your keys.

What You Get in the Box

The Passport Core ships in clean, minimal packaging:

• The Passport Core device
• USB-C cable (charging only; no data transfer)
• Industrial-grade microSD card (for firmware updates and encrypted backups)
• Quick start guide
• Backup card for your seed phrase (the 12 or 24 words that recover your wallet)

No unnecessary plastic or marketing fluff. The unboxing experience matches the product's positioning: intentional and premium.

Build Quality and Hardware Specs

This is where the Passport Core immediately separates itself from competitors. The device has a zinc anodized aluminum chassis that feels genuinely premium. At 163g (5.75 oz), it has real heft compared to the plastic shells on many competing wallets.

Here are the verified specs:

The removable battery is a thoughtful design choice. It uses the standard Nokia BL-5C form factor, meaning replacements cost under $10 and will be available for years. Compare that to sealed rechargeable cells that degrade over time. For a device meant to protect generational wealth, long-term repairability matters.

The Gorilla Glass adds durability you will not find on cheaper devices. The physical T-9 keypad provides tactile feedback and avoids the security concerns of touchscreens (which can leave smudge patterns revealing your PIN). The color display handles QR codes and addresses well, though some users note that address text can appear small.

How the Air Gap Works: QR Code Transaction Signing

The Passport Core never establishes a data connection to any computer or phone. All communication happens through QR codes scanned by the built-in camera, or through a physically transferred microSD card.

Here is the QR code signing flow:

1. Your wallet software (Envoy, Sparrow, or another compatible app) creates a transaction and displays it as an animated QR code on your phone or computer screen
2. You point the Passport Core's camera at the QR code to scan it
3. The Passport Core displays the full transaction details on its screen: destination address, amount, and fees
4. You verify everything looks correct and confirm on the device using the physical buttons
5. The Passport Core generates a signed transaction and displays it as a QR code on its own screen
6. Your wallet software scans that signed QR code from the Passport Core's display
7. The wallet broadcasts the signed transaction to the Bitcoin network

The entire process takes roughly 30 seconds once you are comfortable with it. Yes, it is more steps than plugging in a USB cable. The tradeoff is that your private keys never, at any point, touch a network-connected device. That is a meaningful security upgrade.

MicroSD alternative: For complex transactions or PSBT (Partially Signed Bitcoin Transaction) files that would create excessively long QR sequences, you can transfer data via microSD card instead. This works well for multisig setups or large batched transactions.

The camera is fast and reliable on current production models. Early batches had some reports of slow QR scanning, but that has been resolved.

Envoy App: The Best Companion Wallet for a Hardware Device

Foundation's Envoy app is, in my experience, the most polished mobile wallet interface paired with any hardware wallet on the market. It is available on iOS (rated 4.6/5 from 29 ratings) and Android (rated 4.2/5 from 31 reviews), and it is fully open-source.

Envoy handles:

• Wallet setup and device pairing via QR codes
• Transaction creation and broadcasting
• Firmware update coordination for the Passport Core
• Magic Backups: encrypted cloud backups of your wallet configuration (encrypted client-side before upload; Foundation cannot read them)
• Coin control for privacy management (choosing which specific bitcoin UTXOs to spend)
• Built-in bitcoin purchasing through Ramp Network integration
• Privacy Shield and Activity Center for monitoring account activity
• A "Learn" tab with educational content for newer users

The design is clean, fast, and intuitive. Users moving from Ledger Live or Trezor Suite frequently comment on how much smoother Envoy feels. The Magic Backup system is particularly clever: if you lose your phone, you restore from the encrypted backup. Since Foundation only stores the encrypted blob and never holds your decryption key, they cannot access your wallet data.

Foundation announced in mid-2025 that Lightning Network support is coming to Envoy, adding fast, low-cost payments alongside the existing on-chain wallet.

Privacy note: By default, Envoy connects to Foundation's servers for blockchain data, meaning they could see your addresses and transaction history. You can route through Tor (a privacy network that masks your IP) or connect to your own Electrum server. I recommend enabling Tor at minimum.

You do not have to use Envoy. The Passport Core works with Sparrow Wallet, BlueWallet, Specter Desktop, Nunchuk, Fully Noded, Bull Wallet, and any wallet supporting PSBTs and QR signing. But Envoy is the native experience, and it shows.

Open-Source Security: Why It Actually Matters

"Open-source" gets thrown around as marketing. With Foundation, it is substantive.

Both the Passport Core's hardware schematics and firmware code are publicly available on GitHub. Security researchers can (and do) audit for vulnerabilities. You can verify that your device runs the published source. No hidden backdoors, because the community can inspect every line. You could even build the firmware yourself.

Here is how open-source commitment compares across the market:

The Passport Core uses a Microchip ATECC608B secure element (a tamper-resistant chip that stores cryptographic secrets) alongside an open-source STM32 main processor. The secure element stores your seed, while the open-source processor handles the user interface and transaction logic.

Foundation's honest approach to the secure element: They acknowledge the ATECC608B is closed-source (all secure elements from major vendors are) and published a detailed explanation of exactly what it can and cannot access. Your seed is encrypted before storage on the secure element, and the encryption key derives from your PIN. Even if the chip were compromised, an attacker would still need your PIN.

Security Features in Detail

Supply chain verification. On first setup, the device validates its hardware authenticity through a challenge-response check with Foundation's servers. Security indicator lights provide additional visual tamper evidence.

PIN protection with auto-wipe. After 21 incorrect PIN attempts, the device automatically disables itself. Anti-phishing words display during PIN entry so you can confirm you are using a genuine Passport Core.

BIP39 passphrase support. Add an optional passphrase to create an entirely separate set of wallets. Even if someone obtains your seed words, they cannot access passphrase-protected funds. Read more in our seed phrase guide.

Multisig support. The Passport Core handles multisig setups and integrates well with Sparrow Wallet. If you are building a serious self-custody setup, it works smoothly alongside a Coldcard in 2-of-3 or 3-of-5 arrangements.

Firmware verification. Updates install via microSD card. The device cryptographically verifies each firmware signature before installing.

Ephemeral seed support (v2.3.11). The December 2025 update added temporary seeds for testing without affecting your primary wallet.

SeedQR import/export. Encode your seed phrase as a QR code for quick import, also compatible with SeedSigner devices.

What Real Users Say: Reddit and Community Feedback (2024-2026)

I researched actual user discussions across r/Bitcoin, r/BitcoinBeginners, r/FoundationDevices, and the Foundation community forum. Here is what real owners consistently report.

What users praise:

• Build quality is the top positive. Users coming from Trezor describe the difference as "not in the same universe." The aluminum body gets specific callouts in nearly every thread.
• Envoy app gets high marks from users switching from Ledger Live or Trezor Suite. Setup and daily use are consistently called "smooth" and "intuitive."
• QR code reliability on current models is fast. Earlier batch issues are resolved.
• Customer support via Foundation's Telegram group is described as "amazingly helpful."

What users criticize:

• T-9 passphrase entry is slow. The old-mobile-phone keyboard is "cumbersome" for long passphrases. This is the most common functional complaint.
• Price. At $199, it costs more than Jade Plus ($149), BitBox02 ($149), or Trezor Safe 5 ($169).
• Fewer advanced features than Coldcard. No duress PINs, trick PINs, or dual secure elements.
• Availability outside the USA. UK and European buyers report import duties and limited retailers.
• Screen text size. Some users wish addresses appeared larger on the 1.8-inch display.
• No battery percentage indicator. Only a low-battery warning, no readout.

Passport Core vs. Coldcard Mk4: Detailed Comparison

This is the matchup most Bitcoin holders want to see. Both are Bitcoin-only, security-focused, and designed for serious long-term storage.

Bottom line: If you want the best user experience paired with genuine open-source security, get the Passport Core. If you want maximum anti-coercion features (duress PINs, trick PINs, countdown timers) and do not mind a steeper learning curve, the Coldcard Mk4 is the right choice. Both are excellent. They optimize for different priorities.

The Coldcard's dual secure element setup, sourced from two different vendors, eliminates single-vendor risk. That is a real security advantage. The Passport Core counters with fully open-source hardware and a significantly better companion app experience.

Passport Core vs. Trezor Safe 5

Completely different philosophies.

The Trezor Safe 5 is $30 cheaper and supports thousands of cryptocurrencies. If you hold multiple assets and want one device, Trezor is the practical choice. If you hold bitcoin exclusively and want air-gapped security with open-source hardware, the Passport Core operates in a different category entirely.

Passport Core vs. Jade Plus and BitBox02

Two strong mid-range alternatives worth considering:

The Jade Plus at $149 is the strongest value competitor. It offers QR-based air-gap signing, Bluetooth, open-source hardware, and a slightly larger screen. Its "Blind Oracle" virtual secure element is innovative but less proven than a physical secure element. If budget matters and you want versatile connectivity options, Jade Plus deserves serious consideration.

The BitBox02 Bitcoin-only edition at $149 is compact, well-designed, and has an excellent desktop app. However, it requires a USB connection (no air-gap option), and its hardware is not open-source. It is a strong wallet, but a different security model.

Use our wallet comparison tool to see all these devices side by side with your own priorities weighted.

Passport Prime: The Next Generation

Foundation announced the Passport Prime in December 2024 and began shipping in early 2026 at $349. It is not just a hardware wallet. Foundation positions it as a "Personal Security Platform" running KeyOS, their open-source OS, with a 3.5-inch touchscreen, NFC, 2FA authenticator, 50 GB encrypted storage, and encrypted Bluetooth.

The Passport Core remains the better choice if you want a focused, proven Bitcoin signing device at a lower price. The Prime makes sense if you want a broader security platform and are willing to pay the premium.

Setup: What to Expect

Setting up the Passport Core takes about 15 to 20 minutes. The process: charge via USB-C, run supply chain verification, create or import a seed phrase, set your PIN, back up your seed phrase to the included card, and pair with Envoy (or your preferred wallet) by scanning QR codes. Optionally, configure an encrypted microSD backup and a BIP39 passphrase.

The Envoy app walks you through each step with clear instructions. If you have set up a hardware wallet before, this will feel familiar but smoother than most.

Pros and Cons

Pros:

1. Fully open-source hardware and firmware, independently audited, assembled in the USA
2. Complete air gap with no data connections of any kind; QR and microSD only
3. Envoy is the best companion app in the hardware wallet space, with encrypted backups, Tor support, and coin control
4. Premium build quality with zinc aluminum chassis, Gorilla Glass, and removable battery
5. Active firmware development with meaningful updates through 2025 (ephemeral seeds, message signing, new wallet integrations)
6. Strong community and responsive support via Telegram and the Foundation community forum

Cons:

1. T-9 keypad makes passphrase entry slow, especially for long or complex passphrases
2. $199 price point is higher than strong competitors like Jade Plus ($149) and BitBox02 ($149)
3. Fewer advanced security features than Coldcard Mk4 (no duress PIN, no dual secure element)
4. No battery percentage display, only a low-battery warning
5. Screen does not always maximize text size for addresses, which some users find frustrating
6. Availability outside the USA can involve import duties and limited retailer options

Who Should Buy the Passport Core?

Great fit for:

• Bitcoin holders who want serious air-gapped security without a punishing learning curve
• Anyone upgrading from a Ledger or Trezor who wants a Bitcoin-focused, open-source device
• Users who value verifiable, audited open-source hardware
• People who care about build quality and want a device that feels like it will last decades
• Multisig participants who need a reliable QR-based signing device alongside a Coldcard or SeedSigner

Not the right fit for:

• Complete beginners who have never held bitcoin (start with a simpler setup, then upgrade; see our self-custody guide)
• Anyone holding multiple cryptocurrencies (Passport Core is Bitcoin-only by design)
• Budget-conscious buyers (the Jade Plus at $149 offers strong air-gapped security for less)
• Users who want maximum anti-coercion features (Coldcard Mk4 is better here)
• People outside the USA who want hassle-free purchasing

Verdict: 8.2/10

The Foundation Passport Core is the best-built, most thoughtfully designed Bitcoin hardware wallet you can buy today. Fully open-source hardware and firmware, a genuine air gap with no data connectivity, and the Envoy companion app set a standard that competitors have not matched.

It loses points for the slow T-9 passphrase entry, a price that sits above strong alternatives, and the absence of advanced anti-coercion features found on the Coldcard. The missing battery percentage indicator is a small annoyance.

If you are holding bitcoin for the long term and want a device that combines real security with genuine build quality and an excellent software experience, the Passport Core is the one I recommend to most people.

[Buy the Foundation Passport Core](/go/foundation)

Frequently Asked Questions

Is the Foundation Passport Core safe to use?

Yes. The Passport Core uses a Microchip ATECC608B secure element, fully open-source firmware audited by Keylabs, and a complete air gap with no data connections. Your private keys never touch an internet-connected device. Supply chain verification on first setup confirms the device has not been tampered with.

What is the difference between Passport Core and Passport Prime?

The Passport Core ($199) is a focused Bitcoin signing device with QR-based air-gap security. The Passport Prime ($349) is a broader "Personal Security Platform" with a 3.5-inch touchscreen, NFC, 2FA, 50 GB encrypted storage, and encrypted Bluetooth. The Core is proven and focused. The Prime is newer and more versatile.

Can I use the Passport Core without the Envoy app?

Absolutely. The Passport Core works with Sparrow Wallet, BlueWallet, Specter Desktop, Nunchuk, Fully Noded, Bull Wallet, and any software that supports PSBTs and QR code signing. Envoy is Foundation's companion app and provides the smoothest experience, but it is entirely optional.

How long does the Passport Core battery last?

The 1,200 mAh removable battery lasts for multiple signing sessions before needing a recharge. Exact battery life depends on usage patterns. Since you only power on the device when signing transactions, most users charge it infrequently. The battery uses the standard Nokia BL-5C form factor and costs under $10 to replace.

Is the Passport Core better than the Coldcard Mk4?

They excel at different things. The Passport Core offers better build quality, open-source hardware, a superior companion app (Envoy), and QR-based air-gap signing. The Coldcard Mk4 offers dual secure elements, duress PINs, NFC signing, and more advanced anti-coercion features. Choose based on whether you prioritize user experience (Passport Core) or maximum security depth (Coldcard).

Does the Passport Core support multisig?

Yes. The Passport Core fully supports multisig configurations and works well with Sparrow Wallet for setting up 2-of-3 or other multi-key arrangements. It pairs smoothly with other signing devices like the Coldcard Mk4 or SeedSigner in a multisig quorum.

Can I recover my bitcoin if the Passport Core breaks?

Yes. Your bitcoin is secured by your seed phrase (12 or 24 words), not by the device itself. If your Passport Core breaks, gets lost, or is destroyed, you can recover your full wallet on any BIP39-compatible hardware or software wallet using your seed phrase. This is why securely storing your seed phrase backup is critical. Learn more in our seed phrase guide.

How does the Passport Core compare to cheaper wallets like the Jade Plus?

The Jade Plus at $149 is $50 less and offers QR air-gap signing, Bluetooth, and open-source hardware. The Passport Core justifies its higher price through superior build quality (metal vs. standard construction), the Envoy companion app, a physical secure element (vs. virtual), and a longer track record. If budget is your primary concern, the Jade Plus is a strong alternative.

What firmware version is the Passport Core on?

As of early 2026, the latest firmware is version 2.3.11, released December 12, 2025. It added ephemeral seed support, message signing via QR codes, and connection flows for Fully Noded and Bull Wallet. Foundation releases firmware updates via microSD card, and the device verifies each update's cryptographic signature before installing.

Does the Passport Core support Taproot?

Yes. The Passport Core supports Taproot, Bitcoin's latest major upgrade that enables more efficient and private transactions. Miniscript support (a framework for writing complex Bitcoin spending conditions) was expected in Q2 2025.

What to Do Next

1. Compare your options using our hardware wallet comparison tool to see how the Passport Core stacks up against every device we have reviewed.
2. Read competitor reviews to make an informed decision: Coldcard Mk4, Trezor Safe 5, Jade Plus, BitBox02, or build your own SeedSigner.
3. Set up your self-custody plan before buying any hardware wallet. Our self-custody guide walks you through the full process, from choosing a wallet to testing your backup recovery.
4. Consider multisig if you are protecting a significant amount of bitcoin. The Passport Core pairs well with a Coldcard Mk4 in a 2-of-3 configuration using Sparrow Wallet. Two different devices from two different manufacturers means no single point of failure.
5. Test your backup. After setting up your Passport Core, practice recovering from your seed phrase on a separate device before loading significant funds. Verify your backup works before you need it.

[Get the Foundation Passport Core](/go/foundation)