An update from Zach our CEO regarding passport prime:
To our Passport Prime Early Access customers: we appreciate your continued patience as our @FOUNDATIONdvcs team works to get devices into your hands. It’s taken longer than we thought it would – and while I still don’t have an exact date, we are much closer now and are aiming to begin shipping in the coming weeks. Below is a detailed update of where we are from a hardware and software perspective.
While Passport Prime will be the third device Foundation has created, it’s really an entirely new, first-generation device running a new operating system (KeyOS) and new hardware architecture. It’s the first of its kind personal security platform that will enable an open, permissionless developer ecosystem for third party apps.
It’s been an enormous effort to build KeyOS, ensure it is secure, and create the first-party apps that are shipping with Passport Prime. This week we officially finished our security audit by @keylabsio, who we think is best in the business. We will publish the final report next week and are finishing up implementing the suggestions from the audit to ensure Passport Prime is the most secure device on the market.
Completing the audit is a major milestone and was one of the items blocking us from being able to finalize the v1.0 bootloader and KeyOS release. I’m sharing a screenshot of the Conclusion page below, but I also wanted to share the last sentence of the report:
“This results in a highly secure hardware wallet architecture that exceeds industry standards for protecting users' digital assets.”
With Passport Prime and KeyOS, we are aiming to not only match industry standard security (cough, Ledger, cough), but exceed it. I am proud to say that we have done that.
Now that the audit is complete, the team is rigorously testing the firmware update process, so that when you unbox your Passport Prime and connect it to Envoy, it will seamlessly update to the latest KeyOS firmware.
This is of the utmost importance because we can fix most bugs with updates, even after shipping, but there cannot be any bugs in the initial process of connecting Passport Prime to Envoy and initiating a firmware update.
Once we internally deem that firmware updates are bulletproof, we will give the factory the go-ahead to provision all circuit boards with KeyOS and complete final assembly and packaging.
In the meantime, we are squashing bugs in our first-party apps and working to complete all Bitcoin app features. Since this is the Early Access batch, we do expect that there will be some bugs and/or some incomplete features across apps, but we want to ensure that (1) there are absolutely no bugs that will affect device security and (2) that the Bitcoin app has parity with the Passport Core experience, supports all the same software wallets, and so on.
I will continue to post regular updates and will also publish a video walking through the latest version of KeyOS. Please let me know if you have any questions! Thanks for reading.
Before Passport Prime ships, we commissioned a full third-party security audit from Keylabs, the same team behind the well-known wallet.fail research. Their review covered every layer of Passport Prime, from hardware and firmware to system architecture to evaluate its resilience against real-world attack scenarios.
The results: no critical or high-severity vulnerabilities were found. All observations were classified as low severity, requiring physical access and advanced tools. Keylabs concluded that Prime’s architecture demonstrates “exceptional security design principles and sophisticated implementation,” and “a highly secure architecture that exceeds industry standards.”
We’ve published the full breakdown, findings, and our response here:
