News
Ratings
Learn
Companies
Open Companies →
Who runs each service, how it works, where the risks are.All 30 companies A–Z →
About
New to crypto? Start here
Hardware Wallets · OBOL rating

Foundation Passport review

Fully open hardware and firmware, assembled in the United States, with a phone-like interface that makes air-gapping bearable.

8.2/10
Strong
#7 of 15 hardware walletsChecked August 2026
The short answer

Passport is the most transparent product in this category: both firmware and hardware designs are open, it is assembled in the United States with a documented supply chain, and its air gap uses a camera and microSD with no radio at all. It costs around $199 and supports Bitcoin only.

Best forAir-gapped Bitcoin with hardware you can inspect

Score breakdown

Category rubric →
  1. Key isolationweight 25%
    9.0avg 8.6
  2. Firmware opennessweight 20%
    9.5avg 7.8
  3. Recovery designweight 20%
    8.5avg 8.1
  4. Asset coverageweight 15%
    4.0avg 7.3
  5. Vendor conductweight 10%
    9.0avg 7.9
  6. Usabilityweight 10%
    8.5avg 8.1

this service category average across 15Score = Σ mark × weight. Recommendable to most readers, with stated caveats. Methodology.

The evidence behind each mark

Scoring rules →
CriterionMarkWhat we foundSourceChecked
Key isolation9.0not sourced yetnot sourced yet—
Firmware openness9.5not sourced yetnot sourced yet—
Recovery design8.5not sourced yetnot sourced yet—
Asset coverage4.0not sourced yetnot sourced yet—
Vendor conduct9.0not sourced yetnot sourced yet—
Usability8.5not sourced yetnot sourced yet—

What we liked, and what fell short

Liked
  • Open hardware designs as well as open firmware
  • Camera-and-microSD air gap with no radio at all
  • Genuinely pleasant interface for a security device
Fell short
  • Bitcoin only and priced at the top of the range
  • Small vendor, so long-term support carries more risk

Why the marks landed where they did

Most hardware wallets ask you to trust the vendor's account of what is inside the case. Foundation publishes the schematics. Combined with US assembly and a documented supply chain, that answers the supply-chain question more completely than any competitor.

The air gap and the interface

No USB data, no Bluetooth, no Wi-Fi — transactions move by QR code through the camera and screen or by microSD. The interface is deliberately phone-like, with a keypad and a colour screen, which makes the air-gapped workflow bearable rather than punishing. Envoy, its companion app, handles account management and firmware updates.

What it costs you

Around $199, which is at the top of the range, for a device supporting one chain. If you hold anything besides Bitcoin you need a second device. Foundation is also a small company, so long-term firmware support carries more risk than it does with Trezor or Ledger.

Security specifics

A secure element stores the key, firmware is open and verifiable, and the device supports passphrases and multisig with Sparrow and other coordinators. There is no incident history.

Who should use it

Bitcoin holders who prioritise verifiability and supply-chain transparency, and who want an air-gapped device they will actually enjoy using. For multi-chain needs, look at Keystone.

FAQ

Is Passport's hardware open source?
Yes — both the firmware and the hardware designs are published, which is unique in this category and addresses supply-chain trust more completely than firmware openness alone.
Does Passport support Ethereum?
No. It is Bitcoin-only, which keeps the firmware small and the attack surface narrow.
How does Passport connect?
It does not. Transactions move by QR code through the camera and screen, or by microSD card. There is no USB data connection, Bluetooth or Wi-Fi.
Is Foundation a reliable long-term vendor?
It is a small company, which is a genuine risk for firmware support over many years. The BIP39 seed can always be restored on another device if needed.