Foundation Passport on security architecture
9.2/ 35% of the score
Secure element with the PIN verified in hardware and no data-carrying USB path; security documentation and supply-chain provenance published.
Journalism for the digital-asset economy
Best Hardware Wallets · Rank 03 of 8
Bitcoin users who want air-gapped signing with a usable interface
Last verified August 15, 20264 scored axes
Documented, with gaps
Foundation Passport scores 8.8 out of 10 and ranks #3 of 8 in the best hardware wallets table, strongest on security architecture (9.2) and weakest on usability (8.0).
Air-gapped Bitcoin signing with fully open hardware and firmware, a supply chain the vendor documents publicly, and an interface that is far friendlier than the security-maximalist alternatives. Bitcoin only, and priced accordingly.
4 axes, weighted as published in the table’s methodology. Each score below is read from the fact printed under it.
9.2/ 35% of the score
Secure element with the PIN verified in hardware and no data-carrying USB path; security documentation and supply-chain provenance published.
9.2/ 25% of the score
Hardware designs and firmware are both published under open licences.
8.6/ 20% of the score
BIP-39 with optional passphrase and microSD backup; recovery on any compatible Bitcoin wallet.
8.0/ 20% of the score
Bitcoin only; colour screen and camera make QR signing straightforward with the main Bitcoin wallets.
Both the hardware designs and the firmware are published under open licences, and Foundation documents its supply chain — an unusual level of disclosure in a category where most vendors ask you to trust a sealed box. There is no data-carrying USB path, so signing happens by QR or microSD.
Among fully air-gapped Bitcoin devices, this is the one a non-specialist can actually operate: a colour screen, a camera and an interface that explains itself. Security features nobody uses correctly protect nobody, and Passport's main achievement is making the rigorous option approachable.
That is the design, not an omission. It integrates with the main Bitcoin desktop and mobile wallets and recovery uses standard BIP-39 with an optional passphrase, so nothing binds you to the vendor.
It sits at a premium to the category. What you are paying for is open hardware, documented provenance and an interface that does not require a manual — a defensible bill if Bitcoin is the whole of your holdings.
Bitcoin holders who want open hardware and air-gapped signing without a technical initiation, including people setting up their first cold storage and expecting to use it for a decade.
Coldcard offers a deeper feature set for adversarial scenarios; Passport offers open hardware and an interface a person will operate correctly. After 2026, the argument for auditable openness got stronger.
Both the hardware designs and the firmware are published under open licences, and the vendor documents its supply chain — the fullest disclosure among the devices we rank.
No. It is Bitcoin-only by design, which keeps the codebase and attack surface small.
By QR code or microSD, with no data-carrying USB connection, so the device never touches a computer directly.
8 services in best hardware wallets