Foundation Passport Prime: custody score 66%
Foundation Devices · Bitcoin-only · checked 2026-11-05. 56 of 85 points from sourced facts.
Official store (foundation.xyz) →
Score, input by input
| Input | What we found | Points | Source |
|---|---|---|---|
| Supply chain and authenticity | In the app: Supply-chain validation with a device-unique key in the secure element confirms the device is genuine. | 10/10 | source |
| Supply chain and authenticity | None found: No official reseller list found. | 0/5 | |
| Supply chain and authenticity | Strong: Active tamper detection that resets the device, and it ships without firmware. | 5/5 | source |
| Supply chain and authenticity | No incident: None on record. | 5/5 | — |
| Key protection | Uncertified chip: Microchip ATECC608C secure element; no EAL certification. | 4/6 | source |
| Key protection | Open, reproducible: Open-source and reproducible software and hardware. | 9/9 | source |
| Signing safety | Yes: Smartphone-like touchscreen. | 15/15 | source |
| Customer data exposure (36 months) | Own systems breached: Oct 2026: 23,000+ phishing emails sent from Foundation's own domains used customer data left in its old store database. | 0/15 | source |
| Incident record (24 months) | Flaw, no losses: Oct 2026: attackers used compromised Cloudflare API keys and a backend flaw to send phishing from Foundation's domains; Foundation says devices and funds weren't affected. | 8/15 | source |
Incidents
- 2026-10-26 Phishing from Foundation's own domains (compromised Cloudflare keys); legacy customer data exposed. source
Where to buy safely
- Buy from the maker: foundation.xyz.
- Resellers: No official reseller list found.
- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.
Keep it away from your bots
A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. How to split vault, float and sweeps. Set up Foundation Passport Prime as cold storage, step by step.
Questions
Is Foundation Passport Prime safe?
Foundation Passport Prime scores 66% on our custody score (56 of 85 points from sourced facts, checked 2026-11-05). Weakest point: Oct 2026: 23,000+ phishing emails sent from Foundation's own domains used customer data left in its old store database.
Has Foundation Devices had a security incident?
Oct 2026: attackers used compromised Cloudflare API keys and a backend flaw to send phishing from Foundation's domains; Foundation says devices and funds weren't affected.
Where should I buy Foundation Passport Prime?
From the maker's store (foundation.xyz). Resellers: No official reseller list found. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.
Other hardware wallets, scored
All hardware wallets, scored · Is this seller authorized? · How we score