hardware-wallets
Coldcard Q Review 2026: The Ultimate Bitcoin Signing DeviceColdcard Q review 2026: full QWERTY keyboard, dual microSD, camera air-gap, open-source firmware. The most capable Bitcoin signing device at $219.
The Verdict
Foundation Passport Prime is the best all-around Bitcoin hardware wallet for serious HODLers who want open-source hardware, an air-gapped workflow, and a device that doesn't require a computer science degree to use. It hits the rare combination of principled security (fully open source, QR-only air-gap) and genuine usability (color display, physical keyboard, AA batteries).
Price: $199.
For most security-conscious Bitcoiners, Passport Prime is the device to buy in 2026 — unless you need the full QWERTY keyboard of the Coldcard Q or the absolute minimalism of SeedSigner.
What Is Foundation Passport Prime?
Passport Prime is Foundation Devices' second-generation hardware wallet, succeeding the original Passport. Foundation is a US-based company (Boston) that has built its reputation on a single commitment: everything is open source.
Not just the firmware — the hardware too. The PCB schematics, Bill of Materials, and enclosure designs are published on GitHub. Any skilled engineer can inspect exactly what's in the device. This is rare in the hardware wallet industry and it's the foundation (pun intended) of Foundation's trust model.
Passport Prime upgrades the original Passport with a larger display, faster processor, more memory, and a refined physical design while keeping everything that made the original compelling: QR-only air-gap, AA battery power, Bitcoin-only focus, and Sparrow Wallet compatibility.
Key Specs
| Feature | Details |
|---|---|
| Price | $199 |
| Display | Large color LCD (improved over original Passport) |
| Input | Physical number pad + navigation keys |
| Air-gap | QR codes only (no USB data, no Bluetooth) |
| Camera | Yes (for QR code scanning) |
| Battery | 2x AA batteries (user-replaceable) |
| Open source | Yes — hardware AND firmware |
| Bitcoin-only | Yes |
| Multisig | Yes (PSBT, Sparrow, Specter) |
| BIP85 | Yes |
| Compatible wallets | Sparrow, Specter, BlueWallet, Envoy (Foundation's own app) |
| Secure element | Microchip ATECC608A |
| Dimensions | Passport-sized (fits in a pocket) |
| Made in | USA |
Why Open-Source Hardware Matters
This is worth dwelling on. Most hardware wallets are open-source firmware but closed hardware. Ledger, Trezor, BitBox — you can audit the code, but you can't verify the chips and PCB design aren't doing something unexpected.
Foundation publishes everything. The complete hardware design is on GitHub. The secure element is a standard Microchip part (not a proprietary black box). The enclosure design is documented.
This means:
- No backdoor chips: You can verify no additional chips are embedded in the design
- Supply chain verifiability: You can cross-reference components against Foundation's published BOM
- Community audit: Security researchers have reviewed both the code and the hardware
- No vendor lock-in: The design could theoretically be manufactured by anyone
For Bitcoiners who take "don't trust, verify" seriously, this is the gold standard.
The QR-Only Air-Gap
Passport Prime communicates with wallet software exclusively through QR codes. There is no USB data connection, no Bluetooth, no WiFi. The only I/O channels are:
- Camera (inbound): scans QR codes from your computer screen
- Display (outbound): shows QR codes for Sparrow to scan
This is a genuine air-gap. The attack surface is extremely limited. You can't inject malware through a QR code. There's no USB firmware update path for attackers to exploit (firmware updates happen via microSD).
Here's the signing workflow with Sparrow Wallet:
- Export xpub: Scan xpub from Passport Prime into Sparrow to set up watch-only wallet
- Build transaction in Sparrow: Sparrow displays PSBT as a QR code
- Scan PSBT into Passport Prime: Camera reads the transaction details
- Review and confirm on Passport Prime: Large display shows full transaction details
- Passport Prime shows signed transaction as QR: Scan it back into Sparrow
- Sparrow broadcasts: Transaction hits the network
Compared to USB workflows, this takes a few more seconds. In exchange, you get a communication channel that's essentially immune to remote attack.
AA Batteries: A Genuine Differentiator
Passport Prime runs on two standard AA batteries. This sounds trivial but matters:
Availability: AA batteries are available everywhere on earth. If you're using your Passport Prime in a remote location, or in a decade when USB-C cables have been superseded by something else, AA batteries still work.
No charging cable dependency: Rechargeable hardware wallets need their cable. AA batteries mean the device is always ready without cable management.
Long standby life: AA batteries provide months of standby power for a device used intermittently.
EMP resilience (extreme scenario): For serious threat-model thinkers: removable batteries mean you can store the device without batteries, eliminating standby power consumption and certain attack scenarios.
The Coldcard Q has a rechargeable battery. BitBox02 has no battery (USB-powered). Passport Prime's AA approach is unique and practically useful.
Envoy App: Optional but Well-Done
Foundation's companion app, Envoy, is available for iOS and Android. It's optional — Passport Prime works fully with Sparrow Wallet on desktop without Envoy. But if you want a mobile-first experience, Envoy handles:
- Firmware updates (via QR code, no USB required)
- Passport Prime setup wizard
- Watch-only wallet on mobile
- Transaction signing flow on mobile (scan QR from phone screen to Passport Prime)
Envoy is open source and privacy-focused (Tor support, no telemetry). It's a genuinely good companion app — Foundation clearly invested in it.
For most serious Bitcoiners, Sparrow Wallet on desktop is still the preferred interface. Envoy is the better option for mobile-first users or as a secondary interface.
Passport Prime vs. Coldcard Q
These are the two flagship Bitcoin-only, air-gapped hardware wallets in 2026. Choosing between them:
| Passport Prime | Coldcard Q | |
|---|---|---|
| Price | $199 | $219 |
| Open hardware | Yes | No |
| Open firmware | Yes | Yes |
| Input | Number pad | Full QWERTY |
| Air-gap | QR only | QR + microSD |
| Battery | AA (replaceable) | Rechargeable |
| Camera | Yes | Yes |
| Made in | USA | Canada |
| Companion app | Envoy (mobile) | None (desktop only) |
| Best for | Open hardware advocates, mobile users | Passphrase-heavy workflows, power users |
Pick Passport Prime if: Open-source hardware is important to you, you want mobile app support via Envoy, or you prefer replaceable batteries.
Pick Coldcard Q if: You use long BIP39 passphrases regularly (the QWERTY keyboard is transformative), or you need the extra advanced features Coldcard is known for.
Both are excellent. This is a preference decision, not a security quality gap.
Passport Prime vs. Original Foundation Passport
If you're deciding between the new Prime and the original Passport Core:
| Passport Prime | Passport Core | |
|---|---|---|
| Price | $199 | $99 |
| Display | Larger, improved | Smaller |
| Processor | Faster | Standard |
| Memory | More | Less |
| Air-gap | QR only | QR only |
| Open hardware | Yes | Yes |
| Security | Equivalent | Equivalent |
The security is the same — same secure element, same air-gap model, same firmware architecture. Passport Prime buys you a better display and faster performance. For $100 more, it's worth it if you sign transactions regularly and the display improvement matters.
Multisig with Passport Prime
Passport Prime is excellent in multisig configurations. A common setup:
- Key 1: Passport Prime (QR air-gapped)
- Key 2: Coldcard Mk4 (microSD or NFC)
- Key 3: SeedSigner (QR air-gapped, stateless)
With Sparrow Wallet coordinating, this gives you a 2-of-3 multisig where each key comes from a different manufacturer, different codebase, and different air-gap method. No single supply chain compromise or firmware vulnerability can drain your funds.
For multisig setup guidance, see our complete multisig setup guide.
Setup Process
- Install AA batteries
- Power on, create new wallet or restore from seed
- Write down 24-word seed phrase (or import existing BIP39 seed)
- Set PIN
- In Sparrow: add hardware wallet → scan the xpub QR code from Passport Prime
- Sparrow creates a watch-only wallet
The whole process takes 15-20 minutes. The large display makes it easier to read addresses and transaction details than on older hardware wallets with small OLED screens.
Foundation's documentation is thorough and well-written. The setup experience is the most approachable of any advanced hardware wallet.
Who Should Buy Passport Prime
Buy Passport Prime if:
- You want fully open-source hardware AND firmware
- You use Sparrow Wallet or want the Envoy mobile app
- You value a clean QR-only air-gap (no USB data path)
- You want replaceable AA batteries
- You're building a multisig and want diversity from Coldcard
- You're a serious HODLer who wants the best security without maximum complexity
Skip Passport Prime if:
- You use long BIP39 passphrases daily and want a QWERTY keyboard (get Coldcard Q)
- You want maximum feature depth and advanced Coldcard-specific capabilities
- Budget is the primary concern (Passport Core at $99 offers the same security)
- You want multi-coin support (Passport is Bitcoin-only)
The Bottom Line
Foundation Passport Prime is the best Bitcoin hardware wallet for security-conscious users who want open-source hardware, a genuine air-gap, and a device they can actually use without frustration.
The fully open hardware design, QR-only air-gap, color display, physical keyboard, AA batteries, and optional Envoy mobile app combine into a package that's both principled and practical. At $199, it's priced right for what it delivers.
If you're choosing one device for long-term Bitcoin self-custody — and you care about being able to verify what's actually in your hardware wallet — this is the one.
For more context on where Passport Prime fits in the full hardware wallet landscape, see our best hardware wallets guide.
Frequently Asked Questions
Is Foundation Passport Prime truly open source? Yes — both hardware (PCB schematics, BOM) and firmware are open source on GitHub. This is one of very few hardware wallets where you can verify the complete design.
Does Passport Prime work without Envoy? Yes. Passport Prime works fully with Sparrow Wallet (desktop), Specter Desktop, and any wallet supporting QR-based PSBT signing. Envoy is optional.
What's the difference between Passport Prime and Passport Core? Same security architecture and air-gap model. Prime has a larger display, faster processor, and more memory. Core is $100 less. Both are excellent. Prime is worth the upgrade if display quality and performance matter to you.
Can Passport Prime be hacked remotely? No. It has no wireless radios and no USB data connection. QR codes are the only data channel — they can't execute code. Remote attacks are impossible.
Does Foundation Passport work with Ledger Live or Trezor Suite? No. It works with Sparrow Wallet, Specter Desktop, Envoy, and BlueWallet. Ledger Live and Trezor Suite don't support third-party hardware wallets.