How to set up Passport Prime
Passport Prime needs a phone and a Bluetooth connection for setup, and the one choice that matters most comes halfway through, on the backup screen.
Install Envoy on your phone, scan the QR code on Passport Prime, and pair the two over QuantumLink, Foundation's encrypted Bluetooth link. Let the Security Check and the firmware update finish, set a PIN, then tap Advanced on the backup screen if you want a backup with nothing in your cloud account. Write the seed phrase onto metal and pass the word check. After setup you can sign with QR codes in Sparrow and switch Bluetooth off.
Disclosure: I work at Blockstream, the company that makes the Jade wallets mentioned here. I joined after many years as a satisfied user. There are no affiliate links on this site.
What you need, and the Bluetooth catch
Passport Prime costs $349 and ships with three Keycards, Faraday sleeves, a setup card, and a USB-C cable. You also need an iPhone or Android phone for Foundation's Envoy app, because QuantumLink is required for initial setup and for syncing with Envoy. That rules out a strictly air-gapped setup from day one. Once setup is done, Prime can sign with QR codes or files without an active Bluetooth connection.
I've used Foundation's original Passport. Prime's setup is different, so the steps below follow Foundation's Prime docs and release notes. My Passport Prime review has the rating and the trade-offs.
Step 1: check the box and install Envoy
Before you power it on, check the bubble wrap and shrink wrap. Foundation says that if the seal is broken or the device appears altered, pause setup and contact support.
Get Envoy from the App Store or Google Play, through the links on Foundation's Envoy page. The current version is 2.3.7, released October 29, 2026, and Foundation recommends every user update to it.
Step 2: pair over QuantumLink and run the Security Check
Foundation's setup guide has the current screens. The outline:
- 1Turn Prime on, read the terms, and scan the QR code it shows with your phone's camera. The link opens Envoy, or the app store if Envoy is missing.
- 2In Envoy, choose to connect with QuantumLink, allow Bluetooth, and scan the animated QR code on Prime. Scanning hands Envoy Prime's public key out of band, so the Bluetooth chip never sees it.
- 3Let the Security Check run. Prime proves its identity with a key held in its secure element, and Foundation's validation server checks the signature against its records. Foundation says a passing result is not a guarantee that every part of the device is unmodified. If it fails, stop and email Foundation.
Step 3: update KeyOS
Prime installs any new firmware through Envoy during setup. Charge it first: the battery must be above 20% before an update can start. The current release is KeyOS 1.4.1, from October 22, 2026. Do not skip updates on this device: KeyOS 1.4.0 was an important security update that fixed multisig change checks a malicious transaction could fool.
Prime itself only installs firmware signed by 2-of-4 Foundation keys, whichever way you update. If you want to check the file yourself, KeyOS 1.4.0 and later can update from a USB drive or microSD card without Envoy. Foundation's firmware page walks through the PGP check against its key (fingerprint 5DBE 7F18 5293 9353 15E5 6E31 CFE1 890A B7FC 8B64) and the SHA-256 file published with each release.
Step 4: set a PIN
The PIN is 6 to 12 digits, or a longer password if you switch to one. After 10 wrong attempts in a row, Prime erases the master key, and the only way back is your backup. Prime also offers optional Security Words, two words it shows partway through PIN entry so you can spot a swapped device. Turn them on.
Step 5: choose your backup before you tap Continue
Prime creates a new master key from three hardware randomness sources, then asks how to back it up. Read this step before you reach that screen, because Foundation says Prime Magic Backups cannot be turned on or off after onboarding yet on KeyOS 1.4.x.
| Magic Backup (default) | Manual (tap Advanced) | |
|---|---|---|
| Where the key parts go | Two Keycards, plus one encrypted part in Envoy, backed up to iCloud Keychain or Android Auto-Backup | All three Keycards, the seed phrase on paper, or both |
| What restores the key | Any two of: Keycard, Keycard, phone with your cloud account | Any two of the three Keycards, or the seed phrase |
| Settings and multisig data | Encrypted and stored on Foundation's server | A file you save yourself, which KeyOS 1.4.x cannot restore yet |
My pick is manual: tap Advanced, write the three Keycards, and also record the seed phrase. Magic Backup ties your backup to your Apple or Google account: Foundation says one Keycard plus a phone logged into that cloud account is enough to restore the master key, and a hardware wallet should not depend on how well you guard a cloud login. Foundation's server has had trouble too: in July 2026 Envoy 2.3.0 fixed a Magic Backup server flaw that allowed unauthenticated listing, downloading, and deletion of backup data. Foundation says nobody exploited it. It also says manual backups are not recommended for beginners, so take your time with this step.
Whichever you pick, write the seed phrase down. Prime shows the words, then asks you to pick each one from a set of options. They are standard BIP39 words, the same format Prime accepts from other wallets when you restore, so they work without Foundation or the Keycards. Copy them onto steel, store each Keycard in a different place, and read my seed phrase backup guide and metal storage rankings.
Multisig users should also keep the wallet descriptor from their coordinator, since Prime cannot restore its own multisig data from a manual file yet. My multisig guide explains what to save.
Step 6: sign with QR codes in Sparrow
Envoy suits a simple single-sig wallet, but it does not support multisig wallet setup or coordination, and QuantumLink does not work with desktop computers. On a computer you sign by QR code or by file. Sparrow is on Foundation's list of companion wallets, along with Nunchuk, Specter, Electrum, BlueWallet, and others.
- 1In the Bitcoin app on Prime, open the account, choose Connect Wallet, pick Sparrow, and connect as single sig.
- 2In Sparrow, create a new wallet, choose the airgapped hardware wallet option, and scan the Passport QR with your webcam.
- 3Use Verify Address on Prime to confirm both sides show the same address. A match proves Sparrow is watching the right wallet.
- 4To spend, build the transaction in Sparrow, show it as an animated QR, check the address and amount on Prime's screen, sign, and scan the signed QR back into Sparrow. Files on a USB drive or a microSD card in a USB-C reader work too.
Once you sign this way, you can open Prime's Control Center and turn off Camera, NFC, Bluetooth, and USB as you need them. With Bluetooth off, Envoy cannot sync. My Sparrow setup guide and Sparrow review cover the desktop side.
If you keep using Envoy, point it at your own node
By default Envoy gets your balance from the server run by Foundation, and Foundation's FAQ notes that any explorer you do not run yourself learns what you query. Envoy's privacy settings take a personal node and can turn on Tor. Foundation lists Start9 and Umbrel among the node boxes that work; my Start9 review and node rankings cover the hardware, and my Envoy review covers the app itself.
Foundation's 2026 record
My security incident tracker logs five major Foundation entries in 2026. Besides the backup server and multisig fixes above, Envoy 2.3.0 fixed a Security Check bug where a device error could be reported as a successful verification. In October, spam emails that appeared to come from official Foundation domains went out after attackers got hold of one or more of its Cloudflare API keys. Foundation says funds stored on Passport are safe. Treat any email that asks for your seed phrase as phishing, and never type it into a website.
Skip Legacy Mode. It is a separately installed beta that runs Ethereum and Solana apps, and nothing in the Bitcoin wallet needs it.
Next steps
Send a small test amount to a fresh receive address, verify it on Prime's screen, and move the rest after it confirms. My guide to moving bitcoin from an exchange to a hardware wallet covers Coinbase, Cash App, and Robinhood. Then compare Passport Prime vs Jade Plus or the full hardware wallet rankings.
Frequently asked questions
Does Passport Prime need Bluetooth?
For setup, yes. Foundation says QuantumLink, its encrypted Bluetooth link, is required for initial setup and for syncing with Envoy. After setup you can sign with QR codes or files and switch Bluetooth off in the Control Center.
Can I set up Passport Prime without Envoy?
No. Envoy handles the first connection and the Security Check, even with manual backups. After setup you can use Sparrow instead and update firmware from a file.
Should I use Magic Backup or manual backup on Passport Prime?
I recommend manual: three Keycards plus a written seed phrase, with no key part in your Apple or Google account. Decide during setup, because KeyOS 1.4.x cannot switch Magic Backups on or off after onboarding.
What happens after 10 wrong PINs on Passport Prime?
Prime erases the master key. You set a new PIN and restore from your Keycards or seed phrase, which is why you should test the backup before you send real money.