Foundation Passport Prime

Envoy is Foundation’s companion app for iPhone and Android. QuantumLink is the name of Prime’s encrypted Bluetooth connection to that app. After pairing, Prime shares your Bitcoin account’s public details with Envoy, so the app can show addresses and prepare payments while the signing keys stay on Prime.

For computer use, check the companion wallet’s exact Passport Prime integration before connecting an account. Prime documents QR and transaction-file signing, including files on storage connected through USB-C. Those are transfer methods, not proof that every wallet app accepts Prime’s account export or signed transactions. We have not confirmed the complete Prime–Sparrow account-import and transaction-transfer route, or first-time setup using only a computer. Ask Foundation about the exact route before relying on it.

Envoy manages single-signature Bitcoin wallets. For multisignature wallets, where several keys must approve a payment, Foundation lists coordinators such as Sparrow: create the configuration in the coordinator and import it into Prime so it can verify addresses and sign as a cosigner. Envoy and Prime alone do not provide multisignature setup.

Prime calls the secret behind your wallet its Master Key. The default Magic Backup divides that secret into three recovery shares. Manual setup lets you keep all shares on physical Keycards, or write down the complete secret as recovery words. Choose the method you can store and recover reliably.

Restoring existing recovery words?

• Foundation’s KeyOS 1.4.0 release says it fixed a bug that always enabled Magic Backups when restoring recovery words. Its backup guide still describes that issue as unresolved. If restoring existing words without Magic Backups is a requirement, confirm the procedure for your installed KeyOS version with Foundation before completing setup. Do not assume the new-wallet Advanced steps apply to that restoration.

For a new wallet, tap Advanced on Prime’s Create Magic Backup screen before continuing. Foundation’s manual guide says this choice is offered only once. Envoy’s own Magic Backups toggle controls the software wallet on your phone; it is not the switch for Prime’s backup.

You can record recovery words from Prime’s settings even if you use Magic Backups. Those words are another way to recover the wallet, but writing them down does not disable Magic Backups. Keep each Keycard in a separate secure location; keep a complete written phrase protected as a whole.

Start with Envoy and Prime together. Both the ordinary and manual setup guides use the phone app for initial pairing, the manufacturer’s device check and updating KeyOS, the software that runs on Prime.

The PIN unlocks this device; it does not replace your recovery information. Prime erases its Master Key after ten consecutive incorrect PIN or password attempts, so access would then depend on the backup you kept.

Charge Prime sufficiently before an update. On Prime, open Settings, then Update and Check for New Version. If an update is available, choose Update with Envoy. Prime uses QuantumLink to download, verify and install it, then restarts.

Foundation also documents manual updates from an accessible Settings screen. Each Update.tar file starts from a specific installed version; choose the one matching Settings > Update and follow the official external-storage or Airlock instructions.

If initial onboarding has not reached Settings, Foundation documents a separate first-update route to KeyOS 1.4.0 using its signed Recovery.bin file and Firmware Recovery. Preserve any existing Master Key and device-data backups and follow that specific branch in the official instructions. This route still needs Envoy to finish initial pairing and the device-identity check. Do not use a Passport Core firmware file.