Foundation Updates: February 2024

Hello Friends: Welcome Back to Our Monthly Updates!

It’s been a while, but we’re back with our monthly newsletter. We’re thrilled to have you join us again. Curious about what’s been going on behind the scenes? We’ve got all the details waiting for you below. So, let’s catch up and dive into what’s been happening at Foundation HQ. 🫡

This month at Foundation

Since our last update we’ve been busy, pushing out a flurry of releases for both Passport and Envoy. Notable additions include features like coin control in Envoy and restore seed QR support on Passport. In case you missed any of the updates, you can swing by our GitHub page for both Passport and Envoy and stay up to date.

Now, let’s see how February treated us in terms of our latest releases. 👇🏻

Product Updates 🔥

Passport v2.3.0

  • Say hello to proper send and receive support for Taproot in Passport 🥕
  • You can now export Passport’s master seed phrase via SeedQR, if desired.
  • Passport now allows the creation of 12 word seed phrases, and defaults to 12 word seed phrases during onboarding.
  • Advanced users can now generate 11 or 23 words offline, import into Passport, and Passport will automatically calculate the checksum 12th or 24th word when importing the new seed.

Read more:

Envoy v1.6.0 (beta)

We give our community a sneak peak and chance to contribute with beta releases of each version of Passport firmware and Envoy release, but if that sounds scary for you we have an official release planned for next week for Envoy 1.6!

  • Full “replace-by-fee (RBF)” control is here!
  • Drastically improved address and amount display per the Bitcoin Design standards. Sexy and intuitive.
  • When you set a custom name for your Passport, now that name will show up automatically in the Devices tab on Envoy.
  • Envoy translated to Catalan thanks to our friends over at @bcnbitcoinonly! Special thanks to @insatwetrust, in particular!!

Read more 👉 Envoy beta version 1.6.0 is now live!

DID YOU KNOW? We have an exclusive beta program at Foundation, offering you the opportunity to be among the first to test and experience any new releases for Passport or Envoy. Gain access to our Telegram group and be among the first to test-drive any new releases. You’ll have the chance to provide valuable feedback and even earn sats for any bugs you may find.

Learn more here.

Meet the Foundation Team 👥

Discover where our team has been making waves in the public eye this February! We’ve recently joined a few podcasts – take a look below!

Check it our here: https://fountain.fm/episode/Szd0tFuBw1MdE1Uvv8Uz

Product Review and Photo of the Month

Each month, we’ll be selecting one of our users’ reviews and one photo from social media to feature in our newsletter. Your experiences and stories are what keeps us building, and we’re grateful for your ongoing support. Keep sharing your moments with us, and you could be the next one in our newsletter!

Our first photo is from BitcoinExpert on X:

Our review of the month is from a customer over at Hey Apollo:

What we’re working on

March is just around the corner, and we’re getting ready to kick things off with a bang! We’ve been hard at work on something new for Foundation, and we’re also planning a fantastic community event on X to go alongside the launch. 🤫 We can’t wait for you to see. March is going to be HUGE for our community.

Alongside this our amazing developers are hard at work on your favorite Bitcoin products, Passport and Envoy. Keep the feedback coming no matter how big or small we love it all.

Where can you find us in March? Some of our team will be hitting the scene at the Pub Key event in NYC, Tuesday 5th March, ready to connect, educate, and dive into all things Self Custody.

We’ll also be sponsoring and speaking at the inaugural Finney Forum in Dallas, Texas on March 15-16th, with Seth For Privacy speaking on the dangers of privacy puritanism.

See you all there!

Conclusion

That wraps up our February edition of Foundation Updates – thank you for joining us, stay tuned for more next month. In the meantime, for daily updates and insightful content you can:

🐦Follow us on Twitter

🟣 Follow us on Nostr

🌐 Subscribe to our newsletter

💬 Join our community support group on Telegram

With Love from all at Team Foundation 🧡

Passport version 2.3.0 is now live!

We’re excited to announce that the latest version of Passport firmware – 2.3.0 – is now live! To download it, simply initiate the update from Envoy to be guided through the process.

WHAT’S CHANGED

We’re beyond thrilled to be able to release Passport firmware v2.3.0, including full Taproot support, revamped passphrase behavior, an all-new address explorer, master seed SeedQR export, 12-word seed phrase support, 12th/24th word generation for advanced users, and native OP_RETURN message viewing and signing.

This release is one of our largest to date and includes a massive amount of new features, improvements, and bug fixes.

For more details on each of the changes, keep reading below!

NEW FEATURES

  • Say hello to full Taproot support in Passport 🥕
    • Passport now has full support for sending and receiving using Taproot, making the combination of Envoy and Passport a powerful way to leverage the latest and greatest tech that Bitcoin has to offer.
    • Note: existing Passport users will need to re-pair Passport to add Taproot-specific accounts (Envoy will automatically prompt you to do this the first time you enable Taproot).
    • Envoy must be on v1.5.0 or greater to use Taproot in Envoy directly.
  • Passport now has full support for verifying and displaying OP_RETURN messages directly on-screen.
  • Account and multisig configuration displays have been reworked to make them contextual to the currently active wallet.
    • Previously additional accounts were displayed irrespective of there being a passphrase applied or not.
    • Now, you’ll only see the account(s) specific to the currently active wallet. For example, if you’ve only ever used account #2 named 'Savings' under the passphrase 123abc, then you’ll only see that account when the passphrase 123abc is active. The same also applies to multisig configurations.
  • You can now export Passport’s master seed phrase via SeedQR, if desired.
    • Please note that this contains your seed phrase in a QR format, and so should be treated just as carefully as your seed phrase itself! Don’t scan it with your camera app, save it in an image, etc.
    • Both Compact and standard SeedQR are supported.
    • You can find the SeedQR export when viewing your seed phrase by using the left-select button to open the SeedQR export menu.
  • We’ve added a brand new address explorer, allowing you to browse receive addresses directly on Passport and even display them as QR codes!
    • Note that since Passport is an air-gapped wallet, it cannot know which addresses have or have not been used, or what your balance is.
    • You can easily access the new address explorer under the “Manage Account” section of each account.
  • Passport now allows the creation of 12 word seed phrases, and defaults to 12 word seed phrases during onboarding.
    • Users can still choose 24 word seed phrases if desired.

    • We’ve gone in-depth in a past blog post on why, but 12 word seed phrases are more secure than necessary and easier to backup and recover than 24 word seed phrases. If you’re curious for more background, read our blog post:
  • Advanced users can now generate 11 or 23 words offline, import into Passport, and Passport will automatically calculate the checksum 12th or 24th word when importing the new seed.
    • Note that if a seed is generated outside of Passport, we cannot guarantee it was done securely! There have been many cases recently of users improperly generating a seed phrase (i.e. not providing enough randomness/entropy) and having funds stolen as soon as they send them to the new seed.
    • We always recommend allowing Passport to generate new seeds for you unless you are an advanced user that understands the risks with manual seed generation via dice rolls etc.
  • You can now set a custom name for your Passport!
    • This name will be displayed on boot, making it easier to distinguish between your various Passport devices.
    • This new setting can be found under Device > Device Name in settings.
  • You can now check the exact percentage of battery Passport has in the settings under Device > Battery.

IMPROVEMENTS

  • We’ve improved address display based on the Bitcoin Design guidelines, making it easier than ever to verify addresses on Passport!
  • Verifying addresses on Passport is now significantly faster.
  • Passport now only prompts a single/multisig wallet type choice when verifying addresses if there is a multisig config imported for the active wallet fingerprint.
  • Users can now optionally display the seed words on-screen when first setting up Passport and using encrypted backups.
  • Improved how headers are displayed when creating or importing seeds to better reflect which step of the process a user is on.
  • Added a prompt to users setting up Passport to ensure they are in a private or secure place before carrying out the setup process.
  • Removed an unnecessary prompt to select or delete firmware when going through the firmware update flow.
  • Removed unnecessary imports in the firmware compilation process, optimizing Passport firmware size.
  • Backups can now be restored from anywhere on a microSD card, not just from the “proper” backups folder.
  • Browsing files on microSD no longer has a 20 file limit.
  • Improved minor error message dialogues.
  • Auto-shutdown has been lengthened for the onboarding process to avoid accidental shutdowns during onboarding.
  • Improved the success icon when verifying addresses.
  • Verifying reproducible builds of Passport firmware is now possible without granting Docker root permissions.
  • Wasabi Wallet has been removed from the list of export options.

BUG FIXES

  • Fixed an incorrect warning dialogue when backing out of a manual encrypted backup.
  • Key Manager seed export no longer displays a setup screen that was there by mistake.
  • Fixed an issue where you couldn’t go back in the Predictive text explainers.
  • Fixed an issue where pressing back on SeedQR recovery screens would throw an error.
  • Fixed an issue where using the # character in an account name would break account name display.
  • Fixed a minor bottom menu selection display bug after exporting to SeedQR
  • Fixed a minor visual issue where the header would start scrolling in FE because it was too long.
  • Security words can only be enabled if you input the pin again correctly now.
    • Thanks to @backtopyramidone on Github for the report!
  • Improved the setup flow after resetting Passport to prevent a potential bug.

VERIFYING, REPRODUCING, AND INSTALLING PASSPORT FIRMWARE

If you’d like to verify and install the latest version of Passport manually, you can follow our guide on the topic here: Firmware Update support page

If you’d like to take the additional step of testing the reproducibility of Passport’s firmware, you can follow our guide on the topic here: Reproducibility Guide

Passport version 2.2.0 is now live!

We’re excited to announce that the latest version of Passport firmware – 2.2.0 – is now live! To download it, simply initiate the update from Envoy to be guided through the process.

WHAT’S CHANGED

With this version of Passport’s firmware we’ve added the ability to seamlessly switch back and forth between signing via QR and microSD, added the ability to restore from SeedQR, improved the user interface on Founder’s Edition, and added many quality of life improvements across the board. With the number of new features we included in 2.1.0, we took this release to focus on refining our unified firmware between Founder’s Edition and Batch 2, as well as paving the way for full Taproot support in 2.3.0.

For more details on each of the changes, keep reading below!

NEW FEATURES

  • Automatically detect when a transaction being signed via QR is very large and prompt the user with the option to sign via microSD instead.
    • When a transaction is very large signing via QR codes can take quite a long time. This change makes it much easier for users to switch to signing via microSD before going through the hassle of trying to sign an excessively large QR code.
  • You can now write a signed transaction out to microSD directly from the animated QR screen on Passport.
    • Changed your mind and want to use microSD for that transaction you just signed? Now you can do so all from the same screen without having to go through the process of signing again.
  • You can now import a SeedQR directly into Passport when restoring from seed.
    • Easily import a SeedQR from an existing wallet or restore from a SeedQR backup of Passport with a simple QR scan.

IMPROVEMENTS

  • Further improved signing of abnormally large transactions via both QR code and microSD.
  • Added an automatic encrypted microSD backup step when restoring Passport from a seed phrase.
  • Improved the spacing and alignment of text throughout the menu UI on Founder’s Edition to better account for the slightly different screen sizes.
  • Implemented secp256k1 support from rust-bitcoin, a requirement for full Taproot receive support in a future update.
  • We now create directories automatically on the microSD card as needed for storing partially-signed Bitcoin transactions (PSBTs), multisig configs, wallet configs, health checks, and Key manager.
    • This makes managing files much easier, especially when viewing the contents of your microSD card on a computer.
  • Passport now uses a 3-digit code for sorting backup files, ensuring that backups are easier to distinguish and sort.
    • Backups are now also sorted in reverse order, so you’ll always find your latest backup at the top when restoring or viewing existing backups!
  • Added additional context when setting a passphrase to ensure users understand that all passphrases are valid, and that Passport will clear passphrases upon shutdown.
  • Initial address verification for new accounts is now much faster.
  • Optimized fonts to free up some space in firmware.
  • Improved the Foundation icon when setting up a new Passport Founder’s Edition device.
  • Improved special character selection.
  • Upgraded to the latest version of foundation-rs, our open-source Rust library.
  • Removed unnecessary USB files, correcting a minor licensing display issue and simplifying compilation.
  • Improved copy and behavior of hiding and showing hidden keys in Key Manager.
  • Improved the behavior of the passphrase application flow when a user incorrectly enters a passphrase and notices the fingerprint does not match.
  • Improved copy on the account details screen regarding the derivation path.
  • Improved the way top icons are displayed on Founder’s Edition.
  • Improved battery level detection and display on Founder’s Edition.

BUG FIXES

  • Fixed a rare bug that wouldn’t properly display the message after a device is bricked after 21 failed PIN attempts.
  • Passport now properly displays an error when an unusable QR code is scanned that the user can close.
  • Passport now properly resumes saving a file if a microSD card is inserted at the “Missing microSD card” screen.
  • Fixed a display issue when canceling a transaction before signing.
  • Fixed a rare bug where big transactions would occasionally prevent Founder’s Edition from displaying the signed QR code transaction.
  • Fixed a minor display issue with specific, long-form error messages.
  • Fixed a minor issue when exporting to Sparrow under rare circumstances.

VERIFYING, REPRODUCING, AND INSTALLING PASSPORT FIRMWARE

If you’d like to verify and install the latest version of Passport manually, you can follow our guide on the topic here: Firmware Update support page

If you’d like to take the additional step of testing the reproducibility of Passport’s firmware, you can follow our guide on the topic here: Reproducibility Guide

Envoy version 1.5.1 is now live!

We’re excited to announce that the latest version of Envoy1.5.1 – is now published on all your favorite mobile platforms! To download it, simply visit our download page or check for updates on your platform of choice.

Please note that there can be a significant lag from publishing to general availability due to Apple App Store and Google Play Store review policies and delays.

What’s changed

Note: v1.5.1 is a bug-fix release that resolves an issue updating firmware via Envoy on iOS. We’ve replicated the release notes here from 1.5.0 with the additional bug fix.

With this release of Envoy, we’ve focused on bringing you fully-featured support for Taproot! This not only expands the use-cases and access for Envoy as a mobile wallet, but it also paves the way for full Taproot support to be added to Passport in the upcoming v2.3.0 firmware. We’ve also included a proper Spanish translation to Envoy, and many quality of life improvements and bug fixes.

For more details on each of the changes, keep reading below!

New Features

  • Envoy now has full Taproot 🥕 support, allowing you to easily send and receive with the latest and greatest features in Bitcoin!
    • For those who want to use Taproot, simply enable support from the settings under the “Advanced” drop-down and a new Taproot-specific account will be created for you.
    • This also paves the way for full Taproot support in Passport, coming in firmware v2.3.0 very soon!
  • Envoy now has a Spanish translation available to all of our Spanish-speaking users!

Improvements

  • Envoy now allows users to select a preferred language in settings on iOS and Android.
  • Upgrade Flutter to the latest stable release, v3.16.1.
  • Envoy now automatically excludes coins that are too low of a value to spend in the current high-fee environment.
    • We’ve noticed that in the current fee environment, a native behavior of BDK that is designed to protect you from wasting sats could get a bit confusing. If you have coins that are relatively low value, it’s possible that they could cost more to spend than the value of the coin, meaning spending them would just be burning precious satoshis.
    • We still leverage the BDK default to help protect you from losing satoshis sending coins that are too low of value, but now we give you a clear warning when this would happen via a shiny new modal.
  • You can now hide amounts on an account while in the detailed account view.
  • Improved how the bottom sheet shows amounts when using coin control when minimized.
  • Users who have previously used Magic Backups and then manually restore the same seed now get the option to restore their previous Magic Backup or simply use a manual wallet.
  • Improved how selecting coins works when switching views.
  • Added a warning when a user manually selects coins and then changes the fee on the transaction review screen, as it can cause Envoy to automatically re-select coins for the user.
  • Updated our Tor library to the latest version of Arti, v1.1.11.

Bug Fixes

  • Fixed an issue unselecting an entire tag in coin control if some coins in that tag are locked.
  • Fixed a minor display issue when deleting a mobile wallet.
  • Fix an issue with units displayed on the send screen showing sats even when denominated in BTC.
  • Fixed an issue where redeeming an Azteco voucher could show duplicate entries in the activity screen.
  • Corrected the informational text on the unsigned PSBT screen.
  • Fixed an issue where the firmware update button would be slightly off-center.
  • Fixed a minor padding issue on the tag details card.
  • Fixed a rare issue that could cause a blank screen when pairing an existing Passport account.
  • Fixed an issue where an address could display incorrectly in the transaction details screen when receiving multiple outputs in a single transaction.
  • Fixed a display issue where excessively long device names could break the version pill on the devices tab.
  • Fixed an account renaming issue.
  • Fixed various minor display issues.

Verifying Envoy on Android

If you’d like to take the optional additional step of verifying Envoy binaries on Android, follow our guide: Verifying Envoy on Android

Foundation: The Secret Master Plan

There was a time when Apple shipped the schematics alongside the computer, a time when they encouraged us to “think different.” There was a time when Google lived by the guiding principle of “don’t be evil.” No longer.

We believe technology is progressing in the wrong direction. Rather than offering freedom, technology is used to surveil and control.

Ledger knows how much money you store on your hardware wallet and sees your transactions. Google knows everything about you. Your TV monitors what you watch and sells your data. Your car knows where you are at all times and will soon integrate breathalyzers and kill switches.

Technological progress in the physical world has slowed. An overwhelming majority of hardware and manufacturing innovations are closed source and proprietary. Open source software propelled us to the Internet, to Bitcoin – but open source hardware is a rarity.

At Foundation we believe that technology can be used as a tool to empower the individual with freedom, with sovereignty, with privacy. We believe that building superior open source hardware and software is the key to unlocking an era of prosperity and permissionless innovation.

As in Asimov’s Foundation trilogy, we’ve asked ourselves – what can we do to help navigate this period of chaos and usher in a new era of freedom and prosperity?

This brought us to our beginning. To Bitcoin.

Bitcoin

It all started with Bitcoin. It is our strong belief that a transition to Bitcoin as the global monetary standard will re-align society and fix our most important problems. In short, we believe that “Bitcoin fixes this!” So this is where we’ve chosen to begin our journey.

Foundation believes that Bitcoin itself is at a crossroads. On one side are ETFs, exchanges, custodial providers, intense and crushing regulations – maybe even 6102 orders. On the other side is custody, decentralization, permissionless innovation, strong financial privacy, and even an end to central banking as we know it.

This is why our first product was Passport, the best-in-class Bitcoin hardware wallet. The most fundamental aspect of Bitcoin is to hold your own keys, to control your own money and your own destiny. Passport makes that possible for more people than ever before.

During the 2024-2028 epoch, Foundation will build a cohesive ecosystem of Bitcoin devices, tied together by our Envoy mobile app.

Freedom Tech

But we aren’t stopping at Bitcoin. As the world achieves global Bitcoin adoption during the 2028-2032 epoch, Foundation will broaden our approach and focus on expanding our freedom tech ecosystem to more platforms. Smartphones and computers running a next-gen, ultra-secure, privacy-preserving operating system. Self hosted smart home products with integrated AI. Maybe even a car?

The Secret Master Plan

Below is Foundation’s master plan through 2032.

  1. 2020-2024: Build a hardware wallet and mobile app.
  2. 2024-2028: Use that money to build an ecosystem of Bitcoin devices.
  3. 2028-2032: Use that money to build a freedom-tech computing ecosystem.
  4. While doing above, release everything as fully open source, vertically integrate manufacturing, and – most important – hold true to our principles.

Don’t tell anyone.

Envoy 1.4 – Say Hello to Coin Control

With the release of Envoy version 1.4 today, we’ve taken the next big leap forwards in our goal with Envoy — to bring the best of Bitcoin to you, simplified. Since the release of Envoy’s full mobile wallet functionality with Magic Backup, we’ve been working tirelessly to bring you the next phase focused on giving you full control over your Bitcoin. Say hello to the most intuitive and approachable coin control to date.

Coin Control Made Easy

Taking control of your money has been a part of our mission from day one, and the ability to control exactly how you spend your bitcoin through Envoy is a key part of that. In this release of Envoy we’ve spent countless hours taking the concept of coin control that has existed in other Bitcoin wallets back to the drawing board, as coin control should be within reach of everyone, not just “techy” Bitcoiners. We think coin control should be something even grandma can use.

The concept of coin control can often be a foreign one to new Bitcoiners, but quite simply it’s a tool that allows you to choose what coins get spent in each transaction. The standard functionality of a wallet is to use a coin-selection algorithm to intelligently select the best coins to spend when you send bitcoin, but without some form of coin control there is no way for the algorithm to know what history each coin carries with it. When you combine coins with different histories, you reveal information about your financial activity you may not be intending to share!

When you use coin control, you can tag coins and add notes to transactions as you use Envoy, allowing you to spend only the coins which you want to each time you spend your bitcoin. Don’t want to reveal how much you get paid to your grocer? Only pay him using coins from your previous visits to the grocery store. Tired of your barista seeing how much you paid for dinner last night? Only pay him using coins you just got peer-to-peer. Coin control gives you total control over what information you choose to reveal each time you use Bitcoin — the very definition of privacy.

Using coin control on Envoy is just a tap away behind the new “Tags” icon inside of each account, where you can easily select to spend from an entire tag or get into the weeds and select individual coins to spend. You can keep things as simple as you want or get as granular as you want — you’re in control now. And if the concept of coin control seems like too much for you today, you can simply never touch it and still benefit from a smart coin-selection algorithm in the background that does its best to reduce fees while preserving your privacy.

All of this functionality gets added on top of the 60 second onboarding that Envoy brings via Magic Backups, the seamless integration with Passport, and the fully customizable privacy settings across the board. It’s time you experienced Bitcoin, simplified by downloading Envoy today.

If you want to deep dive into how you can use coin control we’ve got you covered with our new docs on the topic: Tags, Notes + Coin Control | Foundation Docs

Redesigned Learn Center

We have a deep passion for user education and empowerment, and want to make the output of that passion more accessible through Envoy. When you have questions about how Envoy or Passport works, want to learn more about Bitcoin, or simply want to pass the time with the sound of BitcoinQnA’s voice in the background, we’ve got you covered. We’ve started from scratch and improved every aspect of the Learn center, starting with a drastically improved video player and a new video host. Videos are faster to load, easier to control, and are now automatically marked as watched afterwards.

We’ve also added full support for reading our blog posts directly in Envoy without ever leaving the app or opening your browser. Blog posts also get marked as read immediately after viewing them, making it simple to keep up with the latest in Foundation announcements and education. In addition, we’ve revamped our FAQ section at the bottom and updated it with all of the recent changes in Envoy and Passport.

Privacy Shield Joins the Toolbar

We’ve always held preserving user privacy as one of our chief values at Foundation, and that starts with the options available to our Passport and Envoy users. With this version of Envoy, we’re taking things a step further and improving the visibility and usability of all of those privacy settings in Envoy with a new standalone section we’re calling the “Privacy Shield.” Quickly connect to your own Bitcoin full node, switch back to Foundation’s, use Tor for improved privacy, or turn Tor off for better performance when necessary.

Everything you need to know about preserving your privacy while using Envoy can be found in our documentation: Privacy | Foundation Docs

Activity Center, Reborn

In addition to launching coin control and revamping our privacy settings, we’ve taken the time to overhaul the activity center in Envoy and give it a new home in the toolbar. Everything you need to keep up with your Bitcoin activity, Passport firmware updates, and more can be found in the Activity Center now. We plan on expanding this in the near future to encompass more things as well, so keep an eye out for future Envoy updates!

Want to learn more? Dive into our docs here: Activity | Foundation Docs

So Much More

If this has piqued your interest, head on over to our full release notes to learn more about what we’ve added, improved, or fixed with this release of Envoy:

We can’t wait to hear your feedback on this latest iteration of Envoy, and if you have any questions or run into any issues, please don’t hesitate to reach out:

Envoy version 1.4.0 is now live!

We’re excited to announce that the latest version of Envoy1.4.0 – is now published on all your favorite mobile platforms! To download it, simply visit our download page or check for updates on your platform of choice.

Please note that there can be a lag from publishing to general availability due to Apple App Store and Google Play Store review policies and delays.

What’s changed

In this version of Envoy we’ve implemented intuitive and easy-to-use coin control, a new Activity Center and Privacy Shield, a redesigned Learn tab, broad user experience and user interface improvements, and squashed bugs across the board.

We’re especially excited about our implementation of coin control in Envoy, as there has been a lack of intuitive coin control on mobile for Bitcoin users in the past, even though coin control is vital for giving you control over your privacy. We’ve spent countless hours building coin control in Envoy from the ground up to be as easy to use, as powerful, and as privacy-preserving as possible. Coin control isn’t just for technical users anymore.

For more details on each of the changes, keep reading below!

New Features

  • Say hello to the most intuitive and approachable coin control in any Bitcoin wallet to date 🪙
    • Coin control is a vital feature that allows you to preserve your privacy on Bitcoin and choose what information to reveal about your financial activity to those you interact with, but has been a feature only accessible to technical users in the past.
    • We’ve been working tirelessly to bring you an implementation of coin control that even grandma can use. Easily tag your funds as you receive them, lock or unlock individual coins, choose exactly which coins to spend, or simply spend from a single tag with just a few taps.
  • Redesigned the Learn tab from the ground up, with an entirely new UI, improved video player, the ability to read blog posts directly in Envoy, and an improved FAQ section 🎓
    • Videos and blog posts now also get marked as watched/read when opened, and can be manually marked as unread by long-pressing on the item in the Learn tab.
  • Implemented a new Activity Center and Privacy Shield in the bottom toolbar 🕓 🛡️
    • We’ve broken out our privacy settings into their own new home on the toolbar, as well as migrated the activity center from the bell icon to it’s own page.
    • The new Activity Center will now show transactions, firmware update announcements, and more in the future!
  • Implemented full support for BRL fiat conversion. Welcome, Brazil! 🇧🇷
  • Implemented new “sat” and “btc” icons for units instead of text.

Improvements

  • Migrate Tor support to use the new Arti Tor client, implemented in an open-source Flutter library.
  • Greatly improved performance and resolved rare crashes for users with wallets that are heavily used, i.e. Samourai Wallet post-mix accounts.
  • Automatically add a note on Azte.co voucher redemption transactions indicating that they were from Azte.co.
  • Updated to support the latest azte.co API and voucher changes.
  • Long pressing on the delete button now deletes all entered text when constructing a transaction.
  • Envoy now automatically backs up the Envoy Backup file to Foundation servers every hour.
    • Only applicable when Magic Backups are opted into by a user.
  • Improved the responsiveness of the “Backup Now” button for Magic Backups to show when a backup is successful.
  • Broad updates and improvements to the frequently asked questions (”FAQs”) in the Learn tab.
  • Improved descriptions and copy in pairing screens.
  • Implemented new “hamburger” menu icon with open/close animations.
  • Improved the firmware update flow when firmware is downloaded but not properly copied to microSD for any reason.
  • Made it easier to use Envoy purely as a Passport companion app for those who don’t want Envoy as a mobile wallet.
    • It’s now easier to add additional Passport accounts without accidentally triggering the mobile wallet setup flow.
  • Improved screens across iOS, specifically those around pairing with Passport and downloading firmware.
  • Added the ability for Envoy to use the system locale to better display units and times throughout the app.
  • Added a shiny new animation to the manual mobile wallet setup flow.
  • Improved the way transactions display in the Activity tab.
  • Migrated video hosting for the Learn tab to Vimeo.

Bug Fixes

  • Corrected some minor issues with settings not being properly backed up and restored as a part of Magic Backups.
  • Removed fiat value for testnet coins – they have no value!
  • Properly display an error when an invalid Envoy Backup file restore is attempted.
  • Properly decode BIP 21 URIs with empty amounts.
  • Updated several dependencies to resolve inherited minor security issues.
  • Fixed several app freezes and crashes on iOS when a user had many accounts or deep wallets.
  • Fixed a rare backup conflict when using QR recovery with Magic Backups.
  • Resolved an issue with the previous Tor library where local network access would be requested in iOS (but not used).
  • Resolved several minor issues with how Envoy interprets the native Android back button.
  • Resolved lag when the app was opened while in Airplane Mode.
  • Fixed some minor text centering issues.
  • Resolved an issue where an account renaming would revert on iOS without the users input.
  • Resolved a rare bug when screen recording Envoy usage.
  • Resolved an issue where a user that ops into manual setup gets shown Magic Backup settings incorrectly.
  • Fixed an issue where the shield would stay red after a successful manual recovery.
  • Fixed a display issue possible when repeatedly adding and removing accounts.
  • Fixed a display issue where the + button could disappear.
  • Resolved some issues with account renaming when certain keyboard functions are used.
  • Resolved issues with screen sizing on smaller phones (i.e. iPhone 7).
  • Fixed an issue where saving a custom node would occasionally not persist.
  • Resolved a bug where prompts could appear where they shouldn’t.

Verifying Envoy on Android

If you’d like to take the optional additional step of verifying Envoy binaries on Android, follow our guide: Verifying Envoy on Android

Say Hello to Freedom.Tech

Freedom.Tech is a global hub championing Bitcoin builders, open-source developers, educators, and privacy tech pioneers, and we see it as an invaluable addition to the Foundation family.

We’ve been working hard behind the scenes over the past few months to launch a new content hub that lets you find content on the bleeding edge of technology, learn how you can take actionable steps in the fight for freedom, and amplify your own voice by writing unique content.

Freedom.Tech gives us a place to broaden our educational efforts that still aligns closely with what we’ve been doing on the Foundation blog, with our “This Month in Sovereignty” newsletter, and with the “Journey to Sovereignty” podcast. As such, we’ve gone ahead and added our existing email subscribers to the Freedom.Tech email list, as a good portion of our existing content will now flow to Freedom.Tech.

Don’t want to get emails about Freedom.Tech? Feel free to reply to an email and let us know, or simply unsubscribe once you get the first email from Freedom.Tech.

What is the “Freedom Tech” Movement?

From the earliest days of the Internet, an ongoing struggle has existed between those who would use the immense potential of this new technology to control or suppress human freedom, and those who would use it to empower the individual and promote human flourishing. This struggle has taken many forms over the decades, starting with the cryptoanarchists in the 1980’s and the cypherpunks of the 1990’s, both of which shared a common goal of enabling individual freedom through the use of cutting-edge technology.

Founders of the Cypherpunk movement: Timothy C. May (author of The Crypto Anarchist Manifesto), Eric Hughes (author of A Cypherpunk’s Manifesto), and John Gilmore (co-founder of the EFF). Source

Just as us humans strive for freedom, information in the digital age “longs to be free.” The “freedom tech” movement is a burgeoning grassroots movement that aims to encourage the optimistic, untethered development and use of technologies by people from all backgrounds, languages, and cultures across the globe. Freedom tech allows us to slow a rise in authoritarianism, fight back against encroaching surveillance capitalism, and empower journalists, dissidents, and activists everywhere.

We believe that the freedom tech movement closely aligns with that of the open source movement, and we hold the ideals of free and open-source software closely. While the freedom tech movement has no central authority or leader to dictate its aims, we have laid out the aspects of technology we consider vital to the movement below. Freedom tech should be:

✅ Free and open source

✅ Without usage restrictions

✅ Privacy-preserving

✅ Resistant to censorship

Quite simply, “freedom tech” is technology that empowers you.

What does this mean for Foundation content?

As Freedom.Tech gives us an excellent platform to focus content efforts outside of our products, we’ll be splitting our existing “This Month in Sovereignty” newsletter. Company updates, firmware releases, and similar posts will be packaged concisely in a new “Foundation Updates” monthly newsletter, while broader content around FOSS, freedom tech, and important news in the space will migrate to a monthly Freedom.Tech newsletter.

Similarly, we’ll be broadening the scope of our “Journey to Sovereignty” podcast and relaunching with a set of fantastic guests, covering a much wider variety of freedom tech topics as a result. We’re still in the process of revamping the podcast, so keep an eye out for more announcements there in the near future.

Learn more

With this launch we’ve included a few original blog posts, and are working hard to get some of the best writers in the space involved and amplifying their content on Freedom.Tech. We’ll be running some fun competitions (including giving away a free Passport!) over the next few weeks as a part of this launch, so be sure to follow us on X and/or Nostr as well:

How Passport protects your Bitcoin

Take a minute and ask yourself two simple questions: who or what are you trying to protect your Bitcoin from? How far are you willing to go to protect it?

These two questions are the root of a concept called “threat modeling”, and should be the basis for deciding what steps you take to secure your Bitcoin. Answering these two questions properly requires an understanding of what threats are out there to your Bitcoin and how they can be prevented.

In today’s blog post we’re going to walk through the most common threats to a Bitcoiner’s sats and break down how Passport helps to keep your savings safe.

Loss of funds

The threat: While this isn’t an intentional attack by a bad actor, it’s by far the most common way that people lose their Bitcoin. If proper backups aren’t kept, frequently tested, and broadly distributed, loss of funds is an ever present risk.

Losing your Bitcoin can certainly happen due to unforeseen events like house fires and floods, but it most often comes as a result of over-complicated setups and unplanned inheritance. It’s easy to want to always be on the cutting edge of security and wallet setups in the Bitcoin space, but it often pays to follow the old “KISS” (”keep it simple, stupid!”) adage when it comes to storing your Bitcoin!

Be sure that you thoroughly test the recovery process of whatever setup you do decide, and ensure that those you want to pass your Bitcoin on to can follow the recovery process without any additional help or input from you. It pays (in sats!) to be thorough and diligent when it comes to storing your Bitcoin.

An example: Lost Passwords Lock Millionaires Out of Their Bitcoin Fortunes | NY Times

How Passport protects you: Passport takes two major approaches to helping you preserve access to your Bitcoin: (1) providing users the necessary tools to write down their seed phrase and/or backup PIN code safely, and (2) providing encrypted microSD backups as the default option. Our goal with Passport backups is to prevent losing Passport from being a life altering event, instead equipping you to easily and safely restore funds anytime.

Encrypted backups in particular provide a uniquely powerful backup method, as you can easily distribute encrypted backup files broadly, be it your favorite cloud service, your password manager, or many different microSD cards or USB flash drives. As the backup file itself is encrypted, even if an attacker stumbles upon it they won’t be able to tell what it is, much less access the seed phrase within it without the associated backup PIN code. Then simply make multiple, geographically distributed copies of your backup PIN code (never together with your encrypted backup file!) and you’ll always have the ability to recover funds.

For the more traditional Bitcoiner, you can choose any number of backup methods for the seed phrase itself, including steel backups to ensure that fire and weather can’t harm your backups.

Learn more: Why we love encrypted microSD backups

Social engineering

The attack: The idea of social engineering is as old as time, but has become even more rampant in the digital age. When it comes to Bitcoin, often the largest risk to a user’s funds is someone online tricking them to install malicious firmware or enter their seed phrase directly into malicious software.

How Passport protects you: Passport prevents the installation of any firmware that is not signed by Foundation’s developer keys, ensuring that even if you get a malicious firmware file from an impostor site or fake support agent, there is no way for you to install the firmware onto your Passport.

When it comes to scams centered on tricking users to enter their seed phrase, while there is no technical way to prevent this (a user always needs to be able to access their seed phrase for backup purposes), Passport forces a user to go through several prompts warning them not to share or reveal their seed phrase to anyone else.

Malware on your computer or phone

The attack: Malicious software wallets are a constant, ongoing battle in the Bitcoin space and have claimed many sats from good Bitcoiners over the years. The common attack is to use advertisements on Google Search or use similar names on platforms like the Google Play Store to trick users into installing malicious versions of popular wallets.

An example: Electrum Bitcoin wallets under siege | Malwarebytes

How Passport protects you: One of the biggest benefits to a hardware wallet that utilizes an air-gapped design like Passport is that it is practically impossible for malware to steal funds in any way if the user is observant. Passport’s air-gapped design means that no matter what software wallet you’re using, you always have to scan in the transaction and verify the transaction details on Passport’s large, color screen before signing.

Even if the wallet attempts to provide Passport with a fake change address, a common and stealthy attack, Passport will check the change address and warn if it does not belong to your wallet. As the malware on your computer has no way to access Passport via USB or Bluetooth, it cannot infect Passport and make Passport display false transaction details, either. This is an immensely powerful defense and one that protects you against many different threats!

The next time you send a transaction, take a bit of extra time and be sure that you’re verifying the address and amount properly to protect your sats. In addition, make sure to bookmark the legitimate sites for your favorite Bitcoin wallets, never trust a random DM on Telegram, and verify software that you download whenever possible.

“Evil maid” attacks

The attack: An “evil maid” attack is a category of attacks encompassing any time an attacker gains physical access to a device that’s off. This can happen when you’re at home (i.e. someone you trust), when you’re traveling (i.e. an actual maid at a hotel), or when the device is in transit (i.e. checked baggage while flying). A whole new world of risk opens up as soon as an attacker has physical access to your Bitcoin wallet as they can perform a host of attacks.

The most common evil maid attack is to swap your Bitcoin wallet with a malicious wallet that records your PIN code and then recover the malicious device and use the captured PIN code to steal funds from your wallet.

How Passport protects you: Passport provides two main mechanisms to help protect yourself against a malicious device swap attack. Security words are easily enabled in Passport’s settings and make Passport show you two unique security words that can not be seen or replicated without knowledge of your PIN. You can learn more on how to use this feature in our documentation here.

The second defense is to check the boot count under Firmware in settings and compare with what you’d expect. While it’s a simple and less fool-proof check, it does add an additional layer of difficulty for any device swap.

Learn more: Security Code & Security Words

Physical theft

The attack: This one is quite straight forward, and involves an attacker simply stealing your Bitcoin wallet. Stealing your hardware wallet gives the attacker more time to attempt physical attacks or a PIN brute-force attack, though the fact that your wallet is missing can give you a chance to move funds if you have proper backups available.

An example: Kraken Identifies Critical Flaw in Trezor Hardware Wallets | Kraken

How Passport protects you: Passport has been built from the ground up to provide an extremely strong defense in the case of a stolen device. Passport’s security architecture leverages a secure element to best protect against physical attacks, making successful physical attacks that steal funds infeasible.

Passport’s secure element provides a strong hardware-based PIN code rate limiting, allowing only 21 attempts to enter the correct PIN before the device is intentionally bricked and no seed is able to be recovered from the device. The secure element also prevents an attacker with strong electronics expertise from being able to extract the seed from the processor or memory, as the secure element would also have to be compromised to retrieve a working private key.

Learn more: Maximum PIN Attempts

Supply chain attacks

The attack: Last but not least, we have supply chain attacks where an attacker intercepts the device before you receive it. The attacker could tamper with the hardware of the device and re-assemble it with some form of backdoor or transmission of the private key built in.

An example: Case study: fake hardware cryptowallet | Kaspersky

How Passport protects you: With Passport we’ve engineered a novel supply chain verification system that leverages the secure element on Passport. Every Passport device has a secret key locked away in the secure element that is used when you setup your Passport to perform a challenge-response check with our servers that will only be valid on devices we have provisioned directly at the factory that have not been tampered with.

If the secure element is tampered with in any way, or if a malicious device was swapped out for a legitimate one it would be unable to pass supply chain verification.

Learn more: Passport Supply Chain Validation

Conclusion

While seeing many of the potential threats to your Bitcoin can feel overwhelming, note that the vast majority of these threats are mitigated by simply using Passport as intended. Secure self-custody doesn’t have to be complex and daunting, though we do have to be vigilant and responsible when taking back control of our money via Bitcoin.

Announcing our Early Access Rewards program

One of the powerful use-cases that Bitcoin unlocked with it’s peer-to-peer nature is the ability to incentivize and reward contributions without any middlemen or hoops to jump through. This movement has come to be known as “value4value,” and has provided an immensely powerful new tool for content creators, Nostr users, and now community members. Today we’re excited to unveil a new program implementing the value4value philosophy into our existing beta testing process — Early Access Rewards.

tl;dr — Be the first to report any reproducible issue for Passport or Envoy beta releases and get a 10k Satoshi bounty in Bitcoin per issue reported!

Early Access Rewards Highlights

The premise of the Early Access Rewards program is quite simple: contribute meaningful bug reports for Envoy or Passport releases while they’re in open beta, and get rewarded for each individual contribution. No middleman, no lengthy ToS, no Foundation login or account necessary.

How to participate:

  1. Test the beta releases for Passport firmware or Envoy app.
  2. Report issues on Github.
  3. All issues (the first time they are reported) are eligible for the 10k Satoshi reward.
  4. Foundation team members will validate the issues for eligibility.
  5. Rewards sent directly to your provided Bitcoin address or Lightning invoice.

Join Early Access Rewards today

Want to earn sats for your important contributions to our open-source projects? Simply join our beta testers Telegram room below and keep an eye out for beta release announcements. Once a release is announced, you can submit any issues you find via Github and earn 10k sats per validated issue.

Once you discover an issue with the beta release, submit it via Github using the following links with the “Bug Report” option. Note that this does require a Github account:

Join the community, help us improve, and get rewarded in Bitcoin for your valuable contributions! 🎉

The future of Early Access Rewards

We’re excited to see how well this program works to incentivize important feedback and contributions from our fantastic community, but we also have plans to expand the program in the future. We’re currently considering creating a hardware Early Access program to get our newest products in the hands of invaluable community members first, and top contributors to this Early Access Rewards program will be first in line.

We have multiple new products in the works, and we can’t wait to watch each of you help us to build and improve as we bring freedom tech to more and more people around the globe. As one of the top contributors to our Early Access Rewards program, you’ll get the chance to test our new products for free as a thank you for your contributions in exchange for feedback and bug reports.

The (not so) fine print

If you have more specific questions on how the program will work, you can read the detailed rules below. Have a question? Don’t hesitate to ask in the Telegram room or email us at hello@foundationdevices.com.

  1. Eligibility for Rewards: a. The first reporter of any reproducible issue for Passport or Envoy beta releases is eligible for a 10k Satoshi bounty, paid in Bitcoin. b. Issues must be reported only once, and once made public, they are no longer eligible for additional 10k Satoshi bounties.
  2. Reporting Process: a. All issues should be reported on Github in the appropriate repository:
  3. Reproducible Issues: a. Issues must be reproducible, meaning that Foundation team members can accurately recreate and validate the issue in the Envoy app or Passport firmware.
  4. Judgement and Reward: a. Foundation reserves the right to make the final judgment on whether issues are eligible for the 10k Satoshi reward. b. Once an issue is verified and confirmed as eligible, the reward will be sent to the reporter’s provided Bitcoin address or Lightning invoice.
  5. Rewards Distribution: a. The rewards will be distributed in Bitcoin (BTC). b. The amount of the reward will be 10,000 Satoshi for each eligible issue. c. All rewards will be paid out at the end of the beta period.
  6. Confidentiality: a. While issues will be made public upon reporting, beta testers should avoid sharing sensitive or personal information in public discussions about the issues.
  7. Compliance: a. All beta testers must comply with the rules and guidelines set by Foundation Devices during the beta testing period. b. Any violation of the rules may result in disqualification from the beta testing program and forfeiture of rewards.
  8. Changes to the Rules: a. Foundation Devices reserves the right to modify the rules or terminate the beta testing program at any time without prior notice.
  9. Disclaimer: a. Beta testers participate in the program at their own risk, and Foundation Devices shall not be liable for any damages or losses incurred during beta testing.