Why This CEO Stopped Calling It a Hardware Wallet

— Foundation builds Passport Prime, a personal security platform (not a "hardware wallet") designed with a custom microkernel OS called Kiosk, which sandboxes apps so no single app can compromise the entire device or access the master seed.

— Open source is essential for Bitcoin security because it enables free market competition and collaborative improvement across the industry, not charity; proprietary legacy hardware (HSMs, smart cards) used by custodians lacks transparency and transparency is a prerequisite for customer confidence.

— Self-custody adoption remains extremely early—only 7 to 15 million hardware wallets have been sold globally since 2014, representing roughly 2% penetration; the industry has been judging devices on wrong criteria (air gap, Bitcoin-only features) rather than design, ease of use, and verifiable security practices.

— The Cold Card entropy bug and broader hardware wallet immaturity underscore that complex multi-sig setups and dice-roll schemes deter adoption; ease of use is a security feature because it encourages actual usage instead of devices sitting unused.

— AI agents and internet-connected devices threaten the security of 2FA codes, passwords, and email accounts; users need a cryptographic "root of trust" outside their phones to approve high-stakes irreversible actions (Bitcoin transfers, code deployments, account recovery).

— Foundation rejects single-purpose hardware in favor of a bundling model—Passport Prime doubles as a FIDO2 security key, backup solution, and app platform, enabling users to customize their attack surface and third parties to build apps without vendor permission.

— Lock down your email and critical accounts (Gmail, iCloud, exchange accounts) using a hardware security key or Passport Prime's FIDO2 functionality to prevent social engineering attacks that can lead to fund loss, even if your Bitcoin is self-custodied.

— Document your self-custody setup in a shared family password manager (e.g., 1Password family vault): record when you generated keys, tested sends/receives, updated firmware, and where you stored backups and key cards so you—and your heirs—can access your Bitcoin when needed.

— Resist overly complex multisig and dice-roll schemes; instead, prioritize ease of use so you actually deploy and test your setup regularly; if you cannot confidently verify a setup (like a two-of-three with a mobile app key), store the majority of your key material offline where you have 100% confidence.