The Bitcoin wallet app on Passport Prime functions similarly to other hardware wallets. The main aim is to keep your Bitcoin private keys offline and secure. Paired with companion software, Passport Prime can verify addresses, sign transactions, manage accounts, and handle passphrases, all while your private keys never leave the device.

Companion software

Passport Prime works with two kinds of companion software, and the choice depends on whether you want a single-signature or multisignature wallet:

• Envoy , Foundation's mobile companion app. Designed for single-signature wallets with Passport Prime, paired over QuantumLink Bluetooth or QR code. Envoy does not support multisig wallet setup or coordination.
• Multisig-capable wallet coordinators, for multisignature wallets with Passport Prime as a cosigner. Foundation does not ship a multisig coordinator; instead Passport Prime interoperates with established third-party tools across desktop and mobile, such as Sparrow , Nunchuk , Specter , Blue Wallet , Bitcoin Safe or Bitcoin Keeper, and collaborative custody services such as Casa, Unchained and Theya (see Multisig with Casa or Unchained ). Electrum is available in Connect Wallet for single-sig accounts only. You create and coordinate the multisig wallet in one of those tools, then import the configuration to Passport Prime (see Import Multisig below) so it can verify addresses and sign transactions as one of the cosigners.

To open the Bitcoin Wallet app, tap Bitcoin in the dock at the bottom of the home screen.

Accounts

Once the wallet is open, all active accounts will be shown. If you have any multisig configurations added to Passport Prime, those will also be listed here.

Account Menu

Tapping on any account or multisig configuration provides an additional sub-menu that allows for connecting to an external wallet, verifying addresses, and viewing more details.

Connect Wallet

Use Connect Wallet to pair an account with a companion wallet that has a documented Passport Prime integration:

1. Tap Connect Wallet and select the wallet you are actually using: Bitcoin Keeper, Bitcoin Safe, BlueWallet, BTCPay, Bull, Casa, Coconut Wallet, CoinBits, Electrum, Fully Noded, Nunchuk, Sparrow, Specter, Theya, Unchained or Zeus.
2. If the wallet can use Passport Prime both on its own and as a multisig cosigner, choose Connect as Single Sig or Use as part of Multisig.
3. On the Scan this Code screen, scan the QR code with the companion wallet, or tap Save to File where the wallet accepts a file. Saved files go to the Airlock.

Do not select another wallet to bypass a missing integration. See Connect Passport Prime for the full workflow and compatibility limits.

For multisig configurations, use the Export Config button instead to share the full multisig setup with the other cosigners.

Verify Address

Passport Prime's 'Verify Address' feature allows you to verify that a receive address being displayed by your chosen wallet software actually belongs to your Passport Prime. Passport Prime starts its search from index #0 and moves outwards in increments of 200 addresses.

If at first Passport Prime cannot find the scanned address, please continue searching. This is particularly relevant for users who have completed many transactions with their wallet or for users importing an existing seed from a heavily used wallet.

You can also view an address list for your wallet by tapping Explore Addresses from the camera viewfinder screen. Passport Prime allows you to browse by script type and receive or change address indexes by using the filter button in the top right corner. The active address can be displayed as a QR code simply by tapping.

Account Details

View the details of the selected account. These details will include:

• Account label
• Account number
• Fingerprint

Tapping the three-dot menu on this screen will enable you to:

1. Sign a message with an address from this account
2. Archive the account

Sign a Message

Sign a message via a simple QR code scan. This feature can be useful when withdrawing from exchanges that require you to prove that you are in control of the provided withdrawal address.

Tap Sign Message from the Account Details three-dot menu. Passport Prime's camera will open. Scan the message provided by the service you're interacting with. Passport Prime will then display the message and corresponding address. Swipe the bar from left to right to sign. Passport Prime will then show the signed message in QR code format to be received by the service being interacted with.

Alternatively, you can save the signed message to a file. The file is saved to the Airlock, in the signed_messages folder. Passport Prime can't save to the Airlock while it is connected to a computer by USB, so disconnect the cable before saving, then reconnect to copy the file to your computer. You can also move it to a USB drive or microSD card with the Files app. See Airlock and USB Connections .

Archive Account

Accounts you no longer use can be archived to keep the Accounts page tidy. From the Account Details three-dot menu, choose Archive Account. Passport Prime asks you to confirm, and reassures you that the account will not be deleted and can be restored at any time.

To find archived accounts, tap the three-dot menu on the Accounts page and choose View Archive. From there you can tap Restore Account to bring an account back, or Delete Account to remove it permanently. If Passport Prime is later asked to sign a transaction from an archived account, it will prompt you to restore that account first.

For any multisignature configurations imported to Passport Prime, tapping Account Details here will show the configuration info, including all cosigners, and give you the opportunity to export the configuration as a QR code or a file. Files are saved to the Airlock, so disconnect Passport Prime from your computer before saving, then reconnect to copy the file across.

Signing Transactions

Passport Prime supports three methods for signing transactions: via QuantumLink (automatic with Envoy), via QR code, or via file.

Via QuantumLink

The fastest and simplest way to sign transactions with Passport Prime. You simply initiate the transaction from Envoy and when ready, Envoy will automatically contact Passport Prime via QuantumLink and the transaction signing screen will show up for you to check and authorize by sliding the teal slider from left to right.

After signing, the signed transaction will be automatically sent back to Envoy, via QuantumLink, to be broadcast to the Bitcoin network.

Via QR Code

Tapping Scan QR in the home screen dock, or the QR icon in the bottom right corner of the Bitcoin wallet app, will open Passport Prime's camera. Scan the unsigned transaction QR code series from Envoy (or other QR-compatible wallet software).

Once Passport Prime has read all of the information required, it will display the details for you to check and authorize by sliding the teal slider from left to right.

After signing, the signed transaction will be displayed as a series of animated QR codes on Passport Prime's screen. Scan these QR codes with Envoy (or other QR-compatible wallet software) to transfer the signed transaction back to be broadcast to the Bitcoin network.

Via File

Tapping the folder icon in the bottom left corner of the Bitcoin wallet app will open Passport Prime's file picker. Once open, you can choose to load a file from the onboard storage, the Airlock, or an external storage media, such as a USB thumb drive or microSD card, that can be inserted into the USB-C port at the bottom of the device.

Once located, simply tap on the .psbt transaction file to open it. Passport Prime will then display the transaction details for you to check and authorize by sliding the teal slider from left to right.

After signing, the signed transaction is always saved to the Airlock as signed.psbt, wherever the unsigned file came from. Passport Prime confirms this with "File saved to Airlock as: signed.psbt". Each new signed file overwrites the previous signed.psbt, so move it off before signing another transaction.

To broadcast the transaction, reconnect Passport Prime and copy signed.psbt from the Airlock to your computer over USB, or use the Files app to move it to a USB drive or microSD card, then open it in your wallet software.

Three Dot Menu

Tapping the three dots in the top right corner of the Accounts page shows a sub-menu offering advanced features and settings.

Create Account

Adding additional accounts is a great way to manage separate stacks of Bitcoin using a single device and seed. When adding new accounts to Passport Prime, the device will require two pieces of information:

1. A label for the account - It is good practice to name the account in line with its purpose. E.g., ‘Business’ or ’Savings’
2. An account index - Passport Prime will automatically increment these, but advanced users are free to choose their own

The index and the Network are under Advanced Options. Network offers Mainnet (the default) or Testnet.

Each account is automatically assigned a color based on its account index, so the same account always appears in the same color across Passport Prime, Passport Core, and Envoy.

Once added, the new account(s) will be visible from the Accounts page of the Bitcoin wallet app and auto-synced with Envoy via QuantumLink (if connected). For those using Passport Prime with a third-party wallet, new accounts will need to be manually paired (Account menu > Connect Wallet).

Apply Temporary Seed

Loading a temporary seed in the Bitcoin wallet app is not available yet on KeyOS 1.4.x.

Apply Passphrase

For increased plausible deniability in the event of a physical attack, a passphrase can be applied to Passport Prime. A passphrase acts as a second layer of security to protect your Bitcoin in the event that someone discovers your seed words . Multiple passphrases can be used with a single device as another method of segregating funds. Your passphrase is never saved to Passport Prime. Ensure it is safely backed up!

Applying a passphrase to Passport Prime creates a new wallet that is completely independent of the default wallet created by your 12/24 word seed and will have its own unique list of accounts and receive addresses.

Once a passphrase has been applied to Passport Prime, the accounts view will display two tabs. One for the default non-passphrase accounts, and another for all accounts related to the active passphrase. Each new passphrase account must be paired with the software wallet of your choice. If paired with Envoy via QuantumLink, passphrase accounts will automatically appear in Envoy as soon as the passphrase is activated on Passport Prime, and will be removed from view when the passphrase is cleared.

A passphrase will remain active on Passport Prime until:

1. It is removed by tapping the three dot menu and choosing Clear Passphrase
2. The device is powered off

Import Multisig

Use this feature to import an existing multisignature wallet configuration file to be registered on Passport Prime. This is a crucial step to ensure you're able to securely verify addresses and sign transactions from any multisig wallets where Passport Prime is a cosigner.

After importing the config via QR or a file, Passport Prime will display the configuration details for you to check, then ask you to give a label. Once imported, the new multisig configuration will be displayed in the accounts page of the Bitcoin wallet app.

Multisig with Casa or Unchained

To add Passport Prime as a cosigner to a Casa or Unchained multisig, tap the account, then Connect Wallet, and choose Casa or Unchained. Both services are multisig only, so Passport Prime goes straight to the multisig export. Share it with the service by QR code or by saving a file (saved files go to the Airlock, so disconnect Passport Prime from your computer before saving).

For Casa multisig configurations, the account card shows Health Check in place of Export Config. Use it when the Casa app asks for a health check: choose Check with QR Code to scan Casa's request and show the signed response as a QR code for the Casa app, or Check from File to sign a health check file from external storage or the Airlock. To use the Airlock, copy the file onto it, then disconnect Passport Prime from your computer before you choose Check from File.

Settings

Configure the settings related to interactions within the Bitcoin wallet app. These include:

• Amount Display - Have transaction amounts displayed in BTC or Sats
• Show Fiat Value - Show Bitcoin amounts in fiat. When on, Currency lets you choose which fiat currency is used
• Multisig Policy - How Passport Prime handles a multisig configuration that is not yet registered on the device: Ask to Import (default), Require Existing or Skip Verification
• Verify Full Input History - Reject transactions where Passport Prime cannot verify all input history

Verify Full Input History

When signing a transaction, Passport Prime needs to know how much each input is worth so it can show you the correct amount and fee. By default it will accept the input amount supplied in the PSBT when the full previous transaction is not included.

Turn Verify Full Input History on and Passport Prime instead requires the complete previous transaction for every input, and refuses to sign anything it cannot check for itself. This closes off a class of attack where a malicious PSBT understates an input so that the fee you are shown is far lower than the fee you would actually pay.

The trade-off is compatibility and size. Some wallets do not supply full previous transactions, and PSBTs that do include them are considerably larger, which means more QR frames or a bigger file. The setting is off by default for that reason.

If the setting is on and a transaction doesn't include the full history for every input, Passport Prime shows Unable to Verify Inputs instead of the signing screen. Tap Back to stop, or Temporarily Disable to skip the check for that transaction only. The setting stays on for future transactions.