Built for Passport.
Passport Prime is Human Authority Hardware powered by KeyOS, Foundation’s Rust microkernel OS. It moves secure review and approval for high-stakes actions onto dedicated hardware, outside ordinary phones, laptops, browsers, and cloud accounts.
This is an early showcase of apps coming to Passport as we prepare the full SDK and app store.
The apps
All categories
Offline Cake Wallet
Holds the Monero spend key offline, reviews Cake-built transactions, signs locally, and returns signed tx over animated QR.
Nostr Event Signer
Your nsec sealed to the device. The browser stays the Nostr client; Passport only returns a signature after you approve on-screen.
Password Manager
Release-with-approval for credentials. Passwords are sealed to the device and released, encrypted in transit, only after you approve.
Liana Signer
A policy-aware Liana Miniscript signer that only ever signs a PSBT genuinely matching a registered descriptor.
Nunchuk Agent Signer
Passport Prime as a self-custodied, hardware-enforced spending-policy co-signer for an AI agent’s Nunchuk wallet.
Spark Signer
Runs the Spark SDK in the browser with a custom signer that delegates every key op to Passport. No seed or FROST nonce ever in the browser.
Frostsnap Coordinator
Passport Prime as the offline Frostsnap coordinator: run the FROST key-generation ceremony air-gapped, pair a taproot wallet, and sign PSBTs, taking the role the Frostsnap phone app normally plays, on hardened hardware.
Social Recovery
Split a backup key across trusted guardians with Shamir’s Secret Sharing, then reconstruct a quorum to recover. No servers, no network.
Pubky Ring
Brings Synonym’s Pubky Ring to Passport Prime: your pubky identity keys held on the device, pairing over QuantumLink (Prime’s encrypted Bluetooth) to authorize homeserver sign-ins on-screen.
Secure Notes
An on-device store for the sensitive details you don’t want in the cloud, with typed items for logins, secure notes, payment cards, identities, and SSH keys, all sealed to Passport Prime.
Nunchuk Inheritance
Turns Passport Prime into the offline plan-holder for a Nunchuk inheritance setup: your heir’s encrypted recovery guide, a dead-man’s-switch, and a claim kit, all on the device.
x401 Approvals
Passport Prime as the human authority for x401 proof requests: when a verifier asks an AI agent to prove personhood or authority, the Prime renders the exact intent, claims, and warnings for you to approve or deny before any credential is returned.
Build your own for Passport Prime
Every app here is a KeyOS application (Rust plus Slint) talking to a host over WebUSB, QuantumLink Bluetooth, WebSocket, or animated QR. The same release-with-approval primitive is open to third-party developers.