Built for Passport.
Passport is Human Authority Hardware powered by KeyOS, Foundation’s Rust microkernel OS. It moves secure review and approval for high-stakes actions onto dedicated hardware, outside ordinary phones, laptops, browsers, and cloud accounts.
This is an early showcase of apps coming to Passport as we prepare the full SDK and app store.
The apps
All categories
Offline Cake Wallet
Holds the Monero spend key offline, reviews Cake-built transactions, signs locally, and returns signed tx over animated QR.
Nostr Event Signer
Your nsec sealed to the device. The browser stays the Nostr client; Passport only returns a signature after you approve on-screen.
Password Manager
Release-with-approval for credentials. Passwords are sealed to the device and released, encrypted in transit, only after you approve.
Liana Signer
A policy-aware Liana Miniscript signer that only ever signs a PSBT genuinely matching a registered descriptor.
Nunchuk Agent Signer
Passport as a self-custodied, hardware-enforced spending-policy co-signer for an AI agent’s Nunchuk wallet.
Spark Signer
Runs the Spark SDK in the browser with a custom signer that delegates every key op to Passport. No seed or FROST nonce ever in the browser.
Frostsnap Coordinator
Passport as the offline Frostsnap coordinator: run the FROST key-generation ceremony air-gapped, pair a taproot wallet, and sign PSBTs, taking the role the Frostsnap phone app normally plays, on hardened hardware.
Social Recovery
Split a backup key across trusted guardians with Shamir’s Secret Sharing, then reconstruct a quorum to recover. No servers, no network.
Pubky Ring
Brings Synonym’s Pubky Ring to Passport: your pubky identity keys held on the device, pairing over QuantumLink (Passport’s encrypted Bluetooth) to authorize homeserver sign-ins on-screen.
Secure Notes
An on-device store for the sensitive details you don’t want in the cloud, with typed items for logins, secure notes, payment cards, identities, and SSH keys, all sealed to Passport.
Nunchuk Inheritance
Turns Passport into the offline plan-holder for a Nunchuk inheritance setup: your heir’s encrypted recovery guide, a dead-man’s-switch, and a claim kit, all on the device.
x401 Approvals
Passport as the human authority for x401 proof requests: when a verifier asks an AI agent to prove personhood or authority, the Passport renders the exact intent, claims, and warnings for you to approve or deny before any credential is returned.
Calculator
A basic-and-scientific calculator that runs natively on Passport, showing KeyOS as a general-purpose app platform rather than a Bitcoin-only signer.
Tether Wallet
A fork of Tether’s own wallet app, rebuilt so Passport holds the account key, re-parses every transaction, and signs over QuantumLink only after you approve on-screen.
Seed XOR
Splits one BIP39 seed into parts that are each an ordinary seed in their own right, and puts a set back together. Every part is required: N of N, with no threshold and no spare.
Graffito
Personal notes written into real bitcoin transactions, composed and signed on a device with no network. A companion page broadcasts and rescans the chain.
OpenPGP Keys
Create, import, sign, and encrypt with OpenPGP keys that never leave Passport, answering signing requests over QR. Keys can be derived from your seed, so a seed restore restores your PGP identity.
Paper Wallet
Printable bitcoin gift bills generated offline, with keys from the device hardware RNG and seed-recoverable backup keys.
Image Viewer
Photos and animated GIFs decoded entirely on-device, strictly read-only. Nothing is written, nothing leaves the device.
PDF Viewer
Read PDFs rendered entirely on-device, strictly read-only.
Text Editor
Browse your Passport’s storage and edit text files, fully offline.
Coinjoin Signer
Passport as an unattended WabiSabi coinjoin signer for Wasabi Wallet. You approve one session policy on the device, then every round signs itself against that policy without another tap.
Fieldnote
A Markdown editor and viewer that reads and writes plain .md files in Passport’s encrypted storage, sharing them with the built-in Files app.
SeedQR Tool
Walks a SeedQR across the screen in small blocks so it can be punched or stamped onto metal without losing your place, then scans the copy you made and confirms it decodes back to the seed you started with.
Verify
Calculates SHA-256 and SHA-512 hashes and verifies OpenPGP release signatures entirely on Passport, so you can confirm a file matches what its publisher signed before you install, copy or open it.
Build your own for Passport
Every app here is a KeyOS application (Rust plus Slint) talking to a host over WebUSB, QuantumLink Bluetooth, WebSocket, or animated QR. The same release-with-approval primitive is open to third-party developers.