There seems to be no way to completely reset Passport? Reset only resets the content, but not the PIN code. Then again typing PIN wrong 20 times destroys the device, so that is not a solution either. And one cant change the PIN code on resetted device without creating or restoring a wallet before? And even then there is no way to completely remove the PIN code?
This is crazy.
What if I forget the PIN code on the device that I have resetted and putted aside for a couple of years? Goodbye the whole device! What if Im affraid that someone might be able to recover the PIN code from the device and I want it to be gone? No way to do that sorry!
Unlike typical electronics, a security device cannot afford a simple ‘Factory Reset’ option. The reason for this is removing the chain supply attack vector, where devices looks perefectly new, altough they aren’t. Like Ledegers.
PIN shouldn’t be forggoten, and even if so, that’s where the mnemonic phrase backup can be used for recovering your Bitcoin wallet keys.
You are correct, our current gen passport cannot be factory reset in a way that the PIN creation process is also reset. A strategy that would resolve some of the mentioned concerns would be to change the pin to 000000 first, then factory reset the device. However, you are correct in your assessment regarding a device whose PIN you have forgotten - that device would be locked forever. You would still be able to recover your funds using the mnemonic, or even better, your funds with all the accounts metadata if you recover from an encrypted backup in another Passport.
In any case, just like you did, a lot of people voiced their concern regarding this implementation so we decided to review it for Passport Prime. Our new device will be able to be completely wiped and factory reset, including the PIN.
I always had doubts about resetting a wallet that it’s 100% unrecoverable. Let’s say I wipe a passport to re-use it, is some data not recoverable through forensic tools same way they do for mobile phones?
When I decide to change wallets (including a fresh seed) I always destroyed the previous hardware wallet and ordered a new one. Does that make sense or am I just burning money?
Nothing to worry about. When you erase, we overwrite the data with blank 0’s. So even if someone were able to break in, all they would extract is a blank ‘secret’.