the vault app in Passport Prime can generate passwords from the master key. This is exactly the feature I was looking for for a long time. Sadly, in the current state of the firmware it is practically unusable in the real world.
The problem is that you need to read the passwords from the screen and then type it into a PC. The passwords feature special characters that are difficult to find on some keyboard layouts. Some letters/numbers are difficult or impossible to distinguish. O and 0 are difficult to distinguish. The capital i (I) and the small L (l) are impossible to distinguish.
Would you please add an export feature for vault passwords to a future firmware?
For example, let us write a password into a file in the Airlock.
Or let it display a QR code that can be scanned by a smartphone.
Agreed. I think the optimal solution is allowing Envoy to hook into the password manager API and transmit them automatically over Quantum Link when needed.
I agree! Passport Prime is unusable! I will not generate seed words while connected to a device that has access to the internet. Fortunately I have a Blockstream Jade and it was able to generate the 24th word off line. I purchaced this device 18 moths ago and it still unsable.
Correct. However I MUST connect to a device that has the Envoy app. Those are connected to the internet. I tried to disconnect from Envoy while creating master seed words but Prime stopped the process.
I agree. The Prime should not require connection to ANY external device - for anything. Furthermore, I am unable to DISABLE the Magic Backups switch in Settings > Backups. I don’t want to backup to anything other than my USB stick.
Passport Prime has never been marketed as an airgapped device, and it is not one. It does considerably more than sign Bitcoin transactions, and several of those things are impossible without a channel to something else.
This thread is the clearest example of that. A password the Vault generates is no use sitting on the device screen, it has to reach the machine you are logging into, and that requires a connection. The same goes for the security check during setup, live price data, and Magic Backups.
What Passport Prime does not do is touch the internet. QuantumLink is an encrypted Bluetooth link to Envoy on your phone, and anything beyond that point is Envoy’s job. Your master key never leaves the device.
The airgap lens is an easy one to apply, and most people arrive here from a Bitcoin-only hardware wallet where airgap is the headline feature. It does not carry across to a device with this scope.
On the Magic Backups toggle, you are right and it is a known issue. That switch is not interactive on current firmware. It is with the engineering team.
In the meantime you can already create a Settings & Data backup file straight to a USB stick from Settings > Backups > Advanced Backups > Settings & Data Backup, and back up your master key to Keycards or seed words from the same menu. Restoring from that external file is planned but not shipped yet, so keep your Keycards or seed words safe as the recovery path for now.
I fully agree with qna here. I’m not even sure if I will even use the Passport Prime for Bitcoin. Currently, I’m mostly interested in securing my most important passwords, keys and 2FAs in a way that I don’t ever lose them. For this a wireless connection and backups are needed.
Sorry to hear the Prime is not “marketed” as an airgapped device. Foundation has an oportunity to design and develop this product to function solely in an airgapped manner. Based on what I see, the features that appear to be on the back-burner or in “future” releases support your statement and now make sense to me. This aligns with what I have come to suspect after spending time testing the device. For me, this is a concern, but I sincerely appreciate your candor.
I believe there is an opportunity for Prime to be uniquely positioned as a true self-sovereign security device. Without the ability to function in a pure airgapped manner Foundation is passing up a tremendous opportunity to be a stand-out product. Without this I see no advantage over using my phone. Foundaton is expecting me to trust them. This leaves an opportunity for competetors to step in and deliver what Foundation is rejecting, and I sincerely hope they do.
I will not in good conscience use Prime for my Bitcoin needs. For my other security needs I see no real advantage in using Prime.
Passport Core is not coming back, but we are exploring the viability of giving user the ability to disable the Bluetooth firmware on Passport Prime during onboarding.
That is Awesome! Passport Core is the best hardware wallet I have ever used, Specter Shield a close second. When you air gap Prime I believe it will be better.