This article details how to set up (initialize) your Passport hardware device out of the box for use with Casa.
Keystone is compatible with Casa BTC vaults. It is not currently compatible with Casa ETH vaults.
Not a Casa member yet? You can sign up here.
NOTE: Passport is a hardware device manufactured by a company called "Foundation," so the device is more commonly referred to a "Passport" device, and less commonly referred to as a "Foundation" device.
Already initialized your Passport device, so that a private key is already on the device? Then you can skip ahead to Adding Passport to your Casa vault.
To begin, verify the integrity of the first box (the device box) to ensure that it's free from tampering.
Open the box and remove the device. You'll find the device comes with batteries. Pop off the magnetic back and insert the batteries.
You can power on the device by pressing and holding the lower left-hand button.
Passport stores a supply chain private key in the Secure Element, which enables Supply Chain Validation to verify your device is genuine when you receive your device.
Supply Chain Validation is critical to adding an encrypted layer of assurance that your device is genuine. If your device fails Supply Chain Validation, it may have been been tampered with or swapped out with a malicious device before it got to you. Do not continue initializing it, and reach out to Foundation for assistance.
Scroll through the text and you'll come across QR code verification, which you can do to verify, for the security purposes mentioned above, that your device is authentic.
You'll set up your PIN code next. The PIN code you set MUST be between 6-12 digits. It's very important that you remember this code, write it down, or keep in saved in a password manager. In any case, keep it secret!
You will need to enter this PIN code each time you unlock your device, and when you send transactions.
When you enter the first 4 digits of your PIN, the device will pause PIN code entry momentarily and present you with two Security Words. These words are intended to ensure no one is able to tamper with or swap out your device during your use of the device.
In addition to remembering these words, we recommend that you write them down and store them with your PIN. You will see these words every time you enter your PIN and should not use your device if you do not.
After confirming your words, enter the remainder of your PIN.
Each time you enter your PIN code, you will enter the first 4 digits, then verify the 2 security words, then enter the remainder of your PIN code.
The next step is to download the latest firmware for the device at the following link:
https://docs.foundation.xyz/firmware-updates/passport/
To update firmware, simply save the downloaded .bin file to a microSD card. You may need an adapter for this step if the device you wish to use does not have a microSD slot.
Insert the microSD card into the device and go to Settings > Firmware > Update Firmware. Select the file and install the latest update, which should take about two minutes.
Seed phrase backup
Once you've set your password, you'll then choose "Create New Seed" to generate a recovery phrase or a "Seed Phrase."
Passport will now prompt you to back up your seed to the microSD cards included with your device.
In a Casa vault setup, we consider retaining the seed phrase to be optional.
If you choose to retain the seed phrase, the device creates an encrypted backup file and saves it on each microSD card. The backup is encrypted with your Backup Password, which we recommend storing in a password manager or cloud storage.
When creating an encrypted microSD backup, you will be prompted to record a 6-word phrase for your Backup Password. Note that this phrase is different from a 12, 18, or 24-word mnemonic phrase for bitcoin private keys. MicroSD backup is designed to protect your private keys through a 2FA setup requiring both the Backup Password and a microSD card.
Users who wish to record their 24-word seed on paper or metal can do so at any time in Settings > Advanced > View Seed Words.
If you choose NOT to retain your seed phrase, and are using this device exclusively for your Casa vault, you can just skip the seed phrase backup step.
That's it! Your Foundation Passport device is now set up and ready to be added to Casa.
The next step is to follow the instructions for Adding Passport to your Casa vault