Zach Herbert, co-founder and CEO of Foundation—a company focused on building open-source hardware wallets—discussed the launch of the Universal Ethereum Signer app created by Ledger co-founder Nicolas Bacca, during an episode of Unchained Premium. The new application operates on Foundation’s KeyOS, a purpose-built operating system, and is designed to run on the company’s latest hardware wallet, the Passport Prime.
Universal Ethereum Signer and Security Design
The Universal Ethereum Signer aims to enhance the safety and usability of signing Ethereum transactions. Herbert described the device as “human authority hardware,” underlining Foundation’s approach to putting users in control of their own security rather than relying solely on software-based authentication.
KeyOS gives each installed application a unique, hardened child key derived from the master seed, rather than sharing full access to the primary seed across apps. This granular key allocation minimizes risk in case a specific app is compromised. Herbert compared the system’s lightweight microkernel—comprising roughly 9,000 lines of code—to the far larger Linux kernel, known to have nearly 40 million lines. He claimed that this streamlined design enhances auditability and paves the way for formal verification.
Herbert noted the microkernel’s compact size allows for easier audits than the massive and intricate Linux kernel, making security reviews much more manageable for teams and third parties.
Mini dictionary: Microkernel — A minimal operating system core that contains only necessary functionality, reducing potential vulnerabilities and often favored in security-sensitive settings for easier review and maintenance.
Early adopters will be able to sideload the Universal Ethereum Signer onto their devices during the beta release phase. Additional security features come with “Magic Backups,” Foundation’s solution for secure seed phrase storage, which splits the recovery phrase into three shares secured on two NFC cards and a phone. This method enables device recovery without tying access to email addresses or usernames, lowering the risk of personal data compromise.
Manufacturing and Platform Approach
Foundation produces the Passport Prime hardware wallet in an ITAR-certified facility in the United States, ensuring compliance with export regulations and incorporating anti-tamper switches into the devices.
Mini dictionary: ITAR — The International Traffic in Arms Regulations, a United States regulatory regime that controls the export and import of defense-related materials and technologies, including secure hardware components.
The company plans to launch an App Catalog, letting trusted developers distribute updates directly to users, similar in approach to F-Droid on GrapheneOS. This model provides additional flexibility by enabling developers to push updates to their applications without central mediation.
Herbert emphasized his vision for the Passport platform to remain neutral, avoiding revenue models based on transaction fees common in some wallet companion apps. Foundation’s hardware, he explained, is positioned to prioritize security and user control rather than integrated financial services or fee-based features.
Asked about trends where some users are repurposing old smartphones as device wallets, Herbert stood by the value of Foundation’s $349 dedicated signing device. He argued that purpose-built hardware, together with operational and manufacturing security, addresses crucial risks that are not covered by general-purpose consumer electronics.
Herbert pointed to the anti-tamper measures, custom-designed operating system, and secure element integrations as central reasons why dedicated hardware remains relevant for high-stakes digital asset management.
