Skip to content
Basis Desk

New: Basis Desk Verify for Chrome & Firefox — fact-check crypto news on any page, free.Get the extension →

Security & Hacks · 1 min read

Ethereum Foundation Backs Universal Signer App on Foundation's Passport Prime

Built by Ledger co-founder Nicolas Bacca, the sandboxed application operates on Foundation's KeyOS microkernel and Passport Prime hardware wallet.

Editorial oversight: Julian Mercer, Chief Editor
Neutral

At a glance Announced

What happened
The Ethereum Foundation introduced a Universal Ethereum Signer app built by Ledger co-founder Nicolas Bacca for Foundation's Passport Prime device.
Why it matters
The implementation sandboxes device keys using a 9,000-line microkernel, isolating app access to hardened child keys instead of master seeds.
Who is affected
Passport Prime hardware wallet users and Ethereum ecosystem application developers.
What's next
Beta users will sideload the software ahead of a broader rollout through Foundation's planned App Catalog.
Primary source
unchainedcrypto.com: Why the Ethereum Foundation Is Launching a Signing App on Passport Prime

Key points

  • Ledger co-founder Nicolas Bacca built the Ethereum Foundation's Universal Ethereum Signer for Passport Prime.
  • The app operates on Foundation's KeyOS, using a 9,000-line microkernel that restricts apps to hardened child keys.
  • Users will initially sideload the beta signer before Foundation rolls out a direct-update App Catalog.

The Ethereum Foundation is launching a Universal Ethereum Signer application for Foundation's Passport Prime hardware wallet, Foundation co-founder and chief executive Zach Herbert announced on Nov. 12 1. The software was authored by Ledger co-founder Nicolas Bacca and is designed to operate on KeyOS, Foundation's proprietary operating system 1.

Users will initially sideload the Universal Ethereum Signer during its beta phase onto the $349 device 1. Under KeyOS's architectural design, applications are sandboxed so that each individual program accesses only a hardened child key rather than the master seed 1. According to Herbert, KeyOS relies on a microkernel comprising roughly 9,000 lines of code—contrasting with the Linux kernel's approximately 40 million lines—which Foundation plans to subject to formal verification 1. The underlying Passport Prime device is produced in an ITAR-certified US manufacturing facility equipped with active anti-tamper switches 1.

Neutral Hardware Distribution

The integration serves as an early deployment under Foundation's planned App Catalog model, an architecture that aims to function similarly to F-Droid on GrapheneOS by enabling third-party developers to push direct updates to devices without Foundation acting as an intermediary 1. The system pairs with Magic Backups, an architecture that partitions cryptographic seeds into three Shamir secret shares distributed across two NFC cards and a mobile phone, restoring device states without collecting user emails or account identifiers 1. Herbert framed the rollout as an effort to keep Passport Prime a neutral signing terminal rather than an ecosystem companion interface monetized through embedded token swap margins and fiat on-ramp fees 1.

The initiative emerges as core developers advance broad infrastructure security frameworks, including parallel work where the Ethereum Foundation details a lean roadmap to deploy post-quantum cryptography by 2029. At the time of writing, $ETH traded at $2,003, down 2.5% over the past 24 hours.

Sources

  1. [1] Why the Ethereum Foundation Is Launching a Signing App on Passport Prime — unchainedcrypto.com, November 12, 2026

Written by Basis Desk's newsroom system from the primary sources above and machine-verified against them before publication. Market figures marked "at the time of writing" come from live exchange data. Report an error: corrections@basisdesk.news · corrections policy.

Community read
How do you read this story for the assets involved? One vote a day, anonymous.
Be the first to vote

The Daily Brief, in your inbox at 07:00 ET

Five stories, the numbers that moved, what to watch. Three minutes. No hype, no advice, unsubscribe in one click.

Not financial advice. Basis Desk publishes information, not recommendations. Crypto assets are volatile and you can lose what you invest.