---
title: "Ethereum Foundation Backs Universal Signer App on Foundation's Passport Prime"
description: "Built by Ledger co-founder Nicolas Bacca, the sandboxed application operates on Foundation's KeyOS microkernel and Passport Prime hardware wallet."
url: https://basisdesk.news/news/ethereum-foundation-universal-signer-passport-prime-keyos
published: 2026-11-12T15:01:29.459Z
modified: 2026-11-12T15:01:29.459Z
section: Security & Hacks
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: neutral
tickers: [ETH]
tags: [hardware wallets, keyos, ethereum foundation, passports, cryptography]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# Ethereum Foundation Backs Universal Signer App on Foundation's Passport Prime

Built by Ledger co-founder Nicolas Bacca, the sandboxed application operates on Foundation's KeyOS microkernel and Passport Prime hardware wallet.

## At a glance

- **What happened:** The Ethereum Foundation introduced a Universal Ethereum Signer app built by Ledger co-founder Nicolas Bacca for Foundation's Passport Prime device.
- **Why it matters:** The implementation sandboxes device keys using a 9,000-line microkernel, isolating app access to hardened child keys instead of master seeds.
- **Who is affected:** Passport Prime hardware wallet users and Ethereum ecosystem application developers.
- **What's next:** Beta users will sideload the software ahead of a broader rollout through Foundation's planned App Catalog.
- **Status:** announced
- **Primary source:** [Why the Ethereum Foundation Is Launching a Signing App on Passport Prime](https://unchainedcrypto.com/why-the-ethereum-foundation-is-launching-a-signing-app-on-passport-prime/) — unchainedcrypto.com

## Key points

- Ledger co-founder Nicolas Bacca built the Ethereum Foundation's Universal Ethereum Signer for Passport Prime.
- The app operates on Foundation's KeyOS, using a 9,000-line microkernel that restricts apps to hardened child keys.
- Users will initially sideload the beta signer before Foundation rolls out a direct-update App Catalog.

## Editorial remark

- **Context:** Hardware wallet manufacturers have faced growing scrutiny over closed-source firmware updates and embedded swap monetization, pushing developers toward sandboxed architectures.
- **Impact:** Passport Prime owners gain direct, sandboxed execution of an Ethereum Foundation-endorsed signing client, while developers secure a direct-distribution path bypassing proprietary app review gates.
- **Watch:** The transition of the Universal Ethereum Signer from its beta sideloading phase into the public Foundation App Catalog release.

The Ethereum Foundation is launching a Universal Ethereum Signer application for Foundation's Passport Prime hardware wallet, Foundation co-founder and chief executive Zach Herbert announced on Nov. 12 [1]. The software was authored by Ledger co-founder Nicolas Bacca and is designed to operate on KeyOS, Foundation's proprietary operating system [1].

Users will initially sideload the Universal Ethereum Signer during its beta phase onto the $349 device [1]. Under KeyOS's architectural design, applications are sandboxed so that each individual program accesses only a hardened child key rather than the master seed [1]. According to Herbert, KeyOS relies on a microkernel comprising roughly 9,000 lines of code—contrasting with the Linux kernel's approximately 40 million lines—which Foundation plans to subject to formal verification [1]. The underlying Passport Prime device is produced in an ITAR-certified US manufacturing facility equipped with active anti-tamper switches [1].

## Neutral Hardware Distribution

The integration serves as an early deployment under Foundation's planned App Catalog model, an architecture that aims to function similarly to F-Droid on GrapheneOS by enabling third-party developers to push direct updates to devices without Foundation acting as an intermediary [1]. The system pairs with Magic Backups, an architecture that partitions cryptographic seeds into three Shamir secret shares distributed across two NFC cards and a mobile phone, restoring device states without collecting user emails or account identifiers [1]. Herbert framed the rollout as an effort to keep Passport Prime a neutral signing terminal rather than an ecosystem companion interface monetized through embedded token swap margins and fiat on-ramp fees [1].

The initiative emerges as core developers advance broad infrastructure security frameworks, including parallel work where the [Ethereum Foundation details a lean roadmap to deploy post-quantum cryptography by 2029](https://basisdesk.news/analysis/ethereum-foundation-post-quantum-cryptography-roadmap-8vjrah). At the time of writing, $ETH traded at $2,003, down 2.5% over the past 24 hours.

## Sources

1. [Why the Ethereum Foundation Is Launching a Signing App on Passport Prime](https://unchainedcrypto.com/why-the-ethereum-foundation-is-launching-a-signing-app-on-passport-prime/) — unchainedcrypto.com, 2026-11-12

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai