Prime Time with Q

Welcome back to Freedom Tech Friday, a weekly live and interactive show hosted on the Ungovernable Misfits feeds. We go live for one hour every Friday at 9AM eastern or 2PM UK time, but you can, of course, catch up on the Ungovernable Misfits podcast feed after the fact.

On Freedom Tech Friday, we like to cover the latest news and trends for anything relating to Freedom Technologies. That could be anything from Bitcoin or Monero, encrypted messengers, privacy tools, and everything in between.

Essentially, if there's a news item, tool, or topic that can help you take back some control in today's digital Panopticon, then we wanna talk about it.

Name is q and a and I'm head of customer experience at foundation where we build bitcoin focused sovereignty tools. And as always, I'm joined by my good friend Max, the head honcho of the ungovernable empire, and Seth who is COO over at Cakewallet.

Freedom Tech Friday is a live and interactive show, and you can help steer the conversation by commenting live, pre submitting your questions or topics on socials, boosting the show via podcasting two point o apps, sending in your tips, or just sharing the show with your friends.

Top support from the last show with Crypto Squid from Start Nine team comes from Welder Ian, who sent 2,222 sats and said, keep up the great work, Start Nine team. Thank you for your support, Ian. Hope you are well. Without further ado, let's dive into the show. Max, Seth, how are you both doing?

I am doing. I'm here. I'm not I'm not Claude. I'm not a fake version of myself. OpenClaw failed me. I keep up. Chat about that another week. But, nope. Only real stats out there. Only real stats.

Very good. I'm also far from an OpenClaw. I can't even work out how to do this chat window now that we've gone live queue. It's the one thing you've ever asked me to do, and I failed you already. Where's it gone?

Just in the very right side panel. Just click chat. It's on the notes and QR codes. There we are. Okay. And then if you wanna bring any anybody, you just click on comment like that. I've just bought up Bon. Good morning, Bon. Bon. Good morning, Bon.

Are you well, Max? Very well. Fiat Life is beating me with a hammer at the moment, but I'm I'm building a bigger hammer, and I'm gonna beat it back. I feel like we all sound a bit dejected and run down this week. It sounds like we've all had those for weeks.

Yeah. We're getting old as well. Old and miserable. So Hey. Speak for yourself. I'm young. I'm I'm cool. I'm cool. Yeah. I think we're all a bit worn out, but I am looking forward to seeing what you're gonna show us today. And it's part of the reason you're worn out. So I'm sure you can do this demo in your sleep at this point.

Yeah. So no guest this week. Something a little bit different. If you're you're listening with your ear holes rather than watching with your eye holes, I would urge you to maybe head to YouTube or or click view the video on fountain because this one's gonna be a lot of visual stuff.

Obviously, I'll be talking over the top. But, yeah, earlier this week over at Foundation, I ran week two of our prime time office hours series where we well, I am taking customers through all aspects of Passport Prime.

Week two that just happened on Tuesday was onboarding and recovery. And I also do a bit of a deep dive on the the concept of magic backups at the the the top of the show. So I thought rather than, you know, it just be for those

people that manage to join live or catch up on YouTube, I thought it's very applicable to the Feed and Set Friday audience as well. So I thought why not? I didn't wanna waste all my efforts, so let's milk this one. And, you know, I wanna reuse the content because I think it is useful and, you know, allows me to

to tell everybody what the hell I've been working on me and the team have been working on for the past two or three years and and why I intimately sound very stressed and very tired.

So I'll I'll kick it off with, well, hopefully, sharing my screen. Let me know when to see it, guys. Should be up now. There we go. Yes. Okay. Beautiful.

Alright. So, Mark, Seth, feel free to jump in at any point. I won't be watching the questions as I normally do because I'll be concentrating a little bit more. So feel free to jump in and stop me if you

have any questions. But the plan is I'm gonna run you through some slides that mainly centered around what magic backups are to set the scene, and then I'm gonna bring up my camera and go through a a passport prime onboarding so you could see see what that looks like live in action and That's good. See how how easy it is.

So, yeah, as I said, the prime time is our six weekly office hours style interactive sessions that you can join free of charge and catch up on the foundation YouTube.

After the fact, if this is the first time that you're discovering it, you've already missed the first two weeks, but keep an eye on the foundation socials and you'll able to join live for the subsequent weeks.

We are covering over the course of six weeks. Week one, which is welcome to Prime, mainly theory, just talking about what Prime is, how to position it, and, you know, what the the goals of the of the the are.

Week two, which is the recap that I'm doing today is onboarding and recovery. Weeks three to five, I'm gonna be covering all of the different apps. The Bitcoin app, the keys and the 2FA apps, the files and the vault apps. And then in week six, we're gonna be looking at what is next.

So before we get started, for those that are unfamiliar, it's worth highlighting what you actually get in the box with Passport Prime. Obviously, the device itself, you are gonna get the three NFC key cards, which come in their own Faraday sleeves, and you'll be see you'll see me using those on the stream shortly.

There'll be a warranty booklet and a USB c cable for charging or for using the device with any USB functionality such as file transfers or security keys like Fido, like those Fido two keys, security keys you can use to log in to Mhmm. Or onboard your online accounts. Excuse me.

So, yeah, what I'm gonna showcase today is the onboarding showcase. I'm not gonna labor it too much and go through a bit, but every every piece because you're gonna see me do it. But here's what I'm gonna be covering. Doing a firmware update because my device is already up to date, so there is no further updates available.

But you'll see me go through the entire onboarding process right from factory fresh all the way to getting connected to Passport to Envoy, excuse me, where we're gonna create the magic backups.

We're gonna connect the accounts, and I'll give you a brief tour of the user interface as well so that you can get some device orientation and see what it looks like once you've once you've set it up.

After that, if I will showcase recovery as well because this is one of the the shining parts of the the architecture really. You'll see me do the the two or three chamere style backup, which I'm gonna dive into in a second.

The other bit with the cards. Exactly. Yeah. So you'll see me create them, which, you know, is is great in itself and it's much easier than writing down seed words. But it's only half the picture really because when it really shines is when, you know, you're able to recover

all of your security keys, all of your two FA keys, all of your Bitcoin accounts, all of your additional seeds if you've got them added in there, simply by going through the onboarding and tapping one card.

When you see it, it really does put the magic into magic backups. So hopefully, if I don't dwell too much on the finer details during the the slide part of it, I'll have time to to showcase that for you as well.

Alright. So magic backups. I wanna do a bit of theory here just to set the scene because I say this is one of the shining parts of the architect Asphalt Prime consists of two main parts. You've got the master key.

More advanced users, you can just think of this as, you know, the primary secret that anchors everything on Passport Prime. It's represented in a multitude of different ways. Obviously, the most common one in the Bitcoin sphere is seed words.

The the master key is just another term for that, and we back that up in a multitude of different ways. Again, we're gonna demonstrate that shortly. And then the second part of magic backups is the settings and data backup.

What you can look at this as basically is an encrypted file that contains everything else apart from the master key, and it is encrypted by the master key. So you need one to access the other, but they are two distinct

pieces of information or things that you need to to look after and consider. Thankfully, if you use magic backups, it's made very sim very simple, and it most of it is managed for you. So the first part, the master key.

As part of the default onboarding, we split that in a two of three Shamir style split where for those of you that are unfamiliar with a Shamir split, it's sometimes called Shamir secret sharing.

It's basically where you can split a secret into a number of pieces. It doesn't have to be three. That's just the the the method that we've chosen. And then once you split all of those pieces, you only need a certain threshold of them. In our case, it's two to be able to recover the entire secret.

Some people like to call it multisig for your seed, which, you know, I can get why they say that. And, you know, I I probably won't lean into that too much because it can get confusing. But you have three pieces, you need two of them to recover your master key.

By default, we ship you with three cards. We're gonna use two of them as part of today's onboarding. So we put one part on on one card, another part on the second card, and then the third part is sent to Envoy over the Quantum Link Bluetooth connection. Again, I'm gonna demonstrate that shortly.

And that is then automatically backed up in an encrypted fashion to your personal cloud. So if you you're an Apple user, it goes to your iCloud key chain. And if you are a Google user, it goes to your Android auto backup.

It's stored in both instances in part of your kind of cloud storage that isn't kind of readily accessible. So you can't, like, log into your iCloud drive and just see Envoy

smear split. It it doesn't work like that. It's just part of a of a hidden construct within your account. You call it a blob from memory, some sort of Yeah. Kind of. Yeah. And it's just an encrypted piece of data, basically, that's tied to your iCloud account.

Uh-huh. So as I say, you need any two of those to recover. So if you lose one key card, you're fine. You can just use the other key card on Envoy if you need to recover. If you lose your phone, again, you're still fine because you can use the two key cards to recover.

Onto the second part of magic backups, again, which is the settings and data. This can your app settings, all of the customizations that you make to the device. So if you have multiple Bitcoin accounts, you give them different names, all of the different app data, so your two f eight codes, your security keys,

all of that is stored in an encrypted file or blob as you said, Max. And that again, thanks to the Quantum Link connection gets automatically sent up to the foundation server. It is then updated automatically as you just naturally use the device.

Couple of key points here. The data is encrypted by your master key. So although it is stored on the foundation server by default,

we cannot access it, we cannot decrypt it. And the other thing to to drive home here is that there's no personal information on that server. So we we don't have, you know, an encrypted date with Seth's name next to it and another one with Max's name next to it. What we have is a cryptographic hash and an associated blob.

If you can confirm

to the server by providing the right hash, and you can only do that with the master key, then you can retrieve and download the encrypted data and decrypt it locally on your device. If you can't do that, you can't access the data on the server. So that's how we build that in such a way that, number one, no personal information.

And number two, we can't access it. And even if someone was able to somehow get that hash, like, captured in flight or whatever, they can't actually decrypt the blob unless they have the siege to make the key. Right. Absolutely correct.

Yep. Alright. So this is bit of a busier slide, but it's worth walking through because it shows you all of the pieces. So if we start in the middle, passport prime, this is where your master key is generated as part of the onboarding and it's where it where it lives in active use, so the normal day to day operations.

Obviously, we have a secure element and it's split between that and the MCU, the the main controller on the device. So it's secure whilst it's on the device as well.

And everything else on this slide flow flows out from that central point essentially. So if you look to the right, your master key go this is where your master key goes as part of the backup process, split into three parts, two on the physical key cards and one stored in Envoy,

encrypted and automatically backed up to your chosen cloud account. So the master key exists on prime, but it's backed up in a distributed fashion across those three locations.

On the left hand side, you've got the settings and app data backup file. This is the other half of the magic backups, and it's bundled containing all the stuff I mentioned earlier. Updates are labels, account names, device settings, all that good stuff.

It's encrypted by your master key and stored on the foundation server alongside that hash. If you don't have the master key, you cannot access and download and decrypt the data that's stored on the server. That is inclusive of also foundation as well.

So when recovery happens, prime reconstructs the master key from any two of the parts on the right hand side. It sends the hash of that master key to the foundation serve as a form of authenticate that you are in control of the master key. And that then is allow is enough to allow you to download the encrypted data.

And then once it's all together on prime, it gets decrypted. And the end result for you as the user is that your the prime that you just recovered on looks exactly the same as the prime where you created your most recent backup.

So if you've ever, you know, moved from one iPhone to another iPhone and you've done that kind of scanning the the weird orb thing,

this is basically our version of that. So the end result is that number you know, your new iPhone looks the same as your old iPhone. It's the same way we just store the the data in in different ways. What might someone do if they were, say, using graphene or, you know,

they didn't have Apple or Google backup thing? Like, could they do that in a different way, or is it just it has to be Google or Apple? Like, could they use Proton or some other way of doing it?

It's untested at the moment. In theory, they could, but it wouldn't happen in anywhere near as much of a seamless way as I've just Yeah. Yeah. Sure. No. But, yes, it's possible. I I will say tread carefully. It's it's untested at this stage. So, you know, don't, you know, do some rigorous testing

in terms of backup and recovery if you do wanna go down that route. I only ask because just a lot of people who listen to this show probably don't actually use either of those options, and I just wondered. Yeah.

I mean, obviously, I'm gonna demonstrate the the the happy the magic onboarding because it's, you know, where we we envisage most of our users going. But you you can completely do this in a in a offline self sovereign manner. That's why we ship with three key cards, not just two. Yep.

And if you don't wanna use any of this, like, magic cloud server encryption and stuff, what you can do is is turn that off to an onboarding. And when I get there on on this the the the stream, I'll show you. And you turn that off.

What that means then is that nothing gets sent over to Envoy. You just split the three over the three key cards instead of two key cards plus Envoy. You So just store the key cards offline.

And then you're solely responsible for backing up that settings and data backup file, which you can just download as often as you like, once a day, once a month, once a year from the settings of the device, and then go and store that wherever you want. It could be put on drive, could be a an SSD, could be an SD card.

Like, so you don't none of this is mandatory. You can do it all completely offline if you want. And that would just mean that say you forgot to do the backup, it doesn't mean you don't have access to your funds. It just means you wouldn't have your labels and all that kind of stuff. Yeah. That's right. Okay. Yeah.

Well, that becomes more important with a device like Passport Prime because the idea is you're storing much more than just labels. It's gonna be two FACO security keys, all that sort of stuff. Yeah. True.

Yeah. So just just to reiterate some some important points here. We don't have any personal information on you and to be able to tie you to your specific backups. We can access any encrypted data that's stored on our server as part of the magic backups.

I haven't mentioned seed words at all yet, but if you do wanna make an additional form of backup as well as the key cards, you can just pull out the seed words from the settings whenever you want.

Offline backups, I've just spoken about and how you can achieve that. And then from the the next major release, the screen that you can see there is is a backups menu from the passport prime settings.

Soon you'll be able to just toggle that magic backups button on or off. Right now, it's a little bit more guided. So if you wanna go from a non Magic user to a Magic user, it would require a a device erase.

But soon, you'll just be able to turn it on and turn it off, and it will just automatically either stop sending stuff to the cloud if you turn it off or start sending stuff encrypted to the cloud if you turn it on.

Okay. Right. Let me see if my camera's gonna work. I'm just gonna stop the screen share and turn that on. Beautiful.

Alright. So let me see if I can make myself full screen so that you can see. There we go. Is that full screen for you guys?

Yep. Yeah. You might wanna shift the the chat out of screen. Yeah. My my assistant producer's slow on that one. There we go. How's that? It is very low quality for me. I don't know if there's anything you can do to increase that. But Max, how's it looking for you? It says it's in seven twenty p, but maybe it's lying.

Oh, hang on. High definition. Let me try that. Yeah. Does that move that? Say

Did not change it all for me. It's the pixelation. It's it's very

low quality, not your presentation. That's extremely high quality, mate. We'd never say that about you. But the the actual image is low. In the settings, I've got auto high def or standard def, and it's it's in high def.

Maybe, like, try and refocus the camera, can you? Or I don't think it's that. It's the it's the stream. Yeah. I think it's the stream that's crippling it. Yeah. Okay.

Well, not a lot we can do about that then, is there?

Not while we're live on air. I see. It just got a bit better there, slightly. Really? For me? Okay. It just comes and it comes and goes. Ah, yes. Go on again. You'll just have to you'll have to say as you press, like, up in that top right corner of the phone, I can see advanced, but I can only see it half the time,

like, what it actually says. So Right. Maybe as you click through. Yeah. Just let me kill my tail scale just to see if that's doing anything. I may I may have blush him. No. Can see. You're still here.

Is it any better? Oh.

Not yet.

No. Only thing I can think of is maybe your network's not good enough for it, and it's freaking out. But I mean, I do live in a third world country, so it probably is that.

That's so true. Yeah. It's still the same, mate. It's not, like, unworkably bad. It's just not yeah.

Damn. Okay. But who you rather stream has been fine then? You haven't had any problems? Yeah. No. The other ones, they it's gotta be something to do with restream because I I did the exact same setup with our local,

like, virtual office, and I didn't get any complaints there. So

Untraceable says it's good enough. Go on. Go on. Alright. Thanks, untraceable. I'm gonna I'm gonna make it prime the my the primary focus. I know it's chopping some of the phone off, but maybe that'll that'll help a little bit. Little bit. Alright. Alright. So apologies for the quality, guys. I'm not sure what's going on. But okay.

So here's the the the factory fresh setup. We've got a passport prime on the left, Envoy on the right. To go through the setup process, I am gonna choose set up a passport device. It's gonna ask for camera permissions, and then it wants to scan a QR code. On passport prime, I tap get started, and then I just scan that QR code.

It's gonna do a quick connection via, I call it, naive Bluetooth. And then the next step is to secure that into the Quantum Link encrypted tunnel. Very simple. You just tap connect with Quantum Link.

It's gonna pop up with the accessory sheet for your OS and demonstrating on iOS. Android will have a very similar thing. It basically just said, do you wanna add this device to your Bluetooth accessory list? You just press setup and then done.

Envoy then head straight back to the camera because it wants to scan another QR code. And you'll have seen on the left that Passport Prime automatically started showing some animated QR codes

to establish the encrypted tunnel. So same again, just scan the QR codes. This one takes a little bit longer. Obviously, there's some animated QR codes there. So there's a little bit more information to pass back and forth. Once

it's scanned, you'll see that both devices start to move forward on their own. The connection has been established. The security check has been automated and it is passed. So this is again, just like with passport call, we do a security check to check that there has been no tampering of the device

after it leaves our factory and before it gets to you guys. And then the next one would be it checks for a firmware update. As I mentioned at the top of the call, obviously, I know that this device is already up to date.

If there was an update available, the screen on Passport Prime would just say update now. You hit the button and it all happens automatically. The whole process takes, like, two minutes tops.

And then you will come back to this screen and it will say update applied, and then you just tap continue on Passport Prime.

Then we're gonna set a PIN for the device. Again, I'm not gonna label the PIN. The Freedom Tech Friday audience knows what a PIN is for. Six to 12 digits, or you can switch to a password if you want to. I'm gonna set something super secure here, so please don't hack me.

You'll be asked to verify it and enter it a second time, then you'll see a confirmation screen to say it's been set successfully. Alright. And then we're gonna set the master key. So we have the option here to restore from backup. So if you've already got seed that you wanna bring into Passport Prime, you could choose restore.

If you're restoring from an existing Passport Prime, you can choose restore and it would ask you to tap the key cards. Again, hopefully, I'm gonna have enough time to do that on the stream and I'll show you that bit later on. But obviously for now, I need to set up in the first place. So create master key.

It's gonna tell you what I told you earlier that passport sorry. That the master key protects all the money and all the personal data that's stored on passport, so look after it.

Just like on passport core again, it uses multiple sources of on device randomness as well as some software based randomness to combine them all together to generate you secure and random master key.

Tap continue, and now it wants to create the magic backups that I spoke about earlier. So here's where the key cards come in. So I'm just gonna move the phone out the way for a second just to make it a room because we don't need that right now.

I'm gonna tap continue. And again, should tell me what I told you earlier about the key cards. You can restore with one key card plus Envoy or two key cards. Again, this is in the magic backup setup.

Offline users would have just three key cards and they would restore from any two of those. It tells you a little bit about the the short range nature of the NFC, which can trip some people up, especially if they've got a case on the device. We do sell these cases.

And whilst it's great for protecting the device, sometimes it can be seen to hamper the NFC a little bit. So if you do have any issues, follow the advice on screen and make sure that the case is removed as well because it does make tapping the NFC key cards a little bit easier.

Alright. So I've gone into the set the magic backup creation step. You can see that part one, thanks to the Quantum Link Bluetooth connection has already been sent over to Envoy. So the next step is that it wants me to tap one of the or hold one of the the key cards up to the back of the device.

So what you wanna do is hold it in a t shape like this. You'll see that it starts to save. Again, you'll see sometimes it can error out. But normally, after the one to two tries, there you go. So it's stored one key card.

Let me let that focus. There you go. So part two has been stored on the key card. Then I just need to go and grab another one of the key cards, set the device on top,

let it save, and there you go. It's stored part three onto the key cards. So we split the three the master key into three parts, one on Envoy and then one on these two key cards that you just see me tap.

Tap continue. And then the next step is that it's gonna automatically connect, again, thanks to the Quantum Link connection, the first Bitcoin or the primary Bitcoin account over to Envoy.

I tap finish. Everything loads, and there's our Passport Prime account. Envoy on the right takes you through a mini tutorial that basically says, oh, by the way, we've given you a free mobile hot wallet if you wanna use that for smaller amounts of day to day spending.

And here is your passport prime primary account for your offline storage. Passport prime's loaded on the left. We've got the bitcoin price load in there and you can see all of the apps on screen.

So after I finished doing the slides and I've talked you through all of that at a fairly legible play pace, what have we done that in what? Ten, fifteen minutes maximum? So it's a huge jump in terms of usability.

Yeah. Just a bit. And and in terms of going from zero to one and getting set up and backed up compared to what we had with something like Passport Core, which was a great product.

The very nature of that Quantum Link connection and the the liveness that it affords us where you saw throughout both devices were perfectly in sync. I didn't have to worry about context switching and worrying about which action

where I needed to take the next action. Was it on, you know, over here or was it over here? It's all perfectly in sync and it just makes the whole onboarding process super easy. It also as you were doing it, I was thinking because you're not writing down seed words or anything manually Yeah. For a lot of people who are newer

and don't listen to shows like this or or other similar shows or really into this kind of stuff. They probably just sit at a kitchen table or in their office with a webcam still on or, you know, wherever it is, like, people or around devices that could potentially record.

And with this, you don't have that issue because there's nothing physically written down. Yeah. Not only that, but you're absolutely right. But not on that, without even knowing it, they've also got redundancy as well because they've it's it's in a two or three setup. Right? Yeah. So whereas seed words are great, the universal

I've always been a huge fan of them as a standard. On their own, they're a single point of failure. And if you don't know how to handle them properly, then you can get yourself in some sticky situations.

But with that said, like, again, those of us those of you that know what we're about a foundation, you know, we you know that we're always abiding by standards. And there you go. Go and grab your seed words from the settings in the device.

Yeah. So if you wanna do additional backups and stamp them into steel, you know, be our guest.

Yeah. Obviously, some people will still do that. I'm just the the point is this is gonna be aimed at reaching more people and those people, I think, are are gonna be because I've done it before where I've onboarded people, and that is always the sticking point. It's like, okay.

Well, so I've got the thing on here and that's secure, but now I've got these words. You want me to put them in a safe and you you or you want me to put this extra passphrase on top and, you know, it starts to get a little bit confusing and a little bit tricky, and they don't treat them in the the way that I would treat them. So

with having the cards and the backups, I would feel more secure, like, getting my mom to do it than I would with Passport Call. Yeah. Go on, Seth. Sorry. Yeah. No. I was just gonna say, I think the the thing that was so exciting about this for me is for too long, it's felt like the like, actually doing

cold storage right was really technical. Like, even just through writing down the 12 seed words, but also making sure you have redundancy somehow, that you have protection against fire, that you have ways to to ensure that your loved ones can recover it.

Like, we had set the bar so high for cold storage that the average person is realistically was not gonna do this. Like, the average person is not using

the average person is fine with doing ledger recover, unfortunately. Mhmm. And it's because of the simplicity it provides, but that there there are huge downsides to that approach. So the thing that's really beautiful to me here is this gives you the same type of redundancy as something like a ledger recover, but without trusting

any external entity with your seed phrase. Ledger recover in theory is okay if no one collaborates, but they're business entities who are all under same similar jurisdictions. So that was really problematic there. Whereas this brings just, like, the same user experience and the same redundancy, but with

total self sovereignty in your hands because you have the two cards even if foundation disappears tomorrow. You have the two cards and can recover at any time, which is just super, super important because, like, this this stuff, we need to be building for the 99%, not the 1%.

Yeah. And yet, obviously, like like, you always do a foundation, like, do a cake. Like, you you you also build in the advanced stuff for those who want to go that path. If you want to go stamp this in the steel,

you can do that. You can go see your seed words. You can stamp them in the steel. If you don't want to use the cards at all, you can do that. If you do want to use Envoy and the cards, but you also want to use steel as an an additional layer of redundancy, you can do that. And that that user choice, that freedom is

just an absolutely huge part of this, and yet it's not forcing every user into a very technical, very complex, very confusing setup, which is just absolutely huge for for self sovereignty actually spreading and becoming more normal and not just something that's kind of by nerds for nerds.

Yeah. Definitely. I I mentioned earlier around, you know, there's gonna be

leaning towards more advanced users on on this stream. We're well aware of that. So I mentioned earlier around, you know, if you are a manual user or if you wanna be a magic backup user, but you also wanna keep an offline copy of all of that settings and data, it's literally just head into this menu here, and you just download that file.

You can put a USB drive into there, plug it into your computer, whatever you whatever you want, pop that into there, and then just download that file and store it offline wherever you see fit. And I'm sure there'll be people on here that do something very similar with, you know, various different important

piece of information like the next cloud or or whatever. It's the exact same thing. If you wanna do that, you know, again, go for it. It's it's very simple. And it will take you, you know, a couple of minutes every couple of weeks or something like that just to have that extra layer of protection

whilst still being able to leverage the the automation of the cloud backups if you want to. Yeah. One quick thing. Sorry too that I was just thinking about, like like you mentioned to the people listening to this are generally probably already going to be doing cold storage. They're gonna be quite advanced.

But thinking about this not just for you, but also, like, where are you going to onboard friends and family? How are you going to get them to do cold storage? And I think it's been, like, it's been fascinating that for so long I mean, you've been in tons of these conversations, Q, but, like, anyone you talk to in the Bitcoin space

who's, like, actually working in the Bitcoin space, they're like, oh, I onboard my friends and family to to Passport. And that was even before Prime. Like, that was even just Passport Core, the simplicity and user experience before this whole next level.

Mhmm. People are like, oh, that's by far the easiest one for someone who's not a technical hardcore Bitcoiner. That's where I'm I'm onboarding friends and family. This is the next step of that, and, like, I think that's something really important to keep in mind as you as you check out new pieces of Freedom Tech, not thinking just,

will this be the perfect fit for me? But also, what does this bring in terms of how can I onboard people to this who I love and who I care about, and I wanna make sure I actually get self sovereignty? And that's one of the biggest things, again, for me is, like, this is far better even than Ledger,

in my opinion, in many ways, in terms of user experience and only getting started. Mhmm. And it's something that we can actually onboard people to who are, again, not not super tech savvy, not super advanced, not deeply technical Bitcoiners,

but they can get started with this with just a smartphone and following the directions on the screen. No, like, hour and a half tutorial or BTC sessions playlist or something like that to be able to figure out how to how to do this. It's it's it's straightforward.

Yeah. Alright. What I'm gonna do now is I'm just gonna come into some of the apps. The whole the point here isn't to give you a lowdown of how to use the apps. That feels like a a whole show in itself because there's so much to show. I'm just gonna make some dumb data here. So I'm just gonna add a new

security key. I'm just gonna it test, make it yellow, save it as if, you know, I'm actually gonna use that to go and secure my, I don't know, Google account or something like that. And then I'm also gonna generate a new child seed using BIP 85.

Again, let's just call it max.

Save that. So I've got some dummy data in there now. The point I'm the reason I'm doing that is so that we can demonstrate how easy it is to recover all this additional stuff as well as all of the important stuff like your master key that controls your Bitcoin as well.

So I've got a child seed in there. I've just created a security key. I am just gonna make sure that we run, whoops, an additional

backup. So I'm gonna press backup now. Again, that's sending all that encrypted data over Quantum Link, which is going to Envoy. There you go. And then from Envoy, it's sending that encrypted data up to the foundation server to be backed up alongside that cryptographic hash.

So now what I'm gonna do is I am going to go to erase the device. So settings, advanced, and erase. I understand I'm gonna erase it. Yep. No. I don't wanna make an offline backup. Erase. So I'm mimicking the fact that I've just

broke this passport and I've had to buy a new one or I've lost my existing one. My kids stood on it or or whatever. Making a recovery scenario where I've had to buy a new passport prime and all I have is Envoy and these two key cards.

So what I'm gonna do is just un from Envoy. Alright. So we're in the kind of empty state again. So I've I've recovered psychologically from my my prized possession, my passport prime being destroyed. I've got myself another one.

And I'm gonna show you the recovery process now. So again, very simple. Tap continue, and then open the setup page on Envoy. Scan the QR code. I am gonna whiz through this because it is a repeat of what I did before. And obviously, I'll slow down when I get to the recovery step.

So we're setting up the Quantum Link connection again. Again, with the new passport prime that I wanna recover onto.

Scanning the QR codes.

There we go. Connection is established. Checking the device security. There's gonna be no updates available. Continue. I'm gonna create a new PIN on my new device.

Alright. So here's where we differ. We're gonna choose restore from backup. You can see four options here. Well, technically three. The migrate from passport core you'll see is is grayed out. That's coming in a subsequent release.

To be clear, what that one's gonna enable you to do is restore from the encrypted backup. So if you're a passport core user, you'll know that you have an encrypted SD card and a 20 digit backup code or you might even have a six word backup phrase if you're a real OG.

You'll soon be able to import that backup to populate your your new passport prime if you do wanna migrate. On the top, we have the more traditional Bitcoin centric backup methods of seed QR and entering your plain old 12 or 24 word seed.

But what we're gonna do here is restore from key cards because this is the whole point of magic backups. So I've just moved the phone out the way because there's not really anything to see on there. It's just waiting for me to take action on passport prime.

And passport prime wants me to hold a key card to passport. So I'm just gonna grab one of the key cards that I used earlier, tap it to the back of passport prime. And then that happened super quick. I wish I could slow that down. But what happened there was it read from one key card.

It recognized that that key card was part of a magic backup set. And there you go. Part two has been automatically restored from my Envoy And the master key, because we've got two of those three parts, the master key has been fully restored.

And I'm ready to continue with the rest of the setup process, which is essentially done. Very tough one. Finish Can I just jump in with a weird question? Go ahead. You know, you said there was three different cards that you could use and then not have the recovery

with foundation or or not have that saved separately. So you just have three cards. Could you do a mix of both where you're still having the backup, but you also have three cards so you have extra redundancy in case two somehow get lost, you still use the other one, or do you just leave that in the box and do nothing with it?

Yes. You can, but it's a little bit of a again, a bit antiquated with the current setup with one of the subsequent releases where I mentioned about being able to quickly switch between magic backups and

non magic backups, so online and offline, so to speak, then it will become much easier. And, yes, we're gonna be selling packs of the cards as well. You So can

yeah. You'll be essentially, short answer is yes. You'll soon be able to do that in a much easier way than you can right now. I I don't think it's necessary, like, with especially if if you can write down and stamp your seed anyway,

and you can do encrypted backups, and you have this magic backup. Like, you gotta work quite hard to to fuck that up, but I'm just Right. Just one of those things that went through my head. Exactly.

So there you go. Look, there there's the dummy data in the security keys app that I made earlier. And if I go to vault app, we'll see Max's seed. There you go. Job done. So again, saw the the whole all I did was go through the normal onboarding process, and instead of tapping new master key, I tap recover.

I showed oh, sorry. I presented Passport Prime with one of these, and it literally did everything else for me automatically. And the recovery process was what? Less than five minutes? Start to And again, that's with me talking over the top showing you or or, you know, kind of explaining things as we go along. So huge huge improvement

in terms of speed. Yeah. But alongside the speed, we're also securing much more data as well. So it's it's again, it's huge. Yeah. I'm I'm just very proud of the team. And

I've said it as a as a bit of a cliche on on a couple of streams now, and it's normally said in relation to to AI, which I know, you know, we we use a fair bit on the show. This is literally the worst this device is ever gonna be right now and it's already brilliant.

We are already speaking to to multiple teams in and around personal security, Bitcoin, crypto to build their own apps for the device. Obviously, Seth and and the team at Cake are are one of the the first, hopefully, that are gonna be across the line.

So what this device can do right now with those five apps that you can see is essentially the the bare essentials. It's the tip of the iceberg. Mhmm. We the team at Foundation are brilliant, obviously, unbiased.

But we are no longer the gating factor for what our hardware can do, which is a, you know, a wild place to be, basically. So the what this device can do in terms of potential use cases is only limited by, you know, the the mind share of willing devs that wanna get a device.

And if you have a die an idea, please do get in touch. We'd love to send you a developer device so you can build on it. And yeah. So we're gonna be able to share our developer kit

to those interested over the course of the next couple of weeks. We're already in talks with many teams. Ken and and Owen from the team were were at one of the conferences developer conferences in New York yesterday or the day before.

And Ken did a a presentation to all the developers and there's some very excited people, prominent people. I won't name names who've gone away with developer units that are very excited to build stuff for this device. So I am very, very excited to see what what this device is capable of in another twelve months time

because there's there's a lot of a lot of very clever people that have now got their hands on one with the know how to to do very cool shit.

Was it a thousand you sent out? It was some massive number, I saw. Well, Zach's Zach's earmarked up to a thousand to be sent out to developers. We haven't could be clear. We haven't given away a thousand already. I was gonna say it's massive amount. Yeah. Yeah. No.

There was just a, you know, I think 20 or 30 given away at the conference yesterday to to developers. Yeah. We're already in talks with some teams who've already got theirs. And, yeah, it's growing by the day. We've got if you want if you do wanna if you have an idea, please do get in touch.

And we'd love to hear what your idea is and and help me help you build. Well, it's I was first thinking because I saw that number and I was like, a thousand? There's barely a thousand of us fucking weirdos on Twitter lurking around who are interested in Bitcoin. And then I was like, but

this isn't just for Bitcoin. Is it it still so much more. So the the the amount of teams that can get their hands on it and start working on it is huge. Yep. Yep. The SDK is is already in internal testing.

Some of the guys are are playing around using the the using the tool into

to kind of build some of the scratch their own itches and stuff, and it's already semi functional. So it's gonna be ready to share publicly with with developers in in the coming, you know, one to two weeks. And yeah, just again, very very excited to see what it can bring. So we we still got a bit of time.

So if anybody has any questions or if you guys have any anything you'd you'd wanna see while we, you know, bring towards a close the next five, six minutes. Vibrant has a question. Go on.

How's the Monero slash cake app coming along? Is that something we can expect in the coming months, Seth? No pressure. Yeah. That's a good question. So I'm hoping we can start work on that in the next couple of weeks.

It's hard to say exactly how long that's gonna take until we get into it, but we do have dev dev units, like, unprovisioned dev units in hand now. We got those in in

I guess we got them distributed to the team in in Cannes a couple weeks ago. So we have those, all throughout the team now, and we'll start working on it very soon. So hopefully starting, like, May at the latest. I need to get something out this summer,

but we'll we'll definitely have more out on that and share more progress as we actually kick start the the implementation. That will start with just Monero, as I've mentioned before, and then we'll we'll branch out to other cryptocurrencies after that.

Nice.

Q, can you leak any I assume you can't, but any sort of apps that might be coming at some point soon maybe or maybe not that the only two I can talk about are the ones that are on the website, which is is obviously cake, and then the guys from Lagos, which is a a Bitcoin DLC based lending tool, self custody lending tool.

Those are the only two that I'm able to speak publicly about. And I think the if I'm honest, I think the Ligos team are probably further along than than cake. So that they may actually pip cake to the post in terms of being the the first the first one.

I say that partially tongue in cheek to dangle the carrot in front of Seth a little bit. I see you pushing I see you pushing me. I see you. I see you. I see you. There's the yeah. Those are the only two I can talk about publicly for now. But especially after yesterday's developer conference, there's there's some exciting use cases.

I hate to be that guy that's kind of like, oh. Yeah. Yeah. You'll have to wait and see, but, unfortunately, you will you will have to to wait and see. Seeing as no one else has any questions at the moment in the chat, can I ask you to go in a little bit more on the Vault and the two FA stuff?

Because it's I remember when we were first talking about all this stuff, all the changes, and I was asking you about whether you could use the vault to do something clever with inheritance where you could have, like,

instructions or wills or things that could be accessed on device that would only be accessed once the the keys were handed out. Any thoughts on that and, like, how this works? So with inheritance, there's a couple of ways you could do it. The the the most obvious one that's kind of tied to what you just said in terms of, like,

an inheritance file would be to use the files app, which is exactly as it says on the tin really. It's an encrypted files app. Obviously, I've just set this device up, so there's no files on the internal storage. I haven't had anything I added anything to it.

But again, you can look at this from a files perspective as an encrypted flash drive. So if you know the PIN, you can access the the files with PIN. So you could leave in documents, you know, a word file or or text file within the files app knowing that it's powered or secured by the encryption on the device. And you would need

to either, if it's kept in a, you know, a state like you see right now where it's kind of provisioned and set up, then you'd need the PIN to log in to be able to access those files. Or you could if you wanted to leave it in a white state, then you're you you know, if you've got two kids, a son and a daughter,

they would need to bring together their two cards to restore a passport prime and then be able to to access the the associated metadata and the and the files that would be restored within.

One limitation I should spell out with that at the moment is that the only exception for what's not included in the encrypted backup data, the settings and data backup, is the file contents.

The reason for that is you can store up to 50 gigabytes worth of data. So obviously, that's quite a lot of stuff. And if you've got big files, sending that over Bluetooth in an encrypted fashion to Envoy and then up to the the cloud server might be problematic.

If it's small stuff, obviously, it's not an issue. So what we have found go on. Sorry, mate. You're probably gonna say this. That was probably what you have planned, but I'm just wondering. So if you have the files, could you then put in a a USB stick with, a micro SD card or something and do, an encrypted

backup of the files on a micro SD card that you could keep in a couple of locations so that someone could then access them. Because really what I'm what I'm getting at is, like, you could write out a will and a load of information that's deeply personal and bad in the wrong hands.

And traditionally, someone might leave that with a lawyer or or something like that. But my thinking is with something like this, they have whatever Bitcoin or cryptocurrency you have on here and all the information of what you'd like them to do or any other information you might put on there.

And then if anyone gets their hands on it, it's useless to them because they don't have the PIN or they don't have the two cards, etcetera. So Yep. It just seems to me, like, if you could do that and do the backups or or or presumably just have two devices, like, twin devices.

Yep. All of that's easily possible. But, again, it feels like there is a specific app there that could be built Yeah. Catered towards exactly that use case. That's the beauty of this whole architecture.

Yeah. The the light bulb moment that people when people get it is that rather than trying to make what you see fit your use case True. Make make make the specific tool for that use case and leverage the hardware and the encryption and the the secure element and the connectivity and stuff. Like, again,

it's it's a bit of a paradigm shift in how you think about how to use the device. It's you no longer have to fit within the guardrails of, okay, this device does x, y, and zed. It's a case of this device, this functionality, this is the these are hardware limitations, and these are the connectivity limitations,

which, by the way, you can see them all there. But, like, the software is is is essentially open. You can build whatever you want to leverage the connectivity and the hardware in very different ways. So again, you listening to this are the limitation. Just use your imagination and the SDK.

And it's especially with vibe coding these days, like, it is the the barrier to entry is is been significantly lowered with a combination of both of those things. A quick note on apps distribution and things like that.

So the default way in which most people will obtain their their apps for Passport Prime will be via an app store which will live inside our app, the Envoy app. Obviously, to be listed in there, you need to meet certain criteria, I e open source, reproducible, and that you're not a scammer. So, yes, we are gonna check the apps.

However, we recognize that if that was the only method, that is a walled garden. So you will be able to sideload essentially app files or, like, I I don't know what the file format is if I'm being honest, but it will be like an APK on Android, that sort of thing, where you would just,

you know, plug in a USB drive or an SD card or wherever you've got the file from from the, you know, the the developer and load it onto the app. We I'm sure there'll be some warnings to say, you know, obviously, you're trusting the developer. Make sure you know what this is doing.

But, yeah, we will not be a gatekeeper here. Like, if if you wanna go out into the Wild West and install apps that you've I've coded yourself that have not been vetted or that your friends have I've coded, go for it. Like, be our guest.

All that to say, the data says that sounds and obviously it does come with slightly more risk. The whole point of KeyOS and the the operating system that we've built from scratch that is what you see on screen

is the app isolation and the sandboxing. So just because you throw a malicious app onto there, doesn't mean it's gonna be able to extract the master key from there. So we we do have some, obviously, same protections to protect secrets and

to gate what apps or how apps can communicate with other apps and the hardware and the secrets held on the device as well. So true to true to foundation style, it is choose your own journey, but we will give you some, you know, guardrails. But if you wanna go outside the guardrails, go for it.

Nice. Alright. I, as always, have a hard stop. We've got a nice another project on the go at foundation. So I've got a call to do with that in a couple of minutes. So I'm gonna have to wrap this up here, guys. Is there any last comments from from you guys?

I don't think so. I think we we pretty much covered everything. Only that it's cool seeing the Bitcoin price go up on Friday. About to say, yeah, we'll have to do this more often if we can get a 2% book every Friday. I don't know.

We'll be at a million dollars in no time. Oh, yeah. I I do plan to do more of these because obviously, I I've haven't gone into the Bitcoin app. I haven't gone into any of the other apps to do any showcasing.

So it feels like there's there's definitely more to to showcase there, and that will become even more important as we increase the the functionality with subsequent releases as well. So Yeah. Just find people where you're doing your open

open hours, what time, etcetera. Just so they can join if they wanna dive deeper. Head to foundation.xyz/primetime, and you'll see all the information. You can sign up there, and it will give you all of the relevant sign up information.

But they're happening every Tuesday at midday eastern, 5PM UK time for the next four weeks with the exception of whenever the Vegas conference is because I'll be in Vegas. Very nice. Sweet. Thanks, mate.

My pleasure. Thanks for letting me do some showcasing and, yeah, we'll be back with more goodness same time next week. Thanks for stopping by, everyone. Have a good one.

Thank you for listening to Freedom Tech Friday. To everyone who boosted, asked questions, and participated in the show, we appreciate you all. Make sure to join us next week on Friday at 9AM EST and 2PM London.

Thanks to Seth, Max, and q for keeping it ungovernable. And thank you to Cake Wallet Foundation and my Nim Box for keeping the ungovernable misfits going. Make sure to check out ungovernablemisfits.com to see mister Crown's incredible skills and artwork.

Listen to the other shows in the feed to hear Kareem's world class editing skills. Thanks to expatriotic for keeping us up to date with Boost's XMR chats and sending in topics. John, great name and great guy, never change and never stop keeping us up to date with mining news or

continuing to grow the Mestadel. Finally, a big thanks to the unsung hero, our Canadian overlord Jordan, for trying to keep the ungovernable in check and for the endless work he puts in behind the scenes.

We love you all. Stay ungovernable.