Envoy by Foundation2.3.5 - App Store

Bitcoin Simplified. Envoy is a simple Bitcoin wallet with powerful account management and privacy features.

Use Envoy alongside your Passport hardware wallet for setup, firmware updates, and more.

Envoy offers the following features:

1. Magic Backups. Get up and running with self-custody in only 60 seconds with automatic encrypted backups. Seed words optional.

2. Manage your mobile wallet and Passport hardware wallet accounts in the same app.

3. Seamless Bitcoin purchases deposited straight to your mobile wallet or Passport accounts.

4. Send and receive Bitcoin in a zen-like interface.

5. Connect your Passport hardware wallet for setup, firmware updates, and support videos. Use Envoy as your software wallet connected to your Passport.

6. Fully open source and privacy preserving. Envoy optionally connects to the Internet with Tor for maximum privacy.

7. Optionally connect your own Bitcoin node.

Version History - Improved tablet, large-screen, and landscape layouts.
- Improved Prime exchange-rate and chart reliability. 2.3.5 Sep 30 Bug fixes, security updates, and reliability improvements. 2.3.4 Sep 15 Bug fixes, security updates, and reliability improvements. 2.3.3 Aug 27 **What’s new in Envoy 2.3.2**

Bug fixes, security updates, and reliability improvements.

- Improved Passport Prime pairing and security checks
- Fixed Bluetooth discovery issues on iOS
- Fixed inactive passphrase accounts appearing in transfers
- Strengthened privacy protections in diagnostic logs
- Improved wallet performance and stability
- Minor UI fixes and security updates 2.3.2 Aug 20 Redesigned Send flow, transfers between your own accounts, message signing, Address Explorer, sub-sat fees, adjustable QR density, custom block explorers, and better Passport Prime pairing. Plus Bluetooth, security, and bug fixes. 2.3.1 Aug 11 Redesigned Send flow, transfers between your own accounts, message signing, Address Explorer, sub-sat fees, adjustable QR density, custom block explorers, and better Passport Prime pairing. Plus Bluetooth, security, and bug fixes. 2.3.0 Jul 8 Modest bugfixes and improvements 2.2.14 Apr 23 Support for adding multiple Passport Prime devices to Envoy
Improved onboarding preflight checks 2.2.13 Apr 9 Support for adding multiple Passport Prime devices to Envoy 2.2.12 Mar 13 Support for adding multiple Passport Prime devices to Envoy 2.2.11 Mar 12 Support for adding multiple Passport Prime devices to Envoy 2.2.10 Mar 10 Support for adding multiple Passport Prime devices to Envoy 2.2.9 Mar 2 Support for adding multiple Passport Prime devices to Envoy 2.2.8 Feb 25 Updated Envoy Server Tor endpoint 2.2.6 Feb 15 UI fixes and tweaks 2.2.5 Feb 10 Fixed an issue with QR code scanning 2.2.4 Feb 4 Small fixes and improvements 2.2.2 Jan 28 Now featuring Passport Prime support alongside significantly enhanced Tor integration. 2.2.1 Jan 22 What's changed
In Envoy v2.1.1 we squashed a lot of bugs so we encourage all our users to update to have a more smooth and solid Envoy experience. Since Magic Backups have also been improved, we encourage everyone to perform a Magic Backup after the upgrade!

For more details on each of the changes, keep reading below!

Improvements
Improved the Magic Backup restoring flow - if the user changes any privacy settings during onboarding, these will prevail over those defined in the Magic Backup file

Improved the Personal Node selection. Previously, if you defined a Personal Node, then changed to a predefined node, then back to Personal Node, the field was overwritten by the predefined node's address. This behavior has been updated so that the Personal Node saved remains there even when you return from a predefined node.

Major upgrade to Flutter to version 3.35.1

The Personal Node is now saved to the Magic Backup, so make sure to update and perform a magic backup again to save this setting!

Added warnings for users that last paired their accounts before Passport Core v2.3.0, and want to either enable Taproot by default, access the taproot descriptor, or show a taproot receive address

Improved the fee display for Canceling transactions for users with very big text size

Updated multiple repositories and dependencies

Added tor endpoints for signet, so users that use tor should enjoy a more stable connection while using signet

Moving forward, user preference will be remembered between transactions in terms of send unit. Previously it would always default to BTC or Sats depending on app setting.

Added the Explorer option to the transaction ID for the Coin Details view

Bug Fixes
Fixed a scenario where Magic Backups could be corrupted while being restored

Fixed a bug where sometimes an "Insufficient Funds" error could show up despite there being enough unlocked and confirmed coins

Fixed an edge case where sometimes two hot wallets could be created instead of one

Fixed an issue where tor would not be loaded on first app startup, and added checks to make sure tor is bootstrapped before attempting a connection to a node

Fixed a couple of issues that could err or show 0 send amount when scanning an all caps address

Fixed a visual bug where sometimes the fee would be displayed as 0 when accessing the transaction details

Fixed an issue where for some users the option to hide the Buy feature would not show up in settings -> advanced

Fixed a bug where under some scenario self-sends couldn't be boosted while using Passport

Fixed a rare bug where sometimes a hot wallet would be created but the seed would not be displayed

Fixed a minor visual spacing issue when selecting a Tag

Fixed an issue where users with big text sizes couldn't save a transaction's notes

Fixed an issue where Envoy would attempt to redeem a Lightning Network BTCPay voucher instead of throwing an error

Fixed an issue where sometimes iOS users wouldn't be able to delete an account that was still loading balance

Fixed a minor visual bug that would not provide visual feedback to the user when entering an incorrect seed

Fixed the date of the Envoy new version notifications to display the actual date of release, instead of the day the user connected to the internet and saw it

Fixed a visual bug where sometimes the red shield would not show up even if tor connection dropped

Fixed a bug where for some users Envoy could remain blurred even after unlocking the app

Fixed an issue where tor would sometimes not temporarily disable after explicitly asking it to do so

Fixed an issue where sometimes the PIN couldn't be entered after faceID failed for iOS users

Fixed an issue where sometimes if the user performed multiple back to back transactions, some of them would not be logged in the Activity tab

Fixed a minor bug where the default Note for BTCPay transaction wouldn't be pre-populated 2.1.1 10/22/2025 What's changed
In Envoy v2.1.0 we squashed a lot of bugs so we encourage all our users to update to have a more smooth and solid Envoy experience. Since Magic Backups have also been improved, we encourage everyone to perform a Magic Backup after the upgrade! 2.1.0 10/20/2025 Envoy 2.0.2 is a bugfix release addressing some edge case scenarios and uncommon bugs.

Bug Fixes

Fixed an issue where a small subset of Passport passphrase users experienced duplicated accounts during the upgrade from 1.8.6 to 2.0.1.

Updated the migration screen to not rely on syncing accounts, so that users with networking issues can quikcly update to the 2.0.0+ database structure and then address their networking issues afterwards. This will resolve instances where some users were stuck in the migration screen.

Fixed a bug where sometimes Envoy would attempt to establish Tor TCP connections as SSL, leading to failures when connecting with Tor. Arti has also been updated to the latest version to help stabilize Tor connections.

Fixed a small typo in the personal node section and updated some of the options.

Fixed a small bug where if users scanned a Passport 2.3.8 pairing QR with their phone camera app, the paired account may not be synced to Envoy. 2.0.2 08/14/2025 Envoy 2.0.1 is a hotfix release for 2.0.0

- Fixed an issue where under some circumstances some users would be asked to enable bluetooth when upgrading to 2.0.0.
- Fixed an issue where users that haven't updated and paired their passports since version 2.3.0 could have visual problems when accessing the descriptor 2.0.1 07/22/2025 Important upgrade to BDK 2.0 – on first startup all your accounts will resync due to changes in the database format. This will occur automatically when you open the updated app for the first time.

In addition to the updates described below, Envoy 2.0.0 adds initial support for Passport Prime, including QuantumLink Bluetooth connectivity and the device onboarding flow. 2.0.0 07/21/2025 - Buy Button Removal: The "Buy" button is now fully removed from the main view if disabled in settings.
- Improved Bitcoin ATM Map: Now powered by OpenStreetMaps, users can add and view new bitcoin ATM spots.
- Updated Support Area: Removed link to the Telegram channel and added a link to the new community. 1.8.6 02/04/2025 What's changed
Envoy 1.8.5 is a small bug fix release.

Bug Fixes
Fixed a rare issue where some iOS users weren't able to see or select any fiat currencies after enabling the fiat toggle

Fixed an issue where some iOS users might get stuck in the splash screen after a very specific set of steps were performed 1.8.5 11/27/2024