Foundation published Envoy 2.3.7 on October 28, 2026, adding verification to the Passport Prime security check and correcting screenshot protection in a specific seed-display transition. For existing users, the practical action is to obtain the update through a trusted channel and confirm the installed version.
The official announcement and GitHub release carry the October 28 date. This is a later development than Gizmodo's October 26 report.
The two changes protect different parts of the workflow
Foundation says the Passport Prime security check now uses a new onion address and an additional layer of verification. The company describes this as precautionary work continuing from Envoy 2.3.6, released October 27, which rotated the onion addresses used to reach Foundation servers over Tor.
The other fix concerns the app's handling of sensitive information on screen. Screenshot protection now remains enabled when a user switches from seed words back to the seed QR code. That is a specific state-transition correction; the release notes do not establish what any earlier user captured or exposed.
Keeping those changes separate helps explain the update's value. The security-check path concerns a service interaction. The screenshot behavior concerns displaying recovery material locally. Neither should be treated as evidence about every part of the wallet system.
Use the update route you can verify
Foundation recommends updating, while warning that Apple and Google store reviews can delay general availability after publication. A published release therefore does not guarantee that every phone already sees the same update.
Open the usual app-store listing or navigate independently to the official release record. Check that the installed app reports 2.3.7. Avoid a download or recovery process offered through an unsolicited message.
For Android users who deliberately install an APK, Foundation's verification guide explains checking a signed manifest and then comparing the binary's hash. The guide dates from 2022 and uses older example filenames; the selected files must belong to the current release. A matching hash and verification of who signed the manifest answer different questions.
The investigation needs its own evidence
Foundation's current security warning identifies messages claiming that Passport funds are at risk as phishing, tells users not to follow their links or share recovery phrases, and says it is investigating.
The release notes document software changes. They do not provide a completed incident report or independently establish the investigation's full scope. TechKili's assessment is to apply the documented update and keep the phishing warning in view, without treating either action as proof that every surrounding concern is resolved.
Sources
Related Articles
DeepSigma's 77-market demo opens with simulated prices and paper trades
The public terminal separates synthetic exposure from asset ownership. Its initial feed and development-stage controls define what the launch can establish.
Ledger Nano X implant reports expose the limit of Genuine Check
A genuine secure element can coexist with added hardware. The original specimen analysis explains why authentication, device provenance and an exposed recovery phrase are separate questions.
Soda Bubble expands across public chains with explicit decryption permissions
Soda Labs says a $3 million seed round will expand Bubble beyond COTI. Its architecture separates encrypted computation from decisions about who can read the result.
AmericanFortress proposes wallet proofs with selective address linkability
The preprint would let wallet holders prove a common hidden origin for selected addresses while limiting who can connect the proofs. It is not deployed.