Trezor

Imagine you own bitcoin and would rather not entrust its keys to software on the laptop where you also read emails and install apps. A Hardware Wallet moves the handling of secret keys into a separate device. Trezor is one manufacturer of these wallets. The bitcoin itself does not move into the box: records of the coins remain on the Bitcoin network. What you hold is a tool for authorizing their spending. Managing your own keys is called Self-Custody; control over your money comes with responsibility for its backup. [1]

Anna wants to send bitcoin to a friend. She enters the address and amount in Trezor Suite; the app prepares the transaction and Trezor displays it before signing. Anna compares the entire address with the one obtained from her friend through a trusted channel, then checks the amount and fee. Only then does she approve the payment. During ordinary signing, the signed transaction leaves the device, while the private key stays inside. This helps defend against malicious computer software that substitutes an address. But if Anna herself approves a payment to a scammer, Trezor cannot recognize her mistake. [4] [1]

If Anna loses her Trezor, she can restore access in a compatible wallet using her backup. This is a set of words containing the information needed to recover the keys; if she also uses a passphrase—an additional password she chose herself—she needs its exact text too. Trezor supports BIP39 backups of 12 or 24 words and SLIP39, commonly with 20 words per backup share, depending on the model. SLIP39 can require one share or a set number, such as 3 of 5. It is not simply an ordinary word list cut into pieces. Before transferring a substantial amount, check the backup through the official procedure. Do not photograph it, store it in the cloud or disclose it to support staff or a website. [5] [16]

The PIN is the numeric code you use to unlock a particular device. It is not a backup and cannot save funds if someone obtains everything needed to restore them. An optional passphrase has a different job: together with the backup, it determines a separate wallet. A different word, space or capital letter opens another valid wallet, often empty, rather than triggering an incorrect-password warning. Trezor cannot recover a lost passphrase and does not retain a permanent copy. It is therefore not a required step for a beginner. Understand ordinary backups first; if you use a passphrase, keep its exact wording safely separate and test recovery with a small amount. [16]

Marek Palatinus and Pavol Rusnák met at Prague's brmlab in 2011 and began looking for a way to protect keys from an infected computer. According to SatoshiLabs' history, preorders opened in 2013 and Trezor Model One shipped in 2014. Trezor Model T followed in 2018, later joined by Safe 3, Safe 5 and, in 2025, Safe 7. Each generation has different controls and technical capabilities. Direct sales of Model One and Model T ended on January 8, 2026, but the manufacturer promised critical security updates through at least 2036. Ending sales does not, by itself, mean an existing wallet stops working. [2] [10] [11]

Trezor Suite provides the interface for accounts and payments. Trezor Connect lets other applications communicate with the device. An attractive interface still cannot replace checking what you approve on the device's screen. When connecting another service, you may encounter an XPUB, an extended public key. It cannot spend funds on its own, but it can expose the addresses and transaction history of the relevant account, including future addresses derived within its scope. Seeing your balance without connecting Trezor therefore does not prove that the app has your secret keys. It does matter, however, who receives that view of your finances. [6] [7] [17]

Firmware is the program inside the device: it runs its functions and participates in signing. Trezor publishes this source code and the code for Trezor Suite, allowing others to examine them and report faults. Openness does not mean every release has been independently checked or that bugs cannot occur. The device verifies the signature on official firmware; the manufacturer describes stored data being erased and warnings displayed when unofficial firmware is installed. For an ordinary user, the practical lesson is to obtain software from a verified official source and have a checked backup before updating, rather than blindly following an email link. [8] [17] [4]

A Secure Element is a chip designed to make sensitive information harder to extract through physical attacks. Safe 3, Safe 5 and Safe 7 use such chips, but their designs differ. In 2026 Trezor described a finding by the Ledger Donjon team concerning Tropic Square's TROPIC01 chip, used in Safe 7: a laboratory laser attack requiring physical access to the chip. The published explanation says it can extract one part of the PIN protection and information used to verify device authenticity. That alone reveals neither the PIN nor the backup; other protection layers remain. It is nevertheless a real weakness and cannot be removed simply through a remote update. Reports like this need to be read in terms of the specific model and the attack's reach. The research concerned an isolated chip, not a demonstrated extraction of keys from the complete wallet. [12]

The manufacturer calls Safe 7 quantum-ready. This concerns protection of the device itself: its software and authenticity checks also use cryptography designed to resist quantum attacks. It does not mean today's Bitcoin transactions already use resistant signatures. Checking a wallet's software and the rules under which the Bitcoin network accepts a payment are different matters. Any signature change must be adopted by the network; buying a new device is not enough. A message demanding an immediate ‘quantum upgrade’ through a supplied link is therefore no reason to enter a backup. Trezor explicitly warns about such scams. [11] [13] [18]

Leaked orders illustrate a different risk from a device flaw. In August 2026 Trezor announced an incident at shipping partner ShipMonk: 11,742 customer records were fully exposed and 1,947 partly exposed. A September 4 update added approximately 67,000 further US customers; the notice gives a total of 80,689. Trezor says its own systems and devices were not compromised. A name and delivery address can nevertheless help a scammer impersonate trustworthy support or target the owner directly. Knowing your order details gives no one the right to demand your backup or passphrase. Hardware protects one important part; the rest involves checking payments, safely storing the backup and treating such messages with care. [14]