This is no longer the current version of this article. Read the new blog here: https://trezor.io/blog/security/what-quantum-ready-crypto-security-means-and-why-it-matters

Ten years ago, I would’ve called quantum security science fiction. Something for the next generation to worry about.

But even back in 2017, during my internship at Cloudflare, post-quantum algorithms were already being explored. This one, the SIDH, did not withstand the rigorous community review and was completely broken in 2022. One way or another, it was a clear signal to pay attention.

The reality right now:

No machine today can break Bitcoin, crypto (as in cryptography), or crypto (as in cryptocurrencies).

But that does not mean we should wait until they can. Many other industries are already pushing forward with post-quantum protections.

After years as Trezor’s Chief Technology Officer, watching the field evolve alongside our own work, it’s clear to me that Bitcoin will need to shift to post-quantum algorithms within the next decade, or sooner.

At Trezor, security means thinking long term. We build hardware wallets to protect our users for decades, not just a few years. That means we must understand the threats of tomorrow and prepare for them today.

Why Quantum Readiness Matters

Global leaders across all industries are already working to defend against future quantum threats. Financial institutions, telecommunications operators, technology companies, and internet infrastructure providers are rapidly transitioning to post-quantum cryptography (PQC), designed to withstand the computational power of quantum computers.

Wait… we don’t have quantum computers yet, how can we prepare for them?

Several quantum-resistant algorithms exist. The National Institute of Standards and Technology (NIST) has been working on standardizing post-quantum cryptography since 2016. These are algorithms that run on a “traditional” computer but are designed to resist different types of attacks using quantum computers.

Here’s how other industries are using these quantum-resistant algorithms to get ready for a post-quantum world:

• Cloudflare uses hybrid post-quantum key exchange by default across its network, which handles ~20% of all websites. In October 2025 they announced a huge milestone: the majority of human-initiated traffic with Cloudflare is using post-quantum encryption. (Source: Cloudflare)
• Apple added post-quantum encryption to iMessage in 2024. (Source: Apple)
• Google has added PQC to Chrome and Android. (Source: Google)
• Microsoft has integrated PQC into Windows, Azure, and Microsoft 365. (Source: Microsoft)
• IBM is testing quantum-safe tools for mobile networks. (Source: IBM)
• Amazon Web Services (AWS) offers PQC options for cloud data protection. (Source: Amazon)
• Intel added PQC support to its software tools in 2025, enabling quantum-safe encryption for cloud applications. (Source: Intel)

These companies are not reacting to an active threat. They are preparing because they understand it is necessary to do so before quantum computers become strong enough to compromise their security.

Trezor is proud to lead this shift in crypto security. Not because quantum computers pose a danger today, but because they will eventually. Real protection starts before the problem exists.

Two Sides of Quantum Readiness in Crypto Security

Many ask, “How can Trezor prepare for quantum threats when blockchains themselves are not quantum secure yet?”

The answer is that quantum readiness in crypto has two layers:

1. The blockchains themselves (Bitcoin, Ethereum, Solana, and others).
2. The wallets that secure your private keys.

Both blockchains and wallets will eventually need to adopt post-quantum cryptography. Wallets can implement PQC for internal operations using algorithms that are independent of those adopted by blockchains and can do so already. Once the blockchains upgrade, wallets must also support the same algorithms to remain compatible.

Updating blockchains will require a long, collaborative effort among global communities and developers, while wallets’ internal operations can already be updated now. At Trezor, we focus on what we can control: the security of the device itself. That is why the Trezor Safe 7 was built from the ground up with post-quantum protection.

Inside the Trezor Safe 7 Quantum-Ready Architecture

A hardware wallet’s most critical security operations depend on cryptography. These include verifying firmware, authenticating the device, and protecting the boot process. The Trezor Safe 7 is ready to secure these operations with post-quantum algorithms. It is currently the only hardware wallet designed to do so. For a quantum-secure boot process it uses SLH-DSA-128, a signature scheme standardized by the U.S. National Institute of Standards and Technology (NIST) in 2024 and recognized by leading cryptographic institutions worldwide.

Each time you start the Trezor Safe 7, this algorithm verifies the bootloader to confirm it has not been altered. We plan to extend this for firmware updates in the following months as well.

Without this protection, a future quantum computer could forge traditional digital signatures, fake bootloader updates, and trick users into installing malicious code that appears legitimate. Once installed, the fake firmware could manipulate transaction signing, for example, by showing a correct recipient address on-screen but actually sending the funds to the attacker’s address.

The Trezor Safe 7 also includes a device certificate signed using the ML-DSA-44 algorithm, standardized by NIST in 2024, to verify the device’s authenticity and integrity. Once fully implemented in the firmware and Trezor Suite, this provides an additional layer of quantum security, ensuring the device can prove its own genuineness even in the post-quantum era.

Because post-quantum protection must be taken into account during manufacturing, not everything is updatable. The boardloader needs to have the corresponding public key to the bootloader, which must be installed at the factory and cannot be altered or updated. Similarly, the device certificate, which authenticates the wallet, is applied during production and cannot be changed afterward.

Only hardware wallets that leave the factory with these preparations, like the Trezor Safe 7, can truly be considered quantum-ready, providing security that remains reliable even in the era of powerful quantum computers.

Securing the Future, Today

With the Safe 7, Trezor keeps your device secure, authentic, and trusted even as quantum computing advances. It is the first-ever hardware wallet using post-quantum cryptography, which is now also used to protect global technology, communication, and internet infrastructure.

When Bitcoin and other blockchains also adopt post-quantum cryptography standards, Trezor Safe 7 will be ready to provide users with complete quantum protection.

No wallet can make your crypto fully quantum-proof today, but the Trezor Safe 7 is built for that future. It is the only hardware wallet designed for the coming quantum era: secure by design, prepared by principle.

This isn’t panic, it’s preparation. A first step toward future-proofing hardware wallets for what’s coming as an industry.

If crypto is going to be the future of money, it must be ready for quantum computing.

After 12+ years of helping over 2 million users secure their crypto, we think it’s better to be prepared and a little paranoid than not.

Stay secure,

Tomas Susanka
Chief Technology Officer at Trezor

Stay in the loop with our Trezor newsletter

Want insider offers, product news, and crypto insights delivered to your inbox?

Join our newsletter and stay updated!

What Quantum-Ready Crypto Security Means and Why It Matters was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Solana staking is now available in Trezor Suite, providing a secure and self-custodial way to grow your SOL holdings.

Unlike other staking solutions, staking using your Trezor hardware wallet ensures you remain in full control of your funds at all times, with no intermediaries or custodians involved.

By staking SOL, you contribute to network security and earn up to 7% APY in rewards — all while benefiting from the proven security of Trezor Suite.

What is it?

Solana staking allows you to delegate your SOL tokens to a validator, who helps validate transactions and maintain the blockchain. In return, you receive SOL rewards, similar to how savings accounts generate interest.

When staking SOL in Trezor Suite, users delegate their SOL to our staking partner, Everstake. Established in 2018, Everstake is a validator trusted by 735K+ users across 70+ blockchain networks.

Fun fact: Approximately $1B of SOL (~1.5% of all staked SOL) staked with Everstake.

When you stake your SOL in Trezor Suite:

• Your funds remain in your control
• Only you can withdraw them
• Rewards are automatically compounded, maximizing your staking potential
• You can unstake anytime, with a short cool-down period of 1 epoch (approximately 2–3 days) before your SOL is fully available.

Why stake SOL?

Instead of leaving your Solana tokens unused, staking allows you to grow your holdings while strengthening the Solana network.

Here’s why it’s worth considering:

• Grow your SOL holdings:
  Receive up to 7% APY while holding your SOL.
• Support the network:
  Your stake contributes towards helping secure the Solana blockchain and process transactions.

Why Stake SOL with Trezor Suite?

While many platforms offer staking, Trezor Suite provides the key advantage of complete security while staking your tokens.

Unlike custodial services that hold your funds, staking using your Trezor hardware wallet keeps your SOL tokens in your control at all times.

Trezor Suite makes staking SOL tokens simple & secure. Users benefit from:

• 100% security
  Your keys. Your Coins. Your Rewards.
  You own your keys, and only you can access your funds.
• Seamless staking
  Delegate SOL in just a few clicks through Trezor Suite’s intuitive interface.
• Competitive APY
  Maximize your staking returns with up to 7% APY, among the most competitive rates in the Solana ecosystem.
• Automatic reward compounding
  Enjoy rewards that automatically compound, maximizing your returns over time.
• Low minimum requirement
  Stake as little as 0.01 SOL, making it accessible for all users.

Learn more here:

Stake SOL with Full Self-Custody. Receive Up to 7% APY

How to Stake SOL in Trezor Suite

Getting started with staking SOL in Trezor Suite is quick and easy. Check out our step-by-step guide here:

Stake Solana in Trezor Suite

Frequently Asked Questions (FAQs)

• Is my SOL locked when I stake?
  Yes, but you can unstake at any time. A short cooling-off period of 1 epoch (approximately 2–3 days) applies before your SOL becomes fully available again.
• How often do I receive staking rewards?
  Rewards are updated and distributed at the end of each epoch (2–3 days), with no manual intervention needed.
• Can I stake less than 1 SOL?
  Yes! With Trezor Suite, you can stake as little as 0.01 SOL, making it easy for anyone to participate.
• What happens if I want to stop staking?
  You can unstake anytime. After the cooling-off period (1 epoch which is approximately 2–3 days), your SOL will be available in your wallet.

Solana staking made easy and secure with Trezor Suite

Trezor Suite’s Solana Staking offers a secure, user-friendly way to earn up to 7% APY, empowering users to grow their SOL holdings effortlessly.

Keep full control of your tokens while contributing to the Solana network’s security and scalability.

Start staking today!

Stake SOL with Full Self-Custody. Receive Up to 7% APY

Grow Your Solana Securely with Staking in Trezor Suite was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

At Trezor, transparency is the cornerstone of security. Given our open-source ethos, security is a continuous journey, and we welcome any open security research that helps strengthen our products and protect our users.

Ledger Donjon recently evaluated our Trezor Safe Family and successfully reused a previously known attack to demonstrate how some countermeasures against supply chain attacks in Trezor Safe 3 can be bypassed. Trezor Safe 5 is not affected because it uses a more recent microcontroller designed to be more resilient to similar attacks.

Most importantly, your funds, wallet backup, and PIN remain completely secure. Ledger Donjon shared their findings with us through our responsible disclosure program. We truly appreciate their efforts to push the boundaries of security in the hardware wallet space. In cybersecurity, the golden rule is simple: nothing is fully unbreakable. That’s why Trezor has implemented multiple layers of protection over time.

We want to reassure our users that all Trezor devices are designed to keep your private keys secure. Trezor Model One and Trezor Model T remain highly secure, especially when used with best practices such as enabling a strong passphrase. Trezor Safe 3 and Trezor Safe 5 build upon this foundation by incorporating a Secure Element, adding an extra layer of protection against physical attacks in case of theft or loss.

Key Takeaways:

• Your funds remain safe, and there is no need for any action on your part.
• Trezor Safe 3 & Trezor Safe 5 saw the adoption of a NDA-free Secure Element, offering enhanced protection against physical attacks.
• Ledger Donjon researchers didn’t extract a private key or PIN from the tested device.
• However, they demonstrated a way to bypass the authenticity check, and the firmware hash check in Trezor Safe 3 using advanced tools and a high level of hardware expertise.
• Trezor implements multiple layers of defense, making real-world supply chain attacks very impractical.
• Trezor Suite includes strong countermeasures to detect tampered devices.
• Users who purchase from official sources remain fully secure.

Contents

1. The evolution of Trezor security: Adoption of Secure Elements
2. How Secure Element strengthens Trezor’s security
3. Understanding Supply Chain security
   - Firmware security checks
   - Onboarding protection
   - Physical protections
4. Ledger Donjon’s findings
5. Self-custody matters
6. Should you be worried about your Trezor Safe 3?
7. Conclusion: Security is a continuous process

The evolution of Trezor security: Adoption of Secure Elements

At Trezor, we pioneered the first-ever hardware wallet in 2013 with a clear goal: to provide a secure and easy-to-use tool for managing Bitcoin and crypto. Hardware wallets are designed to keep private keys offline, protecting them from remote attacks — a task our earlier models have always excelled at.

While hardware wallets offer strong security, no system is entirely immune to physical attacks. Given enough time, expertise, and resources, a determined attacker could theoretically attempt to extract private keys from a stolen device. To mitigate this risk, we introduced the passphrase — a user-defined, extra layer of security for your wallet backup. Unlike the wallet backup, the passphrase is never stored on the device, making it impossible to extract even in the event of a physical attack.

One of the biggest differences between Trezor Safe Family (introduced with the launch of the Trezor Safe 3 in 2023) was the introduction of a dedicated Secure Element. It was introduced as a response to user feedback for enhanced protection in case of device theft or loss. The Secure Element used in the Trezor Safe 5 and Trezor Safe 3 is the OPTIGA™ Trust M (V3). In effect, it is a chip designed to protect highly sensitive information from software and hardware attacks.

While all Trezor models remain secure against remote attacks, the Secure Element in the Trezor Safe 3 & Trezor Safe 5 adds an extra layer of physical security — for example, in case a Trezor device is lost or stolen.

How Secure Element strengthens Trezor’s security

The Secure Element in Trezor Safe 3 & Trezor Safe 5 provides safeguards in:

• Enhanced PIN protection: Preventing unauthorized access in case of theft.
• Prevents seed extraction by fault injection attacks (voltage glitching): A previously known issue with Trezor Model One and Trezor Model T.
• Device authenticity verification: Strengthening resistance against supply chain attacks.

Understanding Supply Chain security

A supply chain attack happens when a device is tampered with before it reaches the customer. This could involve an attacker modifying a legitimate device and reselling it.

To combat supply chain risks, Trezor has implemented multiple defense layers:

1. Firmware security checks
   a. Firmware revision ID check
   b. Firmware hash check
2. Onboarding protection
   a. Preinstalled firmware detection
   b. Entropy check workflow
   c. Firmware upgrade
   d. Device authentication check
3. Firmware security checks
   a. Firmware revision ID check

1. Firmware security checks

Trezor Suite includes multiple layers of verification to detect potential tampering. These include:

a. Firmware revision ID check

Firmware revision is a unique identifier assigned to each firmware release. Every time a Trezor device is connected, Trezor Suite verifies the firmware revision against a database of official releases. Here's how it works:

• If the firmware revision does not match, Trezor Suite flags the device as counterfeit.
• This check is particularly effective against supply chain attacks requiring a long preparation time. This is on account of the time taken to modify and distribute tampered devices.
• Since Trezor regularly releases new firmware updates and Trezor Suite prompts users to update their firmware before setup, a device running unauthorized firmware is likely to fail this check.

Important: As a practice, we always recommend updating your device’s firmware regularly. This is necessary to expand the functionality of your Trezor, apply new security measures, and enable newly developed features.

Here’s more on this:

Trezor firmware authenticity check

b. Firmware hash check

The firmware hash check is a cryptographic verification process that ensures the integrity of the firmware running on your Trezor device. This is how it works:

• Upon every device connection, Trezor Suite issues a random cryptographic challenge to the device.
• The device then calculates a firmware hash, which is compared against the expected hash from the official firmware binary file stored in Trezor Suite.
• If the results do not match, Trezor Suite flags the device as counterfeit.

Please note, that this check is only effective if the device is running the latest firmware version. This is why Trezor Suite strongly encourages users to update the firmware regularly.

Here’s more on this:

Trezor Firmware hash check

2. Onboarding protection

All Trezor devices undergo additional security checks during initial setup:

a. Preinstalled firmware detection

• If a device is detected with preinstalled firmware, the user is prompted to confirm whether they’ve used the device before.
• If it’s a case that they have not used the device previously, the device may be compromised, and users are warned accordingly.

b. Entropy check workflow

During wallet creation, Trezor generates a wallet using random data (entropy) from two sources,

1. Trezor device: The internal source.
2. A companion app: Typically Trezor Suite, but it can also be another compatible app like trezorctl or Electrum.

Fake or compromised devices typically ignore the input from the external entropy source (Trezor Suite), generating wallets in a predictable, deterministic way, allowing attackers to recreate and access them.

The entropy check protects the user from this behavior and marks the device as counterfeit if it does not pass the check.

Here’s more on this:

Entropy check

c. Firmware upgrade

• During onboarding, users are encouraged to upgrade to the latest firmware version, triggering both revision ID and hash checks, as explained earlier in the article.
• While users have the option to opt out, we recommend not doing so in light of the security risks around using outdated firmware.

d. Device authentication check

In the case of the Trezor Safe 3 and Trezor Safe 5, the Secure Element plays an important role in verifying the authenticity of your device.

When setting up the device:

• Trezor Suite sends a challenge to the device.
• The Secure Element signs the challenge and returns it with a unique device certificate.
• Trezor Suite verifies both signatures to confirm authenticity.

The certificate is only checked locally and immediately discarded, ensuring privacy. Users may opt out of the device authentication process, but we strongly advise against it.

Learn more here:

Trezor Safe device authentication check

3. Physical protections

a. Tamper-evident packaging

Every Trezor Safe 3 comes with a holographic seal over the connector, ensuring the device hasn’t been interfered with before reaching the customer. Please note, the Trezor Safe 3 packaging does not have a seal.

Here’s what this should look like, depending on when your device was manufactured and packaged.

Any sign of a broken or missing seal is a strong indicator that the device has been compromised. In this case, we encourage you to please contact Trezor Support via our chatbot, Hal.

Ledger Donjon’s findings

The Ledger Donjon team demonstrated a way to bypass the authenticity check, and the firmware hash check specifically in Trezor Safe 3, using an advanced voltage glitching technique. The other countermeasures against supply chain attacks remain unchallenged. However, it is important to note:

• No private keys can be hacked or PIN extracted using this attack.
• The attack requires full physical access to the device. (This includes disassembling the casing, desoldering the microchip, modifying or extracting data using specialized tools, and then reassembling and repackaging the device without leaving any visible signs of tampering.)
• If the device is purchased from an official source, it is highly unlikely that it has been tampered with.

This highlights why we always recommend purchasing directly from Trezor.io or authorized resellers.

Self-custody matters

Self-custody with a hardware wallet like Trezor remains the safest way to store crypto.

• With Trezor, you hold your own keys.
• No exchange can freeze your funds.
• No third party can access your wallet.

The real risk is trusting third parties; in this case, purchasing a Trezor hardware wallet from sources beyond our officially listed ones.

Even in a worst-case supply chain attack scenario, the attacker would still need to modify and distribute devices at scale, which remains highly impractical.

Should you be worried about your Trezor Safe 3?

No. If you bought a device from an official source it is highly unlikely that there is anything wrong with your device. If there are signs of tampering when your order arrives, or you bought it from an unauthorized reseller, just reach out to Trezor Support or start a discussion on Trezor Forum and we’ll walk you through how to check for compromise.

Conclusion: Security is a continuous process

• Your funds remain safe, and there is no need for any action on your part.
• Secure Elements provide an added level of protection against physical attacks.
• Our in-built supply chain defenses include multiple security layers.
• Trezor Suite makes tampered devices nearly impossible to distribute at scale.

Security is never static, and at Trezor we are continuously taking steps to improve our hardware and software. Ledger Donjon’s research highlighted one possible attack vector. It, however, does not undermine the core security of the Trezor Safe Family.

At Trezor, we fully embrace such security research because it helps strengthen the ecosystem. We will continue to refine our security measures and remain fully transparent about potential risks.

Finally, we recommend purchasing your Trezor hardware wallet or accessories directly from Trezor.io or authorized listed resellers, as a best practice for your security.

As always, stay informed and stay secure!

Trezor’s Multi-Layer Defense Against Supply Chain Attacks was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

This is no longer the current version of this blog. Read the new blog here: https://trezor.io/blog

You’ve heard this before, Not Your Keys, Not Your Coins. When it comes to your digital assets, security takes the front seat. Whether you’re a seasoned investor or just getting started, understanding how to properly store your wallet backup (also known as recovery seed) is essential for safeguarding your digital assets.

A compromised or lost wallet backup can lead to the permanent loss of your funds, so taking the necessary precautions is critical.

This guide will explore the best practices for securing your crypto wallet backup, highlight common mistakes to avoid, and suggest ways you can keep it safe.

What Is a Wallet Backup and Why Is It Important?

A wallet backup (also known as a backup, recovery seed, seed, seed phrase, BIP-39 seed phrase, mnemonic, recovery phrase) is an ordered list of English words that contain all information necessary for recovering your wallet (i.e., accessing bitcoin or other cryptocurrency funds on-chain). A wallet backup provides full access to the associated wallet (the private key is mathematically derived from the wallet backup) — this is why you must keep it safe.

Think of it as the password to your crypto holdings — it enables you to access, transfer, and manage your funds. Without it, your assets are permanently lost.

You’re given a wallet backup when you set up a hardware wallet like Trezor. This unique phrase is generated during the wallet initialization process.

Losing or exposing your wallet backup means:

• You lose access to your funds forever.
• No third party, not even Trezor, can help you recover it.

Hence, properly storing your wallet backup is one of the most critical aspects of cryptocurrency security.

Important to know: Your wallet backup is a ‘plain English’ representation of a random number, from which all of your keys and addresses are mathematically derived.

It is an ordered sequence of 12 or 24 words for wallets using the BIP39 protocol, chosen from this list of 2048 words. In the case of the newer SLIP39 protocol, it is a sequence of 20 words chosen from this list of 1024 words

When you write down your wallet backup, the words must be copied down in the same order they appear

You must keep your wallet backup private and safe so that your cryptocurrency is never at risk. Having a safe wallet backup means you can recover your Bitcoin or other digital assets in case of hardware failure or the loss of your device

Common Mistakes to Avoid When Storing Your Wallet Backup

To keep your crypto assets secure, avoid these common mistakes:

1. Relying on Digital Devices

Storing your wallet backup on a computer, phone, or cloud service is highly risky. If your device gets hacked or compromised, attackers can easily steal your wallet backup, and gain access to your cryptocurrencies.

Rule of thumb: Do not keep digital copies of your wallet backup (this includes screenshots, photographs, emails, Dropbox wallet backup, etc).

2. Sharing Your Wallet Backup

Be careful who you share your wallet backup with. Sharing your wallet backup is equivalent to handing over your crypto assets to someone else.

3. Using Unsecure Physical Locations

While writing your wallet backup down on paper is a common practice, understand the risks that come with it. It is paper, after all! Storing it carelessly exposes it to risks like theft, fire, or water damage.

The Best Ways to Store Your Wallet Backup Safely

Here are some of the most effective solutions for securely storing your wallet backup:

1. Pen and Paper Method

• Write your wallet backup down on paper in clear, legible handwriting. We recommend using capital letters. Your Trezor hardware wallet ships with a pair of wallet backup cards that you should use for writing down the words when you backup your device — this is a strongly recommended step when setting up your Trezor.
• Keep your wallet backup cards safe from theft and damage
• Consider making multiple copies and storing them in separate secure locations.

Drawback: Paper is vulnerable to fire, water, and physical damage over time.

2. Metal Backup Tools

We recommend this strongly. Metal backup tools, such as Trezor Keep Metal, are designed to protect your wallet backup from:

• Fire
• Water
• Pressure and corrosion

These are ideal for long-term storage.

Get the Trezor Keep Metal for as low as $79 here.

3. Using a home-safe

Storing your wallet backup in a hidden safe at your house is a great way to control access to it. However, the knowledge of a safe alone is enough to raise the interest of a potential thief, so if you choose to use this storage method, you should keep it in a discreet location, away from the eyes of guests, housemates, or anyone that might spend time inside your home.

Some may consider a safety deposit box at a bank. However, be mindful of bank policies that may allow access to your box under certain conditions.

Here’s a video to learn more,

4. Multi-share Backup

Trezor offers a unique feature called Multi-share Backup. This, essentially, allows you to split your wallet backup into multiple parts and store them separately.

For example, in a 3-of-5 Multi-share Backup scheme, the total number of shares is equal to 5, and the threshold is 3. This means any three of these shares can be used to recover your wallet. This is beneficial as even if one or two of your shares are somehow compromised, the entire wallet backup (recovery seed) is not exposed. This redundancy means you no longer have a single point of failure, as with the regular BIP39 backup standard (i.e., the 12-word recovery seeds used by default on most hardware wallets).

Even if one part is lost or compromised, you can still recover your wallet using the remaining parts. This greatly reduces the risk of losing all backup copies at once.

Learn more here,

Introducing the new Multi-share Backup scheme for Trezor

5. Multisignature (Multisig) Wallets

For advanced users, multisignature wallets add an extra layer of security. A multisig wallet requires multiple keys to authorize transactions, reducing reliance on a single wallet backup.

Multisig is a method of securing a wallet by requiring approval from multiple private keys stored on separate devices when sending transactions. While Trezor recommends SLIP39 wallets as a simpler yet equally robust alternative in terms of backups, Trezor devices are fully compatible with multisig setups, allowing you to choose the option that best fits your needs.

Here’s more on this,

What is multisig? A complete guide to multisig (multi-signature) wallets for secure Bitcoin transactions

Trezor’s Role in Wallet Backup Security

We founded the hardware wallet industry. Our founders, Marek Palatinus and Pavol Rusnak, were part of a team that introduced Bitcoin Improvement Proposal 39, or BIP39. This is a protocol that was introduced as a means to generate deterministic wallets. It’s a method for creating a human-readable mnemonic sentence — easy to read and write — from random data that serves as a backup to recover your wallet. In summary, the wallet backup (aka recovery seed).

This is now widely adopted in the cryptocurrency industry. Learn more here.

Trezor wallets began with employing BIP39 for the wallet backup (recovery seed phrases). When you initialize your Trezor device, it generates a unique 12, 18, or 24-word wallet backup (recovery seed). This seed is a representation of your private keys and is essential for restoring your wallet’s information in case your device is lost, stolen, or damaged. BIP39 has become a crucial part of Trezor’s security protocol, and it is used alongside other BIPs like BIP32 (Hierarchical Deterministic Wallets) and BIP44 (Multi-Account Hierarchy for Deterministic Wallets) to provide an optimal security model for cryptocurrency users.

Our recently introduced enhanced 20-word backup standard (SLIP39) ensures a more robust process for backing up and recovering your wallet compared to the legacy standard. With an upgraded, user-friendly wordlist and seamless transition to Multi-share Backup, SLIP39 offers superior security with no single point of failure.

Best Practices for Long-Term Wallet Backup Protection

Once your wallet backup is securely stored, it’s essential to protect it over time. What we do recommend is taking a moment to assess the most probable threats you face. It is important to understand that everyone has a different threat model, and this can change over time. Consider environmental risks, physical attacks, and remote attacks, while doing more. Read more on this here: https://trezor.io/learn/a/keeping-your-wallet-backup-safe

As such,

1. Regularly check for wear and tear or damage. For an example, if the wallet backup is is stored on paper, periodically check for fading or physical damage.

2. Protect against natural disasters. A case in point is ensuring your wallet backup is safeguarded from house fires, floods, or leaks.

3. Plan for inheritance. If you intend to pass down your crypto holdings, ensure you have a secure and private inheritance plan in place. Use a trusted legal advisor or ensure your heirs understand how to access your wallet backup securely.

What NOT to Do With Your Wallet Backup

Avoid these risky practices to protect your wallet backup:

• Do not share your wallet backup with anyone else.
• Do not keep digital copies of your wallet backup (this includes screenshots, photographs, emails, Dropbox wallet backup, etc).
• Never enter your wallet backup anywhere unless prompted by your Trezor device.

Also, remember, no Trezor employee will ever ask you to tell them your wallet backup, even if you’re speaking with one of our customer support agents.

Comparing Wallet Backup Storage Solutions

• Paper Backup

Pros: Simple, inexpensive

Cons: Vulnerable to fire, water, and damage

• Metal Backup

Pros: Durable, disaster-resistant

Cons: Comes at a cost (even if it’s only $79)

• Home Safe

Pros: High physical security, limits access

Cons: Needs proper storage

• Safe Deposit Box

Pros: High physical security

Cons: Relies on bank access

• Multishare Backup

Pros: Reduces single-point failure risk

Cons: More complex to set up

• Multisig Wallets

Pros: Advanced security

Cons: Requires technical expertise

How Trezor Stands Out in Crypto Security

Trezor combines ease of use with robust security features, making it a top choice for protecting your wallet backup:

Here’s what sets Trezor apart from other wallets,

• Trezor has been audited by independent security researchers and verified by its track record throughout its years on the market.
• Our software and hardware are open-source and public. By doing so, everyone benefits from the community-tested design of their wallet, providing robust protection against real-world threats.
• Trezor devices and the tailor-made software interface Trezor Suite are easy to use, making them suitable both for beginners and advanced users of cryptocurrencies.

Conclusion

Securing your wallet backup (recovery seed) is crucial for protecting your digital assets. By following the best practices outlined in this guide, you can safeguard your digital assets from loss, theft, or damage.

Trezor’s hardware wallets, and metal backup solutions, combined with advanced practices like multi-share backup, come together to offer a reliable and user-friendly way to secure your wallet backup. Don’t leave your crypto to chance — take control of your security today.

Frequently Asked Questions (FAQ)

1. What is the best way to store wallet backups?

We recommend the use of a metal backup like Trezor Keep Metal. We definitely recommend avoiding storing the wallet backup digitally.

2. Where should I hide my wallet backup?

This depends on several factors. It is important to define your threat model. Choose a secure, hidden location that accounts for these risks. This video can help.

3. What happens if I forget my wallet backup?

You lose access to your funds permanently. There is no recovery mechanism for lost wallet backups.

4. Can I store my wallet backup online?

No, storing wallet backups online exposes them to hacking risks. Always store them offline.

5. Can someone steal my crypto if they have my wallet backup?

Yes. Anyone with your wallet backup can access and steal your funds. Keep it private and secure.

6. Can Trezor help me recover my wallet backup?

No. Trezor does not store your wallet backup. You are fully responsible for its storage and security.

Best Practices for Securing Your Wallet Backup was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

The holiday season is here. A time of joy, celebration, and sometimes, a few “Oops” moments. From spilled drinks, forgotten PINs, damage to devices, mishaps can happen.

This year, Trezor is here to help you navigate the chaos and keep your crypto safe with our special holiday campaign. Enjoy discounts on a bunch of our products, from hardware wallets, to backup devices, limited-edition bundles, and more. It's time to enjoy an Oops-Proof holiday season!

Embrace the Holiday Fumbles

As you gear up for festive gatherings and family reunions, it’s essential to remember that mishaps can occur. Whether it’s that spilled glass of red wine on your wallet backup card — an "Oops" moment easily avoided with the Trezor Keep Metal (currently at a 50% discount) - or forgotting the PIN to your hardware wallet (which you can reset it in minutes), these little blunders can lead to unnecessary stress.

But don’t worry! Our range of products is designed to keep your digital assets secure, no matter what those little holiday mishaps bring your way.

Give the Gift of Security This Holiday Season

Going through that Oops moment wondering what's the perfect gift for the holidays? How about a hardware wallet?

The sleek, stylish, and secure Trezor Model T is currently available at a 40% discount.

If you have a relative or friend just starting their Bitcoin journey, the Trezor Model One — now priced at under $35 — makes an ideal gift. This trusted, proven, and affordable hardware wallet has been the go-to choice for offline crypto security for over 10 years.

At Trezor, our hardware wallets are designed with robust security features to protect your loved ones’ assets from any mishaps. Whether they’re seasoned crypto enthusiasts or new to the space, gifting a Trezor wallet is a step to giving them the peace of mind they need on their crypto journey.

Elevate Your Experience with Exclusive Holiday Bundles

Looking to take your gift-giving to the next level? We have exclusive bundles on sale that combine the best of our hardware wallets and backup solutions. These bundles are crafted to provide everything you need for effective crypto management at an unbeatable price.

Here's a look at one of the deals,

Trezor Safe 3 Backup Bundle

Secure your crypto with the Trezor Safe 3 Backup Bundle. This stylish package includes the sleek Trezor Safe 3 hardware wallet in Cosmic Black, paired with the ultra-durable Trezor Keep Metal 20-word backup for top-notch security.

With our exclusive discounts, it’s easier than ever to prioritize crypto security this season!

Explore all of our bundles here,

Trezor Hardware Wallet Accessories | Get Swag For Your Wallet

Conclusion

This holiday season, embrace the spirit of giving while ensuring your loved ones’ crypto remains secure. With Trezor’s range of hardware wallets, backup solutions, and exclusive holiday bundles, you can make thoughtful gifts that provide peace of mind in the face of life’s little “Oops” moments.

Explore our full selection of products and bundles today, and let’s make this holiday season a truly “Oops-Proof” celebration! Happy holidays from all of us at Trezor!

Oops-Proof Your Crypto This Holiday Season! was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Did you know that in 2022–2023, $5.4 billion worth of cryptocurrencies were stolen (Source: Crypto Crime Report)? Chainalysis, the author of the study, recently also noted a substantial increase in the value of stolen assets in 2024. By the end of July, the cumulative value of stolen cryptocurrencies had reached $1.58 billion, an 84% increase compared to the same period in 2023. As participation in the cryptocurrency markets grows, unfortunately, the growth in fraudulent activities surges. Hence, the need for secure ways to store your assets remains crucial.

One of the most significant, yet easy, ways of securing your cryptocurrencies is the use of a self-custodial wallet. This guide will introduce you to the concept of self-custody and related self-custodial wallets, focusing in particular on hardware wallets.

Understanding self-custody

Definition of a self-custodial wallet

A self-custodial wallet is a type of cryptocurrency wallet where you control your private keys (What’s that? For now, think of this as a password needed to access your cryptocurrencies on the blockchain. Here’s more on this). Unlike a custodial wallet, managed by third parties like a crypto exchange, for example, a self-custodial wallet gives you 100% control over your assets. You don’t have to trust a third-party custodian with your assets. You’re in charge. This decentralization (breaking away from the norm of having someone in control) is a key feature of the self-custody principle.

Note: Think of private keys as passwords. These keys are required to access the account on the blockchain that holds your crypto.

Key features of self-custodial wallets

One of the key features of a self-custodial wallet is empowering users to manage and own their cryptocurrencies directly. This includes generating private keys and safeguarding them. In essence, a self-custodial wallet ensures,

• 100% ownership: You hold your private keys, ensuring no one else can access your cryptocurrencies.
• 100% offline status: Self-custodial wallets remain offline (that is, they do not remain connected to the internet); thus, being less vulnerable to hacks or frauds.
• 100% anonymity: With no need for an intermediary like exchanges or banks, your data remains anonymous, without the imposition of any controls or checks.

Why choose a self-custodial wallet over a custodial wallet?

As mentioned earlier, when using a custodial wallet, your private keys are held and controlled by an intermediary or institution like a bank or a crypto exchange. This exposes your digital assets to inherent risks, such as exchange hacks (The Japanese DMM exchange suffered a $305 million Bitcoin theft in May 2024), account funds being frozen or limitations imposed, or even mismanagement (FTX, anyone!).

At the other end of the spectrum is the self-custodial wallet, in particularly hardware wallets. These offer unmatched security by keeping your private keys 100% offline, out of the reach of online threats.

Understanding the security benefits of hardware wallets

What makes hardware wallets unique?

A hardware wallet is a physical device (check the image below) that provides storage for your cryptocurrencies. What makes it unique is that it functions as your private key (password) manager. These wallets,

• securely generate your private key
• store your private key offline,
• use this private key to enable crypto transactions, and
• generate public keys for receiving crypto.

Most importantly, unlike a software wallet (think MetaMask) that remains connected to the internet, hardware wallets store your private keys in a secure, offline environment, isolated from potential online threats, uncompromised even if your computer is hacked or stolen.

How do hardware wallets protect private keys?

A hardware wallet like Trezor stores your private keys offline (not connected to the internet), protecting your cryptocurrencies from phishing (Here’s more on phishing attacks) or other attacks that could steal your digital assets.

Imagine you have a special key that unlocks a treasure chest. If you leave the key lying around, anyone could steal it and access your treasure. But if you store the key in a secure vault that only you can open, your treasure stays safe. In the same way, a hardware wallet stores the password (private keys) inside the device. This password helps access the account on the blockchain that stores your cryptocurrencies.

Comparison: Hardware Wallets vs. Software Wallets

• Hardware wallets (also referred to as cold storage): Keep private keys offline, leaving your assets uncompromised from potential online threats.
• Software wallets (hot wallets): Keeps your private keys online, connected to the internet, making them more vulnerable to potential hacks or scams. These do, however, offer greater convenience for daily transactions, given they remain connected to the internet.

Secure Your Crypto with Trezor

The technology behind hardware wallets

How hardware wallets secure your crypto assets

By now you know that a hardware wallet does not store your cryptocurrencies. Instead, it securely generates and stores your private keys. These private keys act like passwords that let you access and manage your crypto.

Things to know,

• A hardware wallet like Trezor generates private keys using a secure hardware random number generator.
• This process is isolated and offline, ensuring that your keys never leave your Trezor device.
• The private keys are then used to generate public keys through complex mathematical operations, creating a matched pair.
• When you initiate a transaction, your Trezor wallet uses your private key to create a digital signature. This signature is then verified using your public key, proving that you are the rightful owner of the funds associated with the transaction.

At no point do your private keys leave the wallet, keeping them safe from hackers. This setup allows you to use your crypto from anywhere with an internet connection while keeping your assets secure in the wallet.

Understanding Offline / Cold Storage and Its Benefits

To reiterate, cold wallets are among the safest ways of securing your digital assets including Bitcoin and other cryptocurrencies. By keeping your wallet offline, a cold wallet like Trezor protects your assets from online threats, such as hacking or phishing.

• With a cold wallet, you own 100% of your coins, ensuring complete control over your funds.
• Since your wallet remains disconnected from the internet, it remains 100% secure offline, and
• Your data stays fully anonymous, providing the highest level of privacy and protection for your crypto.

Trezor: Leading the way in hardware wallet security

What sets Trezor apart from other wallets?

We founded the hardware wallet industry. In 2013, our founders, Stick and Slush, created the world’s first hardware wallet. Over the past decade, we’ve grown our portfolio of hardware wallets and backup solutions to serve over 2 million users globally.

Fun fact: The first generation of Trezor, the Trezor Model One, was first released on 29th July 2014.

Here’s what sets Trezor apart from other wallets,

• Trezor has been audited by independent security researchers and verified by its track record throughout its years on the market.
• Our software and hardware are open-source and public. By doing so, everyone benefits from the community-tested design of their wallet, providing robust protection against real-world threats.
• Trezor devices and the tailor-made software interface Trezor Suite are easy to use, making them suitable both for beginners and advanced users of cryptocurrencies.

Comparison of Trezor models

Trezor offers four hardware wallets,

• The original Trezor Model One is the gold standard of cryptocurrency safety. This single-purpose device contains everything needed to protect bitcoin and cryptocurrency funds.
• The Trezor Model T is the premium hardware wallet. In addition to the functionalities of the Trezor Model One, it has a color touchscreen for easier secure on-device input, modern design, an SD card slot, plus other advanced features.
• The Trezor Safe 3 is aimed at bitcoin and crypto newcomers, and comes equipped with a dedicated Secure Element for keeping your funds safe, even if your device falls into the wrong hands.
• The Trezor Safe 5 is the latest member of the Trezor hardware wallet family, and is designed to be the ultimate hardware wallet for cryptocurrency users who prioritize both security and user-friendliness.

Which model is best for you? Here's more,

Compare Trezor Hardware Wallets | Advanced Crypto Security

Best practices for using a hardware wallet

A wise person once said, ‘With great power comes great responsibility’ 😀. With the great power of a hardware wallet comes the responsibility to use it wisely. Here are some handy tips to ensure you’re keeping your private keys and cryptocurrency safe while using a hardware wallet:

• Do not share your private key with anyone: If you share your private keys with someone else — or even if you trust a custodial exchange to hold them for you — your funds may be taken at any time. Remember, no one at Trezor will ever ask you for your private keys.
• Use a strong PIN and passphrase: Enable PIN protection and consider using an additional passphrase (hidden wallets) to enhance security further. These safeguards prevent unauthorized access to your wallet.
• Store your wallet backup securely: The wallet backup is the core of your hardware wallet security. Do not share your recovery seed with anyone else. Do not keep digital copies of your wallet backup (this includes screenshots, photographs, emails, Dropbox backup etc). Your Trezor hardware wallet ships with a pair of recovery seed cards that you should use for writing down the recovery seed when you backup your device — this is a strongly recommended step when setting up your Trezor. ​​You can also protect your seed with the Trezor Keep Metal, for an easy-to-use robust backup solution, tailor-made to store your recovery seed securely.
• Stay vigilant about phishing attacks: Be cautious of any communication asking for your wallet backup or private keys. We, at Trezor, will never ask you to tell us your wallet backup, even if you’re speaking with one of our customer support agents. Here’s more on this.
• Use a new address for each transaction: Using a new address for each crypto transaction is a key privacy practice we recommend. Every time you receive crypto, generating a fresh address helps prevent your transaction history from being linked to a single address. Trezor Suite generates fresh addresses for each (receiving) transaction. By generating a fresh address each time, you reduce the chance of exposing any sensitive personal information.
• Update device firmware: Updating the device firmware is necessary to expand the functionality of your hardware wallet, to apply new security measures, and enable newly developed features.

Here’s a video that sums up six key security tips,

Advanced Security Measures

Trezor hardware wallets go beyond essential security measures and offer users the adoption of advanced security measures designed to keep their crypto assets safe from online and offline threats. One of these includes,

Multi-share Backup: This makes it much easier for users to split their wallet backup into multiple shares — a process which has been made easier than ever when upgrading from a Single-share Backup. A set number (referred to as the threshold) of these shares must be combined in order to recover the associated wallets and accounts. By splitting your backup into multiple shares, you no longer have to worry about losing a single wallet backup and access to your funds. You can safely recover your wallet if you have the threshold number of the shares to hand.

For a deeper dive into advanced security features, check this out,

Trezor Advanced Security Measures

Setting up your Trezor hardware wallet

Setting up a Trezor hardware wallet is easy and can be done in a matter of minutes. Our knowledge base hosts detailed walkthroughs of the process, depending on the hardware wallet you own. These articles will take you through the process of initializing your Trezor hardware wallet for use with Trezor Suite.

• Set up your Trezor Model One in Trezor Suite
• Set up your Trezor Model T in Trezor Suite
• Set up your Trezor Safe 3 in Trezor Suite
• Set up your Trezor Safe 5 in Trezor Suite

Conclusion

Self-custodial wallets combine security and convenience. By bringing together the security of 100% offline storage, with ease of use, these wallets empower users to be their own bank. A one-time investment in a self-custodian hardware wallet can go a long way in safeguarding and protecting your digital assets, without concerns about hacks and scams. Trezor has led the way in crypto security using hardware wallets for over a decade. With a Trezor hardware wallet, you can rest assured that your digital assets are 100% safe and secure.

Frequently Asked Questions (FAQs) About Self-Custodial Wallets

• What is an example of a self-custodial wallet?

Examples of self-custodial wallets include Trezor, Ledger, Electrum, Exodus, to name a few. These wallets give you full control over your private keys, ensuring only you have access to your cryptocurrencies.

• How do self-custodial wallets work?

A self-custodial wallet allows you to control the private keys (think of it as a password) linked to the account that holds your crypto. This private key is essential, as it gives you 100% access to your assets, without relying on a third party to manage them.

• Are self-custody wallets safe?

Self-custody wallets offer enhanced security by allowing you to act as your own bank. However, this comes with added responsibility — if you loose your wallet backup (recovery seed), you loose access to your funds permanently.

• What are the main benefits of self-custody?

Self-custody wallets give you 100% control over your assets, without the reliance on third-party services like exchanges. This gives you the advantages of greater security, privacy, and complete ownership, ensuring that no one else can freeze, limit, or access your assets.

• Can self-custody wallets be hacked?

While self-custody wallets can be hacked if the are online and connected to the internet (also known as hot wallets), cold wallets (such as Trezor hardware wallets) remain offline are far less vulnerable to hacking or phishing attempts.

• Can I recover my wallet if I lose my device?

Yes. If you lose your hardware wallet, you can easily recover your crypto using the wallet backup (12, 20, or 24-word phrase) that was generated when you first set up the wallet. As long as you have the wallet backup, you can restore your funds on a new device.

• Is there a difference between hot and cold self-custodial wallets?

Ye. Hot wallets are always connected to the internet and are more convenient for daily transactions. But, given they are always online, they come with risks like hacking. Cold self-custodial wallets (like Trezor) remain offline and thus, more secure.

Self-Custodial Wallets: The Complete Guide to Securing Your Crypto and Owning Your Assets was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

This is no longer the current version of this article. Read the new blog here: https://trezor.io/blog/security/10-common-faqs-around-passphrases-in-trezor-wallets

Passphrases are a powerful feature in Trezor Suite that add an extra layer of security to your cryptocurrency. However, passphrases are often considered an advanced feature because they require careful handling — if forgotten, there is no way to recover the funds linked to that passphrase. Since the passphrase is never stored on your Trezor device, this makes it a tool for users who are confident in managing their own security.

If you’re using a Trezor hardware wallet or thinking about adding a passphrase to your crypto security routine, you probably have a few questions. In this post, we’ll break down the most common FAQs around passphrases to help you understand how they work and why they’re so important.

1. What is a passphrase and how does it work?

A passphrase is an additional layer of security for your Trezor wallet, granting access to a separate wallet beyond your standard wallet. Think of it as a secret key that unlocks a new “locker” within your wallet, where you can securely store the bulk of your crypto.

You can create and access as many wallets as you’d like by using different passphrases. Without the passphrase, you’ll only see your standard wallet. But with the right passphrase, you’ll unlock the specific wallet associated with it.

In essence,

Wallet backup = Standard wallet

Wallet backup + Passphrase = (Hidden) Passphrase wallet

Here’s what you need to know,

• A passphrase functions like an extra word added to your wallet backup (recovery seed)
• Using your wallet backup alone grants access to your standard wallet
• Each unique combination of ‘backup + passphrase’ grants access to a corresponding unique passphrase wallet.

Passphrase — the ultimate protection for your accounts

2. Is the passphrase only a Trezor feature? Can I access my hidden wallet with third-party apps like MetaMask?

Passphrases are not exclusive to Trezor. They work with many third-party apps, including MetaMask. The same combination of your wallet backup and passphrase will derive the same wallet with identical addresses, no matter which application you use.

3. If my wallet backup (recovery seed) is compromised, will the passphrase still protect my coins?

Yes!

Yes! A passphrase adds an extra layer of security even if your wallet backup is compromised. Since the passphrase is not stored on your Trezor device, your accounts remain protected. Without the specific passphrase, nobody can access the (hidden) passphrase wallets you’ve created.

4. What if I lose my Trezor device? Can I still access my funds?

Absolutely! If you lose your Trezor device, you can simply:

1. Buy a new one,
2. Import your wallet backup,
3. Enable the passphrase feature, and
4. Enter the exact same passphrase you used before.

This will give you access to your hidden wallet and your crypto, just as it was on the previous device.

Remember,

• To access a passphrase wallet, you must enter the passphrase with 100% accuracy
• If you enter anything else, a brand new passphrase wallet will be created
• If you forget your passphrase, the associated wallet is irretrievable

5 Reasons Why You Should Use a Passphrase (And 3 Reasons Why You Maybe Shouldn’t)

5. Is the passphrase something Trezor generates for me?

No, Trezor does not generate the passphrase for you. Unlike the wallet backup, which is automatically generated, the passphrase is something you create yourself. It can be any combination of characters, a word, or even a sentence up to 50 characters long.

This is why it’s considered an advanced feature — it’s your responsibility to choose and remember your passphrase. If forgotten, there’s no way to recover the funds associated with that passphrase.

Essentials to know when selecting a passphrase,

• It can be any memorable word / phrase / sentence up to 50 bytes (about 50 ASCII characters)
• It is case sensitive i.e. “Hello World” is not the same as “Hello world”
• Spaces are valid characters — every character matters

6. How should I store my passphrase?

Your passphrase should be memorable. It’s recommended not to write it down to avoid the risk of it being discovered. However, if you do choose to store it physically, follow the same rules as for your recovery seed: avoid digital storage and keep it in a secure location. More importantly, keep it separate from your wallet backup.

A good approach is to store it among personal items where trusted relatives can find it and recognize its importance, without it being in an obvious spot for a thief. For added security, consider alternatives like a safe deposit box or sharing it with a trusted person, such as a spouse or attorney.

7. Where is a passphrase stored? Can someone extract my passphrase from Trezor?

No, the passphrase is never stored on your Trezor device. When you enter a passphrase, it is used to derive the hidden wallet, but it is not saved anywhere on the device or within the software. This ensures that even if someone gets physical access to your Trezor, they cannot extract the passphrase.

8. What happens if I forget my passphrase?

If you forget your passphrase, you lose access to the hidden wallet associated with it permanently. There is no way to recover the passphrase, and neither Trezor nor any other entity can retrieve the funds. This is why the passphrase is considered an advanced feature for self-custody — it’s a powerful tool for securing your assets, but it comes with the responsibility of securing and remembering it yourself.

9. Should I share my passphrase with anyone?

In general, your passphrase should be treated just like your wallet backup (recovery seed) — never share it with anyone unless absolutely necessary. Sharing it gives full access to the wallet and funds associated with that passphrase.

If you’re planning for inheritance or want to ensure your loved ones can access your funds in case of an emergency, it’s important to share it with a trusted individual. Make sure it’s stored securely and only accessible to those you fully trust to avoid any potential misuse.

10. Can I use a simple passphrase like “password” or “12345”?

While you can technically use any combination of characters as a passphrase, it is highly discouraged to use simple or easily guessable phrases like “password” or “12345.” These make your passphrase wallet vulnerable. Instead, choose a unique, complex passphrase that is both secure and memorable to you. Using a combination of upper and lowercase letters, spaces, and special characters can further increase the strength of your passphrase.

Is your passphrase strong enough?

Remember, a passphrase is case-sensitive, so “Hello World” is not the same as “hello world.” A case in point is below,

In this schematic, wallets “A” through “E” are all unique passphrase-protected hidden wallets; the (minor) differences between each separate, valid passphrase are highlighted in green.

Conclusion

A passphrase is a powerful tool for those looking to add extra layers of security to their crypto. It helps to protect your accounts from unauthorized access. However, since it is never stored on your device and cannot be recovered if lost, it’s considered an advanced feature. Always make sure your passphrase is both memorable and securely stored.

10 Common FAQs Around Passphrases in Trezor Wallets was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

This is no longer the current version of this article. Read the new blog here: https://trezor.io/blog/insights/unlock-financial-freedom-in-just-4-steps-master-crypto-security-and-be-your-own-bank

Imagine having complete control over your financial destiny. With Bitcoin and the right tools, this isn’t just a dream — it’s a reality waiting to happen. Unlike traditional assets like real estate, gold, or stocks, Bitcoin offers unparalleled freedom and flexibility. Here’s what makes it stand out:

• Accessibility: Your Bitcoin is always within reach, no matter where you are in the world — all you need is an internet connection. Other assets often require intermediaries or physical presence.
• Liquidity: You can buy or sell Bitcoin anytime. No waiting for markets to open.
• Security: With the right tools, like a hardware wallet, your Bitcoin is secure in the palm of your hand.
• Decentralization: Bitcoin operates free from any central authority — no government, no institution. How many other assets can claim this level of independence?
• Low Storage Costs: Storing Bitcoin is cost-effective, thanks to hardware wallets like Trezor. Just a one-time setup and you’re good to go.

So why not take this freedom one step further? By becoming your own bank, you’re not just investing in Bitcoin — you’re investing in your financial autonomy. No more relying on banks or traditional financial institutions to store your wealth. Instead, you’ll hold the keys to your wealth, literally, in a secure and private way.

Here’s how you can do it,

1. Take Charge: Embrace Self-Custody with a Hardware Wallet

Self-custody might sound intimidating, but it’s simpler than you think. Imagine a world where you have full control over your assets — no banks, no exchanges, just you and your secure hardware wallet.

In the traditional banking system, your money and assets are controlled by third parties (banks, exchanges, and so on), making you susceptible to potential security risks, privacy breaches, and even access restrictions. What if there’s a way to own and manage your wealth without these intermediaries? A system where you have full control and ownership! That’s self-custody.

What self-custody brings is,

• Security and Control: You have direct control over your assets, reducing risks related to hacking or third-party failures.
• Privacy: Transacting under self-custody allows you to maintain privacy as you don’t need to disclose personal information to a third party.
• Freedom: Think decentralization and individual financial sovereignty.

Practicing self-custody is easy. All you need is a wallet, more precisely, a hardware wallet. A hardware wallet like Trezor facilitates self-custody by offering secure offline storage for your private keys (think of this as the password to the account where your crypto is held). More on this here.

With a hardware wallet,

• You own 100% of your coins
• Your wallet is 100% safe offline
• Your data is 100% anonymous

Want to learn more about the world of self-custody and hardware wallets? You can master this in only 60-minutes. Our Trezor Expert Sessions are designed to get your hardware wallet set up, and learn the basics of self-custody and crypto security in a one-on-one session.

Learn more here,

Trezor Hardware Wallet Setup Session | Trezor Expert

There’s a reason why this may be the Smartest $99 You’ll Ever Spend. 🤩

2. Choose Wisely: Finding the Perfect Hardware Wallet

There are loads of options available when it comes to hardware wallets. Do your research. What we can advise is to exercise caution, as the space can be rampant with fake devices and scams.

Trezor is the world’s first hardware wallet and has served over 2M customers globally since we began operations in 2013. We’re proud to be fully open-sourced, ensuring transparency and trust.

We’ve recently launched the Trezor Safe 5, the latest and most advanced hardware wallet in the Trezor lineup. Built keeping in mind the highest level of security and usability, it boasts,

• Color Touchscreen: The 1.54” color display makes navigation and transaction verification a breeze.
• Trezor Touch Haptic Engine: Tactile feedback for an intuitive user experience.
• All-Glass Surface (Gorilla Glass): Sleek design with enhanced durability.
• NDA-Free EAL 6+ Secure Element: Top-level security without compromising transparency.

And a lot more.

Here’s something that can help you figure out which hardware wallet is best suited for your needs,

Choosing the Best Trezor Hardware Wallet for Your Needs: Trezor Safe 5, Trezor Safe 3, or Trezor…

Ready to buy a Trezor wallet? This can help.

3. Get Started with Confidence: Setting Up Your Trezor Hardware Wallet

Setting up your Trezor hardware wallet is quick and easy. Whether you’re new to self-custody or just starting with Trezor, we’ve made the process simple and secure.

With Trezor Suite, our user-friendly interface, setting up your hardware wallet is as straightforward as following on-screen prompts. Trezor Suite guides you through every step, from initializing your wallet to creating your first backup. It’s designed to be intuitive, so even if you’ve never used a hardware wallet before, you can get started with confidence.

Need extra help? Trezor Expert is here for you. These one-on-one sessions are available 7 days a week, offering personalized guidance to ensure everything is set up correctly. Think of it as having a crypto mentor by your side, helping you secure your assets with peace of mind.

Once your wallet is set up, Trezor Suite becomes your all-in-one hub for managing your digital assets. Here’s what you can do with Trezor Suite:

• Manage Your Funds: Send and receive cryptocurrencies with ease. Trezor Suite supports thousands of coins and tokens, making it a versatile tool for all your crypto needs.
• Track Your Portfolio: Monitor your investments and the performance of your digital assets directly within the app.
• Trade Assets: Buy, sell, and swap cryptocurrencies seamlessly within Trezor Suite, giving you full control over your trading activities.
• Secure Your Transactions: Every transaction requires your explicit confirmation on your Trezor hardware wallet, ensuring your funds are always secure.
• Create Multiple Wallets: Organize your assets by creating different wallets for different purposes, all easily managed from one interface.
• Earn with Staking: Take advantage of staking opportunities to grow your assets while keeping them secure in your Trezor wallet.
• Compare Exchange Rates: Find the best trading offers by comparing rates from various exchanges directly within the app.

Getting started with your Trezor hardware wallet is simple, secure, and designed to give you peace of mind, whether you choose Trezor Suite’s guided setup or the personalized touch of Trezor Expert Sessions.

4. Secure Your Crypto: The Journey from Exchange to Hardware Wallet

Moving your crypto from an exchange to a hardware wallet is like taking your money out of a bank and putting it into a safe that only you control. It’s a simple yet powerful step towards full ownership of your digital assets. Here’s why and how you should do it:

Why Move Your Crypto?

• Security: Exchanges are attractive targets for hackers, and while they implement security measures, they can’t offer the same level of protection as a hardware wallet. With your crypto in a hardware wallet, you’re the only one who holds the keys to your assets.
• Control: When your crypto is on an exchange, you’re trusting a third party with your assets. By moving it to your hardware wallet, you take full control — no one can freeze or restrict your access.
• Privacy: Hardware wallets allow you to transact more privately. You don’t have to worry about exchanges tracking or sharing your data.

How to Make the Move

Ready to make the move? It’s simpler than you might think. Follow along with this step-by-step video guide to securely transfer your assets from an exchange like Binance, Coinbase, or KuCoin to your Trezor hardware wallet:

📽️ Watch the video here:

Understanding the Risks

While self-custody empowers you, it also requires careful management of your private keys and backup seeds. If you lose them, there is no recovery service to help you. It’s essential to educate yourself, stay vigilant, and adopt security best practices.

Bitcoin self-custody symbolizes a shift towards personal freedom in managing your own assets. It’s a powerful move that aligns with the spirit of decentralization — central to bitcoin’s philosophy. While it comes with increased responsibility, solutions like Trezor make the journey towards self-custody more secure and accessible for everyone. Be your own bank, with self-custody.

Unlock Financial Freedom in Just 4 Steps: Master Crypto Security and Be Your Own Bank was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

أصلية

مزيفة

أصلية

مزيفة

أصلية

مزيفة

أصلية

مزيفة

Check the authenticity of Trezor Model one packaging and contents

أصلي

مزيف

SLIP39 | Trezor's new standard for wallet backup security

Trezor firmware revision check

نصائح أساسية لحماية عملية شراء محفظتك الإلكترونية was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.

Использование аппаратного кошелька является одним из наиболее эффективных способов защиты Ваших биткойнов или другой криптовалюты. Аппаратный кошелек обеспечивает максимальную безопасность, так как никогда не делает резервную копию кошелька или конфиденциальные данные открытыми для подключенной к Интернету среды, такой как персональный компьютер или смартфон.

Однако, при покупке аппаратного кошелька важно проявлять определенную осторожность. Как и всегда, рекомендуем приобрести аппаратный кошелек Trezor и его принадлежности в интернет-магазине Trezor Shop. Чтобы узнать об альтернативных уполномоченных источниках, Вы также можете свериться с нашим перечнем официальных реселлеров. У нас также есть официальные интернет-магазины Trezor Amazon.

Важно: никогда не покупайте устройства Trezor у не уполномоченной третьей стороны, так как Вы никогда не узнаете, имел ли к ним кто-нибудь доступ до Вас.

Прочтите нижеследующее, чтобы узнать, на что следует обратить внимание, совершая покупку, что следует проверить по мере получения Вашего кошелька, и как мы продолжаем повышать безопасность наших клиентов.

На что следует обратить внимание

Только уполномоченные продавцы

Чтобы обеспечить безопасность Ваших цифровых активов, всегда совершайте покупки у уполномоченных продавцов. Приобретение у не уполномоченных третьих сторон увеличивает риск получения взломанного устройства. Остерегайтесь нелегитимных продавцов и фишинг-сайтов, имитирующих официальные каналы.

Время от времени на рынке появляются небольшие партии контрафактных устройств. Недавно мы видели сообщения о появлении поддельных аппаратных кошельков Trezor, в частности, старых моделей, таких как Trezor Model One и Trezor Model T, в России и в меньшей степени в ОАЭ.

В очередной раз хотим повторить. Никогда не покупайте аппаратные кошельки у непроверенных источников, этот риск не оправдан. Официальный интернет-магазин Trezor Shop — самый безопасный путь купить устройство Trezor, и мы осуществляем поставку в большинстве регионов по миру. У нас также есть интернет-магазины Amazon stores, или Вы можете воспользоваться услугами одного из уполномоченных реселлеров устройств Trezor, перечисленных на нашем веб-сайте.

Признаки вскрытия

По получении своего устройства внимательно осмотрите его на признаки несанкционированного вскрытия:

Упаковка
Деформированная или поврежденная упаковка является поводом насторожиться.

Ниже приведены несколько изображений, которые помогут Вам отличить оригинальную упаковку устройств Trezor от поддельной.

Оригинал

Подделка

Оригинал

Подделка

Оригинал

Подделка

Оригинал

Подделка

Несмотря на возможность повреждения упаковки во время перевозки без ущерба для устройства, такое повреждение является прямым поводом уделить повышенное внимание другим средствам защиты, таким как сигнатура микропрограммного обеспечения или какие-либо нарушения на пластиковом корпусе устройства, которые могут указывать на посягательство.

Аппаратный кошелек для криптовалюты Trezor Model One, как первое такое устройство, присутствует на рынке уже некоторое время. Посмотрите, как наша упаковка изменилась с годами.

Отсутствующий магнит

Проверьте, не перекошено ли устройство, что может указывать на подделку. Так выглядит оригинальное устройство Trezor, удерживаемое по месту в коробке с помощью магнита, по сравнению с поддельным.

Оригинал

Подделка

Наклейки для защиты от несанкционированного вскрытия

Во всех моделях устройств Trezor используются голографические наклейки для подтверждения подлинности, а коробка кошелька Model One закрыта склеиванием, означая, что для получения доступа к устройству, коробку необходимо вскрыть. Эти меры могут помочь выявить, была ли упаковка или устройство использовано после того, как покинуло завод.

Состояние устройства

Осмотрите устройство на предмет любых подозрительных отметин или отклонений от нормы. Надлежащим образом герметизированное устройство не должно нести на себе признаков вскрытия.

Ниже показано склеивание частей корпуса конусообразной формы.

Функционирование защиты SLIP39

Если при выборе стандарта защиты SLIP39 для нового аппаратного кошелька, на нем показываются 65 слов вместе предполагаемых 20, то это определенно указывает на взломанное или контрафактное устройство.

Это наглядно продемонстрировано ниже.

Для получения дополнительной информации о стандарте защиты SLIP39,

SLIP39 | Trezor's new standard for wallet backup security

Проверка версии микропрограммного обеспечения

Проверка версии микропрограммного обеспечения является вновь введенной операцией, призванной послужить дополнительным средством защиты от контрафактных устройств Trezor. Эта операция действует в качестве дополнительной «проверки подлинности» устройства, нацеленной на обнаружение более продвинутых поддельных устройств, находящихся в обороте.

Ниже приведена дополнительная информация об этом из нашей базы знаний,

Trezor firmware revision check

Следует ли беспокоиться в отношении поддельных устройств?

Если Вы покупаете устройство у официального источника, то весьма маловероятно, что с ним будет что-то не так. Если по поступлении заказа Вы заметили признаки вскрытия или если Вы купили устройство у не уполномоченного реселлера, то просто обратитесь в службу поддержки Trezor или начните обсуждение форуме Trezor, и мы расскажем Вам, как проверить устройство на несанкционированное вмешательство.

Заключение

Подводя итог вышесказанному, при покупке аппаратных кошельков основное внимание уделяйте безопасности. Всегда пользуйтесь официальными каналами Trezor, по получении проверяйте своей устройство и обратитесь за поддержкой, если необходимо.

Важные советы по  защите Вашей покупки  аппаратного кошелька was originally published in Trezor Blog on Medium, where people are continuing the conversation by highlighting and responding to this story.