What Is Trezor? How the Hardware Wallet Works, and Which Model Fits You (2026)

Trezor is a hardware wallet made by SatoshiLabs in Prague. It is a small device that creates your crypto private keys and keeps them offline. It signs each transaction on the device after you confirm the details on its screen. As of 25 October 2026, Trezor sells three models on its own shop: the Safe 3 at $59, the Safe 5 at $129 and the Safe 7 at $249. Since 8 January 2026 the older Model One and Model T are no longer sold there. Trezor says it will keep releasing critical security updates for them until at least 2036.

What a hardware wallet does

Whoever holds a wallet's private keys controls the funds. A software wallet on a phone or laptop keeps those keys on a device that is online and runs other software. Malware or a compromised machine can then reach them. A hardware wallet keeps the keys on a separate device. Your computer or phone builds the transaction and passes it to the Trezor. You check the address and amount on the Trezor's own screen and confirm there. Only the signed transaction goes back out to be broadcast.

The on-device confirmation is what protects you. If malware swaps the recipient address on your computer screen, the Trezor screen still shows the real destination. You need to read it before you approve.

Where Trezor came from

Marek "Slush" Palatinus and Pavol "Stick" Rusnák started the project. Trezor says the two began discussing the idea in 2011 after a Bitcoin conference in Prague. They announced it internationally and crowdfunded it in 2013. The Trezor Model One launched on 29 July 2014. Trezor describes it as the first hardware wallet.

Key dates since then, from Trezor's announcements:

• 12 October 2023: Safe 3 announced at Bitcoin Amsterdam. It was Trezor's first device with a Secure Element.
• 14 June 2024: Safe 5 announced at BTC Prague 2024, with a colour touchscreen and haptic feedback.
• 23 October 2025: Safe 7 announced, with Bluetooth, wireless charging and a second, independently auditable secure chip.
• 8 January 2026: Model One and Model T removed from the Trezor e-shop.

The current models compared

Specifications below come from trezor.io product and comparison pages, checked 25 October 2026. Each model also comes in a Bitcoin-only edition.

Safe 3: the lowest-cost route to a Secure Element. The small screen makes long addresses slower to check.

Safe 5: a larger colour screen, which makes verifying addresses and transaction details easier.

Safe 7: the only model that gives full use of the iOS app, because it connects over Bluetooth. Trezor says it also uses post-quantum signatures (SLH-DSA-128) to verify its bootloader and firmware at each power-on. That claim comes from Trezor alone and is not independently verified.

If you already own a Model One or Model T: Trezor says both stay safe to use with a valid backup. Its stated commitments are critical security updates until at least 2036, basic maintenance until at least 2031, and new coin support for the Model T until at least 2031. Neither model has a Secure Element, and Trezor says neither uses hardware rate-limiting for PIN attempts. That matters most if someone steals the device.

What the Secure Element actually does

Trezor's documentation for the Safe 3 and Safe 5 says the Secure Element does not hold your recovery seed or your PIN. It creates a secret during PIN setup and releases it only when the correct PIN is entered. That secret and your PIN together encrypt the private keys stored on the main chip. The chip also adds a separate source of randomness when the seed is created, and it holds a certificate that Trezor Suite uses to check the device is genuine. Trezor chose a chip that does not require non-disclosure agreements, so it can stay open about how the chip is used.

On the Safe 7, Trezor pairs the same OPTIGA chip with TROPIC01. TROPIC01 is made by Tropic Square, which Trezor's guide calls its sister company. Trezor says its design can be publicly audited.

Backups: 12, 20 or 24 words, single or multi-share

During setup the device creates a wallet backup, a list of words shown only on its screen. Anyone with those words can restore the wallet on another device. If you lose the device and the backup, the funds are gone, and nobody can recover them for you. Current models offer 12-, 20- and 24-word backups.

Multi-share Backup is based on SatoshiLabs' SLIP39 standard. It splits the backup into several shares, and a set number of them restores the wallet, for example any 2 of 3. Losing one share does not lock you out. A single share alone cannot restore the wallet. Trezor says the shares can be entered in different sessions and places. A wallet with a single-share backup can be upgraded to multi-share later.

Passphrase (hidden wallet): an optional extra that Trezor marks as advanced. Each passphrase opens a completely separate wallet linked to the same backup. The device never stores it, and it cannot be changed or recovered. A typo opens a different, empty wallet. Trezor says the feature is "not recommended unless you fully understand the risks." If you lose the passphrase, you lose the funds behind it.

Practical rules:

• Write the backup on paper or a metal plate. Never photograph it, type it into a device or store it in the cloud.
• Keep any passphrase separate from the backup words.
• Never enter backup words on a website, in an app or on any device other than your Trezor.

Setting up a Trezor

1. Buy from trezor.io or an authorised reseller. Trezor tells buyers never to buy from an unauthorised third party.
2. Check the packaging. The box should be factory sealed. On the Safe 3, a tamper-evident seal covers the USB-C port.
3. Get Trezor Suite from trezor.io/start. Suite runs as a desktop app, a mobile app or in the browser. Type the address yourself. Many look-alike "trezor.io/start" pages on Google Sites, Teachable and similar hosts show up in search results.
4. Install firmware. Trezor devices ship without firmware. If a new device already has firmware installed, contact Trezor support and do not use it.
5. Let Suite run the authenticity check. After firmware installs, Suite checks the Secure Element cryptographically to confirm Trezor made the device.
6. Create the wallet and back it up. Write down the words in order as they appear on the device screen, then complete the check.
7. Set a PIN. Trezor allows 4 to 50 digits. The device wipes itself after 16 wrong attempts, or 10 on the Safe 7, and you restore it from your backup.

Trezor says setup takes about 15 minutes.

Trezor Suite and coin support

Trezor Suite is the official app. According to Trezor's comparison page, the current models support "1 000s" of coins and tokens, with some exceptions. Trezor's documentation says Solana and all Solana Program Library (SPL) tokens work on the Model T, Safe 3 and Safe 5. Suite added Solana Token-2022 support in January 2025 (version 25.1.2), and Solana staking through Everstake arrived in March 2025.

Mobile limits depend on the model. On Android, any Trezor can connect over USB, and the Safe 7 can also connect over Bluetooth. On iOS, only the Safe 7 has full use of the app. Other models work view-only there: you can see balances, but you cannot send.

Coinjoin was removed. Trezor Suite stopped offering new coinjoin rounds from 1 June 2024, after its coordinator, zkSNACKs, ended the service. Existing coinjoin accounts stay accessible.

What Trezor does not protect you from

• Counterfeit devices. In May 2023, Kaspersky described a fake Trezor Model T bought through a classifieds site. It looked and worked like a real one and kept its holographic stickers. Its altered firmware drew the backup from 20 seeds the attackers already knew. The attackers waited about a month after the first deposit before taking the funds. Buying from official channels and letting Suite run its checks are the main defences.
• Approving the wrong thing. The device shows what you are signing. It cannot stop you from confirming a malicious address or contract if you do not read the screen.
• A lost or exposed backup. Anyone with your backup words, and passphrase if you use one, can take the funds without the device.
• Physical theft with a weak PIN. The older Model One and Model T have no hardware rate-limiting on PIN attempts.
• Unlocking the bootloader. Trezor says this permanently disables the key that Suite uses to verify the device, and reinstalling official firmware does not restore it.

Is a Trezor worth it?

A hardware wallet makes sense for crypto you hold on your own and could not afford to lose. Choosing a model mostly comes down to screen size, Bluetooth and budget, because all three current models have a Secure Element and use the same backup options. The device protects your keys, but it depends on how carefully you keep the backup and how closely you read the screen before you confirm.

Limitations: prices, specifications and support dates come from Trezor's own pages as of 25 October 2026 and can change; the Safe 7's post-quantum and auditability claims come from Trezor alone.