Skip to main content
Trezor provides strong hardware-level security by keeping your private keys offline and requiring physical confirmation for every transaction. However, the protection your device offers is only as strong as the habits surrounding it. How you store your seed phrase, where you buy your device, and how you recognise scams determines your real-world safety. Follow the practices on this page to keep your funds protected.

​
Seed Phrase Safety

Your recovery seed phrase is the master key to your entire wallet. Write it down the moment you set up your device and treat it with the same care you would give to an irreplaceable physical document.

✅ Do

  • Write your seed phrase on paper immediately during setup
  • Consider stamping or engraving it onto a metal backup for fire and water resistance
  • Store it in a fireproof safe, safety deposit box, or another secure offline location
  • Keep at least one copy in a separate physical location from your device
  • Confirm your seed phrase works with a dry-run recovery test in Trezor Suite

❌ Don't

  • Never photograph your seed phrase with your phone or camera
  • Never type it into an email, chat message, or online form
  • Never store it in cloud services such as Google Drive, iCloud, or Dropbox
  • Never enter it on any website — including sites that claim to be Trezor
  • Never share it with anyone, including Trezor support staff

​
Phishing Awareness

Trezor will never ask for your seed phrase via email, phone call, support chat, or any website. If anyone or anything requests your seed words, it is a scam — stop immediately and do not comply.
Attackers frequently impersonate Trezor to trick users into handing over their seed phrases. Recognise the most common scam types so you can avoid them:
  • Fake Trezor websites — Lookalike domains (for example, trezor-wallet.io or trezor-suite.com) designed to steal your seed phrase when you “enter it to restore access.”
  • Fake support emails — Messages claiming your wallet is compromised or your firmware is out of date, with links to malicious sites or downloads.
  • Fake Trezor Suite downloads — Trojanised versions of Trezor Suite distributed through unofficial channels or search engine ads.
How to stay safe:
  1. Always navigate directly to trezor.io or suite.trezor.io — bookmark these URLs and use your bookmarks.
  2. Check the SSL certificate in your browser address bar and confirm the domain is exactly trezor.io.
  3. Download Trezor Suite only from the official suite.trezor.io page or from the GitHub releases page linked there.
  4. Treat any unsolicited contact claiming to be Trezor support as suspicious by default.

​
Buying Safely

The supply chain is a real attack surface. A tampered device could be pre-loaded with a compromised firmware or a seed phrase already known to an attacker.
  • Purchase your Trezor exclusively from trezor.io/shop or an authorized reseller listed on the official website.
  • When your device arrives, inspect the packaging for the holographic security seal — if it is broken, missing, or looks tampered with, do not use the device and contact trezor.io/support.
  • A genuine Trezor always shows a blank setup screen on its very first boot. If your new device appears to already have a wallet or seed phrase set up, do not use it.
Trezor devices include tamper-evident packaging, but the ultimate guarantee of authenticity is the device’s ability to verify its own firmware cryptographically during boot. Trezor Suite will alert you if the firmware cannot be verified.

​
Using a Passphrase for Advanced Security

Trezor supports an optional passphrase — sometimes called a “25th word” — that acts as an additional layer on top of your seed phrase. Even if someone obtains your seed phrase, they cannot access a passphrase-protected wallet without also knowing the passphrase. If you hold significant value in your Trezor wallet, consider enabling a passphrase in Trezor Suite under Settings → Device → Passphrase. Store your passphrase securely and separately from your seed phrase — if you forget it, there is no way to recover the wallet it protects.
A passphrase creates a completely separate wallet from the same seed. You can use this to maintain a small “decoy” wallet on the standard seed and keep your main holdings behind a passphrase.

​
Regular Maintenance

Keeping your device and practices up to date reduces your exposure to newly discovered vulnerabilities and account risks.
  • Keep firmware updated — Trezor Suite will notify you when a firmware update is available. Install updates promptly; they often include security improvements. Always verify the update prompt appears inside the genuine Trezor Suite application.
  • Test your recovery seed periodically — Use Trezor Suite’s built-in dry-run recovery check (accessible from Device Settings) to confirm your seed phrase is correct and legible without wiping your device.
  • Review authorized connections — Navigate to Settings → Connected Apps in Trezor Suite to audit which third-party applications have been granted access. Revoke any connections you no longer use or do not recognise.
Consider keeping a second Trezor device as a backup, initialised with the same seed phrase and stored in a separate secure location. If your primary device is lost or damaged, you can start using the backup immediately without waiting for delivery of a replacement.