Trezor

Trezor is a line of hardware wallets made by SatoshiLabs, a company founded in Prague. The original Trezor Model One, released in 2014, is widely credited as the first commercial Bitcoin hardware wallet — the device that established the category's basic grammar: keys generated and stored offline, transaction details verified on a trusted screen, and physical confirmation required before anything is signed, even when connected to a compromised computer over USB.

Open-source lineage

SatoshiLabs has long emphasized openness, publishing both firmware and hardware designs so the code can be audited and the designs reproduced. The ecosystem's debt to that decision is large: open Trezor firmware became reference material and forked foundations for later projects across the industry — a textbook shoulders-of-giants contribution. Earlier Trezor models deliberately avoided closed secure-element chips in favor of fully auditable general-purpose hardware, accepting a known trade-off: publicly demonstrated physical-extraction attacks against those earlier models showed that an attacker with the device in hand and lab skills could recover the seed. Trezor's documented mitigation is the BIP-39 passphrase, which keeps funds safe even if the seed is physically extracted, since the passphrase is never stored on the device. The later Trezor Safe family adds a dedicated secure element to harden against exactly that class of attack, and with the Trezor Safe 7 SatoshiLabs introduced the TROPIC01, which it describes as a transparent, auditable secure element intended to resolve the old openness-versus-hardening dilemma rather than pick a side of it.

Backup and recovery options

Trezor devices support the standard seed phrase model, passphrase-protected hidden wallets, and — on supporting models — Shamir backup, which splits recovery material into multiple shares so that a threshold (say 3-of-5) reconstructs the wallet while fewer shares reveal nothing; see Shamir's Secret Sharing (SLIP-39), a standard SatoshiLabs itself authored. That standardization work is part of Trezor's outsized footprint: much of the vocabulary of modern self-custody traces to SatoshiLabs specifications.

Ecosystem and fit

The connected workflow deserves a clear-eyed description, because it defines both the convenience and the boundaries. A Trezor plugs into a possibly compromised computer and remains safe because every consequential action — address display, amount confirmation, passphrase entry on models that support on-device input — is verified on hardware the malware cannot reach. What a connected signer does not give you is the air gap: transaction data flows over USB, and users whose threat model demands physical isolation look to QR-based devices instead. In practice the sharper risks for Trezor owners have been social rather than technical — phishing sites impersonating Trezor Suite, fake support agents requesting seeds, and malicious browser extensions — which no hardware can solve and which make one rule absolute: the seed phrase is never typed into anything except a hardware wallet during recovery. Buy from official channels, enable a passphrase if you can manage its backup discipline, and test recovery before the wallet matters. A decade of public attack research against Trezor hardware, painful as individual findings were, is itself a form of assurance: the device's failure modes are documented, understood, and mitigated in the open, which is more than any unexamined product can claim.

Trezor devices pair with the Trezor Suite application, which can connect to a user's own full node for private verification, and they interoperate with third-party coordinators such as Sparrow, Electrum, and Specter Desktop over the PSBT standard, including multisig cosigner duty. Multi-asset editions support a broad range of assets beyond Bitcoin. As a connected (non-air-gapped) signer with a decade of public scrutiny behind it, Trezor suits users who value auditability, mature tooling, and convenience, with the passphrase as the recommended hardening layer. For the wider category, see hardware wallet and cold storage.