-
Buy only from official sources
Purchase your Trezor device from
trezor.io or authorized resellers to avoid tampered devices that could compromise login security.
-
Verify device authenticity on first use
On first connection, follow the on-screen authenticity checks. If the device fails any verification, stop and contact Trezor support.
-
Set a strong PIN — and memorize it
Choose a PIN of sufficient length. Avoid simple patterns or repeated digits. Never store the PIN digitally or on the recovery sheet.
-
Use the recovery seed correctly
Write your 12/24-word recovery seed on the supplied card (or metal backup) and store it offline in a secure location. Do not type it into a computer or phone.
-
Keep firmware updated
Regularly update your Trezor firmware via the official Trezor Suite or site. Firmware updates patch vulnerabilities and improve device interaction during login.
-
Use Trezor Suite or official Web Wallet
Prefer Trezor Suite (desktop/mobile) or the official web interface when interacting with your device. Avoid third-party wallet apps unless explicitly trusted.
-
Check your browser & OS security before login
Use a up-to-date browser and operating system. Disable unnecessary browser extensions when connecting your Trezor to reduce exposure to malicious scripts.
-
Prefer a clean environment for sensitive actions
When performing critical operations (restores, firmware updates), use a dedicated or freshly booted machine to minimize risk from lingering malware.
-
Verify addresses on-device
Always confirm receiving addresses on your Trezor screen. Never trust addresses displayed only in the browser — malicious apps can substitute targets.
-
Enable passphrase only if you understand it
A passphrase adds an extra layer (like a 25th word) but must be managed carefully. Losing the passphrase means losing funds — treat it like a second secret.
-
Avoid public or untrusted networks
Don't perform login or transaction signing over untrusted public Wi-Fi. Use a private network, VPN, or tethered connection if necessary.
-
Keep physical security in mind
Protect the physical device. If someone gains brief access to both your device and PIN, they can access funds. Store the device securely when not in use.
-
Use a reliable USB cable & port
Connection issues during login often stem from faulty cables. Use original or good-quality cables and avoid hubs when possible.
-
Understand recovery procedures before you need them
Familiarize yourself with restoring a wallet from seed so you’re prepared if the device is lost or damaged. Practice in a safe test environment if needed.
-
Beware of phishing & fake sites
Always confirm you're on
trezor.io or official suite URLs. Never follow links in unsolicited emails or DMs to log in.
-
Limit browser extensions
Extensions (especially wallet/scripting tools) can intercept or alter requests. Disable them when using the Trezor web interface or Suite.
-
Use Trezor's official support for troubleshooting
If facing login or firmware problems, consult
Trezor Support rather than following random forum advice which may be unsafe.
-
Log out and disconnect after sensitive sessions
After completing transactions, safely disconnect the device and close browser tabs to reduce attack surface.
-
Consider a metal seed backup
Paper can degrade. Use a metal backup plate for your recovery seed to withstand fire, water and physical damage.
-
Regularly review account activity
Check transaction history and addresses periodically. Early detection of unauthorized transactions improves response options.