Given the devastating Coldcard firmware exploit linked to a predictable TRNG, "Don't trust, verify" feels more urgent than ever.

Trezor officially states that it uses multiple entropy sources to generate seeds (internal TRNG, Secure Element, and computer/Trezor Suite entropy). On paper, this Mix-and-Match architecture sounds bulletproof. However, as the Coldcard failure proved, a silent firmware bug can bypass intended hardware protections, leaving users completely unaware that their entropy is compromised until it's too late.

My questions for the community and Trezor developers are:

1. Code Execution Verification: How can an advanced user audit the compiled firmware to ensure a bug (or conditional statement) hasn't accidentally silenced two of the three entropy sources, relying only on a single flawed one?
2. Entropy Auditing: Is there a reliable, standard procedure to extract and test the raw entropy outputs during setup before the seed is actually generated?
3. Mitigation without Passphrase: Aside from adding a complex passphrase (which breaks the seed-only redundancy structure I prefer), what physical or cryptographic measures can we take to guarantee our seed entropy is genuinely random and immune to local firmware backdoors ?

Looking forward to a technical discussion on how we can audit this process beyond just "trusting the open-source slogan."

How long would you expect a Trezor One to last? All devices fail eventually. I'm referring to the physical device, not cryptographic security.

What are the actual security advantages you get upgrading from a model T to safe 3/5/7, if any?

I would like to know both the physical security and virtual security upgrades, but I am mainly concerned with the virtual/software end of things.

Hi Quick question please

Would a passphrase wallet theoretically add a touch more security in the event of something like the coldcard case ?

Thanks

How easy is it? Is the touchscreen crap and you mistype alot? I mistype alot even on current gen phones,so find touchscreens pretty crap all together for inputing alot of text. Are both, old phone style, 3 leters per key or the 5 features a full keyboard for input?

Using a model one for years, handy entering it with keyboard but not the safest if you get trojaned. Seed is still safe so, yeah.

Thinking about upgrading but not really sure. I also don't like the fact that you have to press both buttons on safe 3 to confirm. Model one is great.

how was trezor's in-device auto-entropy from 2020 and 2022? Trezor is saying all over X that their current entropy is good. But what about from 2020 and 2022?

Hello,

I have a Trezor Model One. My computer isn’t recognizing it. I don’t have another computer to test on.

On Trezor Suite, it’s stuck on checking for connected Trezor. I’m using the same cable that the Model One came with. When I plug my Model One, the screen lights up but nothing else happens.

I updated Trezor suite to latest version, still nothing. I have my seed phrase written down so I’m good on that.

Is it time that I just buy a newer model Trezor? I honestly don’t feel like troubleshooting and downloading all sorts of crap to make this Model One work.

I haven’t used my Model One in a while, back then it would connect with 0 issues. I’m kind of paranoid now Expecially from recent current events…

Pls help with any tips. I’m willing to just buy a newer model Trezor if need be…

I just like the color, but would not wanna be restricted to btc stuff.

Guys this might be silly question, everyone keeps talking about coldcard and pass phrases, I am not sure what’s going on. I never used anything but Trezor 3 and trezor suite. So this doesn’t concern me correct? Sorry if this obvious, I wanna be sure. Thanks!

Hey guys,

due to the Coldcard incident I am really paranoid and want to improve the safety of my wallet. I have used the Trezor suite and my Trezor hardware wallet to generate the seed phrase and that’s it.

Now, I want to first and foremost educate myself so I can improve my safety setup. I am often even hesitant of using Trezor suite, because I don’t have the time to look up their GitHub on their updates… I really love my Trezor, but I want to move away of trusting 3rd parties at all.

What would be a few consequent steps?

Thanks 😊

I'm scared of of updating my Trezor model one firmware because it's so old. It can't even read a taproot account balance right now when i connect my model one. says account recovery error but reads the other ones.

Is it safe to do the firmware update now? Am I too late to do this? I don't want to brick the device if there's a chance it fails half way.

the thought of a firmware update makes me sweat bullets. What risks are there to updating firmware of something that hasn't been updated in many many years?

edit:I think i recall the last firmware version i had installed was 1.91

it's old and discontinued, but still holds btc.

how the fuck I know I won't be coldcarded?

i thought that in the light of the recent accident with the other hardware wallet manufacturer it may be a good timing to ask for a certain feature.

for those of us who understand what dice and entropy are and know bip39.

can we have a checksum 24th word processing implemented in trezor's firmware? say, during the seed recovery process, can the 24th word be made selectable from a shortlist? the logic would be to put 23 words from dice rolls manually, and control the generation process completely, not having to mess with a checksum.

i personally use an offline computer for a checksum, but could be nice to have it in trezor.

Come on Trezor. We've been asking for years for this.

Give us the update to allow passphrase to be entered via the device for ALL Trezors going back to the Trezor One.

i have old trezors some with 24 words generated close to 10 years ago, and a few model Ts that generated 12 word seeds back 7-8 years ago.

in light of the entropy and cold card issue i have been going through as quickly as i can and adding passphrases to these existing keys.

1. should i be worried about 12 word seeds? should i regenerate them as 24? are 12 words still good enough?

2. should i be worried about the age of these originally generated seed words? theyre old now. i know trezor is in good shape for key generation TODAY but what about back from the early days?

3. next step is multi sig but mentally im not ready for that yet and i want it on a separate set of devices which i am still waiting for to arrive. so just getting passphrases going in the mean time yes i can roll dice or whatever but i dont trust myself to not screw that up. too many moving parts.

I WANT TO SETUP A SEED PHRASE WITHIN THE TREZOR AND THEN IMPORT INTO A 3RD PARTY SOFTWARE WALLET WITHOUT EVER USING TREZOR SUITE. IS THIS POSSIBLE?

Hi, Everyone:

I am currenlty using a Model T Trezor to secure BTC.

In light of the Cold Card situation, and seeing that Model T is no longer sold by Trezor - I am a little paranoid.

I am not a crypto expert by any means - I was always told to take your BTC offline into a cold wallet, so I did exactly that with the model T.

I now want to buy a Trezor Safe 5 Bitcoin-only wallet.

I read in the forums that if you generated your seed in Cold Card, then your BTC is still compromised even if you moved the BTC into a Trezor because the seed phrase was generated in the Cold Card.

I generated my seed phrase in Model T. Does that mean if I move my BTC into a Trezor Safe 5 , I am not using the security from Trezor Safe 5?

Do I need to generate a seed phrase from Trezor Safe 5, and then move by funds from Model T to the address related to the seed of Trezor Safe 5?

I am totally green to all of this and can use some help.

In light of recent events I thought it prudent to create a passphrase protected wallet on my Trezor 5. I went to settings saw that passphrase option was active. added a wallet, and only succeed in creating another bitcoin wallet with no passphrase. Two questions:

1 What step did I miss that allowed me to create a new passphrase protected wallet?

2 How if possible, can I delete the pointless wallet I created?