Trezor Safe 7: review, security and first setup

Launched in October 2025, Trezor Safe 7 is the flagship of the Trezor lineup, which also includes Safe 5 and Safe 3. It is the first Trezor with Bluetooth, a battery and full iPhone support, and the first hardware wallet to use the TROPIC01 security chip, whose architecture is open to independent review.

A hardware vulnerability was discovered in TROPIC01 in January 2026 and publicly disclosed in June. In this Trezor Safe 7 review, we explain what it means for wallet owners, how Bluetooth and post-quantum protection work, and which coins and networks the device supports. We also compare Safe 7 with Safe 5 and Safe 3, then walk through setup and the checks to complete before your first transfer.

Who is Safe 7 for?

Safe 7 is particularly useful if you want to sign transactions from an iPhone: among current Trezor models, it is the only one with full iOS support. Safe 5 and Safe 3 cannot connect to an iPhone. You can use the Trezor Suite mobile app to view accounts you have added from those wallets, buy crypto and receive funds without connecting the device, but setup and transaction signing require a computer or Android phone. Safe 7 also has a larger screen, making it easier to check addresses and review complex DeFi transactions.

If you use a computer or connect your wallet to an Android phone by cable, Safe 5 is worth considering. It costs less than Safe 7 and also uses an OPTIGA Trust M Secure Element and an STM32U5 microcontroller. Safe 3 can be a more affordable first wallet or a backup device, although it has a hardware limitation we discuss in the comparison section.

Which coins and networks does Trezor Safe 7 support?

With its multi-coin firmware, Trezor Safe 7 supports thousands of coins and tokens. Trezor Suite lets you manage Bitcoin (BTC), Ethereum (ETH), Solana (SOL), Cardano (ADA), XRP, Litecoin (LTC) and Dogecoin (DOGE), along with tokens on supported networks.

TRON (TRX) and TRC-20 tokens, including USDT, are already supported in Trezor Suite on Safe 7, Safe 5 and Safe 3. Since the June 2026 update, TRON has been generally available in both the desktop and mobile versions of Suite. The app does not support the older TRC-10 token standard.

When transferring USDT, make sure the sending and receiving networks match. For USDT TRC-20, for example, add a TRON account in Suite and select TRON as the withdrawal network on your exchange. TRC-20 transfers consume the network’s bandwidth and energy resources; if you do not have enough, fees are paid in TRX, so holding USDT alone may not be sufficient. See Trezor’s TRON and TRC-20 guide for the full procedure.

For other assets, check the official list of supported coins and tokens, selecting Safe 7 and the network you need. The list also tells you whether an asset is available in Trezor Suite or requires a compatible third-party app. Support for a token on one network does not mean every network where that token exists is supported.

Inside Safe 7: three chips from three manufacturers

Safe 3 and Safe 5 use two chips: an STM32 microcontroller and an Infineon OPTIGA Trust M Secure Element with CC EAL6+ certification. Safe 7 adds TROPIC01 from Czech company Tropic Square. It uses an STM32U5G microcontroller (ARM Cortex-M33, 160 MHz) and the third version of OPTIGA Trust M. Components from three manufacturers provide independent layers of protection, so compromising one chip should not be enough to access the wallet.

In Safe 7, TROPIC01 enforces the PIN attempt limit in hardware through a mechanism called MAC-and-Destroy: each attempt permanently consumes a one-time slot in the chip, and only the correct PIN produces the required cryptographic result. The chip also stores factory certificates used to authenticate the device and generates random data for wallet creation.

The seed, from which the wallet derives private keys, is stored in encrypted form in the microcontroller’s memory. Its decryption key is never stored in full: after you enter the correct PIN, it is derived from secret data held by several chips, exists briefly in memory, and is then erased. As a result, compromising a single component is not enough to read the seed.

TROPIC01 has an open architecture that independent researchers can inspect. With many Secure Elements, access to technical details is restricted by nondisclosure agreements (NDAs). OPTIGA Trust M documentation is available without an NDA, although the chip itself does not have a fully open architecture. TROPIC01 was designed for open security audits, one of which uncovered the vulnerability discussed below.

The TROPIC01 vulnerability: what was compromised and what it means for security

Tropic Square commissioned an independent audit of TROPIC01 by Ledger Donjon, the security research team at Trezor’s competitor. In late January 2026, Donjon reported that laser fault injection had allowed it to extract some of the secret data protected by the chip. Building on those findings, Tropic Square engineers found a way to run their own firmware on the chip and obtain a secret used in PIN protection. Trezor published its response on June 3, 2026.

The attack requires physical access to the device, expensive laboratory equipment and specialist knowledge. An attacker must disassemble the wallet, desolder TROPIC01, open the chip package from the back, connect it to a custom board and precisely position the laser. This vulnerability cannot be exploited remotely or through malware on your computer. Trezor also states that it cannot be used to make a counterfeit Safe 7 with malicious firmware that survives a restart, ruling out that route for a supply-chain attack.

According to Trezor, compromising TROPIC01 alone does not give an attacker access to the PIN, funds or wallet backup: the seed is not stored on that chip, and decrypting it requires two other independent layers of protection. A Safe 7 firmware update cannot fully fix the underlying hardware issue. Tropic Square plans to release a revised chip in late 2026, but Trezor has not confirmed whether or when it will use that revision in new Safe 7 devices.

For everyday use, the main risks to watch for are phishing, exposure of your wallet backup and approving malicious transactions. If an attacker with a well-equipped laboratory is a realistic concern for you, factor in the vulnerability in one of the three protection layers: even after compromising TROPIC01, they would still have to defeat OPTIGA and the microcontroller. A strong passphrase provides additional protection when used alongside your backup and stored separately. It is not saved in the device’s persistent memory and is required to access the hidden wallet even if someone has the seed.

Quantum-ready: what is protected?

When Trezor describes Safe 7 as “quantum-ready,” it means post-quantum protection for the boot process, firmware and device authentication. Safe 7 verifies bootloader and firmware signatures using SLH-DSA-128, an algorithm standardized in 2024. Since May 2026, authentication in Trezor Suite has also used a digital signature generated by the microcontroller with the post-quantum algorithm ML-DSA-44. These measures protect against future attacks in which a quantum computer could help forge a conventional digital signature for an update or a device.

The cryptography used for addresses and transaction signatures on Bitcoin, Ethereum and other networks remains unchanged, so these features do not make your coins quantum-resistant. A move to post-quantum cryptography depends on the blockchains themselves; whether Safe 7 could support it through an update will depend on future standards and the device’s resources. When choosing Safe 7 today, consider its screen, connectivity and ease of use: “quantum-ready” describes protection for the device itself.

Bluetooth and connection security

On Safe 7, Bluetooth and USB connections are secured by Trezor Host Protocol (THP), an open-source protocol that encrypts commands and data and protects against interception, tampering and message injection. When first pairing the wallet over Bluetooth, check that the code on its screen matches the one in Trezor Suite. After you install the firmware, Suite asks you to confirm the secure connection using a one-time code shown on Safe 7. The wallet subsequently recognizes approved connections and remains invisible to unknown devices.

If you do not need a wireless connection, you can disable Bluetooth in the settings and use USB-C. You will then be unable to sign transactions from an iPhone, because Safe 7 uses Bluetooth exclusively for this; its USB-C port only supplies power when connected to an iPhone.

Whichever connection you use, always check the recipient address and amount on Safe 7’s screen, as malware on a computer or phone can replace a copied address in the clipboard. The 2.5-inch display makes this easier than the 1.54-inch screen on Safe 5 or the monochrome screen on Safe 3. In September 2026, Trezor introduced Clear Signing for supported contracts on EVM networks, which are compatible with the Ethereum Virtual Machine. When a contract is supported, the device displays a readable description of the action; for other contracts, Suite warns you about blind signing. The feature also works on Safe 5 and Safe 3 with current multi-coin firmware.

Case, battery and water resistance

Safe 7’s case is machined from a solid block of anodized aluminum, with Gorilla Glass 3 protecting the screen and a glass rear panel. It measures 75.4 × 44.5 × 8.3 mm and weighs 45 g, almost twice as much as the 23 g Safe 5. Safe 5 combines a PC-ABS plastic body with an aluminum rear panel, while Safe 3 uses PMMA and an aluminum rear panel.

Safe 7 has an IP54 rating, providing limited dust protection and resistance to splashes from any direction. Do not submerge the device. If a review or older article cites IP67, use the IP54 rating in Trezor’s current documentation as your reference.

The LiFePO₄ (lithium iron phosphate) battery has a capacity of 330 mAh. According to Trezor, it can withstand up to four times as many charge cycles as conventional lithium batteries. It also tolerates a full discharge and retains its charge during long periods of storage. You can charge Safe 7 by cable or with a Qi2-compatible wireless charger. If the battery eventually fails, the wallet will still run on USB-C power and can continue to work with a computer or Android phone. Connecting to an iPhone requires Bluetooth.

The operating temperature range is 0 to +45 °C. If you leave Safe 7 in a freezing car overnight, let it warm to room temperature before using it. Airport X-ray screening does not harm the device.

Safe 7 vs. Safe 5 vs. Safe 3

All three models support passphrases, 12-, 20- or 24-word backups, and Multi-share Backup. The latter splits the backup into several shares and lets you set how many are needed for recovery. Each model supports PINs of up to 50 digits and can act as a FIDO2 security key for two-factor authentication. Trezor Suite for desktop offers Tor and coin control, which lets you manually select Bitcoin’s unspent transaction outputs (UTXOs) for a transaction. You can install Bitcoin-only firmware on any of the three models during setup; the manufacturer also sells dedicated Bitcoin-only editions. The table below compares their differences.

For Safe 3 and Safe 5, Trezor Suite on iPhone lets you view accounts you have added, buy crypto and receive funds without connecting the hardware wallet. You need a computer or Android phone to set up the wallet and sign transactions.

What Safe 7 adds over Safe 5

In everyday use, Safe 7’s main advantages are full iPhone support and cable-free operation over Bluetooth. It also has a battery with wireless charging, a larger screen, an aluminum case and an IP54 rating. TROPIC01 adds a third independent layer of protection, although its known vulnerability limits its effectiveness against laboratory attacks. We would not treat that chip alone as a reason to upgrade from Safe 5: if you use a computer or a wired Android connection and are happy with the smaller screen, there is no need to replace your device.

What Safe 5 offers that Safe 7 does not

Safe 5 supports extra protection using a microSD card containing a random secret, which is required alongside the PIN to unlock the device. Keeping the card and wallet in separate places makes unauthorized access harder, although it does not protect against theft of the backup itself. The feature is enabled through the trezorctl command-line tool, so it is intended for experienced users; Safe 7 does not support it. If the card is lost, you can recover access using your wallet backup. Safe 5 is also lighter and has no battery to wear out over time. If you prefer a wired connection, its lower price and microSD protection may matter more to you than Safe 7’s additional features.

Safe 3: the trade-offs

In March 2025, Ledger Donjon published research on Safe 3 showing that voltage glitching—deliberately disrupting the microcontroller’s power supply—could bypass some authenticity and firmware integrity checks. The attack involves replacing the firmware before the device reaches its owner; the researchers did not demonstrate extraction of a PIN or seed from an initialized, locked wallet. Because the vulnerability lies in the microcontroller hardware, it cannot be fixed with a firmware update. Trezor explains that the attack does not affect Safe 5, which uses the newer STM32U5 microcontroller. Safe 7 also uses a microcontroller from that family.

Buy Safe 3 directly from the manufacturer or an authorized reseller, and complete the checks in Trezor Suite during setup. Pay attention to where the device comes from, since the demonstrated attack bypasses some of those checks. Safe 3 can be a more affordable first wallet or a backup device for the same wallet, provided you are comfortable with two buttons and a small monochrome screen that requires scrolling through long addresses.

Which model should you choose?

If you use an iPhone and want to sign transactions from your phone, whether for DeFi or while traveling, Safe 7 is the only current Trezor model that supports this.

For use with a computer or a wired Android connection, we recommend Safe 5 if you want a touchscreen. It uses a certified OPTIGA Trust M chip, costs less than Safe 7 and supports extra protection through microSD. It is our choice for most users who do not need to sign transactions from an iPhone.

Safe 3 works as a more affordable first wallet or a second device for the same wallet, as long as you take its hardware limitation into account and buy from a trusted seller.

If you only hold bitcoin, you can choose Bitcoin-only firmware during setup to exclude support for altcoins. You do not need a separate device, and the smaller codebase reduces the attack surface. We sell the multi-coin version of Safe 7, which also offers this choice when you install the firmware. You can switch back to Universal firmware, but switching wipes the device, so you will then need to restore your wallet from its backup.

If you hold a substantial balance, plan how you will store your backup and recover access. A metal backup, a strong passphrase stored separately and a tested recovery plan help preserve access if the device is lost or damaged. The 24-word Trezor Keep Metal is designed for a 24-word BIP39 backup. If you keep Safe 7’s default 20-word SLIP39 backup, choose a metal backup that supports that format; the 24-word Keep Metal version is not designed for it.

Where to buy Safe 7 in Ukraine

We sell the multi-coin version of Trezor Safe 7 with delivery across Ukraine, a 12-month warranty and help with setup.

If you choose another seller, check that they appear on Trezor’s official reseller list and inspect the device when it arrives. When ordering from trezor.io, allow for international shipping and any applicable customs charges.

Avoid used or repackaged devices and offers with no verifiable origin, including listings on OLX and other marketplaces. A hardware wallet’s supply history matters even if it looks new.

Setting up Safe 7 for the first time

The steps below cover the main setup process. Menu labels may change as Suite is updated, so refer to the official “Get started with the Trezor Safe 7” guide as you work through them.

1. Install Trezor Suite from the official page at trezor.io/start, or from the App Store or Google Play after checking the publisher. Follow the mobile app links on Trezor’s website to the relevant store listing to avoid downloading a counterfeit app.
2. Check the box and holographic seal over the USB-C port using the checklist in the next section.
3. Connect Safe 7 by cable or Bluetooth. For a wireless connection, check that the code on the device matches the one in Suite. Use Bluetooth on iPhone, as USB-C only supplies power.
4. Install the latest firmware offered by Trezor Suite. Safe 7 ships from the factory without firmware, so you choose either Universal or Bitcoin-only during setup. After installation and reconnection, enter the one-time code shown on Safe 7 when Suite asks you to confirm the secure connection. If a new device already has firmware or a configured wallet, stop setup and contact the seller.
5. Wait for the authenticity check to finish. Suite sends a random challenge, the device responds with cryptographic signatures, and the app verifies those signatures and the factory certificates. In current versions of Trezor Suite, this check covers both Secure Elements and Safe 7’s microcontroller. If the check fails, do not create a wallet.
6. Create a wallet and write down its backup. The box includes two blank 20-word cards for the standard Trezor backup (SLIP39); you can also choose 12 or 24 words (BIP39), or Multi-share Backup. Copy the words by hand from Safe 7’s screen, then confirm the words the device asks you to select. Do not photograph your backup or store it in cloud notes or a password manager.
7. Set a PIN of up to 50 digits. We recommend at least six digits, avoiding dates of birth, phone numbers and simple repeating patterns. Safe 7 wipes the wallet data after 10 incorrect attempts, so you will need your backup to recover access. TROPIC01 and OPTIGA each enforce the attempt limit independently.
8. Enable a passphrase only if you can store it securely, separate from the seed. It creates a hidden wallet that cannot be recovered with the seed alone if you forget the passphrase.
9. Before transferring your main balance, run Check backup on Safe 7 under Settings → Security → Check backup, entering the words only on the device’s screen. You do not need a connection to Suite for this check. Then use a small test transaction to check that the wallet works: verify the receiving address on the device, receive a small amount and send some of it back, checking the recipient address on the wallet’s screen again.

What to check when your device arrives

Before connecting it for the first time, inspect the device and box contents, whether you bought directly from trezor.io or from a reseller. If you notice signs of tampering or anything that differs from the official description, contact the seller before starting setup.

• The box is intact, with no signs of opening or resealing.
• The holographic seal over the USB-C port is present and undamaged. Removing it may leave a “VOID” mark, though this does not always remain on Safe 7’s aluminum case. If there is already a mark underneath the seal on a new device, or signs that the seal has been reapplied, it may have been removed before you received it.
• The screen has its protective film in place.
• The box contains the device, a USB-C → USB-C cable, two blank 20-word backup cards, the Get started guide, a security leaflet and stickers.
• On its first connection, the device prompts you to install firmware and passes the authenticity check in Trezor Suite.

Frequently asked questions

Is Trezor Safe 7 safe after the TROPIC01 vulnerability disclosure?

The published attack targets one chip and requires physical access, disassembly and specialist laboratory equipment. According to Trezor, even a successful compromise of TROPIC01 does not by itself expose the PIN, seed or funds, because two other independent protection layers remain. If a laboratory attack is a realistic concern for you, take the TROPIC01 vulnerability into account and use a strong passphrase stored separately from your backup.

Does Safe 7 work with iPhone?

Yes, through Bluetooth and the Trezor Suite mobile app. Safe 7 is the only current Trezor model that lets you sign transactions from an iPhone. When connected to an iPhone, USB-C is used only for charging.

Can I use Safe 7 without Bluetooth?

Yes. Disable Bluetooth in the settings and use USB-C with a computer or Android phone. You cannot sign transactions from an iPhone without Bluetooth.

What happens when the battery wears out?

If the battery no longer holds a charge, connect Safe 7 to a computer or Android phone by cable. The device will continue to work on USB-C power. Signing transactions from an iPhone still requires Bluetooth.

Is Safe 7 waterproof?

No. Its current IP54 rating covers limited dust protection and resistance to splashes. The device is not designed to be submerged, so use IP54 as your reference even if a review cites IP67.

Can I move my wallet from Safe 5 or Safe 3 to Safe 7?

Yes. Choose wallet recovery during Safe 7 setup and enter the words from your existing backup on the device’s screen. Safe 7 supports the same formats as Safe 3 and Safe 5. If you used a hidden wallet, you will also need the same passphrase. Once you have confirmed that recovery was successful, you can keep the old device as a backup or reset it to factory settings.

Does quantum-ready protect my bitcoin from quantum computers?

No. Safe 7’s post-quantum cryptography protects the boot process, firmware updates and device authentication. The quantum resistance of your coins depends on when and how their blockchains adopt post-quantum cryptography.

Further reading

• Best hardware wallets in 2026: which one should you choose? — a comparison of models from different manufacturers if you are still deciding on a device.
• How to store a seed phrase: 5 safe methods — how to choose a backup medium and store it securely.
• What is a seed phrase? — how recovery words relate to wallet access and what happens if you lose them.