Trezor Safe 3: review, security and initial setup

Set up your wallet in desktop Trezor Suite, from checking the packaging to backing up your wallet, setting a PIN and making your first transfer.

The steps below cover Trezor Safe 3 setup in desktop Suite: checking the device, creating and verifying a backup, setting a PIN and making a test transfer. We also explain passphrases, wipe codes, third-party wallets and multisig so you can choose the features you need and keep access to your funds.

This guide was checked against Trezor’s official documentation in October 2026. The instructions apply to desktop Suite and creating a new wallet; menu options and button labels match the English interface.

Trezor Safe 3 at a glance

The Trezor Safe 3 is the entry-level model in the Safe range, which also includes the Safe 5 and Safe 7. It measures 59 × 32 × 7.4 mm, weighs 14 g and has a 0.96-inch monochrome OLED screen with a resolution of 128 × 64 pixels, two physical buttons and a USB-C port. There is no battery or Bluetooth: a cable connected to a computer or Android phone supplies power and transfers data. Trezor is part of the Prague-based SatoshiLabs group, and its firmware is open source for independent review.

Unlike the Model One and Model T, the Safe 3 has a separate Infineon OPTIGA Trust M Secure Element with CC EAL6+ certification under the Common Criteria standard. The data needed to reconstruct private keys is stored encrypted on the main microcontroller. The Secure Element protects the secret needed to decrypt that data and limits PIN attempts. Because the main microcontroller signs transactions, the EAL6+ certification applies to the Secure Element, not to the wallet as a whole.

Universal or Bitcoin-only

The multicurrency Universal firmware supports Bitcoin, Ethereum and compatible EVM networks, Solana, Cardano, XRP, Tron and other assets. The Safe 3 can also act as a FIDO2/U2F security key for account sign-ins. Check support for a particular coin and how to use it in Trezor’s coin catalog: some assets require a third-party app.

Bitcoin-only firmware is designed for bitcoin. It contains less code for other networks, reducing the attack surface. Consider it if you use only BTC or are setting up the Safe 3 as one of the keys in a Bitcoin multisig wallet. Other cryptocurrencies require Universal firmware.

Who the Safe 3 is for

The Safe 3 can serve as a first hardware wallet for long-term storage, a dedicated bitcoin device or an additional key in a multisig setup. Two buttons and a small screen are usually sufficient for occasional transfers. If you approve many DeFi operations every day, the touchscreens on the higher-end models will be more convenient.

You cannot sign transactions with a Safe 3 through an iPhone. Trezor Suite for iOS lets you view imported accounts and receiving addresses, but signing with this model requires a computer or Android phone. If you plan to use only an iPhone, consider the Safe 7 with Bluetooth.

The security section covers a physical attack on the Safe 3’s microcontroller that requires access to the device and specialized equipment. If you are concerned about a wallet being secretly replaced or modified, compare the models’ hardware protection in “Which Trezor to choose: Safe 3, Safe 5 or Safe 7?”.

What to prepare before setup

Allow about an hour for initial setup, checking your backup and making a test transfer. Waiting for blockchain confirmations may take longer, depending on the network and fees. Set up the device without rushing so you can record the words carefully and verify the backup before adding funds.

• A computer running Windows, macOS or Linux. This guide uses desktop Trezor Suite. The Safe 3 also works with Android over USB-C, but the interface layout differs.
• The USB-C–USB-C cable supplied with the device. If your computer has only USB-A ports, prepare a suitable adapter or a cable that supports data transfer. Suite will not recognize the device through a charge-only cable.
• A pen and a blank backup card. Two cards are included. Write clearly and avoid corrections that could be difficult to read later.
• A place where cameras cannot capture the words. Check where your webcam, security cameras and any other cameras are pointing.
• A metal backup, if you plan to use one. Check in advance that it supports your chosen standard and word count.
• A small amount of cryptocurrency for testing. The equivalent of $5–20 is a useful starting point, provided it covers the exchange’s minimum withdrawal and the fees for both transfers.

Once setup is complete, you will have a wallet with a verified backup and PIN. The test transfer will show you how to receive funds and approve sending them on the Safe 3’s screen. Passphrases and wipe codes are optional: you can return to them once you are comfortable with the basic steps.

Step 1. Check the contents and security seal

The Safe 3 box may be wrapped in clear plastic or plastic with watermarks. There is no separate seal on the box; the holographic seal covers the USB-C port on the device itself. The seal design varies between batches, so a difference from a review photo does not by itself indicate a counterfeit.

1. Inspect the seal before removing it. It should be intact and firmly attached to the case. Tears, signs of reapplication or adhesive residue underneath it should be checked by the seller or Trezor Support.
2. Check the contents. The box should contain the Safe 3, a USB-C–USB-C cable, two blank backup cards, a Get started guide, a safety leaflet and stickers. Cards from early batches may be labeled recovery seed and have spaces for 12 words; newer cards may say wallet backup and have spaces for 20 words.
3. Make sure the cards are blank. Prewritten backup words or a preset PIN in the box are reasons to stop setup: you must create the new wallet yourself.
4. Remove the seal and protective film from the case. The hologram may leave VOID marks when removed, which is part of its design. A slightly rough spot where the plastic was molded does not, on its own, indicate that the case has been opened.

Why a new Safe 3 ships without firmware

A new Safe 3 ships with only a bootloader; you install the firmware through Suite during initial setup. If a new device already has firmware, asks for a PIN or opens an existing wallet, stop setup and ask the seller about its origin. Resetting the device is not a substitute for checking it.

After firmware installation, Suite checks authenticity using the Secure Element, while the bootloader verifies the firmware’s digital signature. These checks complement inspecting the package and verifying where the device came from. The security section explains which checks Ledger Donjon researchers bypassed during a physical attack.

Step 2. Install Trezor Suite and the firmware

Download Trezor Suite from trezor.io/start, checking the address in your browser. Search ads can lead to fake websites, and software called Trezor Suite may turn out to be a malicious copy. When recovering or checking a backup on the Safe 3, you enter the words using the device’s buttons, not a field on your computer.

1. On your computer, download Suite for your operating system, install it and open it. If the app offers to send diagnostic data, choose whether to allow it.
2. Connect the Safe 3 with a USB cable. On the device security check screen in Suite, click Set up my Trezor.
3. Choose the firmware type. For multiple cryptocurrencies, use Standard/Universal. If you use only bitcoin, you can choose Bitcoin-only. Click Install firmware.
4. Wait for installation to finish. Do not disconnect the cable; the Safe 3 will restart when installation is complete. If the device asks for confirmation, follow the instruction on its screen.

Check the device’s authenticity

5. Run the authenticity check. When Suite prompts you to begin, click Start and follow the instructions on the Safe 3. Continue to wallet creation only after the check succeeds. If it fails, stop setup and contact support.
6. Complete the Know your Trezor tutorial. The left and right buttons let you move between options, while pressing both together usually confirms a selection. Also check the labels above the buttons: some dialogs need only one button to confirm. After the tutorial, click Continue in Suite.

As of 28 October 2026, the official release list for the Safe 3 shows firmware 2.13.0, released on 21 October. During setup, install the current official release offered by Suite. You can check its version and date in the Trezor firmware changelog.

Updates fix security issues and add features. In its 2026 releases, Trezor changed checks for Ethereum, Bitcoin and Solana data and expanded Clear Signing support. Before updating an already configured device, make sure you have a verified backup.

Step 3. Create a wallet and choose a backup format

In Suite, click Create a new wallet. If you are restoring an existing wallet from your backup, choose Recover instead; the steps below cover creating a new one.

A backup lets you regain access if the device is lost, damaged or wiped. The format you choose affects compatibility with other wallets and whether you can split the backup into shares.

If you are moving from a software wallet, create a new wallet with a new backup on the Safe 3 and transfer your funds to it. Importing an old seed phrase does not remove the risk that someone has already copied it from your phone or computer. Our guide to moving from Trust Wallet or MetaMask to a hardware wallet explains the transfer process.

Single-share: one list of 20 words

Single-share in SLIP39 format is the default for newer Safe 3 batches. One list of 20 words is enough to recover the wallet; if you add a passphrase, you also need it to access the corresponding hidden wallet. Devices from early batches may default to 12 words, but you can change the format before creating the wallet.

SLIP39 lets you later create a Multi-share Backup for the same wallet without transferring funds. The previous Single-share Backup remains valid: it can still recover the wallet without the new shares. Keep that old record secure as well.

Multi-share: several shares and a recovery threshold

With Multi-share, the backup consists of several separate word lists, called shares. You choose the number of shares and the threshold: in a 2-of-3 setup, for example, any two shares are enough to recover the wallet, while one is insufficient. For a 20-word backup, each share also contains 20 words and forms a separate mnemonic list, rather than a section cut from the original backup.

You can keep the shares in different places or distribute them among trusted people, with instructions for your family. Recovery requires the number of shares set by the threshold: in a 2-of-3 setup, you can lose one share, but cannot recover the wallet without two of the three.

BIP39: 12 or 24 words

BIP39 is supported by many hardware and software wallets, including Ledger, Keystone and BitBox. It is a suitable choice if compatibility with other manufacturers is your priority. Recovery also depends on support for the networks, account types and passphrase you use, so an identical word count does not mean all features are fully compatible.

For a straightforward first setup, you can leave the default 20-word Single-share Backup selected. To use BIP39 or create a Multi-share Backup immediately, select the appropriate option under Wallet backup type / Backup format before confirming wallet creation.

How Multi-share differs from multisig

Multi-share distributes the backup, while a single configured Safe 3 still signs everyday transactions. Someone who has the device, its PIN and the required passphrase can transfer funds without collecting backup shares.

With multisig, a transfer needs signatures from several independent keys. Multi-share shares are combined when recovering one wallet, whereas multisig participants approve each transaction separately.

Step 4. Write down and confirm your backup

After choosing the format, click Create wallet and confirm creation on the Safe 3. The device creates the wallet using its own random data and additional entropy from Suite. The backup words appear on the Safe 3’s screen and are not sent to your computer.

Record your backup

1. In Suite, click Continue to wallet backup, read the storage instructions and check the relevant acknowledgment boxes. Then click Create wallet backup.
2. On the Safe 3, read the warnings and start viewing the words. Write each word clearly in block letters next to its number, checking the spelling against the screen.
3. Check your written record again. Use the device’s buttons to return to earlier words if needed. If corrections could be difficult to read later, make a clear copy without changing the words or their order.

Confirm the words you recorded

4. Complete the check on the device. The Safe 3 will ask you to select several words from the options shown. Find them in your written record and confirm the correct answers.
5. For Multi-share, repeat the recording and verification process for each share. Label the shares so the lists cannot be mixed up, then store them separately according to your chosen threshold.

Keep the card separate from the Safe 3 so that theft or damage affecting one does not also affect the other. The short word check during creation helps catch obvious mistakes; after setting a PIN, we will verify the entire record using a separate function.

When to move your backup to metal

A paper card works for the initial record, but water, fire or prolonged storage in a damp place can damage it. For long-term storage, consider a metal backup, checking the material’s durability and support for BIP39 or SLIP39.

For example, Cryptotag Loki supports both standards and holds up to 24 words. Each share in a Multi-share Backup needs its own backup medium. Check the layout against your words before marking it, then verify the entire record afterward. Other options are covered in “How to store a seed phrase: 5 safe methods in 2026”.

Step 5. Set a PIN and add the coins you need

After you record the backup, Suite will offer to set a PIN. On the Safe 3, you enter it with the device’s buttons, so your computer does not receive the digits you enter.

1. In Suite, click Set PIN.
2. On the Safe 3, confirm that you want to set a PIN. Move between digits with the left and right buttons, pressing both to select a digit. Follow the screen instructions to finish entering the PIN.
3. Enter the same PIN again to confirm it, then wait for the success message.

A PIN can contain 4 to 50 digits. For everyday use, we recommend 6–8 random digits that you can remember and enter reliably. Avoid birthdays, phone numbers and sequences such as 123456 or 111111.

After 16 incorrect attempts, the Safe 3 erases its wallet data. The Secure Element limits attempts to guess the PIN. To regain access after a wipe, you need the correct backup and the passphrase if you used one. If you have forgotten the PIN, do not waste attempts on random guesses.

Finish the initial setup

After setting the PIN, Suite will display You’re all set. Click Go to Dashboard to open the wallet’s main screen, where you can add the coins and networks you need.

Add coins and networks

1. On Suite’s main screen, click Get started under Start using your wallet.
2. In the Add your networks window, enable the networks you need, such as Bitcoin. For the first test, you only need the network you plan to use.
3. Click Confirm to apply your selection. If you need another network later, you can enable it in Suite’s settings.

Step 6. Verify your backup before adding funds

The Check wallet backup function compares your written record with the data on the Safe 3 without erasing the current wallet. Run this check before your first deposit to catch any incorrect words or mistakes in their order.

1. Connect the Safe 3, open Suite and unlock the device with your PIN.
2. In Suite, go to Settings → Device → Wallet backup and click Check wallet backup. Read the explanation in the dialog, check I understand and click Start.
3. On the Safe 3, confirm the check, enter your PIN if requested and choose the word count.
4. Enter every word using the Safe 3’s buttons in the order you recorded them, following the prompts to select each word. For Multi-share, enter enough shares to meet your recovery threshold.
5. Wait for the result. A successful check means your written record matches the wallet backup on the device. Close the dialog in Suite and return to the main screen.

If the check fails, review the words and their order, then repeat the check in case you made a mistake while entering them. Do not wipe the device until you are sure you have a correct backup. If the wallet already holds funds and you cannot verify the record, first move them to another wallet whose backup you have verified. See Trezor’s Safe 3 instructions for the full procedure.

To leave the check without a successful result, press the left button on the Backup check screen. On the next screen, scroll down with the right button, then select Cancel by pressing the right button beneath that label. Leaving the check does not erase the wallet.

Continue to check that your backup remains accessible and in good condition, particularly before a firmware update, device reset or change in storage arrangements. Do not enter the words simply because an email, website or someone in a messaging app asks you to.

Step 7. Set up a passphrase if you need one

A passphrase is an extra secret used with your backup to derive a separate wallet. Each unique passphrase produces different addresses, while the standard wallet without a passphrase remains available. The phrase is not stored in the Safe 3’s permanent memory, so you need to enter it again for a new session.

A sufficiently strong passphrase makes it harder to steal funds if someone finds your backup: without it, they can open only the standard wallet. However, someone with the backup can test passphrase guesses outside the device, where the PIN attempt limit does not apply. Choose random words or characters rather than a familiar quote, name or date, and keep an exact record separate from your backup.

Enable passphrases and create a hidden wallet

1. Connect and unlock the Safe 3. In Suite, go to Settings → Device, find Passphrase and enable Use Passphrase wallets. Confirm the change on the device if prompted.
2. Open the wallet menu at the top left and choose + Passphrase wallet → New passphrase. Read the explanation and click Got it.

Enter and confirm your passphrase

3. Select Enter passphrase on Trezor. Entering it with the Safe 3’s buttons takes longer, but keeps it off your computer, where malware could capture it.
4. Enter the passphrase on the device, selecting characters as instructed. Check the displayed text and confirm it.
5. When Suite asks you to enter it again, select entry on Trezor once more and type the same passphrase. Check and confirm it on the device. If you see Passphrase mismatch, start the entry process again.
6. Wait for the Passphrase wallet to open. A new wallet will be empty. You can switch between it and Standard wallet in the wallet menu.

Check that you can reopen the wallet

In the hidden wallet, open the first account for the coin you want to use, go to Receive and use Verify to display the address on the Safe 3. Save this public address for comparison, noting the coin and account. Then click Eject for both wallets in Suite’s menu, disconnect the device and reconnect it.

Open + Passphrase wallet → Open previously used and enter the passphrase from your written record. On the same account, display the address on the Safe 3 again and compare it with the saved address. If they match, you have opened the correct wallet and can make a small test transfer.

Some people keep a small amount in the standard wallet and their main holdings in a hidden one. Relying on this for protection against physical coercion is risky, because you cannot predict an attacker’s response. A passphrase also cannot protect against firmware capable of intercepting it as you enter it. If an extra secret makes storage too complicated for you at this stage, start with a PIN and a verified backup.

Step 8. Receive and send a test amount

A small amount of BTC is convenient for the first test: unlike a token transfer, it does not require a separate balance of another coin to pay the fee. Before starting, check the exchange’s minimum withdrawal and deposit amounts, and allow for the fees on both transfers.

Receive funds

1. Open the wallet you want to use in Suite — Standard wallet or the Passphrase wallet you have verified. Select the Bitcoin account and click Receive.
2. Click Verify to display the address on the Safe 3. Review the entire address, moving between its sections as instructed on the device.
3. Copy the address into the withdrawal form on the exchange or in another wallet you own. Select the Bitcoin network and a small amount. Before the final confirmation, compare the address actually pasted into the form with the Safe 3’s screen again: the address may be replaced after you copy it.
4. Confirm the withdrawal and wait for the transaction to appear in Suite. It may initially be unconfirmed; once it is included in a block, Suite will show a confirmation.

Compare the entire address. Attackers can choose similar starting and ending characters so that a substituted address is easy to miss during a quick check.

If you test with USDT, the network selected on the exchange must match the selected account’s network. For example, USDT on Ethereum uses an Ethereum account address. Sending a token back requires the coin used to pay that network’s fees, such as ETH on Ethereum. The same USDT name on different networks does not make the tokens interchangeable. If the tokens are already in your account but you cannot send them, check the reasons USDT cannot be sent from a wallet.

Send part of the amount back

1. Open the exchange’s deposit page and obtain the current Bitcoin deposit address for your account. Do not copy it from your transaction history, where an attacker’s similar-looking address could appear.
2. In Suite, open the Bitcoin account and click Send. Paste the deposit address, enter the amount and review the suggested fee. Leave enough funds to cover the fee and account for the exchange’s minimum deposit.
3. Click Review & send and review the transaction on the device.
4. On the Safe 3, compare the recipient address with the address on the exchange’s deposit page, and check the amount and fee. Sign only if all details match. If anything differs, cancel the transaction and check your computer.
5. After signing, click Send in Suite to broadcast the transaction. Wait for confirmation and for the deposit to be credited on the exchange.

This tests that you can receive funds at your address and send them with approval on the Safe 3. For the next BTC payment, Suite will offer a new address for the same account. Using a different address for each payment improves privacy. Previously used addresses remain valid for receiving funds. See our explanation of why your Bitcoin address changes after a transfer for more detail.

Wipe code: an optional way to erase wallet data

A wipe code erases the wallet data as soon as it is entered instead of the PIN, without further confirmation. It can be used to clear the device quickly, but is easy to misuse, so enable it only after successfully checking your backup.

1. In desktop Suite, go to Settings → Device → Danger Area and choose Set up wipe code. A PIN must already be set on the device.
2. On the Safe 3, confirm activation with Turn on and enter your current PIN.
3. Choose a separate wipe code, enter it again and finish setup by selecting Continue on the device.
4. Check the result in Suite. The message Wipe code changed successfully confirms that the code is set. Options to change or remove it will appear in the same section.

To disable the feature, select Remove wipe code, confirm removal on the Safe 3, enter your normal PIN and finish the process. You do not need to enter the wipe code itself. Wipe code setup is not available in mobile Suite.

After a wipe code is used, the device displays an erasure message, so this method cannot hide the fact that the data was cleared. Trezor’s official wipe code instructions cover setting, changing and removing the code.

Third-party wallets and DeFi

You can connect the Safe 3 to third-party apps while keeping private keys on the device. MetaMask and Rabby are used for EVM networks and DeFi; Sparrow and Electrum offer more advanced Bitcoin features, including management of individual UTXOs, connecting to your own node and multisig.

Connecting a hardware wallet does not require importing its backup into the app. Choose the hardware wallet connection option in the third-party app. It receives public data to display addresses and balances, and can send transaction signing requests to the device. Check that the integration supports your platform and the current app version.

Clear Signing and reviewing requests

When you interact with smart contracts, the device cannot always display the action in a readable form. Signing after seeing only a hash or raw data is known as blind signing.

Clear Signing displays the action, token, amount and address for supported contracts on Ethereum and EVM networks. Trezor uses contract descriptions in ERC-7730 format. The feature works through compatible Suite, WalletConnect and Trezor Connect integrations. There is no separate switch to enable it, but it requires current firmware and support for the particular contract.

If a contract description is unavailable, the device may show a blind signing warning. Before approving, check the website and what the request will do, especially if it is an approve request granting a contract permission to spend tokens. An unlimited approval can remain active after a single operation has finished. A readable description helps you assess the request, but you still need to decide whether you want that action. Our article on approve, Permit and WalletConnect permissions explains how to review and revoke these rights.

Multisig: what it is and when to use it

A multisig wallet requires signatures from several keys to spend funds. The arrangement is written as m-of-n: a 2-of-3 wallet, for example, has three independent keys and any two can approve a transaction. Keep the keys on separate devices and make a backup for each.

If one device and its backup are lost, the other two keys can still transfer the funds. Stealing one key does not let an attacker spend them, and you retain access if you have the remaining keys and the shared wallet’s configuration. After a key is lost or compromised, move the funds to a new multisig wallet with new independent keys while you can still provide enough signatures.

Bitcoin supports multisig at the protocol level, and the Safe 3 can be one of the signers. Trezor Suite does not create Bitcoin multisig wallets: you need a coordinator such as Sparrow, Electrum or Nunchuk. It collects participants’ extended public keys, or xpubs, generates shared wallet addresses and sends the transaction to the required devices for signing.

On EVM networks, multisig is usually implemented through a smart contract, such as Safe{Wallet}. A Safe 3 can control one of its signers’ keys, but creating and recovering this type of wallet differs from Bitcoin.

When the extra complexity is justified

Multisig is useful when you need to share control over funds or reduce dependence on a single secret. Typical situations include:

• Personal savings that should not depend on one key. You are prepared to use several devices, store their backups separately and test whether you can recover access.
• Funds shared by business partners or a family. A transfer should require several people’s consent so that one person cannot spend everything alone.
• Planning access for heirs. Keys are distributed so that, under specified circumstances, your family can gather enough signatures by following clear instructions.

For a sole owner who needs a simpler storage arrangement, a Safe 3 with a verified backup and, if required, a passphrase may be more convenient. Before choosing multisig, consider your risks and whether you can reliably store several keys and use them to recover access. There is no universal amount above which everyone needs multisig.

What to keep for recovery

Backups of the individual keys may not be enough to recover multisig. You also need the wallet configuration: all participants’ public keys, the signature threshold, address type and derivation paths. Compatible apps save this as a wallet descriptor or an equivalent export file.

If one key in a 2-of-3 setup is lost and that participant’s public data was never saved, the two remaining private keys may not be enough to reconstruct the addresses. Keep copies of the configuration with each participant’s backup materials, and record the app and wallet type used. A descriptor alone cannot spend the funds, but exposes addresses and transaction history, so keep it private.

Using a Safe 3 as one of the signers

A Safe 3 running Bitcoin-only firmware can be used in multisig with devices from other manufacturers, such as Keystone 3 Pro or Ledger, provided the coordinator supports all the models. When keys are generated independently, a flaw in one manufacturer’s firmware does not automatically compromise the other devices.

Each device in the setup must have an independent key. Restoring the same backup on three devices creates three copies of one key and does not provide the intended distribution of control. Before funding the multisig wallet, check its configuration and confirm that you can sign a transaction through your chosen coordinator.

Safe 3 security: known risks

What Ledger Donjon’s research showed

In March 2025, Ledger Donjon published its findings on the Safe 3. With physical access to the device, researchers used voltage glitching (brief disruptions to the supply voltage) to bypass the microcontroller’s memory protection and demonstrate modified firmware that evaded some Suite checks.

An attack of this kind could be used to modify a device before it reaches its owner. The research did not demonstrate extraction of private keys or the PIN from an owner’s protected device. Trezor confirmed the findings and noted that the Safe 5 uses a newer microcontroller that is not affected by this attack. See Trezor’s response to the Safe 3 evaluation and Ledger Donjon’s article for details.

Software updates and Suite checks add layers of protection, but do not change the microcontroller’s physical properties. When using a Safe 3, follow these precautions:

• Buy through official channels. Inspect the package and seal, make sure the device has no preinstalled firmware, and complete Suite’s checks during setup.
• Restrict other people’s access to the Safe 3. If you have reason to suspect replacement or tampering with the case, stop using the device and contact support from a trusted computer.
• Understand the limits of a passphrase. Malicious firmware could capture the phrase you enter to open the wallet.
• Consider physical protection when choosing a model. The Safe 5 has a newer microcontroller that is not affected by the demonstrated attack. Multisig with independent keys limits the consequences of one device being compromised.

Phishing in Trezor’s name

Scammers send Trezor owners emails and messages asking for backup words under the pretext of an update or security check. Such messages may contain genuine personal details or arrive through a compromised email service.

In August 2026, Trezor reported a breach at its logistics partner ShipMonk, involving customer names, shipping addresses, phone numbers and email addresses. In September, the company clarified that the breach also affected around 67,000 US customers who placed orders in 2019–2021.

On 9 September 2026, attackers used Trezor’s Brevo account to send phishing emails. Around 347,000 subscribers received a message about a supposed critical STM32 vulnerability, linking to software that asked for their backup. According to Trezor’s statement, the domain was blocked within about 20 minutes, but around 2,500 people had already followed the link. The incident affected the email service; it did not compromise the devices or expose wallet backups.

Even when a message comes from a familiar address, assess what it asks you to do:

• Do not enter your backup on a website, in computer software, an email or a messaging app. With the Safe 3, you enter the words on the device itself during recovery or a backup check you initiated.
• Check for updates in the genuine Suite app. A link in an email to a separate “verification utility” is not part of the normal update process.
• Do not share secrets with someone claiming to be support. Contact Trezor through its official website, opening it yourself. An offer to “help” in a private message does not prove that the sender works for the company.

Our article “Crypto phishing: why an email from a legitimate domain can still be fake” explains how to assess these messages and what to do after following a link.

Updates and device storage

Read the changelog before installing new firmware and apply security fixes promptly. Before updating, check that you can access your backup and passphrase, if you use one. Your backup records must remain legible and accessible regardless of the Safe 3’s condition.

Keep the device somewhere others cannot secretly take or replace it. The PIN and Secure Element protect against attempts to gain access, but you still need to control physical access to the device. Before moving home, taking a long trip or starting repairs, plan separate storage for the device and backup so that one incident cannot cause you to lose both.

Common problems after setup

The wallet is empty after entering a passphrase

First check the exact passphrase and enabled networks. Any difference in characters, capitalization or spaces opens a different wallet. A zero balance can also mean that the required account or network has not been added. Enter the phrase from your written record, open the same account type and compare the address with a known receiving address.

Do not reset the device in an attempt to restore the balance. For the checks to follow, see “Trezor passphrase wallet is empty: why it happens and how to find your coins”.

An exchange withdrawal arrived on a different network

First look up the transaction ID in a blockchain explorer and check which network was used and which address received the funds. If a token arrived on Arbitrum instead of Ethereum, for example, at the same EVM address you control, you can often regain access by opening that network in Suite or through MetaMask or Rabby with your Trezor connected.

Whether recovery is possible depends on the networks, asset and who controls the address. Do not import your backup into random “recovery” services. If the mistake involves a deposit to an exchange, contact its official support. For an address you control, check compatibility in Trezor’s documentation.

You installed a fake Trezor Suite

If you only connected the Safe 3, did not enter a backup and did not approve requests, the connection alone is not enough to conclude that your keys were stolen. Remove the fake app, check your computer and install genuine Suite from the official website. It is better to check the wallet using a different, trusted computer.

If you entered your backup words on a computer, treat them as compromised. From a different, trusted computer, move the funds as soon as possible to a wallet you control with a different, verified backup, or to your secure exchange account. Do not use a “safe address” supplied by another person or a suspicious app. After the transfer, create a new wallet with a new backup. Changing the PIN will not revoke access through a stolen backup.

If you approved a suspicious transaction or granted a contract permission, check the consequences of that action. Funds may be at risk because of what you signed or the permissions you granted, even if your backup was never exposed.

You forgot the PIN

If you forget the PIN, you need to enter bootloader mode to reset the Safe 3. Before doing so, make sure you have a correct backup and the required passphrase. Without them, you cannot recover access after the wipe.

1. Open Suite and connect the Safe 3 with the cable while holding the device’s left button to start bootloader mode.
2. On the Safe 3, press the right button to open Menu, select Factory reset and press both buttons.
3. Confirm RESET with the right button. This removes the wallet data, settings and firmware. After the completion message, disconnect the device and reconnect it.
4. In Suite, install the official firmware and choose Recover wallet from backup. Enter the backup words using only the Safe 3’s buttons, set a new PIN and, if you used a hidden wallet, open it with the same passphrase.

The procedure is described in Trezor’s Safe 3 reset instructions. If you know the PIN and simply want to clear the device, there is a separate Wipe device option under Settings → Device → Danger Area that leaves the installed firmware in place. Do not confuse it with Factory reset in bootloader mode.

Another wallet will not accept 20 words

Check that it supports SLIP39, not just BIP39. A 20-word backup must be restored in a compatible wallet, preserving every word and its order. Multi-share also requires enough shares to meet the threshold. Do not remove words to make a list of 12 or add words to reach 24. Our guide “Recovery phrase is invalid: why your wallet won’t accept your seed phrase” covers other reasons recovery may fail.

What to do next

After a successful backup check and test transfer, the Safe 3 is ready to use. Review the details on its screen before every transaction, and keep your backup materials separate from the device. If you added a passphrase, keep an exact record and make sure you can reopen the correct wallet.