Which Trezor to choose: Safe 3, Safe 5 or Safe 7?

A comparison of Trezor models for desktop, Android and iPhone users. Updated for October 2026.

Trezor’s current range includes three models: the Safe 3, released in October 2023; the Safe 5, introduced in June 2024; and the Safe 7, launched in October 2025. They share many core features but differ in their screens, connectivity and hardware security. Some differences affect every transfer you make, while others matter in sophisticated physical attacks or address potential future threats.

To decide which Trezor to choose, we’ll compare the Safe 3, Safe 5 and Safe 7 in terms of usability and security. This will help you work out which features are worth paying more for and whether to replace a device you already own.

Trezor Safe 3, Safe 5 and Safe 7 at a glance

What all three models have in common

All three models include an EAL6+-certified Secure Element, open-source firmware, PINs of up to 50 digits and passphrase support. You therefore get the core key protection features even with the Safe 3. The differences between models are best assessed against how you plan to use your wallet.

• Wallet backup. All three support 12-, 20- and 24-word backups, as well as Multi-share Backup, which splits the backup into several shares. You choose how many shares will be needed for recovery.
• Trezor Suite. All three devices work with the app on Windows, macOS, Linux and Android. You need a Safe 7 to connect to an iPhone and sign transactions from it.
• Privacy. In the desktop version of Suite, you can enable Tor to hide your IP address and use coin control to select which previously received amounts of bitcoin to spend in a new transaction.
• Authentication. With universal firmware, you can use your Trezor as a FIDO2 security key to confirm sign-ins on compatible websites.

Private keys stay inside the device, and you approve transactions using its buttons or touchscreen. This protects the keys from malware on a connected computer. However, no model can stop a transfer you approve to a scammer, so you still need to check the address and transaction details on whichever Trezor you use.

Safe 3 or Safe 5: is the touchscreen worth the extra cost?

Screen and passphrase entry

The most noticeable difference between the Safe 3 and Safe 5 is the screen and how you enter information. The Safe 3 has a 0.96-inch monochrome OLED display and two buttons, which are sufficient for approving an ordinary transfer. However, you have to scroll through a long address in sections and enter a passphrase on the device one character at a time, selecting each character with the buttons. Longer passphrases take more time to enter.

The Safe 5 has a 1.54-inch colour touchscreen, Gorilla Glass 3 protection and haptic feedback when you tap. It can show more information at once and provides an on-screen keyboard for passphrase entry. If you frequently check addresses or use a passphrase, touch controls make these tasks noticeably easier.

A passphrase is an additional password that, together with the words in your wallet backup, gives you access to a separate hidden wallet. All three models support it, but entering it with buttons takes longer on the Safe 3. That may be acceptable for occasional transfers, while a touchscreen is more convenient for daily use.

The microcontroller and physical attacks

Alongside the Secure Element, the wallet has a microcontroller: the main chip responsible for the interface, running the firmware and performing cryptographic calculations. This was the target of Ledger Donjon’s attack on the Safe 3, with findings published in March 2025.

With physical access to the device and specialised equipment, the researchers bypassed some of its authenticity and firmware integrity checks. They did not extract private keys or the PIN. Trezor describes this as a possible way to modify a device before it reaches the buyer.

The Safe 5 uses a newer STM32U5 microcontroller, which is not affected by this attack. On the Safe 3, the issue stems from the chip’s hardware design, so a firmware update cannot fix it. Buy from a trusted seller and complete the authenticity check in Trezor Suite during initial setup.

What the microSD slot is for

The Safe 5 has a microSD slot for the optional SD Protect feature. When enabled, it writes random data to the card that is required to unlock the device. Without that card, the device will not unlock even with the correct PIN. Setup requires the command line and the trezorctl utility, so the feature is primarily suited to experienced users.

Keep the card separate from the device. If it is lost or damaged, you can recover access using your wallet backup. Neither the Safe 3 nor the Safe 7 has a microSD slot.

What the Safe 7 adds over the Safe 5

Bluetooth and iPhone support

The Safe 7 was the first Trezor with Bluetooth. On Android, wireless connectivity removes the need for a cable, although the Safe 3 and Safe 5 also work with Trezor Suite over USB-C. The difference matters more for iPhone users: of these three models, only the Safe 7 lets you sign transactions from your phone. The Safe 3 and Safe 5 cannot connect to an iPhone, but Trezor Suite on iOS lets you view the balances of their previously added accounts and receive funds into them. For device setup, sending funds and swapping assets, you will need a computer or an Android phone.

The connection between a Safe 7 and your phone or computer is protected by the open-source Trezor Host Protocol (THP), which encrypts commands over both Bluetooth and USB-C. Signing a transaction also requires confirmation on the wallet’s own screen, so intercepting the wireless signal alone is not enough to move funds on your behalf.

If you do not need wireless connectivity, you can disable Bluetooth in the settings and use USB-C. The Safe 7 does not have NFC: wireless charging is a separate feature and does not imply NFC support.

Battery and wireless charging

The Safe 7 has a 330 mAh LiFePO₄ battery and supports charging from compatible Qi2 chargers. According to Trezor, this battery offers up to four times as many charge cycles as conventional lithium batteries and can safely be fully discharged. If the battery eventually fails, you can still use the wallet over USB-C without replacing it.

The Safe 7’s operating temperature range is 0 to +45 °C, compared with −20 to +60 °C for the Safe 3 and Safe 5. Keep this in mind if you often carry the device outside in winter or leave it in a car. These figures apply while the wallet is operating; check the manufacturer’s instructions for long-term storage conditions.

A larger screen and body

The Safe 7 has a 2.5-inch screen with a resolution of 520 × 380 pixels and a brightness of 700 nits. It is larger than the Safe 5’s 1.54-inch display and shows more transaction information, while the higher brightness makes it easier to read outdoors. The aluminium body has an IP54 rating for dust and splash protection, which does not cover immersion in water. The device is also noticeably larger than the Safe 5 and weighs 45 g rather than 23 g.

The Safe 7’s additional security: what you need to know

Three chips and PIN protection

On the Safe 5, PIN protection relies on an EAL6+-certified OPTIGA Trust M Secure Element and an STM32U5 microcontroller. The Safe 7 adds TROPIC01 from Tropic Square, a company within the SatoshiLabs group. Each of the three chips comes from a different manufacturer and holds its own secret data; checking the PIN requires data from all three. Private keys and the seed phrase are not stored on TROPIC01. After 10 incorrect PIN attempts, the Safe 7 resets to factory settings; on the Safe 3 and Safe 5, this happens after 16 attempts. Wallet data on the device is erased, but you can recover access to your funds using the backup.

TROPIC01’s distinguishing feature is its open architecture. Researchers can examine published details of the chip’s design and its firmware code without signing a non-disclosure agreement. Access to this material is restricted for most Secure Elements, making independent auditability an important difference.

What the TROPIC01 vulnerability means

In 2026, Ledger Donjon examined standalone TROPIC01 chips and showed how a deliberately induced laser fault could bypass firmware signature verification and allow custom code to run. This was a laboratory audit of a component, not a demonstration of a complete Safe 7 being hacked.

Performing such an attack on a chip inside a wallet requires physical access, disassembly and specialised equipment. Once power is removed, the laser attack must be repeated to run the malicious code again. Trezor therefore explains that the method cannot be used to prepare a persistently modified device for substitution before sale.

According to Trezor, compromising TROPIC01 could expose one of the three sets of secret data used for PIN protection and some of the material used to verify authenticity. An attacker would still need to defeat the protection of OPTIGA and STM32U5 and brute-force the PIN before gaining access to the wallet data. A firmware update cannot remove the hardware cause of this vulnerability; Tropic Square is preparing changes for the next chip version.

What “quantum-ready” means

The “quantum-ready” label Trezor uses for the Safe 7 refers to protection of the device’s internal processes. Firmware signatures are verified using the post-quantum SLH-DSA-128 scheme, while device authentication uses ML-DSA-44. These algorithms are intended to resist attempts to forge digital signatures using future quantum computers.

Protecting the device does not make Bitcoin or Ethereum resistant to quantum attacks. The security of the coins depends on the cryptography of their respective blockchains, which have not yet adopted post-quantum signatures. Support for new algorithms would also need to be added to the wallet’s firmware, and whether an update could provide it would depend on future standards and the device’s resources. When choosing a Safe 7 today, focus primarily on the screen and connection options: “quantum-ready” describes protection for specific internal processes.

Do you need a Bitcoin-only version?

Each model is available in a Bitcoin-only version with the same components but firmware that supports only Bitcoin. On a standard Trezor, you can select this firmware during initial setup in Trezor Suite or install it later through the device settings. Coins on other networks remain at the same addresses, but you cannot manage them through the device while it runs Bitcoin-only firmware. To use them again, you need to reinstall universal firmware.

Bitcoin-only firmware leaves out code for other networks, reducing both the amount of code and the number of features that need to be reviewed. However, FIDO2 and U2F only work with universal firmware, so a Trezor running Bitcoin-only firmware cannot serve as a two-factor authentication key. For devices sold as Bitcoin-only, Suite does not offer the usual button to switch back to universal firmware, although you can install it by following Trezor’s separate instructions. If you may need other coins in future, it is more convenient to buy the standard version and switch it to Bitcoin-only yourself. Before changing firmware type, check your backup: installation may erase the device’s data. Follow the instructions from Suite and the manufacturer.

Should you replace your Safe 3 or Safe 5?

Moving from a Safe 3 to a Safe 5 makes sense if you find the small screen and buttons inconvenient or want a model with a newer microcontroller. For a Safe 5 owner, the main reasons to upgrade to a Safe 7 are iPhone support, Bluetooth and the larger screen.

To move your wallet, select recovery on the new device and use the same backup. If you use a passphrase, enter it exactly as before to access the same addresses and funds. With Multi-share Backup, you need at least the minimum number of shares you specified during setup.

Before resetting the old device, make sure recovery was successful and you can access the accounts you need. If the expected funds do not appear, first check the possible reasons for a zero balance. Once you have confirmed that access is restored, you can factory-reset the old Trezor if you no longer plan to use it.

Which Trezor to choose for your needs

Your first wallet for long-term storage

If you are withdrawing funds from an exchange and expect to use the wallet only a few times a year, the Safe 3’s core features are sufficient. Choose the Safe 5 for its touchscreen and newer microcontroller: setup and checking information on the device are more convenient. When buying a Safe 3, pay particular attention to where the device comes from and the checks during initial setup.

Your main phone is an iPhone

The Safe 7 is the only one of these models that lets you sign transactions and manage the device from an iPhone. If you choose a Safe 5, you will need a computer or an Android phone for signing. You can still use an iPhone to view balances and receive funds into accounts you have added.

Frequent transfers, DeFi and third-party wallets

The Safe 5 is sufficient for using MetaMask, Rabby and decentralised applications (dApps) on a computer. The Safe 7’s larger screen makes it easier to review signing requests, while Bluetooth lets you use compatible mobile apps without a cable. If you will mainly be using a phone, check whether your chosen app supports the Trezor model on that phone.

What to check when buying and setting up your wallet

We are an official Trezor reseller in Ukraine; you can verify our status in the manufacturer’s directory. Before buying, make sure the seller can confirm the product’s origin. After receiving it, check the following:

• The packaging and security seals are intact. If you notice signs of opening or resealing, do not set up the device; contact the seller.
• You downloaded Trezor Suite from trezor.io/start. A new wallet ships without firmware installed. During setup, Suite will guide you through installation and authenticity verification.
• The wallet itself displays the backup words. A pre-filled card of words in the box or a wallet that has already been set up is a reason to stop setup and contact the seller.

Our Trezor Safe 7 review covers setup of the flagship model step by step. When deciding which Trezor to choose, start with how you normally use your wallet: the Safe 3 is sufficient for occasional transfers from a computer or Android phone; we recommend the Safe 5 for easier operation and the Safe 7 for iPhone support and wireless connectivity.