{"id":73736,"date":"2026-10-04T01:46:17","date_gmt":"2026-10-03T22:46:17","guid":{"rendered":"https:\/\/lwallet.com.ua\/?p=73736"},"modified":"2026-10-04T01:46:17","modified_gmt":"2026-10-03T22:46:17","slug":"trezor-safe-7-review","status":"publish","type":"post","link":"https:\/\/lwallet.com.ua\/en\/trezor-safe-7-review\/","title":{"rendered":"Trezor Safe 7: review, security and first setup"},"content":{"rendered":"\r\n\r\n\r\n

Launched in October 2025, Trezor Safe 7 is the flagship of the Trezor lineup, which also includes Safe 5 and Safe 3. It is the first Trezor with Bluetooth, a battery and full iPhone support<\/strong>, and the first hardware wallet to use the TROPIC01 security chip, whose architecture is open to independent review.<\/p>\r\n\r\n\r\n\r\n

A hardware vulnerability was discovered in TROPIC01 in January 2026 and publicly disclosed in June. In this Trezor Safe 7 review, we explain what it means for wallet owners, how Bluetooth and post-quantum protection work, and which coins and networks the device supports. We also compare Safe 7 with Safe 5 and Safe 3, then walk through setup and the checks to complete before your first transfer.<\/p>\r\n\r\n\r\n\r\n

Who is Safe 7 for?<\/h2>\r\n\r\n\r\n\r\n

Safe 7 is particularly useful if you want to sign transactions from an iPhone: among current Trezor models, it is the only one with full iOS support<\/strong>. Safe 5 and Safe 3 cannot connect to an iPhone. You can use the Trezor Suite mobile app to view accounts you have added from those wallets, buy crypto and receive funds without connecting the device, but setup and transaction signing require a computer or Android phone. Safe 7 also has a larger screen, making it easier to check addresses and review complex DeFi transactions.<\/p>\r\n\r\n\r\n\r\n

If you use a computer or connect your wallet to an Android phone by cable, Safe 5 is worth considering<\/strong>. It costs less than Safe 7 and also uses an OPTIGA Trust M Secure Element and an STM32U5 microcontroller. Safe 3 can be a more affordable first wallet or a backup device, although it has a hardware limitation we discuss in the comparison section.<\/p>\r\n\r\n\r\n\r\n

Which coins and networks does Trezor Safe 7 support?<\/h2>\r\n\r\n\r\n\r\n

With its multi-coin firmware, Trezor Safe 7 supports thousands of coins and tokens. Trezor Suite lets you manage Bitcoin (BTC), Ethereum (ETH), Solana (SOL), Cardano (ADA), XRP, Litecoin (LTC) and Dogecoin (DOGE), along with tokens on supported networks.<\/p>\r\n\r\n\r\n\r\n

TRON (TRX) and TRC-20 tokens, including USDT, are already supported in Trezor Suite<\/strong> on Safe 7, Safe 5 and Safe 3. Since the June 2026 update<\/a>, TRON has been generally available in both the desktop and mobile versions of Suite. The app does not support the older TRC-10 token standard.<\/p>\r\n\r\n\r\n\r\n

When transferring USDT, make sure the sending and receiving networks match<\/strong>. For USDT TRC-20, for example, add a TRON account in Suite and select TRON as the withdrawal network on your exchange. TRC-20 transfers consume the network’s bandwidth and energy resources; if you do not have enough, fees are paid in TRX, so holding USDT alone may not be sufficient. See Trezor’s TRON and TRC-20 guide<\/a> for the full procedure.<\/p>\r\n\r\n\r\n\r\n

For other assets, check the official list of supported coins and tokens<\/a>, selecting Safe 7 and the network you need. The list also tells you whether an asset is available in Trezor Suite or requires a compatible third-party app. Support for a token on one network does not mean every network where that token exists is supported.<\/p>\r\n\r\n\r\n\r\n

Inside Safe 7: three chips from three manufacturers<\/h2>\r\n\r\n\r\n
\r\n
\"Trezor<\/figure>\r\n<\/div>\r\n\r\n\r\n

Safe 3 and Safe 5 use two chips: an STM32 microcontroller and an Infineon OPTIGA Trust M Secure Element with CC EAL6+ certification. Safe 7 adds TROPIC01 from Czech company Tropic Square. It uses an STM32U5G microcontroller (ARM Cortex-M33, 160 MHz) and the third version of OPTIGA Trust M. Components from three manufacturers provide independent layers of protection, so compromising one chip should not be enough to access the wallet.<\/p>\r\n\r\n\r\n\r\n

In Safe 7, TROPIC01 enforces the PIN attempt limit in hardware through a mechanism called MAC-and-Destroy: each attempt permanently consumes a one-time slot<\/strong> in the chip, and only the correct PIN produces the required cryptographic result. The chip also stores factory certificates used to authenticate the device and generates random data for wallet creation.<\/p>\r\n\r\n\r\n\r\n

The seed, from which the wallet derives private keys, is stored in encrypted form in the microcontroller’s memory. Its decryption key is never stored in full: after you enter the correct PIN, it is derived from secret data held by several chips, exists briefly in memory, and is then erased. As a result, compromising a single component is not enough to read the seed<\/strong>.<\/p>\r\n\r\n\r\n\r\n

TROPIC01 has an open architecture that independent researchers can inspect. With many Secure Elements, access to technical details is restricted by nondisclosure agreements (NDAs). OPTIGA Trust M documentation is available without an NDA, although the chip itself does not have a fully open architecture. TROPIC01 was designed for open security audits, one of which uncovered the vulnerability discussed below.<\/p>\r\n\r\n\r\n\r\n

The TROPIC01 vulnerability: what was compromised and what it means for security<\/h2>\r\n\r\n\r\n
\r\n
\"Illustration<\/figure>\r\n<\/div>\r\n\r\n\r\n

Tropic Square commissioned an independent audit of TROPIC01 by Ledger Donjon, the security research team at Trezor’s competitor. In late January 2026, Donjon reported that laser fault injection had allowed it to extract some of the secret data protected by the chip. Building on those findings, Tropic Square engineers found a way to run their own firmware on the chip and obtain a secret used in PIN protection. Trezor published its response<\/a> on June 3, 2026.<\/p>\r\n\r\n\r\n\r\n

The attack requires physical access to the device<\/strong>, expensive laboratory equipment and specialist knowledge. An attacker must disassemble the wallet, desolder TROPIC01, open the chip package from the back, connect it to a custom board and precisely position the laser. This vulnerability cannot be exploited remotely or through malware on your computer.<\/strong> Trezor also states that it cannot be used to make a counterfeit Safe 7 with malicious firmware that survives a restart, ruling out that route for a supply-chain attack.<\/p>\r\n\r\n\r\n\r\n

According to Trezor, compromising TROPIC01 alone does not give an attacker access to the PIN, funds or wallet backup<\/strong>: the seed is not stored on that chip, and decrypting it requires two other independent layers of protection. A Safe 7 firmware update cannot fully fix the underlying hardware issue. Tropic Square plans to release a revised chip in late 2026, but Trezor has not confirmed whether or when it will use that revision in new Safe 7 devices.<\/p>\r\n\r\n\r\n\r\n

For everyday use, the main risks to watch for are phishing, exposure of your wallet backup and approving malicious transactions. If an attacker with a well-equipped laboratory is a realistic concern for you, factor in the vulnerability in one of the three protection layers: even after compromising TROPIC01, they would still have to defeat OPTIGA and the microcontroller<\/strong>. A strong passphrase provides additional protection when used alongside your backup and stored separately. It is not saved in the device’s persistent memory and is required to access the hidden wallet even if someone has the seed.<\/p>\r\n\r\n\r\n\r\n

[vc_message color=”warning” message_box_style=”classic” message_box_color=”alert-warning” style=”rounded”]<\/p>\r\n\r\n\r\n\r\n

Vulnerability disclosures often prompt phishing emails and messages such as \u201cYour Trezor has been compromised\u2014verify your seed immediately.\u201d Trezor never calls wallet owners or asks them to enter or send their backup words.<\/strong> Such a request is a scam, however official the message looks. The TROPIC01 disclosure does not require you to do anything with your backup or move your funds.<\/p>\r\n\r\n\r\n\r\n

[\/vc_message]<\/p>\r\n\r\n\r\n\r\n

Quantum-ready: what is protected?<\/h2>\r\n\r\n\r\n
\r\n
\"Quantum-ready<\/figure>\r\n<\/div>\r\n\r\n\r\n

When Trezor describes Safe 7 as \u201cquantum-ready,\u201d it means post-quantum protection for the boot process, firmware and device authentication. Safe 7 verifies bootloader and firmware signatures using SLH-DSA-128, an algorithm standardized in 2024. Since May 2026, authentication in Trezor Suite has also used a digital signature generated by the microcontroller with the post-quantum algorithm ML-DSA-44. These measures protect against future attacks in which a quantum computer could help forge a conventional digital signature for an update or a device.<\/p>\r\n\r\n\r\n\r\n

The cryptography used for addresses and transaction signatures on Bitcoin, Ethereum and other networks remains unchanged, so these features do not make your coins quantum-resistant<\/strong>. A move to post-quantum cryptography depends on the blockchains themselves; whether Safe 7 could support it through an update will depend on future standards and the device’s resources. When choosing Safe 7 today, consider its screen, connectivity and ease of use: \u201cquantum-ready\u201d<\/a> describes protection for the device itself.<\/p>\r\n\r\n\r\n\r\n

Bluetooth and connection security<\/h2>\r\n\r\n\r\n
\r\n
\"Trezor<\/figure>\r\n<\/div>\r\n\r\n\r\n

On Safe 7, Bluetooth and USB connections are secured by Trezor Host Protocol (THP)<\/strong>, an open-source protocol that encrypts commands and data and protects against interception, tampering and message injection. When first pairing the wallet over Bluetooth, check that the code on its screen matches the one in Trezor Suite. After you install the firmware, Suite asks you to confirm the secure connection using a one-time code shown on Safe 7. The wallet subsequently recognizes approved connections and remains invisible to unknown devices.<\/p>\r\n\r\n\r\n\r\n

If you do not need a wireless connection, you can disable Bluetooth in the settings and use USB-C. You will then be unable to sign transactions from an iPhone, because Safe 7 uses Bluetooth exclusively for this<\/strong>; its USB-C port only supplies power when connected to an iPhone.<\/p>\r\n\r\n\r\n\r\n

Whichever connection you use, always check the recipient address and amount on Safe 7’s screen<\/strong>, as malware on a computer or phone can replace a copied address in the clipboard. The 2.5-inch display makes this easier than the 1.54-inch screen on Safe 5 or the monochrome screen on Safe 3. In September 2026, Trezor introduced Clear Signing<\/a> for supported contracts on EVM networks, which are compatible with the Ethereum Virtual Machine. When a contract is supported, the device displays a readable description of the action; for other contracts, Suite warns you about blind signing<\/strong>. The feature also works on Safe 5 and Safe 3 with current multi-coin firmware.<\/p>\r\n\r\n\r\n\r\n

Case, battery and water resistance<\/h2>\r\n\r\n\r\n
\r\n
\"Trezor<\/figure>\r\n<\/div>\r\n\r\n\r\n

Safe 7’s case is machined from a solid block of anodized aluminum, with Gorilla Glass 3 protecting the screen and a glass rear panel. It measures 75.4 \u00d7 44.5 \u00d7 8.3 mm and weighs 45 g, almost twice as much as the 23 g Safe 5. Safe 5 combines a PC-ABS plastic body with an aluminum rear panel, while Safe 3 uses PMMA and an aluminum rear panel.<\/p>\r\n\r\n\r\n\r\n

Safe 7 has an IP54 rating<\/strong>, providing limited dust protection and resistance to splashes from any direction. Do not submerge the device.<\/strong> If a review or older article cites IP67, use the IP54 rating in Trezor’s current documentation<\/a> as your reference.<\/p>\r\n\r\n\r\n\r\n

The LiFePO\u2084 (lithium iron phosphate) battery has a capacity of 330 mAh<\/strong>. According to Trezor, it can withstand up to four times as many charge cycles as conventional lithium batteries. It also tolerates a full discharge and retains its charge during long periods of storage. You can charge Safe 7 by cable or with a Qi2-compatible wireless charger. If the battery eventually fails, the wallet will still run on USB-C power and can continue to work with a computer or Android phone<\/strong>. Connecting to an iPhone requires Bluetooth.<\/p>\r\n\r\n\r\n\r\n

The operating temperature range is 0 to +45 \u00b0C<\/strong>. If you leave Safe 7 in a freezing car overnight, let it warm to room temperature before using it. Airport X-ray screening does not harm the device.<\/p>\r\n\r\n\r\n\r\n

Safe 7 vs. Safe 5 vs. Safe 3<\/h2>\r\n\r\n\r\n
\r\n
\"Screen<\/figure>\r\n<\/div>\r\n\r\n\r\n

All three models support passphrases, 12-, 20- or 24-word backups, and Multi-share Backup. The latter splits the backup into several shares and lets you set how many are needed for recovery. Each model supports PINs of up to 50 digits and can act as a FIDO2 security key for two-factor authentication. Trezor Suite for desktop offers Tor and coin control, which lets you manually select Bitcoin’s unspent transaction outputs (UTXOs) for a transaction. You can install Bitcoin-only firmware on any of the three models during setup; the manufacturer also sells dedicated Bitcoin-only editions. The table below compares their differences.<\/p>\r\n\r\n\r\n\r\n

Specification<\/th>Safe 3<\/th>Safe 5<\/th>Safe 7<\/th><\/tr><\/thead>
Screen<\/td>0.96\u2033 monochrome OLED, 128 \u00d7 64<\/td>1.54\u2033 color touchscreen, 240 \u00d7 240<\/td>2.5\u2033 color touchscreen, 520 \u00d7 380<\/td><\/tr>
Controls<\/td>Two buttons<\/td>Touchscreen, haptic feedback<\/td>Touchscreen, haptic feedback<\/td><\/tr>
Case<\/td>PMMA, aluminum rear panel<\/td>PC-ABS, aluminum rear panel, Gorilla Glass 3<\/td>Aluminum, Gorilla Glass 3, glass rear panel<\/td><\/tr>
Secure Elements and microcontroller<\/td>OPTIGA Trust M (EAL6+) + MCU STM32<\/td>OPTIGA Trust M (EAL6+) + MCU STM32U5<\/td>TROPIC01 + OPTIGA Trust M (EAL6+) + MCU STM32U5G<\/td><\/tr>
Connectivity<\/td>USB-C<\/td>USB-C<\/td>USB-C, Bluetooth<\/td><\/tr>
Power<\/td>USB-powered<\/td>USB-powered<\/td>330 mAh LiFePO\u2084 battery, Qi2<\/td><\/tr>
Hardware wallet connection to iPhone<\/td>Not supported<\/td>Not supported<\/td>Yes, via Bluetooth<\/td><\/tr>
Extra protection through microSD<\/td>No<\/td>Yes<\/td>No<\/td><\/tr>
Dust and water resistance<\/td>No IP rating stated<\/td>No IP rating stated<\/td>IP54<\/td><\/tr><\/tbody><\/table><\/figure>\r\n\r\n\r\n\r\n

For Safe 3 and Safe 5, Trezor Suite on iPhone lets you view accounts you have added, buy crypto and receive funds without connecting the hardware wallet. You need a computer or Android phone to set up the wallet and sign transactions.<\/p>\r\n\r\n\r\n\r\n

What Safe 7 adds over Safe 5<\/h3>\r\n\r\n\r\n\r\n

In everyday use, Safe 7’s main advantages are full iPhone support and cable-free operation over Bluetooth. It also has a battery with wireless charging, a larger screen, an aluminum case and an IP54 rating. TROPIC01 adds a third independent layer of protection, although its known vulnerability limits its effectiveness against laboratory attacks. We would not treat that chip alone as a reason to upgrade from Safe 5: if you use a computer or a wired Android connection and are happy with the smaller screen, there is no need to replace your device<\/strong>.<\/p>\r\n\r\n\r\n\r\n

What Safe 5 offers that Safe 7 does not<\/h3>\r\n\r\n\r\n\r\n

Safe 5 supports extra protection using a microSD card containing a random secret<\/strong>, which is required alongside the PIN to unlock the device. Keeping the card and wallet in separate places makes unauthorized access harder, although it does not protect against theft of the backup itself. The feature is enabled through the trezorctl command-line tool<\/a>, so it is intended for experienced users; Safe 7 does not support it. If the card is lost, you can recover access using your wallet backup<\/strong>. Safe 5 is also lighter and has no battery to wear out over time. If you prefer a wired connection, its lower price and microSD protection may matter more to you than Safe 7’s additional features.<\/p>\r\n\r\n\r\n\r\n

Safe 3: the trade-offs<\/h3>\r\n\r\n\r\n\r\n

In March 2025, Ledger Donjon published research on Safe 3<\/a> showing that voltage glitching\u2014deliberately disrupting the microcontroller’s power supply\u2014could bypass some authenticity and firmware integrity checks. The attack involves replacing the firmware before the device reaches its owner<\/strong>; the researchers did not demonstrate extraction of a PIN or seed from an initialized, locked wallet. Because the vulnerability lies in the microcontroller hardware, it cannot be fixed with a firmware update. Trezor explains<\/a> that the attack does not affect Safe 5, which uses the newer STM32U5 microcontroller. Safe 7 also uses a microcontroller from that family.<\/p>\r\n\r\n\r\n\r\n

Buy Safe 3 directly from the manufacturer or an authorized reseller, and complete the checks in Trezor Suite during setup. Pay attention to where the device comes from<\/strong>, since the demonstrated attack bypasses some of those checks. Safe 3 can be a more affordable first wallet or a backup device for the same wallet, provided you are comfortable with two buttons and a small monochrome screen that requires scrolling through long addresses.<\/p>\r\n\r\n\r\n\r\n

Which model should you choose?<\/h2>\r\n\r\n\r\n\r\n

If you use an iPhone and want to sign transactions from your phone, whether for DeFi or while traveling, Safe 7 is the only current Trezor model that supports this<\/strong>.<\/p>\r\n\r\n\r\n\r\n