The Trezor One is one of the world’s leading digital hardware wallets used to keep cryptocurrency safely stored in “cold-storage.” It was created in 2013 by SatoshiLabs, with its HQ is in Prague, Czech Republic. Trezor is the gold standard of digital wallets because they are very difficult to hack and is the first cryptocurrency hardware wallet, designed specifically to store Bitcoin.
(However, in 2020, Kraken Labs has reportedly found a flaw in the design -this is discussed in detail under “Hacks”).
Hardware wallets like the Trezor, are essential for cryptocurrency holders who possess $1000+ in digital assets. Hardware wallets store the “private keys” to access cryptocurrency holdings offline. When traders are not using their cryptocurrency, it is highly advisable to keep the majority of their crypto-holdings in a hardware wallet.
Trezor is a lot like backing up your hard drive with an external hard drive. Central to Trezor’s security, it ensures that the 24-word seed necessary to backup and store your cryptocurrency private keys are NEVER online.
The essence of a hardware wallet is:
Digital wallets are used to store cryptocurrencies. Because cryptocurrencies are not physical things, but encrypted data, a digital wallet is not at all like a piggy bank. A digital wallet is much more like your email account; you can see everything in your inbox.
But with email, you do not have physical correspondence. Instead, you have an address and the addresses of others with whom you correspond. And to access your email, you need a password.
This hardware wallet needs to be connected to a computer. It runs using Trezor Suite or other 3rd party desktop wallets, including: Electrum, Exodus Wallet, Magnum Wallet and Blockstream Green.
Synonyms: recovery sentence, recovery phrase, mnemonic.
The recovery seed is used for a ONE-TIME backup. That means that if lost, your cryptocurrency is gone unless you can successfully hack your own HD, as Kraken Labs have. The recovery seed must be stored in a safe location, such as a sealed envelope in a physical safe or safety deposit box.
Recovery seeds are a string of English words that, when entered correctly, will recover all of the information stored on the HD wallet. Trezor One generates a 24-word seed during the initialization process when the owner “creates a new wallet.”
Trezor recovery seed consists of a set of English words (24 for the Trezor One). From these words, all account private keys, all private keys, public keys, and addresses are mathematically derived.
To create the recovery within the Trezor devise, a 256-bit random number is generated on its Microcontroller with a Random Number Generator. Then, a random number of the same length is generated by the connected computer and then sent to the Trezor device. These two numbers (the 256-bit and computer-generated number) are then hashed with the SHA-256 algorithm.
And, behold, you have your unique recovery seed.
The setup process is very straightforward, and there are many tutorials and explanations available online, as well as on here, on the Trezor FAQ site.
Fingerprint example:
For firmware 2.1.0:
trezorctl firmware-update –fingerprint bb5b0308807b45d41d1e2ab66a468152997ad69a01099789d8a35e464cde999f
Unlike a PIN entered on a computer or mobile, your Trezor PIN cannot be compromised by malware. The numbers are in a random order to ensure that an attacker is not able to view your selection. 1) enter the PIN on your computer, twice. 2) You must select the same position on the pin-pad.
In the event of a lost PIN, you will need your recovery seed to set a new PIN. But if you lose your recovery seed there is very little that can be done. Although it is worth contacting SatoshiLabs to hear what they have to say.
Users can use their Trezor wallet to make transactions. To send funds, you must plug the wallet into your computer and enter your PIN. You must do so each time you wish to make a transaction directly from your wallet. This may seem like a cumbersome process to some users.
Transfer Cryptocurrency To your Trezor Wallet: How To
Note: The amount of time it takes to complete the transfer of your cryptocurrency into your Trezor will depend on the coin.
Send Funds from your Trezor Wallet: How To
5. Confirm that the information you have selected is correct and click “Send.”
Trezor suggests that it is best to have two separate devices: one for a password manager account authenticator, and the other to hold your cryptocurrency. This is to avoid connecting the Trezor that holds your cryptocurrency unnecessarily to a device.
Trezor works will Apple Pay as well. That means that you can use your BTC to buy items directly with Apple Pay. Your hardware wallet works to send coins directly from it to the recipient (via Apple Pay).
However, you will be subject to Apple Pay’s exchange rate, which may not be as when sold directly on an exchange.
Trezor uses an enforced delay for every failed PIN attempt. This is to prevent brute-force attacks (guessing random numbers). The delay increases by a factor of two for each failed entry.
16 incorrect PIN attempts and the device will wipe itself. At this point, you must use your recovery seed to reset your PIN. If you need to use the recovery seed the Trezor will instruct you to enter the words in the phrase in a shuffled order. It is also best to enter the recovery seed directly into the wallet, this way it is never on your computer’s keychains.
You can also add a passphrase as an optional second-factor function with the recovery seed. Passphrases allow users to create hidden wallets.
Lastly, Trezor/SatoshiLabs representatives will never ask for your recovery seed or, for a credit card number.
Trezor boxes are packages with a tamper-evident hologram or holographic seal. This way, if your box arrives and the hologram is not intact, you can quickly detect if it has been tampered with.
The TREZOR One package has two silver seals on both sides. It is designed so that it is impossible to open without destroying the box in the process. To first open the box, the hologram will be destroyed.
If your box arrives and looks as though it has been tampered with, then you must contact the Support Team at Trezor.
On January 31, 2019, Kraken Security released a statement that their research team was able to hack the Trezor hardware wallet. The hack takes less than 15 minutes and is the result of a vulnerability.
Kraken reports that the vulnerability is in KeepKey. Kraken Security Labs states that the vulnerability lies in the microcontroller of the Trezor wallets. So, to remedy the solution requires a complete overhaul of the cold storage device’s design.
While Trezor is aware of this weakness they have not made any changes.
Here is how Kraken Security Labs was able to hack the hardware wallet.
Trezor Support Will:
Trezor is a reasonably priced hardware wallet that will go a long way to keeping your cryptocurrency secure. It has its limitations, but many of the problems are user errors, such as: lost recovery seeds, lost devices, etc.
While it touts over 1600 cryptocurrencies, that does not cover all cryptocurrencies; the Trezor T Model, the latest model supports more digital coins. And, many of these currencies are ERC-20 tokens for Ethereum.
Trezor wallets are not just for cryptocurrency. The applicability of asymmetric keys can be used to sign and verify any kind of data. Which means that Trezor wallets work to store and encrypt passwords for any of your private digital information.