Tool Review:

Trezor One

Overview

The Trezor One is one of the world’s leading digital hardware wallets used to keep cryptocurrency safely stored in “cold-storage.” It was created in 2013 by SatoshiLabs, with its HQ is in Prague, Czech Republic. Trezor is the gold standard of digital wallets because they are very difficult to hack and is the first cryptocurrency hardware wallet, designed specifically to store Bitcoin.

(However, in 2020, Kraken Labs has reportedly found a flaw in the design -this is discussed in detail under “Hacks”).

Hardware wallets like the Trezor, are essential for cryptocurrency holders who possess $1000+ in digital assets. Hardware wallets store the “private keys” to access cryptocurrency holdings offline. When traders are not using their cryptocurrency, it is highly advisable to keep the majority of their crypto-holdings in a hardware wallet.

Trezor is a lot like backing up your hard drive with an external hard drive. Central to Trezor’s security, it ensures that the 24-word seed necessary to backup and store your cryptocurrency private keys are NEVER online.

The essence of a hardware wallet is:

  • Public Address: This is the address you share with exchanges and in peer-to-peer transactions. (Think of it like an email address).
  • Private Keys: These are the keys that grant you access to the digital currency you hold. Without these keys to unlock the data of the digital currency, your cryptocurrency cannot be accessed. (So, a bit like your email account password).
  • Seed Phrase: Trezor One uses a 24-word recovery in the event you lose your private keys and need to prove your ownership.

Digital wallets are used to store cryptocurrencies. Because cryptocurrencies are not physical things, but encrypted data, a digital wallet is not at all like a piggy bank. A digital wallet is much more like your email account; you can see everything in your inbox. 

But with email, you do not have physical correspondence. Instead, you have an address and the addresses of others with whom you correspond. And to access your email, you need a password.

Features & Requirements
Features
  • Product availability: International
  • Suitable for: All levels of crypto-enthusiasts. Recommended for those who own $1000+ US worth of cryptocurrencies.
  • Number of supported tokens: 1649 cryptocurrencies and altcoins supported. Of these supported tokens, many are ERC-20 for Ethereum.
  • Cost: 48.76 EUR from Trezor, $79 US from Amazon (may be subject to shipping fees, taxes, or duties depending on destination).
  • Main features: Cold storage for crypto and altcoins and their convenient use.
  • Open-source technology: Which means that its source Trezor’s code is available to use, modify, and redistribute.
  • Password Manager and U2F: Universal 2nd Factor strengthens and simplifies two-factor authentication (2FA) with the use of a USB device (the HD wallet) or near-field communication (NFC) devices, such as a mobile phone.
Requirements

This hardware wallet needs to be connected to a computer. It runs using Trezor Suite or other 3rd party desktop wallets, including: Electrum, Exodus Wallet, Magnum Wallet and Blockstream Green.

Recovery Seed

Synonyms: recovery sentence, recovery phrase, mnemonic.

The recovery seed is used for a ONE-TIME backup. That means that if lost, your cryptocurrency is gone unless you can successfully hack your own HD, as Kraken Labs have. The recovery seed must be stored in a safe location, such as a sealed envelope in a physical safe or safety deposit box.

Recovery seeds are a string of English words that, when entered correctly, will recover all of the information stored on the HD wallet. Trezor One generates a 24-word seed during the initialization process when the owner “creates a new wallet.”

Trezor recovery seed consists of a set of English words (24 for the Trezor One). From these words, all account private keys, all private keys, public keys, and addresses are mathematically derived.

To create the recovery within the Trezor devise, a 256-bit random number is generated on its Microcontroller with a Random Number Generator. Then, a random number of the same length is generated by the connected computer and then sent to the Trezor device. These two numbers (the 256-bit and computer-generated number) are then hashed with the SHA-256 algorithm.

And, behold, you have your unique recovery seed.

Set-up
General

The setup process is very straightforward, and there are many tutorials and explanations available online, as well as on here, on the Trezor FAQ site.

  1. Plug the Trezor USB into your computer’s USB port. Your screen will display an image of a lock and the link you need to follow.
  2. Follow the link to the webpage. Once you have read the instructions on how to keep your wallet safe, you will be redirected to wallet.TREZOR.io.
  3. Once you install your Trezor wallet, it will be able to communicate with the blockchain. You can a) install a Google Chrome extension, or b) download the blockchain onto your Trezor.
  4. Follow the instructions to install the latest firmware and click “Yes, Install”. (Firmware provides the control program for the device.)
  5. Afterwards, you must check that the Fingerprints on your Trezor hardware screen match those displayed on your computer’s device screen. If it does match, on the Trezor wallet, click “Continue.”

Fingerprint example:

For firmware 2.1.0:

trezorctl firmware-update –fingerprint bb5b0308807b45d41d1e2ab66a468152997ad69a01099789d8a35e464cde999f

  1. Next, unplug the wallet from the USB, then re-inert it, and return to wallet.TREZOR.io.
  2. 7. Name your Trezor wallet (which can be changed at any time).
  3. Choose your PIN. You will see an image similar to the following one on the Trezor devise.

Unlike a PIN entered on a computer or mobile, your Trezor PIN cannot be compromised by malware. The numbers are in a random order to ensure that an attacker is not able to view your selection. 1) enter the PIN on your computer, twice. 2) You must select the same position on the pin-pad.

  1. Once your PIN is set, the wallet will display your 24-word backup recovery seed.

In the event of a lost PIN, you will need your recovery seed to set a new PIN. But if you lose your recovery seed there is very little that can be done. Although it is worth contacting SatoshiLabs to hear what they have to say.

Sending/Receiving Assets

Users can use their Trezor wallet to make transactions. To send funds, you must plug the wallet into your computer and enter your PIN. You must do so each time you wish to make a transaction directly from your wallet. This may seem like a cumbersome process to some users.

Transfer Cryptocurrency To your Trezor Wallet: How To

  1. Plug your Trezor hardware wallet into a USB port of your computer and enter your PIN.
  2. Using the Google Chrome extension or another software program, you will be taken to your Trezor wallet.
  3. On the top-left side of the page, there is a drop-down box. Choose the cryptocurrency that you want to send to your Trezor wallet.
  4. Click “Receive” at the top of the screen. You will then see your unique wallet address for the cryptocurrency you want to transfer/a QR code.
  5. Copy the address and paste it into your Trezor wallet and your cryptocurrency will be moved into cold-storage.

Note: The amount of time it takes to complete the transfer of your cryptocurrency into your Trezor will depend on the coin.

Send Funds from your Trezor Wallet: How To

  1. Open the Trezor wallet dashboard on your computer.
  2. Select the coin you would like to send from the drop-down menu.
  3. Select “Send” at the top of the page.
  4. Enter the wallet address of whomever you wish to send the money to, along with the amount.

5. Confirm that the information you have selected is correct and click “Send.”

Use Cases
Apple Pay (BTC)

Trezor suggests that it is best to have two separate devices: one for a password manager account authenticator, and the other to hold your cryptocurrency. This is to avoid connecting the Trezor that holds your cryptocurrency unnecessarily to a device.

Trezor works will Apple Pay as well. That means that you can use your BTC to buy items directly with Apple Pay. Your hardware wallet works to send coins directly from it to the recipient (via Apple Pay).

However, you will be subject to Apple Pay’s exchange rate, which may not be as when sold directly on an exchange.

Security
General

Trezor uses an enforced delay for every failed PIN attempt. This is to prevent brute-force attacks (guessing random numbers). The delay increases by a factor of two for each failed entry.

16 incorrect PIN attempts and the device will wipe itself. At this point, you must use your recovery seed to reset your PIN. If you need to use the recovery seed the Trezor will instruct you to enter the words in the phrase in a shuffled order. It is also best to enter the recovery seed directly into the wallet, this way it is never on your computer’s keychains.

You can also add a passphrase as an optional second-factor function with the recovery seed. Passphrases allow users to create hidden wallets.

Lastly, Trezor/SatoshiLabs representatives will never ask for your recovery seed or, for a credit card number.

Trezor Tamper-Proof Boxes

Trezor boxes are packages with a tamper-evident hologram or holographic seal. This way, if your box arrives and the hologram is not intact, you can quickly detect if it has been tampered with.

The TREZOR One package has two silver seals on both sides. It is designed so that it is impossible to open without destroying the box in the process. To first open the box, the hologram will be destroyed.

If your box arrives and looks as though it has been tampered with, then you must contact the Support Team at Trezor.

Hacks

On January 31, 2019, Kraken Security released a statement that their research team was able to hack the Trezor hardware wallet. The hack takes less than 15 minutes and is the result of a vulnerability.

Kraken reports that the vulnerability is in KeepKey. Kraken Security Labs states that the vulnerability lies in the microcontroller of the Trezor wallets. So, to remedy the solution requires a complete overhaul of the cold storage device’s design.

While Trezor is aware of this weakness they have not made any changes.

Here is how Kraken Security Labs was able to hack the hardware wallet.

Resources
Customer Support Overview

Trezor Support Will:

  • Troubleshoot any problems with Trezor hardware wallets and SatoshiLabs software.
  • Suggests that contacting SatoshiLabs directly will yield much faster results than social media.
  • Once you receive an email confirmation from customer support, your ticket is in the queue.
  • You will receive regular updates on the status of your ticket until you are connected to the support staff.
  • Remember to check your junk folder if you do not hear back in a reasonable timeframe when first launching your concern.
General Answers

Trezor is a reasonably priced hardware wallet that will go a long way to keeping your cryptocurrency secure. It has its limitations, but many of the problems are user errors, such as: lost recovery seeds, lost devices, etc.

While it touts over 1600 cryptocurrencies, that does not cover all cryptocurrencies; the Trezor T Model, the latest model supports more digital coins. And, many of these currencies are ERC-20 tokens for Ethereum.

Trezor wallets are not just for cryptocurrency. The applicability of asymmetric keys can be used to sign and verify any kind of data. Which means that Trezor wallets work to store and encrypt passwords for any of your private digital information.