{"id":391,"date":"2026-10-02T10:38:08","date_gmt":"2026-10-02T10:38:08","guid":{"rendered":"https:\/\/getbitcoin.guide\/articles\/?p=391"},"modified":"2026-10-21T09:34:17","modified_gmt":"2026-10-21T09:34:17","slug":"trezor-safe-5-review","status":"publish","type":"post","link":"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/","title":{"rendered":"Trezor Safe 5 Review: The 20 Word Backup Is Not BIP39"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>The Trezor Safe 5 is a $129 touchscreen signer with an EAL6+ secure element, and its default backup is a 20 word SLIP39 share rather than the familiar 12 or 24 word BIP39 phrase. That is a one way choice: SLIP39 cannot be converted back, and a shorter list of wallets can restore it.<\/strong><\/p>\n\n\n\n<div class=\"msq-audio\" data-article=\"trezor-safe-5-review\" data-minutes=\"14\">\n<style>.msq-audio{margin:1.25em 0 1.75em;padding:16px 18px;background:#EEF3F8;border:1px solid #CBD8E6;border-radius:12px}\n.msq-audio-lead{margin:0 0 8px;font-size:.95em}.msq-audio audio{width:100%;margin:0 0 12px;display:block}\n.msq-toc-title{margin:0 0 6px;font-weight:700}.msq-toc ol{margin:0;padding:0;list-style:none}\n.msq-toc li{display:flex;gap:10px;align-items:center;padding:6px 6px;border-bottom:1px solid #CBD8E6;border-radius:8px}\n.msq-toc li:last-child{border-bottom:0}.msq-toc li.is-active{background:#fff}\n.msq-toc-play{flex:0 0 auto;width:30px;height:30px;border-radius:50%;border:0;background:#1F4E79;color:#fff;font:inherit;font-size:.72em;line-height:30px;padding:0;cursor:pointer}\n.msq-toc-play.is-playing{background:#B4531A}\n.msq-toc-time{flex:0 0 auto;min-width:3.1em;font-variant-numeric:tabular-nums;color:#4A5560;font-size:.9em}\n.msq-toc a{color:#1B1F24;text-decoration:none;line-height:1.35}.msq-toc li.is-active a{font-weight:700;color:#1F4E79}\n.msq-audio-note{margin:10px 0 0;font-size:.82em;color:#4A5560}\nh2.wp-block-heading[id]{scroll-margin-top:24px}\n.msq-hplay{display:inline-block;vertical-align:middle;width:26px;height:26px;margin:0 0 0 10px;border-radius:50%;border:0;background:#1F4E79;cursor:pointer;padding:0;position:relative;top:-2px}\n.msq-hplay::before{content:'\u25b6\ufe0e';display:block;color:#fff;font-size:11px;line-height:26px;text-align:center}\n.msq-hplay.is-playing{background:#B4531A}.msq-hplay.is-playing::before{content:'\u2016';font-size:13px;font-weight:700}\n.msq-bar{position:fixed;left:0;right:0;bottom:0;z-index:9000;display:flex;align-items:center;gap:10px;padding:8px 12px;padding-bottom:calc(8px + env(safe-area-inset-bottom));background:#FFFFFF;border-top:1px solid #CBD8E6;box-shadow:0 -4px 16px rgba(0,0,0,.08);font-size:.92em;color:#1B1F24;transition:transform .2s ease}\n.msq-bar.is-hidden{transform:translateY(130%)}\n.msq-bar-play{display:inline-flex;align-items:center;gap:8px;border:0;border-radius:999px;background:#1F4E79;color:#fff;font:inherit;font-weight:700;padding:8px 14px 8px 12px;cursor:pointer;white-space:nowrap}\n.msq-bar-play.is-playing{background:#B4531A}\n.msq-bar-icon::before{content:'\u25b6\ufe0e';font-size:12px}.msq-bar-play.is-playing .msq-bar-icon::before{content:'\u2016';font-size:14px;font-weight:700}\n.msq-bar-chapter{flex:1 1 auto;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.msq-bar-time{flex:0 0 auto;font-variant-numeric:tabular-nums;color:#4A5560;font-size:.9em}\n.msq-bar-rate,.msq-bar-close{flex:0 0 auto;border:1px solid #CBD8E6;background:#fff;color:#1B1F24;font:inherit;font-size:.85em;line-height:1;border-radius:8px;padding:7px 9px;cursor:pointer}\n.msq-bar-close::before{content:'\u2715'}\n.msq-bar.msq-bar-pill{left:auto;right:14px;bottom:14px;padding:6px;padding-bottom:6px;border:1px solid #CBD8E6;border-radius:999px;box-shadow:0 6px 20px rgba(0,0,0,.15)}\n.msq-bar.msq-bar-pill .msq-bar-chapter,.msq-bar.msq-bar-pill .msq-bar-time,.msq-bar.msq-bar-pill .msq-bar-rate{display:none}\nbody.msq-has-bar{padding-bottom:76px}\n@media (max-width:600px){.msq-bar-time{display:none}.msq-bar{gap:8px;padding-left:10px;padding-right:10px}}\n.msq-s.msq-now{background:#EEF3F8;box-shadow:0 2px 0 #1F4E79;border-radius:2px}\ntr.msq-now td,tr.msq-now th{background:#EEF3F8;box-shadow:inset 0 -2px 0 #1F4E79}\n@media (hover:hover){.msq-s,tr[data-i]{cursor:pointer}.msq-s:hover{background:#EEF3F8}}<\/style>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"AudioObject\",\"@id\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#audio\",\"name\":\"Trezor Safe 5 Review: The 20 Word Backup Is Not BIP39, read aloud\",\"description\":\"Synthetic voice reading of the article, recorded 2 October 2026.\",\"contentUrl\":\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-audio-202610021612.mp3\",\"encodingFormat\":\"audio\/mpeg\",\"duration\":\"PT13M30S\",\"uploadDate\":\"2026-10-02\",\"inLanguage\":\"en-GB\",\"isAccessibleForFree\":true,\"mainEntityOfPage\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/\",\"hasPart\":[{\"@type\":\"Clip\",\"name\":\"Trezor Safe 5 Review: The 20 Word Backup Is Not BIP39\",\"startOffset\":0,\"endOffset\":76},{\"@type\":\"Clip\",\"name\":\"What is the Trezor Safe 5, and what does the price include?\",\"startOffset\":76,\"endOffset\":129,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#what-is-the-trezor-safe-5-and-what-does-the-price-include\"},{\"@type\":\"Clip\",\"name\":\"Why is the default 20 word backup not a BIP39 seed phrase?\",\"startOffset\":129,\"endOffset\":236,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#why-is-the-default-20-word-backup-not-a-bip39-seed-phrase\"},{\"@type\":\"Clip\",\"name\":\"Which wallets can restore a 20 word SLIP39 backup?\",\"startOffset\":236,\"endOffset\":350,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#which-wallets-can-restore-a-20-word-slip39-backup\"},{\"@type\":\"Clip\",\"name\":\"What does the EAL6+ secure element actually protect?\",\"startOffset\":350,\"endOffset\":437,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#what-does-the-eal6-secure-element-actually-protect\"},{\"@type\":\"Clip\",\"name\":\"Was the Trezor Safe 5 affected by the Ledger Donjon finding?\",\"startOffset\":437,\"endOffset\":499,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#was-the-trezor-safe-5-affected-by-the-ledger-donjon-finding\"},{\"@type\":\"Clip\",\"name\":\"What do people who have used Shamir backups actually report?\",\"startOffset\":499,\"endOffset\":628,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#what-do-people-who-have-used-shamir-backups-actually-report\"},{\"@type\":\"Clip\",\"name\":\"Where does the Safe 5 sit now that the Safe 7 exists?\",\"startOffset\":628,\"endOffset\":810,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/#where-does-the-safe-5-sit-now-that-the-safe-7-exists\"}],\"contentSize\":\"5.7 MB\"}<\/script>\n<p class=\"msq-audio-lead\"><strong>Listen to this article<\/strong>, about 14 minutes. A synthetic voice reads the article and announces each section title as it begins; tables are read row by row and the questions at the end are left out.<\/p>\n<audio class=\"msq-audio-player\" controls preload=\"metadata\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-audio-202610021612.mp3\"><\/audio>\n<nav class=\"msq-toc\" aria-label=\"In this article\"><p class=\"msq-toc-title\">In this article<\/p>\n<ol>\n<li data-start=\"0.0\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"0.0\" aria-label=\"Play from: Trezor Safe 5 Review: The 20 Word Backup Is Not BIP39\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">0:00<\/span><a href=\"#top\">Trezor Safe 5 Review: The 20 Word Backup Is Not BIP39<\/a><\/li>\n<li data-start=\"75.78\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"75.78\" aria-label=\"Play from: What is the Trezor Safe 5, and what does the price include?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">1:16<\/span><a href=\"#what-is-the-trezor-safe-5-and-what-does-the-price-include\">What is the Trezor Safe 5, and what does the price include?<\/a><\/li>\n<li data-start=\"129.0\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"129.0\" aria-label=\"Play from: Why is the default 20 word backup not a BIP39 seed phrase?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">2:09<\/span><a href=\"#why-is-the-default-20-word-backup-not-a-bip39-seed-phrase\">Why is the default 20 word backup not a BIP39 seed phrase?<\/a><\/li>\n<li data-start=\"235.78\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"235.78\" aria-label=\"Play from: Which wallets can restore a 20 word SLIP39 backup?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">3:56<\/span><a href=\"#which-wallets-can-restore-a-20-word-slip39-backup\">Which wallets can restore a 20 word SLIP39 backup?<\/a><\/li>\n<li data-start=\"349.72\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"349.72\" aria-label=\"Play from: What does the EAL6+ secure element actually protect?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">5:50<\/span><a href=\"#what-does-the-eal6-secure-element-actually-protect\">What does the EAL6+ secure element actually protect?<\/a><\/li>\n<li data-start=\"436.66\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"436.66\" aria-label=\"Play from: Was the Trezor Safe 5 affected by the Ledger Donjon finding?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">7:17<\/span><a href=\"#was-the-trezor-safe-5-affected-by-the-ledger-donjon-finding\">Was the Trezor Safe 5 affected by the Ledger Donjon finding?<\/a><\/li>\n<li data-start=\"499.4\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"499.4\" aria-label=\"Play from: What do people who have used Shamir backups actually report?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">8:19<\/span><a href=\"#what-do-people-who-have-used-shamir-backups-actually-report\">What do people who have used Shamir backups actually report?<\/a><\/li>\n<li data-start=\"627.86\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"627.86\" aria-label=\"Play from: Where does the Safe 5 sit now that the Safe 7 exists?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">10:28<\/span><a href=\"#where-does-the-safe-5-sit-now-that-the-safe-7-exists\">Where does the Safe 5 sit now that the Safe 7 exists?<\/a><\/li>\n<\/ol><\/nav>\n<p class=\"msq-audio-note\">Recorded 2 October 2026 from the article as published that day. Press a chapter to jump there; the highlighted line is what is playing. A play button sits beside every section heading, and once you scroll past this player a bar at the bottom of the screen keeps the controls in reach. Tap or click any sentence to hear the reading start from there.<\/p>\n<script>var MSQ_SENT = [[0.0,\"h\",\"trezorsafe5reviewthe20wo\",42],[4.96,\"p\",\"thetrezorsafe5isa129touc\",141],[20.52,\"p\",\"thatisaonewaychoiceslip3\",82],[27.4,\"p\",\"onthispagethetrezorsafe5\",297],[52.32,\"p\",\"checkedon2october2026aga\",120],[63.16,\"p\",\"everypagerankingforthiss\",199],[75.78,\"h\",\"whatisthetrezorsafe5andw\",46],[79.78,\"p\",\"atouchscreensigningdevic\",72],[84.1,\"p\",\"trezorsproductpagereadon\",245],[112.14,\"p\",\"pinandpassphraseareenter\",43],[115.62,\"p\",\"thatpriceisworthfixingin\",168],[129.0,\"h\",\"whyisthedefault20wordbac\",46],[133.6,\"p\",\"becausetrezorswitchedsta\",69],[138.2,\"p\",\"trezorsownsinglesharebac\",169],[151.4,\"p\",\"sotheordinarypaththrough\",76],[157.08,\"p\",\"slip0039isasatoshilabssp\",60],[164.92,\"p\",\"thespecificationtextsays\",95],[174.08,\"p\",\"eachshareis20wordsfora12\",85],[183.48,\"p\",\"themultishareversionissh\",48],[187.52,\"p\",\"trezorsmultisharepageput\",165],[202.56,\"p\",\"theslip39faqsetsthefloor\",147],[214.36,\"p\",\"thedirectionoftravelmatt\",47],[217.32,\"p\",\"trezorsfaqsaysconverting\",149],[230.24,\"p\",\"thisisadoorthatopensonew\",64],[235.78,\"h\",\"whichwalletscanrestorea2\",41],[239.62,\"p\",\"thisisthetabletheaffilia\",108],[246.62,\"p\",\"everyrowisthevendorsorth\",41],[250.18,\"t\",\"trezorsafe7safe5safe3mod\",82],[261.58,\"t\",\"electrum\",49],[269.66,\"t\",\"sparrow\",78],[278.7,\"t\",\"bluewalletrabbywasabi\",62],[288.22,\"t\",\"keystonehardwarewallet\",63],[295.82,\"t\",\"onekeypro\",81],[307.5,\"t\",\"anybip39onlywalletorseed\",91],[320.14,\"p\",\"thatlistislongerthanthef\",86],[326.14,\"p\",\"itisstillfarshorterthant\",80],[332.98,\"p\",\"ourreviewofthekeystoneha\",67],[337.5,\"p\",\"andifyourplanwasa24wordp\",137],[349.72,\"h\",\"whatdoestheeal6secureele\",43],[353.52,\"p\",\"notyourseedwhichisthesen\",69],[358.24,\"p\",\"trezorsownpageonthesecur\",214],[379.28,\"p\",\"thesamepagestatesthatitd\",50],[383.12,\"p\",\"itholdsasecretcombinedwi\",84],[388.96,\"p\",\"thatisarealimprovementov\",92],[395.44,\"p\",\"thecertificationcoversth\",162],[407.52,\"p\",\"themicrosdslotistheoneha\",84],[413.2,\"p\",\"trezorsdocumentationdesc\",187],[429.24,\"p\",\"itneedstrezorctl0116orla\",86],[436.66,\"h\",\"wasthetrezorsafe5affecte\",49],[440.74,\"p\",\"noandtheheadlinessaidoth\",30],[443.06,\"p\",\"trezorsownadvisoryreport\",180],[458.26,\"p\",\"onthesafe5itisexplicitno\",102],[465.66,\"p\",\"severalnewsheadlinesfrom\",125],[474.7,\"p\",\"therealreadingisnarrowan\",182],[488.3,\"p\",\"accordingtothesafe5faqth\",150],[499.4,\"h\",\"whatdopeoplewhohaveuseds\",50],[502.96,\"p\",\"verylittleandthatisthefi\",29],[505.36,\"p\",\"wereadsixpostsinabitcoin\",180],[520.96,\"p\",\"treatallofitaswhatpeople\",43],[524.44,\"p\",\"notonepostersaidtheyhadc\",59],[529.44,\"p\",\"cricktoron4january2026de\",111],[537.64,\"p\",\"deepprockkon26january202\",175],[552.16,\"p\",\"theengagedpostersconverg\",90],[558.76,\"p\",\"thewalletsupportthreadcu\",294],[586.4,\"p\",\"sothegapisincreatingshar\",56],[591.28,\"p\",\"theaccountthatshouldchan\",65],[595.28,\"p\",\"issue1839openedbytrezore\",155],[609.48,\"p\",\"questisnotintheslip0039w\",47],[614.72,\"p\",\"theissueasksforalargeror\",54],[619.0,\"p\",\"usethedevicesbuiltinback\",112],[627.86,\"h\",\"wheredoesthesafe5sitnowt\",41],[631.74,\"p\",\"belowitandthegapiswidert\",35],[634.9,\"p\",\"satoshilabsannouncedthet\",250],[661.66,\"p\",\"thebackupstandardsarethe\",88],[669.22,\"p\",\"transparentcutsbothwaysw\",42],[672.42,\"p\",\"ledgerdonjonfoundalaserf\",132],[683.26,\"p\",\"trezorsdisclosurereadon2\",121],[692.9,\"p\",\"achipyouareallowedtoaudi\",54],[696.42,\"t\",\"screen\",107],[710.1,\"t\",\"secureelement\",109],[734.5,\"t\",\"defaultbackup\",82],[745.7,\"t\",\"donjon2024finding\",95],[756.78,\"t\",\"priceonthevendorsite\",106],[771.38,\"p\",\"thissitedoesnottellyouwh\",31],[773.86,\"p\",\"itwillsaythatareviewwrit\",160],[785.9,\"p\",\"ourcomparisonoftrezorand\",71],[790.54,\"p\",\"onelastlinebecauseitisth\",142],[801.06,\"p\",\"notforafirmwareupdatenot\",75],[806.5,\"p\",\"thereisnoversionofthatre\",39]];\n(function(){\n  function init(){\n  var root = document.querySelector('.msq-audio'); if (!root) { return; }\n  var audio = root.querySelector('audio'), items = Array.prototype.slice.call(root.querySelectorAll('.msq-toc li'));\n  var starts = items.map(function(li){ return parseFloat(li.getAttribute('data-start')) || 0; });\n  var names = items.map(function(li){ return li.querySelector('a').textContent; });\n  var anchors = items.map(function(li){ var h = li.querySelector('a').getAttribute('href') || ''; return (h.charAt(0) === '#' && h !== '#top') ? document.getElementById(h.slice(1)) : null; });\n  var article = root.getAttribute('data-article') || location.pathname, minutes = root.getAttribute('data-minutes') || '';\n  var marks = {}, started = false, pausedAt = -1, closed = false, ended = false;\n  var RATES = [1, 1.25, 1.5], rate = 1;\n  try { var saved = parseFloat(localStorage.getItem('msq-audio-rate')); if (RATES.indexOf(saved) >= 0) { rate = saved; } } catch (e) {}\n  audio.playbackRate = rate;\n  function track(name, extra){ try { if (typeof gtag === 'function') { var p = { article: article }; for (var k in extra) { p[k] = extra[k]; } gtag('event', name, p); } } catch (e) {} }\n  function current(){ var t = audio.currentTime, idx = 0; for (var i = 0; starts.length > i; i += 1) { if (t + 0.25 >= starts[i]) { idx = i; } } return idx; }\n  function onScreen(){\n    var line = window.innerHeight \/ 3, idx = 0;\n    for (var i = 0; anchors.length > i; i += 1) { var el = anchors[i]; if (el && line >= el.getBoundingClientRect().top) { idx = i; } }\n    return idx;\n  }\n  function fmt(s){ s = Math.max(0, Math.round(s || 0)); var m = Math.floor(s \/ 60), r = s % 60; return m + ':' + (10 > r ? '0' : '') + r; }\n  function play(from, source){\n    if (from !== null) { audio.currentTime = from; }\n    var p = audio.play(); if (p && p.catch) { p.catch(function(){}); }\n    track(from === null ? 'audio_resume' : 'audio_chapter', { chapter: names[current()], start: Math.round(audio.currentTime), source: source });\n  }\n  var hbtns = anchors.map(function(el, i){\n    if (!el) { return null; }\n    var b = document.createElement('button'); b.type = 'button'; b.className = 'msq-hplay'; b.setAttribute('aria-label', 'Play this section: ' + names[i]);\n    b.addEventListener('click', function(){\n      if (!audio.paused && current() === i) { audio.pause(); track('audio_pause', { source: 'heading' }); return; }\n      play(starts[i], 'heading');\n    });\n    el.appendChild(b); return b;\n  });\n  var bar = document.createElement('div'); bar.className = 'msq-bar msq-bar-pill is-hidden'; bar.setAttribute('role', 'region'); bar.setAttribute('aria-label', 'Audio player');\n  var playBtn = document.createElement('button'); playBtn.type = 'button'; playBtn.className = 'msq-bar-play';\n  var icon = document.createElement('span'); icon.className = 'msq-bar-icon'; icon.setAttribute('aria-hidden', 'true');\n  var label = document.createElement('span'); label.className = 'msq-bar-label';\n  playBtn.appendChild(icon); playBtn.appendChild(label);\n  var chap = document.createElement('span'); chap.className = 'msq-bar-chapter';\n  var clock = document.createElement('span'); clock.className = 'msq-bar-time';\n  var rateBtn = document.createElement('button'); rateBtn.type = 'button'; rateBtn.className = 'msq-bar-rate'; rateBtn.setAttribute('aria-label', 'Playback speed');\n  var closeBtn = document.createElement('button'); closeBtn.type = 'button'; closeBtn.className = 'msq-bar-close'; closeBtn.setAttribute('aria-label', 'Close the audio bar');\n  bar.appendChild(playBtn); bar.appendChild(chap); bar.appendChild(clock); bar.appendChild(rateBtn); bar.appendChild(closeBtn);\n  document.body.appendChild(bar);\n  function showRate(){ rateBtn.textContent = (rate === 1 ? '1' : String(rate)) + 'x'; }\n  showRate();\n  rateBtn.addEventListener('click', function(){\n    rate = RATES[(RATES.indexOf(rate) + 1) % RATES.length]; audio.playbackRate = rate; showRate();\n    try { localStorage.setItem('msq-audio-rate', String(rate)); } catch (e) {}\n    track('audio_rate', { rate: rate });\n  });\n  closeBtn.addEventListener('click', function(){\n    closed = true; if (!audio.paused) { audio.pause(); } paint(); track('audio_bar_close', {});\n  });\n  function mode(){\n    if (!audio.paused) { return 'pause'; }\n    if (ended) { return 'again'; }\n    if (!started) { return 'listen'; }\n    return (pausedAt === onScreen()) ? 'resume' : 'section';\n  }\n  playBtn.addEventListener('click', function(){\n    var m = mode();\n    if (m === 'pause') { audio.pause(); track('audio_pause', { source: 'bar' }); return; }\n    if (m === 'again') { ended = false; play(0, 'bar'); return; }\n    if (m === 'resume') { play(null, 'bar'); return; }\n    play(starts[onScreen()], 'bar');\n  });\n  function paint(){\n    var idx = current(), playing = !audio.paused, m = mode();\n    items.forEach(function(li, i){\n      var on = (i === idx) && playing, b = li.querySelector('.msq-toc-play'), a = li.querySelector('a');\n      li.classList.toggle('is-active', on); b.classList.toggle('is-playing', on);\n      b.textContent = on ? '\u2016' : '\u25b6\ufe0e';\n      b.setAttribute('aria-label', (on ? 'Pause: ' : 'Play from: ') + a.textContent);\n    });\n    hbtns.forEach(function(b, i){ if (b) { var on = (i === idx) && playing; b.classList.toggle('is-playing', on); b.setAttribute('aria-label', (on ? 'Pause this section: ' : 'Play this section: ') + names[i]); } });\n    playBtn.classList.toggle('is-playing', playing);\n    label.textContent = m === 'pause' ? 'Pause' : m === 'again' ? 'Play again' : m === 'resume' ? 'Resume' : m === 'section' ? 'Play this section' : 'Listen, ' + minutes + ' min';\n    playBtn.setAttribute('aria-label', label.textContent);\n    chap.textContent = started ? names[(playing || m === 'resume') ? idx : onScreen()] : '';\n    clock.textContent = started ? fmt(audio.currentTime) + ' \/ ' + fmt(audio.duration) : '';\n    bar.classList.toggle('msq-bar-pill', !started);\n    var show = !closed && (started || 0 > root.getBoundingClientRect().bottom);\n    bar.classList.toggle('is-hidden', !show);\n    document.body.classList.toggle('msq-has-bar', show);\n  }\n  root.addEventListener('click', function(e){\n    var b = e.target.closest ? e.target.closest('.msq-toc-play') : null; if (!b) { return; }\n    var li = b.parentNode, s = parseFloat(b.getAttribute('data-start')) || 0;\n    if (!audio.paused && current() === items.indexOf(li)) { audio.pause(); track('audio_pause', { source: 'index' }); return; }\n    play(s, 'index');\n  });\n  audio.addEventListener('play', function(){ ended = false; closed = false; if (!started) { started = true; track('audio_play', { minutes: Math.round((audio.duration || 0) \/ 60) }); } paint(); });\n  audio.addEventListener('pause', function(){ pausedAt = current(); paint(); });\n  audio.addEventListener('timeupdate', function(){\n    paint();\n    if (audio.duration > 0) {\n      var pct = Math.floor(audio.currentTime \/ audio.duration * 100);\n      [25, 50, 75].forEach(function(m){ if (pct >= m && !marks[m]) { marks[m] = true; track('audio_progress', { percent: m }); } });\n    }\n  });\n  audio.addEventListener('ended', function(){ ended = true; track('audio_complete', {}); paint(); });\n  var ticking = false;\n  function onScroll(){ if (ticking) { return; } ticking = true; setTimeout(function(){ ticking = false; paint(); }, 80); }\n  window.addEventListener('scroll', onScroll, { passive: true }); window.addEventListener('resize', onScroll);\n  paint();\n  }\n  if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', init); } else { init(); }\n})();\n\n(function(){\n  function start(){\n    var root = document.querySelector('.msq-audio'), audio = root ? root.querySelector('audio') : null;\n    var map = (typeof MSQ_SENT !== 'undefined') ? MSQ_SENT : [];\n    if (!root || !audio || !map.length) { return; }\n    var scope = root.closest('main') || root.closest('article') || root.closest('.entry-content') || document.body;\n    var SKIP = '.msq-audio,.msq,.msq-tool,.msq-end,.msq-bar,script,style,noscript,figcaption,#rank-math-faq,.rank-math-block,nav,header,footer';\n    function norm(s){ return s.toLowerCase().replace(\/[^a-z0-9]+\/g, ''); }\n    var nodes = [], stream = '', walker = document.createTreeWalker(scope, NodeFilter.SHOW_TEXT, null), n;\n    while ((n = walker.nextNode())) {\n      var el = n.parentElement; if (!el || el.closest(SKIP)) { continue; }\n      var raw = n.nodeValue, keep = [], norms = '';\n      for (var i = 0; raw.length > i; i += 1) { var c = raw.charAt(i).toLowerCase(); if (\/[a-z0-9]\/.test(c)) { keep.push(i); norms += c; } }\n      if (!norms) { continue; }\n      nodes.push({ node: n, a: stream.length, b: stream.length + norms.length, keep: keep });\n      stream += norms;\n    }\n    var segs = [], cursor = 0, lastRow = null;\n    map.forEach(function(m, idx){\n      var kind = m[1], f = m[2], len = m[3];\n      if (kind === 't') {\n        var rows = scope.querySelectorAll('tr'), after = !lastRow;\n        for (var r = 0; rows.length > r; r += 1) {\n          var tr = rows[r];\n          if (!after) { if (tr === lastRow) { after = true; } continue; }\n          var cell = tr.querySelector('td,th');\n          if (cell && norm(cell.textContent).indexOf(f) === 0) { tr.setAttribute('data-i', idx); lastRow = tr; break; }\n        }\n        return;\n      }\n      var p = stream.indexOf(f, cursor); if (0 > p) { return; }\n      segs.push({ i: idx, a: p, b: Math.min(p + len, stream.length) }); cursor = p + len;\n    });\n    var si = 0;\n    nodes.forEach(function(nd){\n      var frag = document.createDocumentFragment(), raw = nd.node.nodeValue, rawPos = 0, any = false;\n      for (var k = si; segs.length > k; k += 1) {\n        var sg = segs[k]; if (sg.a >= nd.b) { break; } if (nd.a >= sg.b) { continue; }\n        var s = Math.max(sg.a, nd.a), e = Math.min(sg.b, nd.b);\n        var rs = nd.keep[s - nd.a], re2 = nd.keep[e - nd.a - 1] + 1;\n        if (rs > rawPos) { frag.appendChild(document.createTextNode(raw.slice(rawPos, rs))); }\n        var span = document.createElement('span'); span.className = 'msq-s'; span.setAttribute('data-i', sg.i); span.textContent = raw.slice(rs, re2);\n        frag.appendChild(span); rawPos = re2; any = true;\n        if (sg.b > nd.b) { break; }\n      }\n      while (segs.length > si && nd.b >= segs[si].b) { si += 1; }\n      if (!any) { return; }\n      if (raw.length > rawPos) { frag.appendChild(document.createTextNode(raw.slice(rawPos))); }\n      nd.node.parentNode.replaceChild(frag, nd.node);\n    });\n    var starts = map.map(function(m){ return m[0]; }), curIdx = -1, lastUser = 0, timer = null, autoUntil = 0, dragging = false;\n    function idxAt(t){ var lo = 0, hi = starts.length; while (hi > lo + 1) { var mid = (lo + hi) >> 1; if (t + 0.15 >= starts[mid]) { lo = mid; } else { hi = mid; } } return (t + 0.15 >= starts[0]) ? lo : -1; }\n    function setNow(i){\n      if (i === curIdx) { return; }\n      Array.prototype.forEach.call(scope.querySelectorAll('.msq-now'), function(el){ el.classList.remove('msq-now'); });\n      curIdx = i; if (0 > i) { return; }\n      var els = scope.querySelectorAll('[data-i=\"' + i + '\"]'); if (!els.length) { return; }\n      Array.prototype.forEach.call(els, function(el){ el.classList.add('msq-now'); });\n      var r = els[0].getBoundingClientRect(), now = Date.now();\n      if (!dragging && now > lastUser + 2500 && (80 > r.top || r.bottom > window.innerHeight - 140)) {\n        var reduce = window.matchMedia && window.matchMedia('(prefers-reduced-motion: reduce)').matches;\n        autoUntil = now + (reduce ? 400 : 1600);\n        els[0].scrollIntoView({ block: 'center', behavior: reduce ? 'auto' : 'smooth' });\n      }\n    }\n    function tick(){ if (!audio.paused) { setNow(idxAt(audio.currentTime)); } }\n    function userScrolled(){ lastUser = Date.now(); }\n    ['wheel', 'touchmove', 'keydown'].forEach(function(ev){ window.addEventListener(ev, userScrolled, { passive: true }); });\n    window.addEventListener('scroll', function(){ if (Date.now() > autoUntil) { userScrolled(); } }, { passive: true });\n    window.addEventListener('mousedown', function(e){ if (e.clientX >= document.documentElement.clientWidth) { dragging = true; userScrolled(); } }, { passive: true });\n    window.addEventListener('mouseup', function(){ if (dragging) { dragging = false; userScrolled(); } }, { passive: true });\n    audio.addEventListener('play', function(){ if (timer) { clearInterval(timer); } timer = setInterval(tick, 150); tick(); });\n    audio.addEventListener('pause', function(){ if (timer) { clearInterval(timer); timer = null; } });\n    scope.addEventListener('click', function(e){\n      if (e.target.closest('a, button, input, select, textarea, label, summary, .msq, .msq-tool, .msq-end, .msq-audio, .msq-bar')) { return; }\n      var sel = window.getSelection ? String(window.getSelection()) : '';\n      if (sel && sel.trim()) { return; }\n      var el = e.target.closest('[data-i]'); if (!el) { return; }\n      var i = parseInt(el.getAttribute('data-i'), 10); if (isNaN(i)) { return; }\n      if (!audio.paused && i === curIdx) { return; }\n      lastUser = Date.now();\n      audio.currentTime = starts[i];\n      var p = audio.play(); if (p && p.catch) { p.catch(function(){}); }\n      try { if (typeof gtag === 'function') { gtag('event', 'audio_chapter', { article: location.pathname, source: 'sentence', start: Math.round(starts[i]) }); } } catch (err) {}\n    });\n    audio.addEventListener('seeked', tick);\n    audio.addEventListener('ended', function(){ setNow(-1); });\n  }\n  if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', start); } else { start(); }\n})();<\/script>\n<\/div>\n\n\n\n<p class=\"msq-hook wp-block-paragraph\">On this page: the Trezor Safe 5 price read from the vendor on 2 October 2026, a sourced table of every wallet that can restore a 20 word SLIP39 backup, the SLIP-0039 specification text saying the standard is not compatible with BIP39, what the EAL6+ secure element does and does not hold, and a still open Trezor bug report about a backup word that was written down wrong.<\/p>\n\n\n\n<div class=\"msq\" id=\"ms-quiz\" data-slug=\"trezor-safe-5-review\" data-category=\"wallets\" data-list=\"1\">\n<style>.msq,.msq-hook,.msq-box,.msq-end,.msq-tool{--msq-accent:#1F4E79;--msq-accent-text:#FFFFFF;--msq-line:#CBD8E6;--msq-warn:#B4531A;--msq-muted:#4A5560;--msq-tint:#EEF3F8;--msq-base:#FFFFFF}\n.msq{margin:1.25em 0 1.75em}\n.msq-hook{border-left:3px solid var(--msq-accent);padding:6px 14px;color:var(--msq-muted);font-size:.97em}\n.msq-box{background:var(--msq-tint);border:1px solid var(--msq-line);border-radius:12px;padding:0}\n.msq-box>summary{cursor:pointer;list-style:none;padding:14px 18px;font-weight:700;color:var(--msq-accent)}\n.msq-box>summary::-webkit-details-marker{display:none}\n.msq-box>summary::before{content:\"+\";display:inline-block;width:1.1em;font-weight:800}\n.msq-box[open]>summary::before{content:\"\\00d7\"}\n.msq-body{padding:2px 18px 18px}\n.msq-intro{margin:0 0 12px;font-size:.95em;color:var(--msq-muted)}\n.msq-list{margin:0;padding:0;list-style:none}\n.msq-q{margin:0 0 18px;padding:0}\n.msq-question{font-weight:700;margin:0 0 8px}\n.msq-options{display:flex;flex-direction:column;gap:8px}\n.msq-opt{text-align:left;background:var(--msq-base);border:1px solid var(--msq-line);border-radius:8px;padding:10px 12px;font:inherit;font-size:.95em;color:inherit;cursor:pointer;line-height:1.35}\n.msq-opt:hover{border-color:var(--msq-accent)}\n.msq-opt[disabled]{cursor:default}\n.msq-opt.is-right{border-color:var(--msq-accent);background:var(--msq-line);font-weight:700}\n.msq-opt.is-wrong{border-color:var(--msq-warn);color:var(--msq-warn)}\n.msq-explain{margin:8px 0 0;font-size:.92em;padding:10px 12px;border-left:3px solid var(--msq-accent);background:var(--msq-base);border-radius:0 8px 8px 0}\n.msq-explain[hidden]{display:none}\n.msq-verdict{font-weight:700}\n.msq-result{margin-top:14px;padding:14px 16px;background:var(--msq-base);border:1px solid var(--msq-line);border-radius:10px}\n.msq-result[hidden]{display:none}\n.msq-result h3{margin:0 0 6px;font-size:1.1em}\n.msq-result p{margin:0 0 8px}\n.msq-jump{margin:0 0 8px;padding-left:1.2em}\n.msq-form{margin-top:10px;display:flex;flex-wrap:wrap;gap:8px;align-items:center}\n.msq-form input[type=email]{flex:1 1 220px;padding:10px 12px;border:1px solid var(--msq-muted);border-radius:8px;font:inherit;background:#fff}\n.msq-btn{background:var(--msq-accent);color:var(--msq-accent-text);border:0;border-radius:8px;padding:11px 18px;font:inherit;font-weight:700;cursor:pointer}\n.msq-btn:hover{filter:brightness(.92)}\n.msq-btn[disabled]{opacity:.7;cursor:default}\n.msq-no{font-size:.9em;color:var(--msq-muted);margin-left:4px}\n.msq-privacy{margin:6px 0 0;font-size:.82em;color:var(--msq-muted);flex-basis:100%}\n.msq-hp{position:absolute;left:-5000px;width:1px;height:1px;overflow:hidden}\n.msq-msg{margin:8px 0 0;font-size:.92em}\n.msq-end{margin:1.5em 0;padding:18px;border:1px solid var(--msq-accent);border-radius:12px;text-align:center;background:var(--msq-tint)}\n.msq-end p{margin:0 0 12px}\n.msq-end .msq-body{text-align:left;padding:16px 0 0}\n.msq-end .msq-start-test[hidden]{display:none}\n.msq-tool{margin:1.5em 0;padding:18px 20px;background:var(--msq-tint);border:1px solid var(--msq-line);border-radius:12px}\n.msq-tool h3{margin:0 0 6px;font-size:1.15em}\n.msq-tool p{margin:0 0 10px}\n.msq-tool .msq-note{font-size:.85em;color:var(--msq-muted);margin:10px 0 0}\n.msq-check label{display:flex;gap:10px;align-items:flex-start;padding:9px 0;border-bottom:1px solid var(--msq-line);cursor:pointer;line-height:1.4}\n.msq-check label:last-of-type{border-bottom:0}\n.msq-check input{margin-top:5px;flex:0 0 auto;width:18px;height:18px;accent-color:var(--msq-accent)}\n.msq-check-count{font-weight:700;margin:10px 0 0}\n.msq-verdict-box{margin:12px 0 0;padding:10px 14px;border-radius:8px;background:var(--msq-base);border-left:3px solid var(--msq-warn)}\n.msq-verdict-box[hidden]{display:none}\n.msq-calc{display:grid;grid-template-columns:1fr 1fr;gap:10px 16px}\n.msq-calc label{display:flex;flex-direction:column;gap:4px;font-size:.92em}\n.msq-calc input,.msq-calc select{padding:8px 10px;border:1px solid var(--msq-muted);border-radius:8px;font:inherit;background:#fff}\n.msq-calc-out{grid-column:1 \/ -1;margin-top:6px;padding:12px 14px;background:var(--msq-base);border-radius:8px;border:1px solid var(--msq-line)}\n.msq-calc-out strong{font-size:1.15em}\n.msq-choose label{display:block;padding:9px 12px;margin:0 0 8px;background:var(--msq-base);border:1px solid var(--msq-line);border-radius:8px;cursor:pointer}\n.msq-choose input{margin-right:8px;accent-color:var(--msq-accent)}\n.msq-choice-result{margin-top:10px;padding:12px 14px;background:var(--msq-base);border-left:3px solid var(--msq-accent);border-radius:0 8px 8px 0}\n.msq-choice-result[hidden]{display:none}\n@media (max-width:600px){.msq-calc{grid-template-columns:1fr}}\nh2.wp-block-heading[id]{scroll-margin-top:24px}<\/style>\n<noscript><style>.msq-explain{display:block !important}<\/style><\/noscript>\n<details class=\"msq-box\">\n<summary>Think you already know this? Five questions, one minute.<\/summary>\n<div class=\"msq-body\">\n<p class=\"msq-intro\">Every answer is on this page. Answer from what you know now; the page fills in the rest.<\/p>\n<ol class=\"msq-list\">\n<li class=\"msq-q\" data-q=\"1\" data-answer=\"b\" data-title=\"What is the Trezor Safe 5, and what does the price include?\" data-section=\"#what-is-the-trezor-safe-5-and-what-does-the-price-include\">\n<p class=\"msq-question\">1. Trezor lists one price for the Safe 5 on its own product page. What is it?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 1 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">$59, the same as the Safe 3<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">$129<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">$249, the same as the Safe 7<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span>The <a href=\"https:\/\/trezor.io\/trezor-safe-5\" target=\"_blank\" rel=\"noopener\">Trezor Safe 5 product page<\/a> listed $129 when read on 2 October 2026, alongside a 1.54 inch 240 by 240 colour touchscreen and an EAL6+ secure element. The $249 figure belongs to the Safe 7. <a class=\"msq-section\" href=\"#what-is-the-trezor-safe-5-and-what-does-the-price-include\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"2\" data-answer=\"b\" data-title=\"Why is the default 20 word backup not a BIP39 seed phrase?\" data-section=\"#why-is-the-default-20-word-backup-not-a-bip39-seed-phrase\">\n<p class=\"msq-question\">2. You set up a Safe 5, accept the default 20 word backup, then decide you would rather hold a BIP39 phrase. What does Trezor say you can do?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 2 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">Convert the existing wallet from SLIP39 back to BIP39 in Trezor Suite<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">Nothing: SLIP39 cannot be converted back, so a new wallet and a transfer is the route<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">Type the 20 words into a converter tool to get 24 words for the same wallet<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span>Trezor&#8217;s <a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/slip39-faqs\" target=\"_blank\" rel=\"noopener\">SLIP39 FAQ<\/a> says converting SLIP39 wallets back to BIP39 is not possible, and the <a href=\"https:\/\/github.com\/satoshilabs\/slips\/blob\/master\/slip-0039.md\" target=\"_blank\" rel=\"noopener\">SLIP-0039 specification<\/a> states the two standards are not compatible. No legitimate tool ever asks you to type backup words into a website. <a class=\"msq-section\" href=\"#why-is-the-default-20-word-backup-not-a-bip39-seed-phrase\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"3\" data-answer=\"b\" data-title=\"Which wallets can restore a 20 word SLIP39 backup?\" data-section=\"#which-wallets-can-restore-a-20-word-slip39-backup\">\n<p class=\"msq-question\">3. Your Safe 5 is lost and you are holding a 20 word SLIP39 share. According to Trezor, which of these can read it?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 3 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">Only another Trezor device<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">Electrum, Sparrow, BlueWallet, Rabby, Wasabi and the Keystone hardware wallet<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">Any wallet that accepts a recovery phrase<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span>Trezor&#8217;s <a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/slip39-faqs\" target=\"_blank\" rel=\"noopener\">SLIP39 FAQ<\/a> names Rabby, Electrum, Sparrow, BlueWallet and Wasabi plus the Keystone hardware wallet. A BIP39 only wallet cannot read a SLIP39 share, and the <a href=\"https:\/\/github.com\/sparrowwallet\/sparrow\/releases\/tag\/2.0.0\" target=\"_blank\" rel=\"noopener\">Sparrow 2.0.0 release note<\/a> describes recovering shares rather than creating them. <a class=\"msq-section\" href=\"#which-wallets-can-restore-a-20-word-slip39-backup\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"4\" data-answer=\"b\" data-title=\"What does the EAL6+ secure element actually protect?\" data-section=\"#what-does-the-eal6-secure-element-actually-protect\">\n<p class=\"msq-question\">4. Where does Trezor say the wallet seed is held on a Safe 5?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 4 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">Inside the EAL6+ secure element, which is what the certification covers<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">Encrypted on the main chip, using a secret from the secure element combined with your PIN<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">On the microSD card, which is why the slot exists<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span><a href=\"https:\/\/trezor.io\/learn\/a\/secure-element-in-trezor-safe-5-trezor-safe-3\" target=\"_blank\" rel=\"noopener\">Trezor&#8217;s secure element page<\/a> says the OPTIGA Trust M (V3) chip does not store the seed or the PIN. It enforces PIN verification, stores a genuineness certificate, contributes entropy, and holds a secret used with your PIN to encrypt the keys on the main chip. <a class=\"msq-section\" href=\"#what-does-the-eal6-secure-element-actually-protect\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"5\" data-answer=\"b\" data-title=\"Was the Trezor Safe 5 affected by the Ledger Donjon finding?\" data-section=\"#was-the-trezor-safe-5-affected-by-the-ledger-donjon-finding\">\n<p class=\"msq-question\">5. Trezor published an advisory on the Ledger Donjon evaluation of the Safe family. What does it say about the Safe 5?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 5 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">The Safe 5 is affected and needs a firmware update<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">The Safe 5 is not affected, because of its more recent microcontroller<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">The advisory does not mention the Safe 5 at all<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span><a href=\"https:\/\/trezor.io\/vulnerability\/donjon-s-trezor-safe-3-evaluation\" target=\"_blank\" rel=\"noopener\">Trezor&#8217;s advisory<\/a>, reported on 12 November 2024 and read again on 2 October 2026, says the Safe 5 is not affected because it uses a more recent microcontroller designed to be more resilient to similar attacks. The finding concerns Safe 3 supply chain countermeasures. <a class=\"msq-section\" href=\"#was-the-trezor-safe-5-affected-by-the-ledger-donjon-finding\">Read the section<\/a><\/p>\n<\/li>\n<\/ol>\n<div class=\"msq-result\" hidden><\/div>\n<\/div>\n<\/details>\n<script>(function(){\n  if (window.__msqInit) { return; }\n  window.__msqInit = true;\n  var root = document.getElementById('ms-quiz');\n  if (!root) { return; }\n  var meta = { slug: root.getAttribute('data-slug'), category: root.getAttribute('data-category'),\n               list: root.getAttribute('data-list') || '1' };\n  function qs(el, s){ return el.querySelector(s); }\n  function qsa(el, s){ return Array.prototype.slice.call(el.querySelectorAll(s)); }\n  function track(name, params){\n    try { if (typeof gtag === 'function') { var p = params || {}; p.article = meta.slug; gtag('event', name, p); } } catch (e) {}\n  }\n  function jumpList(missed){\n    if (!missed.length) { return ''; }\n    return '<ul class=\"msq-jump\">' + missed.map(function(q){\n      return '<li><a href=\"' + q.getAttribute('data-section') + '\">' + q.getAttribute('data-title') + '<\/a><\/li>';\n    }).join('') + '<\/ul>';\n  }\n  function emailForm(){\n    return '<div class=\"msq-sub\"><p><strong>Get the next one.<\/strong> We publish new articles on ' + meta.category\n      + ' most weeks and recheck this page on Sundays. Email me when a new article goes up or this page changes.<\/p>'\n      + '<form class=\"msq-form\" method=\"post\" action=\"\/mail\/form.php\" novalidate>'\n      + '<input type=\"hidden\" name=\"list\" value=\"' + meta.list + '\">'\n      + '<input type=\"hidden\" name=\"name\" value=\"\">'\n      + '<label class=\"msq-hp\" aria-hidden=\"true\">Leave this empty<input type=\"text\" name=\"website\" tabindex=\"-1\" autocomplete=\"off\"><\/label>'\n      + '<input type=\"email\" name=\"email\" placeholder=\"you@example.com\" required aria-label=\"Email address\" autocomplete=\"email\">'\n      + '<button type=\"submit\" class=\"msq-btn\">Email me the updates<\/button>'\n      + '<a href=\"#\" class=\"msq-no\">No thanks<\/a>'\n      + '<p class=\"msq-privacy\">We store your email and this page\\'s topic, nothing else. Unsubscribe any time.<\/p>'\n      + '<\/form><p class=\"msq-msg\" aria-live=\"polite\"><\/p><\/div>';\n  }\n  \/* The autoresponder always answers 200 with its own page. A \".msg.err\" box means the\n     address was rejected, \"You're subscribed\" means accepted, and a redirect only happens\n     after a successful subscribe. Same reading as the landing pages on the other sites. *\/\n  function sendForm(form){\n    return fetch(form.getAttribute('action'), { method: 'POST', body: new FormData(form), credentials: 'same-origin', redirect: 'manual' })\n      .then(function(res){\n        if (res.type === 'opaqueredirect') { return { status: 'ok' }; }\n        if (res.status === 404) { return { status: 'notlive' }; }\n        if (!res.ok) { throw new Error('HTTP ' + res.status); }\n        return res.text().then(function(t){\n          var doc = new DOMParser().parseFromString(t, 'text\/html');\n          var err = doc.querySelector('.msg.err');\n          if (err) {\n            var m = err.textContent.trim();\n            if (\/something went wrong\/i.test(m)) { throw new Error(m); }\n            return { status: 'rejected', message: m };\n          }\n          if (\/you.re subscribed\/i.test(doc.body.textContent)) { return { status: 'ok' }; }\n          return { status: 'unknown' };\n        });\n      });\n  }\n  function wireForm(sub){\n    var form = qs(sub, '.msq-form'), msg = qs(sub, '.msq-msg');\n    qs(form, '.msq-no').addEventListener('click', function(e){\n      e.preventDefault();\n      sub.innerHTML = '<p class=\"msq-msg\">No problem. The Sunday refresh keeps this page current either way.<\/p>';\n      track('quiz_email', { result: 'declined' });\n    });\n    form.addEventListener('submit', function(e){\n      e.preventDefault();\n      var input = qs(form, 'input[name=email]'), btn = qs(form, '.msq-btn');\n      var email = input.value.trim(); input.value = email;\n      if (!\/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$\/.test(email)) { msg.textContent = 'That email does not look right.'; return; }\n      btn.disabled = true; btn.textContent = 'Sending';\n      function reset(){ btn.disabled = false; btn.textContent = 'Email me the updates'; }\n      sendForm(form).then(function(r){\n        if (r.status === 'ok' || r.status === 'unknown') {\n          sub.innerHTML = '<p class=\"msq-msg\"><strong>Done.<\/strong> We will email you when the next article on ' + meta.category\n            + ' goes up and when this page changes. If a confirmation email arrives, click it.<\/p>';\n          track('quiz_email', { result: r.status });\n          if (r.status === 'ok') { track('generate_lead', { method: 'quiz' }); }\n        } else if (r.status === 'notlive') {\n          msg.textContent = 'Sign up is not switched on yet for this site. Nothing was stored.'; reset();\n          track('quiz_email', { result: 'notlive' });\n        } else {\n          msg.textContent = r.message || 'Please check the email address and try again.'; reset();\n          track('quiz_email', { result: 'rejected' });\n        }\n      }).catch(function(){\n        msg.textContent = 'Could not reach the sign up service just now. Nothing was stored.'; reset();\n        track('quiz_email', { result: 'error' });\n      });\n    });\n  }\n  function finish(container, mode, score, total, missed){\n    var result = qs(container, '.msq-result');\n    track('quiz_complete', { mode: mode, score: score, total: total });\n    var h;\n    if (mode === 'pre') {\n      h = '<h3>You knew ' + score + ' of ' + total + ' before reading.<\/h3>';\n      h += (score === total) ? '<p>All of them. Read on anyway; the sections below carry the detail behind each answer.<\/p>'\n                             : '<p>The rest is below. Jump straight to what you missed:<\/p>' + jumpList(missed);\n      try { sessionStorage.setItem('msq-pre-' + meta.slug, String(score)); } catch (e) {}\n    } else {\n      var pre = null;\n      try { pre = sessionStorage.getItem('msq-pre-' + meta.slug); } catch (e) {}\n      h = '<h3>You got ' + score + ' of ' + total + '.<\/h3>';\n      if (pre !== null) { h += '<p>Before reading you had ' + pre + ' of ' + total + '.<\/p>'; }\n      if (missed.length) { h += '<p>Worth a second look:<\/p>' + jumpList(missed); }\n      h += emailForm();\n    }\n    result.innerHTML = h; result.hidden = false;\n    if (mode !== 'pre') { wireForm(qs(result, '.msq-sub')); }\n    result.scrollIntoView({ behavior: 'smooth', block: 'nearest' });\n  }\n  function setup(container, mode){\n    var qEls = qsa(container, '.msq-q'), answered = 0, score = 0, missed = [];\n    qEls.forEach(function(q){\n      var answer = q.getAttribute('data-answer'), opts = qsa(q, '.msq-opt'), explain = qs(q, '.msq-explain');\n      q.removeAttribute('data-done'); explain.hidden = true; qs(explain, '.msq-verdict').textContent = '';\n      opts.forEach(function(b){ b.disabled = false; b.classList.remove('is-right', 'is-wrong'); });\n      opts.forEach(function(b){\n        b.addEventListener('click', function(){\n          if (q.getAttribute('data-done')) { return; }\n          q.setAttribute('data-done', '1');\n          var ok = b.getAttribute('data-opt') === answer;\n          opts.forEach(function(o){ o.disabled = true; if (o.getAttribute('data-opt') === answer) { o.classList.add('is-right'); } });\n          if (ok) { score += 1; } else { b.classList.add('is-wrong'); missed.push(q); }\n          qs(explain, '.msq-verdict').textContent = ok ? 'Right. ' : 'Not quite. ';\n          explain.hidden = false;\n          answered += 1;\n          track('quiz_answer', { mode: mode, question: q.getAttribute('data-q'), correct: ok ? 1 : 0 });\n          if (answered === qEls.length) { finish(container, mode, score, qEls.length, missed); }\n        });\n      });\n    });\n  }\n  var box = qs(root, '.msq-box');\n  setup(root, 'pre');\n  if (box) { box.addEventListener('toggle', function(){ if (box.open) { track('quiz_open', { mode: 'pre' }); } }); }\n  \/* The end block sits far below this script, so it does not exist yet while this runs\n     during parsing. A delegated listener finds it at click time. *\/\n  document.addEventListener('click', function(e){\n    var startBtn = (e.target && e.target.closest) ? e.target.closest('.msq-start-test') : null;\n    if (!startBtn) { return; }\n    var end = startBtn.closest('.msq-end');\n    if (!end) { return; }\n    var mount = qs(end, '.msq-mount');\n    var clone = qs(root, '.msq-body').cloneNode(true);\n    var intro = qs(clone, '.msq-intro');\n    if (intro) { intro.textContent = 'The same five questions, now that you have read the page.'; }\n    var res = qs(clone, '.msq-result'); if (res) { res.hidden = true; res.innerHTML = ''; }\n    mount.innerHTML = ''; mount.appendChild(clone);\n    setup(mount, 'test');\n    startBtn.hidden = true;\n    track('quiz_open', { mode: 'test' });\n    mount.scrollIntoView({ behavior: 'smooth', block: 'start' });\n    var first = qs(mount, '.msq-opt'); if (first) { first.focus({ preventScroll: true }); }\n  });\n  \/* Shared tool behaviour: checklists remember their ticks on this device, and a chooser\n     shows the result for the option picked. Calculators carry their own small script. *\/\n  function initTools(){\n    qsa(document, '.msq-check').forEach(function(box){\n      var key = 'msq-check-' + meta.slug + '-' + (box.getAttribute('data-id') || 'x');\n      var boxes = qsa(box, 'input[type=checkbox]'), count = qs(box, '.msq-check-count');\n      var yes = qs(box, '.msq-verdict-yes'), no = qs(box, '.msq-verdict-no');\n      var saved = {};\n      try { saved = JSON.parse(localStorage.getItem(key) || '{}'); } catch (e) {}\n      boxes.forEach(function(cb, i){ if (saved[i]) { cb.checked = true; } });\n      function refresh(){\n        var n = boxes.filter(function(cb){ return cb.checked; }).length, state = {};\n        boxes.forEach(function(cb, i){ if (cb.checked) { state[i] = 1; } });\n        try { localStorage.setItem(key, JSON.stringify(state)); } catch (e) {}\n        if (count) { count.textContent = n + ' of ' + boxes.length + (box.getAttribute('data-verb') || ' done'); }\n        if (yes && no) { yes.hidden = n === 0; no.hidden = n !== 0; }\n      }\n      boxes.forEach(function(cb){ cb.addEventListener('change', function(){ refresh(); track('tool_check', { tool: box.getAttribute('data-id') }); }); });\n      refresh();\n    });\n    qsa(document, '.msq-choose').forEach(function(box){\n      var results = qsa(box, '.msq-choice-result');\n      qsa(box, 'input[type=radio]').forEach(function(r){\n        r.addEventListener('change', function(){\n          results.forEach(function(el){ el.hidden = el.getAttribute('data-for') !== r.value; });\n          track('tool_choose', { tool: box.getAttribute('data-id'), choice: r.value });\n        });\n      });\n    });\n  }\n  \/\/ read progress: how far down the article the reader has scrolled, fired once per quarter\n  (function(){\n    var art = root.closest('article') || root.parentNode, fired = {};\n    function check(){\n      var top = art.getBoundingClientRect().top + window.pageYOffset, h = art.offsetHeight || 1;\n      var seen = (window.pageYOffset + window.innerHeight - top) \/ h * 100;\n      [25, 50, 75, 100].forEach(function(m){ if (seen >= m && !fired[m]) { fired[m] = true; track('read_progress', { percent: m }); } });\n    }\n    window.addEventListener('scroll', check, { passive: true }); window.addEventListener('load', check);\n  })();\n  if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', initTools); } else { initTools(); }\n})();<\/script>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Checked on 2 October 2026 against Trezor\u2019s own product page, its backup documentation, the SLIP-0039 specification and its published advisories. Every page ranking for this search earns a commission when you click through, and not one of them answers the question that decides whether you still hold your coins in ten years: if this device stops existing, what can read the words it gave you?<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-is-the-trezor-safe-5-and-what-does-the-price-include\">What is the Trezor Safe 5, and what does the price include?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A touchscreen signing device, and the middle of the three Trezor models currently sold. <a href=\"https:\/\/trezor.io\/trezor-safe-5\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s product page<\/a>, read on 2 October 2026, lists $129 for a 1.54 inch colour touchscreen at 240 by 240 pixels behind Gorilla Glass 3, an NDA free EAL6+ secure element, USB-C, a microSD card slot, haptic feedback, a tamper evident PC-ABS body with anodised aluminium backplates, and 65.9 by 40 by 8 mm at 23 grams. PIN and passphrase are entered on the device itself.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That price is worth fixing in place, because our own <a href=\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/\">guide to what a Trezor protects you from<\/a> could not reach it earlier this year: it is $129, and the review sites quoting other figures were quoting each other.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1376\" height=\"768\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/writing-backup-phrase-for-trezor-safe-5.jpg\" alt=\"A pen poised over a blank backup card beside a trezor safe 5 on a desk.\" class=\"wp-image-389\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/writing-backup-phrase-for-trezor-safe-5.jpg 1376w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/writing-backup-phrase-for-trezor-safe-5-300x167.jpg 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/writing-backup-phrase-for-trezor-safe-5-1024x572.jpg 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/writing-backup-phrase-for-trezor-safe-5-768x429.jpg 768w\" sizes=\"auto, (max-width: 1376px) 100vw, 1376px\" \/><figcaption class=\"wp-block-image__caption\">Twenty words, written once, by hand. Use the device backup check afterwards rather than your eyesight.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"why-is-the-default-20-word-backup-not-a-bip39-seed-phrase\">Why is the default 20 word backup not a BIP39 seed phrase?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Because Trezor switched standards on the Safe family and most buyers never notice. <a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/single-share-backup-on-trezor\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s own single share backup page<\/a> says the 20 word Single-share Backup is the default on the Safe devices, that it is based on SLIP39, and that it replaces the older 12 word backups from early Trezor models. So the ordinary path through setup hands you something that is not a BIP39 seed phrase at all.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SLIP-0039 is a SatoshiLabs specification, finalised on 18 December 2017. <a href=\"https:\/\/github.com\/satoshilabs\/slips\/blob\/master\/slip-0039.md\" target=\"_blank\" rel=\"noopener\">The specification text<\/a> says it is mainly intended as a replacement for BIP-0039 and that the two are not compatible. Each share is 20 words for a 128 bit secret, or 33 words for 256 bits, and three of those words are a checksum.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The multi share version is Shamir\u2019s secret sharing proper. <a href=\"https:\/\/trezor.io\/learn\/a\/multi-share-backup-on-trezor\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s multi share page<\/a> puts the range at 1 to 16 shares with a recovery threshold on the Safe 7, Safe 5, Safe 3 and Model T, and says a single share wallet has been upgradeable to multi share since June 2024. The <a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/slip39-faqs\" target=\"_blank\" rel=\"noopener\">SLIP39 FAQ<\/a> sets the floor at firmware 2.7.2, and states the part that cannot be softened: lose more shares than your threshold allows and the funds are permanently inaccessible.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The direction of travel matters more than the word count. Trezor\u2019s FAQ says converting a SLIP39 wallet back to BIP39 is not possible, and going the other way, which it advises against, produces a 59 word share with limited passphrase support. This is a door that opens one way, offered as a default rather than as a decision.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"900\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-chart.png\" alt=\"Timeline of Trezor backup standards leading to the 20 word SLIP39 default on the Trezor Safe 5.\" class=\"wp-image-393\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-chart.png 1600w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-chart-300x169.png 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-chart-1024x576.png 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-chart-768x432.png 768w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-safe-5-review-chart-1536x864.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><figcaption class=\"wp-block-image__caption\">Every date and figure here is from Trezor&#8217;s single share and multi share documentation, the SLIP-0039 specification text and the SatoshiLabs Safe 7 announcement. The standard changed quietly: the word count on the screen is the only visible sign of which one you are holding.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"which-wallets-can-restore-a-20-word-slip39-backup\">Which wallets can restore a 20 word SLIP39 backup?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is the table the affiliate reviews leave out, and it is the one that matters if Trezor is ever not there to sell you a replacement. Every row is the vendor\u2019s or the project\u2019s own words.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Where you can restore it<\/th><th>SLIP39 support<\/th><th>Source<\/th><\/tr><\/thead><tbody><tr><td>Trezor Safe 7, Safe 5, Safe 3, Model T<\/td><td>Create and restore<\/td><td><a href=\"https:\/\/trezor.io\/learn\/a\/multi-share-backup-on-trezor\" target=\"_blank\" rel=\"noopener\">Trezor multi share page<\/a><\/td><\/tr><tr><td>Electrum<\/td><td>Restore<\/td><td><a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/slip39-faqs\" target=\"_blank\" rel=\"noopener\">Trezor SLIP39 FAQ<\/a><\/td><\/tr><tr><td>Sparrow<\/td><td>Restore, stated as recovering shares<\/td><td><a href=\"https:\/\/github.com\/sparrowwallet\/sparrow\/releases\/tag\/2.0.0\" target=\"_blank\" rel=\"noopener\">Sparrow 2.0.0 release note<\/a><\/td><\/tr><tr><td>BlueWallet, Rabby, Wasabi<\/td><td>Restore<\/td><td><a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/slip39-faqs\" target=\"_blank\" rel=\"noopener\">Trezor SLIP39 FAQ<\/a><\/td><\/tr><tr><td>Keystone hardware wallet<\/td><td>Restore<\/td><td><a href=\"https:\/\/trezor.io\/guides\/backups-recovery\/general-standards\/slip39-faqs\" target=\"_blank\" rel=\"noopener\">Trezor SLIP39 FAQ<\/a><\/td><\/tr><tr><td>OneKey Pro<\/td><td>Added in version 4.15.0, user report<\/td><td><a href=\"https:\/\/bitcointalk.org\/index.php?topic=5509625.0\" target=\"_blank\" rel=\"noopener\">Bitcointalk, 5 September 2025<\/a><\/td><\/tr><tr><td>Any BIP39 only wallet or seed tool<\/td><td>No, and no conversion exists<\/td><td><a href=\"https:\/\/github.com\/satoshilabs\/slips\/blob\/master\/slip-0039.md\" target=\"_blank\" rel=\"noopener\">SLIP-0039, not compatible<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">That list is longer than the forums assume, which is the honest finding here rather than the alarming one. It is still far shorter than the list for a BIP39 phrase, which every wallet ever shipped will read. Our review of the <a href=\"https:\/\/getbitcoin.guide\/articles\/keystone-hard-wallet\/\">Keystone hard wallet<\/a> covers the one hardware alternative on it. And if your plan was a 24 word phrase on steel, note that SLIP39 draws on a different wordlist, so a <a href=\"https:\/\/getbitcoin.guide\/articles\/cryptosteel-capsule-solo\/\">metal backup plate<\/a> stamped for BIP39 may not carry the letters you need. Our <a href=\"https:\/\/getbitcoin.guide\/articles\/cryptotag-zeus-review\/\">Cryptotag Zeus review<\/a> tests exactly that case: the 20 word share fits its 24 numbered slots, the 33 word multi share does not, and the plate has to say which list the numbers came from.<\/p>\n\n\n\n<div class=\"msq-tool msq-choose\" data-id=\"trezor-backup-format\">\n<h3>Which backup format are you actually holding?<\/h3>\n<p>Count the words on your backup and count how many lists you have. Nothing else. Every answer below restates Trezor&#8217;s own documentation. This tool never asks you to enter a single backup word, it does not run in anybody&#8217;s hands but yours, and no legitimate wallet, support agent or firmware update will ever ask you for those words either.<\/p>\n<label><input type=\"radio\" name=\"trezor-backup-format\" value=\"twelve\">One list of 12 or 24 words<\/label>\n<label><input type=\"radio\" name=\"trezor-backup-format\" value=\"twenty\">One list of 20 words<\/label>\n<label><input type=\"radio\" name=\"trezor-backup-format\" value=\"shares\">More than one list of 20 words<\/label>\n<label><input type=\"radio\" name=\"trezor-backup-format\" value=\"none\">I have not set the device up yet<\/label>\n<div class=\"msq-choice-result\" data-for=\"twelve\" hidden><strong>That is BIP39, the format every wallet ever shipped can read.<\/strong> Trezor still offers 12 and 24 word backups on the Safe 5, so an older wallet carried across, or a deliberate choice at setup, lands here. Trezor&#8217;s SLIP39 FAQ advises against converting it to SLIP39 and suggests a new wallet and a transfer instead, because conversion produces a 59 word share with limited passphrase support.<\/div>\n<div class=\"msq-choice-result\" data-for=\"twenty\" hidden><strong>That is a SLIP39 single share, the Safe 5 default.<\/strong> It recovers the wallet on its own. Per Trezor&#8217;s FAQ, the word academic appearing twice in the list is how a single share configuration identifies itself. It can be restored on a Trezor Safe 7, Safe 5, Safe 3 or Model T, and on Electrum, Sparrow, BlueWallet, Rabby, Wasabi or a Keystone. It cannot be converted to BIP39, in either direction, without creating a different wallet.<\/div>\n<div class=\"msq-choice-result\" data-for=\"shares\" hidden><strong>That is a SLIP39 multi share backup, and the number that matters is your threshold.<\/strong> Trezor&#8217;s documentation puts the range at 1 to 16 shares, needing firmware 2.7.2 or later. Lose more shares than the threshold allows and the FAQ is blunt: recovery becomes impossible and the funds are permanently inaccessible. So write down how many shares exist, where each one is, and how many are required, and keep that note somewhere the words are not.<\/div>\n<div class=\"msq-choice-result\" data-for=\"none\" hidden><strong>Then this is the one screen in the whole setup worth slowing down for.<\/strong> Trezor&#8217;s Safe 5 FAQ says you are asked whether you want a single share or a multi share backup. Both are SLIP39. The 12 and 24 word BIP39 options are also there, and choosing one is a deliberate step rather than the default. Whichever you pick, run the device&#8217;s own backup check afterwards: a Trezor engineer logged a recovery failure in 2021 caused by one word being misread by eye, and that issue is still open.<\/div>\n<p class=\"msq-note\">Nothing here is a recommendation to buy, sell or hold anything. Your selection stays in this page and is never sent anywhere.<\/p>\n<\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-does-the-eal6-secure-element-actually-protect\">What does the EAL6+ secure element actually protect?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Not your seed, which is the sentence missing from almost every review of this device. <a href=\"https:\/\/trezor.io\/learn\/a\/secure-element-in-trezor-safe-5-trezor-safe-3\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s own page on the secure element<\/a> says the OPTIGA Trust M (V3) chip, certified to Common Criteria EAL6+, does three things: it enforces PIN verification, it stores a certificate proving the device is genuine, and it contributes entropy when the seed is created. The same page states that it does not store the seed or the PIN. It holds a secret combined with your PIN to encrypt the private keys, and those keys sit on the main chip.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That is a real improvement over a device with no secure element, and not the thing people imagine they are buying. The certification covers the chip, not the firmware, not Trezor Suite and not the website you were looking at when you approved a transaction, which is why our guide to the <a href=\"https:\/\/getbitcoin.guide\/articles\/trezor-official-website\/\">real Trezor website<\/a> exists.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The microSD slot is the one hardware feature here that genuinely raises the cost of a physical attack. <a href=\"https:\/\/trezor.io\/guides\/bonus-tools\/micro-sd-card-encryption-on-trezor-safe-5-and-trezor-model-t\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s documentation<\/a> describes microSD card encryption on the Safe 5 and Model T as a 256 bit random value written to a FAT32 card and combined with your PIN before the device can be decrypted, so the card goes in at every unlock. It needs trezorctl 0.11.6 or later, which means a command line, which means most owners will never turn it on.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1376\" height=\"768\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/man-examining-trezor-safe-5-secure-element.jpg\" alt=\"A man checks the screen of his trezor safe 5 hardware wallet in a study.\" class=\"wp-image-390\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/man-examining-trezor-safe-5-secure-element.jpg 1376w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/man-examining-trezor-safe-5-secure-element-300x167.jpg 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/man-examining-trezor-safe-5-secure-element-1024x572.jpg 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/man-examining-trezor-safe-5-secure-element-768x429.jpg 768w\" sizes=\"auto, (max-width: 1376px) 100vw, 1376px\" \/><figcaption class=\"wp-block-image__caption\">The certified secure element raises the cost of a physical attack. It does not hold the seed.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"was-the-trezor-safe-5-affected-by-the-ledger-donjon-finding\">Was the Trezor Safe 5 affected by the Ledger Donjon finding?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No, and the headlines said otherwise. <a href=\"https:\/\/trezor.io\/vulnerability\/donjon-s-trezor-safe-3-evaluation\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s own advisory<\/a>, reported on 12 November 2024 and read again on 2 October 2026, says Ledger Donjon reused a known attack to show that some Trezor Safe 3 countermeasures against supply chain attacks can be bypassed. On the Safe 5 it is explicit: not affected, because it uses a more recent microcontroller designed to resist similar attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Several news headlines from March 2025 named both the Safe 3 and the Safe 5, which is how an advisory about one model becomes a search result implying two. The real reading is narrow and still worth taking seriously: this attack class is physical and aimed at devices that passed through somebody else\u2019s hands, so a second hand Safe 5 is a different proposition from a sealed one. According to <a href=\"https:\/\/trezor.io\/guides\/trezor-devices\/trezor-safe-5\/trezor-safe-5-faqs\" target=\"_blank\" rel=\"noopener\">the Safe 5 FAQ<\/a> the device runs an authenticity check against Trezor automatically on first connection to Trezor Suite, and that is the one setup step nobody should skip.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-do-people-who-have-used-shamir-backups-actually-report\">What do people who have used Shamir backups actually report?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Very little, and that is the finding. We read six posts in a <a href=\"https:\/\/bitcointalk.org\/index.php?topic=5570005.20\" target=\"_blank\" rel=\"noopener\">Bitcointalk thread asking exactly that<\/a> dated 3 to 27 January 2026, ten posts in a <a href=\"https:\/\/bitcointalk.org\/index.php?topic=5509625.0\" target=\"_blank\" rel=\"noopener\">second thread on wallet support<\/a> from September 2024 to September 2025, and one open bug report in Trezor\u2019s repository. Treat all of it as what people report, not as evidence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Not one poster said they had created and then recovered one in practice. Cricktor, on 4 January 2026, described experimenting with a browser based tool and was not confident about the Trezor implementation. DeeppRockk, on 26 January 2026, argued against secret sharing altogether and preferred multisignature. gmaxwell opened the thread on 3 January 2026 by linking a critical wiki article rather than an experience. The engaged posters converged on one piece of advice: test the recovery on a clean device before you rely on it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The wallet support thread cuts the other way and is more useful. dkbit98 listed the compatible wallets on 18 September 2024, SFR10 reported on 5 September 2025 that OneKey Pro had added SLIP39 in version 4.15.0, and Saint-loup asked in October 2024 whether Electrum can generate and split shares rather than only restore them, which nobody there could confirm. So the gap is in creating shares outside a Trezor, not in reading them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The account that should change your handwriting is in Trezor\u2019s own repository. <a href=\"https:\/\/github.com\/trezor\/trezor-firmware\/issues\/1839\" target=\"_blank\" rel=\"noopener\">Issue 1839<\/a>, opened by Trezor engineer Andrew Kozlik on 7 October 2021 and still open when checked on 2 October 2026, records a user who wrote down guest as quest while copying a Shamir backup. Quest is not in the SLIP-0039 wordlist, so recovery failed. The issue asks for a larger or uppercase font on the backup screen. Use the device\u2019s built in backup check rather than your own eyesight, every time, as our guide to <a href=\"https:\/\/getbitcoin.guide\/articles\/your-recovery-phrase\/\">protecting your recovery phrase<\/a> sets out.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"where-does-the-safe-5-sit-now-that-the-safe-7-exists\">Where does the Safe 5 sit now that the Safe 7 exists?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Below it, and the gap is wider than the price. SatoshiLabs <a href=\"https:\/\/satoshilabs.com\/news\/trezor-launches-trezor-safe-7-first-hardware-wallet-with-transparent-secure-element\" target=\"_blank\" rel=\"noopener\">announced the Trezor Safe 7<\/a> on 21 October 2025 at $249, with two secure elements rather than one: the TROPIC01, which the announcement describes as transparent and auditable, alongside an NDA free EAL6+ secondary element, plus a 2.5 inch screen, a quantum secure bootloader and a LiFePO4 battery. The backup standards are the same, so a 20 word share made on a Safe 5 reads on a Safe 7 and the reverse holds too.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Transparent cuts both ways, which is the point of it. Ledger Donjon found a laser fault injection route into the TROPIC01 in late January 2026, and Tropic Square then extended it to the chip\u2019s PIN related functions. <a href=\"https:\/\/trezor.io\/learn\/security-privacy\/how-trezor-keeps-you-safe\/tropic-01-chip-vulnerability-disclosure-what-happened\" target=\"_blank\" rel=\"noopener\">Trezor\u2019s disclosure<\/a>, read on 2 October 2026, says the attack reaches neither the PIN, the funds nor the wallet backup, and that no user action is needed. A chip you are allowed to audit is a chip whose flaws get published.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th><\/th><th>Trezor Safe 3<\/th><th>Trezor Safe 5<\/th><th>Trezor Safe 7<\/th><\/tr><\/thead><tbody><tr><td>Screen<\/td><td>0.96 in monochrome, two buttons<\/td><td>1.54 in colour touchscreen<\/td><td>2.5 in colour touchscreen<\/td><\/tr><tr><td>Secure element<\/td><td>One, OPTIGA Trust M (V3), EAL6+<\/td><td>One, OPTIGA Trust M (V3), EAL6+<\/td><td>Two, OPTIGA plus TROPIC01<\/td><\/tr><tr><td>Default backup<\/td><td>20 word SLIP39<\/td><td>20 word SLIP39<\/td><td>20 word SLIP39<\/td><\/tr><tr><td>Donjon 2024 finding<\/td><td>Affected<\/td><td>Not affected<\/td><td>Not applicable, launched later<\/td><\/tr><tr><td>Price on the vendor site<\/td><td>Not read on this date<\/td><td>$129, read 2 October 2026<\/td><td>$249 at announcement<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">This site does not tell you what to buy. It will say that a review written before 21 October 2025 was reviewing the top of the range and one written after it was not, and that most ranking pages have quietly inherited the earlier framing. Our <a href=\"https:\/\/getbitcoin.guide\/articles\/trezor-vs-ledger\/\">comparison of Trezor and Ledger<\/a> covers the choice between the companies instead.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One last line, because it is the only one here that never goes stale: nobody from Trezor, from any wallet, from any exchange, or from any giveaway will ever need your backup words. Not for a firmware update, not for a security check, not for a migration, not for verification. There is no version of that request that is real.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"frequently-asked-questions\">Frequently asked questions<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-q-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Can I choose a 12 or 24 word BIP39 backup on a Trezor Safe 5?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Yes. Trezor\u2019s product page lists 12, 20 and 24 word backups, and the 12 and 24 word options are BIP39. The 20 word SLIP39 single share is the default the setup flow offers, so choosing BIP39 is a deliberate step rather than the path of least resistance. Trezor\u2019s own FAQ advises against converting an existing wallet between the two standards and suggests creating a new wallet and moving funds instead.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Is a 20 word Trezor backup the same thing as a multi share backup?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>No, although both use 20 word shares. A single share backup is one list of 20 words that recovers the wallet on its own. A multi share backup splits the secret into between 1 and 16 shares with a threshold, and since June 2024 a single share wallet can be upgraded to multi share. Both are SLIP39, and the word academic appearing twice in a share is how Trezor\u2019s FAQ says you identify a single share configuration.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">What happens if I lose one share of a multi share backup?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>It depends entirely on the threshold you set. If your threshold is two of three, losing one share is survivable and the sensible response is to replace it. Trezor\u2019s SLIP39 FAQ states plainly that losing more shares than the threshold allows makes recovery impossible and the funds permanently inaccessible. There is no vendor reset, no support ticket and no appeal for this, which is the whole point of self custody.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Do duplicate words in a 20 word backup mean something went wrong?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>No. SLIP39 shares are generated from a wordlist and a repeat somewhere in 20 words is ordinary probability rather than a fault. The SLIP-0039 specification allocates three of the words to a checksum, so the device itself can tell you whether what you wrote down is valid. Use the built in backup check on the device to confirm it instead of judging the list by eye.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Does the Trezor Safe 5 need a microSD card to work?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>No. The slot supports an optional feature, microSD card encryption, which Trezor documents for the Safe 5 and the Model T. It writes a 256 bit secret to a FAT32 card that must then be combined with your PIN at every unlock. It requires trezorctl version 0.11.6 or later, so it is a command line feature rather than a setting in the app, and the device works normally with nothing in the slot.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Is a second hand Trezor Safe 5 a security problem?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>The Ledger Donjon work Trezor published in November 2024 concerns physical supply chain attacks, the kind that need a device to have passed through somebody else\u2019s hands, and the advisory says the Safe 5 is not affected by that specific attack because of its newer microcontroller. A sealed device from the vendor still removes the whole class of risk. Whatever the source, a Safe 5 runs an authenticity check against Trezor when first connected, so run it and read the result before any coins move.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<div class=\"msq-end\" id=\"ms-quiz-end\">\n<p><strong>Finished the page?<\/strong> The same five questions from the top, to see what stuck.<\/p>\n<button type=\"button\" class=\"msq-btn msq-start-test\">Test Your Understanding of This Article<\/button>\n<div class=\"msq-mount\"><\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>This article is educational and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything. Speak to a suitably qualified professional about your own situation, and remember that you are responsible for your own security decisions.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Trezor Safe 5 is a $129 touchscreen signer with an EAL6+ secure element, and its default backup is a 20 word SLIP39 share rather than the familiar 12 or 24 word BIP39 phrase. That is a one way choice: SLIP39 cannot be converted back, and a shorter list of wallets can restore it.<\/p>\n","protected":false},"author":1,"featured_media":388,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","rank_math_title":"Trezor Safe 5 Review: The 20 Word Backup Is Not BIP39","rank_math_description":"The Trezor Safe 5 costs $129 and its default 20 word backup is SLIP39, not BIP39, which changes where you can restore it. Verified 2 October 2026.","rank_math_focus_keyword":"trezor safe 5","rank_math_canonical_url":"","rank_math_breadcrumb_title":"","rank_math_facebook_title":"","rank_math_facebook_description":"","rank_math_facebook_image":"","rank_math_twitter_title":"","rank_math_twitter_description":"","rank_math_twitter_image":"","rank_math_pillar_content":"","rank_math_robots":[],"rank_math_advanced_robots":[]},"categories":[2],"tags":[],"class_list":["post-391","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wallets"],"_links":{"self":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/comments?post=391"}],"version-history":[{"count":4,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/391\/revisions"}],"predecessor-version":[{"id":693,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/391\/revisions\/693"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/media\/388"}],"wp:attachment":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/media?parent=391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/categories?post=391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/tags?post=391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}