{"id":61,"date":"2026-08-31T10:08:17","date_gmt":"2026-08-31T10:08:17","guid":{"rendered":"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/"},"modified":"2026-10-27T14:12:59","modified_gmt":"2026-10-27T14:12:59","slug":"trezor-hardware-wallet","status":"publish","type":"post","link":"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/","title":{"rendered":"Trezor Hardware Wallet: What It Protects and What It Does Not"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>A Trezor keeps your private keys on a device that never hands them to your computer, and it forces every payment through a physical confirmation you have to approve. It does not stop you being persuaded to type your recovery phrase into a convincing website, and that persuasion is how most Trezor owners actually lose coins.<\/strong><\/p>\n\n\n\n<div class=\"msq-audio\" data-article=\"trezor-hardware-wallet\" data-minutes=\"13\">\n<style>.msq-audio{margin:1.25em 0 1.75em;padding:16px 18px;background:#EEF3F8;border:1px solid #CBD8E6;border-radius:12px}\n.msq-audio-lead{margin:0 0 8px;font-size:.95em}.msq-audio audio{width:100%;margin:0 0 12px;display:block}\n.msq-toc-title{margin:0 0 6px;font-weight:700}.msq-toc ol{margin:0;padding:0;list-style:none}\n.msq-toc li{display:flex;gap:10px;align-items:center;padding:6px 6px;border-bottom:1px solid #CBD8E6;border-radius:8px}\n.msq-toc li:last-child{border-bottom:0}.msq-toc li.is-active{background:#fff}\n.msq-toc-play{flex:0 0 auto;width:30px;height:30px;border-radius:50%;border:0;background:#1F4E79;color:#fff;font:inherit;font-size:.72em;line-height:30px;padding:0;cursor:pointer}\n.msq-toc-play.is-playing{background:#B4531A}\n.msq-toc-time{flex:0 0 auto;min-width:3.1em;font-variant-numeric:tabular-nums;color:#4A5560;font-size:.9em}\n.msq-toc a{color:#1B1F24;text-decoration:none;line-height:1.35}.msq-toc li.is-active a{font-weight:700;color:#1F4E79}\n.msq-audio-note{margin:10px 0 0;font-size:.82em;color:#4A5560}\nh2.wp-block-heading[id]{scroll-margin-top:24px}\n.msq-hplay{display:inline-block;vertical-align:middle;width:26px;height:26px;margin:0 0 0 10px;border-radius:50%;border:0;background:#1F4E79;cursor:pointer;padding:0;position:relative;top:-2px}\n.msq-hplay::before{content:'\u25b6\ufe0e';display:block;color:#fff;font-size:11px;line-height:26px;text-align:center}\n.msq-hplay.is-playing{background:#B4531A}.msq-hplay.is-playing::before{content:'\u2016';font-size:13px;font-weight:700}\n.msq-bar{position:fixed;left:0;right:0;bottom:0;z-index:9000;display:flex;align-items:center;gap:10px;padding:8px 12px;padding-bottom:calc(8px + env(safe-area-inset-bottom));background:#FFFFFF;border-top:1px solid #CBD8E6;box-shadow:0 -4px 16px rgba(0,0,0,.08);font-size:.92em;color:#1B1F24;transition:transform .2s ease}\n.msq-bar.is-hidden{transform:translateY(130%)}\n.msq-bar-play{display:inline-flex;align-items:center;gap:8px;border:0;border-radius:999px;background:#1F4E79;color:#fff;font:inherit;font-weight:700;padding:8px 14px 8px 12px;cursor:pointer;white-space:nowrap}\n.msq-bar-play.is-playing{background:#B4531A}\n.msq-bar-icon::before{content:'\u25b6\ufe0e';font-size:12px}.msq-bar-play.is-playing .msq-bar-icon::before{content:'\u2016';font-size:14px;font-weight:700}\n.msq-bar-chapter{flex:1 1 auto;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.msq-bar-time{flex:0 0 auto;font-variant-numeric:tabular-nums;color:#4A5560;font-size:.9em}\n.msq-bar-rate,.msq-bar-close{flex:0 0 auto;border:1px solid #CBD8E6;background:#fff;color:#1B1F24;font:inherit;font-size:.85em;line-height:1;border-radius:8px;padding:7px 9px;cursor:pointer}\n.msq-bar-close::before{content:'\u2715'}\n.msq-bar.msq-bar-pill{left:auto;right:14px;bottom:14px;padding:6px;padding-bottom:6px;border:1px solid #CBD8E6;border-radius:999px;box-shadow:0 6px 20px rgba(0,0,0,.15)}\n.msq-bar.msq-bar-pill .msq-bar-chapter,.msq-bar.msq-bar-pill .msq-bar-time,.msq-bar.msq-bar-pill .msq-bar-rate{display:none}\nbody.msq-has-bar{padding-bottom:76px}\n@media (max-width:600px){.msq-bar-time{display:none}.msq-bar{gap:8px;padding-left:10px;padding-right:10px}}\n.msq-s.msq-now{background:#EEF3F8;box-shadow:0 2px 0 #1F4E79;border-radius:2px}\ntr.msq-now td,tr.msq-now th{background:#EEF3F8;box-shadow:inset 0 -2px 0 #1F4E79}\n@media (hover:hover){.msq-s,tr[data-i]{cursor:pointer}.msq-s:hover{background:#EEF3F8}}<\/style>\n<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"AudioObject\",\"@id\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#audio\",\"name\":\"Trezor Hardware Wallet: What It Protects and What It Does Not, read aloud\",\"description\":\"Synthetic voice reading of the article, recorded 27 October 2026.\",\"contentUrl\":\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-hardware-wallet-audio-202610271942.mp3\",\"encodingFormat\":\"audio\/mpeg\",\"duration\":\"PT13M25S\",\"uploadDate\":\"2026-10-27\",\"inLanguage\":\"en-GB\",\"isAccessibleForFree\":true,\"mainEntityOfPage\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/\",\"hasPart\":[{\"@type\":\"Clip\",\"name\":\"Trezor Hardware Wallet: What It Protects and What It Does Not\",\"startOffset\":0,\"endOffset\":52},{\"@type\":\"Clip\",\"name\":\"What is a Trezor actually protecting you from?\",\"startOffset\":52,\"endOffset\":104,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#what-is-a-trezor-actually-protecting-you-from\"},{\"@type\":\"Clip\",\"name\":\"Which Trezor models are still sold in 2026?\",\"startOffset\":104,\"endOffset\":259,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#which-trezor-models-are-still-sold-in-2026\"},{\"@type\":\"Clip\",\"name\":\"What does the secure element in the Safe models actually do?\",\"startOffset\":259,\"endOffset\":359,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#what-does-the-secure-element-in-the-safe-models-actually-do\"},{\"@type\":\"Clip\",\"name\":\"How are Trezor owners actually losing their coins?\",\"startOffset\":359,\"endOffset\":428,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#how-are-trezor-owners-actually-losing-their-coins\"},{\"@type\":\"Clip\",\"name\":\"What happened in the August 2026 Trezor data breach?\",\"startOffset\":428,\"endOffset\":602,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#what-happened-in-the-august-2026-trezor-data-breach\"},{\"@type\":\"Clip\",\"name\":\"Is a Trezor better than a Ledger?\",\"startOffset\":602,\"endOffset\":721,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#is-a-trezor-better-than-a-ledger\"},{\"@type\":\"Clip\",\"name\":\"What should you check before setting up any hardware wallet?\",\"startOffset\":721,\"endOffset\":761,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#what-should-you-check-before-setting-up-any-hardware-wallet\"},{\"@type\":\"Clip\",\"name\":\"So where does that leave the Trezor?\",\"startOffset\":761,\"endOffset\":805,\"url\":\"https:\/\/getbitcoin.guide\/articles\/trezor-hardware-wallet\/#so-where-does-that-leave-the-trezor\"}],\"contentSize\":\"5.6 MB\"}<\/script>\n<p class=\"msq-audio-lead\"><strong>Listen to this article<\/strong>, about 13 minutes. A synthetic voice reads the article and announces each section title as it begins; tables are read row by row and the questions at the end are left out.<\/p>\n<audio class=\"msq-audio-player\" controls preload=\"metadata\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/10\/trezor-hardware-wallet-audio-202610271942.mp3\"><\/audio>\n<nav class=\"msq-toc\" aria-label=\"In this article\"><p class=\"msq-toc-title\">In this article<\/p>\n<ol>\n<li data-start=\"0.0\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"0.0\" aria-label=\"Play from: Trezor Hardware Wallet: What It Protects and What It Does Not\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">0:00<\/span><a href=\"#top\">Trezor Hardware Wallet: What It Protects and What It Does Not<\/a><\/li>\n<li data-start=\"52.06\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"52.06\" aria-label=\"Play from: What is a Trezor actually protecting you from?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">0:52<\/span><a href=\"#what-is-a-trezor-actually-protecting-you-from\">What is a Trezor actually protecting you from?<\/a><\/li>\n<li data-start=\"103.8\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"103.8\" aria-label=\"Play from: Which Trezor models are still sold in 2026?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">1:44<\/span><a href=\"#which-trezor-models-are-still-sold-in-2026\">Which Trezor models are still sold in 2026?<\/a><\/li>\n<li data-start=\"258.74\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"258.74\" aria-label=\"Play from: What does the secure element in the Safe models actually do?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">4:19<\/span><a href=\"#what-does-the-secure-element-in-the-safe-models-actually-do\">What does the secure element in the Safe models actually do?<\/a><\/li>\n<li data-start=\"359.4\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"359.4\" aria-label=\"Play from: How are Trezor owners actually losing their coins?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">5:59<\/span><a href=\"#how-are-trezor-owners-actually-losing-their-coins\">How are Trezor owners actually losing their coins?<\/a><\/li>\n<li data-start=\"428.06\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"428.06\" aria-label=\"Play from: What happened in the August 2026 Trezor data breach?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">7:08<\/span><a href=\"#what-happened-in-the-august-2026-trezor-data-breach\">What happened in the August 2026 Trezor data breach?<\/a><\/li>\n<li data-start=\"602.28\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"602.28\" aria-label=\"Play from: Is a Trezor better than a Ledger?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">10:02<\/span><a href=\"#is-a-trezor-better-than-a-ledger\">Is a Trezor better than a Ledger?<\/a><\/li>\n<li data-start=\"720.58\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"720.58\" aria-label=\"Play from: What should you check before setting up any hardware wallet?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">12:01<\/span><a href=\"#what-should-you-check-before-setting-up-any-hardware-wallet\">What should you check before setting up any hardware wallet?<\/a><\/li>\n<li data-start=\"761.4\"><button type=\"button\" class=\"msq-toc-play\" data-start=\"761.4\" aria-label=\"Play from: So where does that leave the Trezor?\">&#x25B6;&#xFE0E;<\/button><span class=\"msq-toc-time\">12:41<\/span><a href=\"#so-where-does-that-leave-the-trezor\">So where does that leave the Trezor?<\/a><\/li>\n<\/ol><\/nav>\n<p class=\"msq-audio-note\">Recorded 27 October 2026 from the article as published that day. Press a chapter to jump there; the highlighted line is what is playing. A play button sits beside every section heading, and once you scroll past this player a bar at the bottom of the screen keeps the controls in reach. Tap or click any sentence to hear the reading start from there.<\/p>\n<script>var MSQ_SENT = [[0.0,\"h\",\"trezorhardwarewalletwhat\",50],[3.84,\"p\",\"atrezorkeepsyourprivatek\",135],[12.4,\"p\",\"itdoesnotstopyoubeingper\",131],[21.04,\"p\",\"onthispagethenarrowthing\",230],[39.32,\"p\",\"trezorismadebysatoshilab\",74],[44.48,\"p\",\"whatmattersmoreiswhatthe\",83],[52.06,\"h\",\"whatisatrezoractuallypro\",38],[54.58,\"p\",\"ahardwarewalletsolvesone\",45],[58.26,\"p\",\"yourprivatekeysaregenera\",50],[61.74,\"p\",\"whenyousendapaymenttheun\",110],[69.74,\"p\",\"malwareonyourlaptopnever\",57],[74.7,\"p\",\"thesecondprotectionisthe\",30],[77.18,\"p\",\"itshowsthedestinationadd\",89],[82.9,\"p\",\"thatisthedefenceagainsta\",97],[88.82,\"p\",\"readthescreenandtheswapf\",28],[91.46,\"p\",\"pressthroughwithoutreadi\",38],[93.82,\"p\",\"thesametradeoffiscovered\",51],[97.82,\"p\",\"thatisthewholelist\",18],[99.3,\"p\",\"everythingelsepeopleassu\",56],[103.8,\"h\",\"whichtrezormodelsarestil\",35],[107.0,\"p\",\"thischangedrecentlyandmo\",61],[111.44,\"p\",\"trezorownproductupdatepa\",144],[121.92,\"p\",\"thecurrentrangeontrezori\",75],[128.64,\"p\",\"trezorhascommittedtokeep\",73],[133.44,\"p\",\"thesamepagestatesbasicma\",136],[144.8,\"p\",\"ifyouownoneitkeepsworkin\",53],[148.28,\"t\",\"safe3\",85],[166.24,\"t\",\"safe5\",83],[184.16,\"t\",\"safe7\",99],[201.88,\"t\",\"modelt\",78],[213.16,\"t\",\"modelone\",73],[223.76,\"p\",\"trezorliststhesafe3at59u\",79],[231.64,\"p\",\"safe5andsafe7pricesweren\",138],[242.36,\"p\",\"thesafe5figurehassincebe\",118],[253.56,\"p\",\"checkthestoredirectly\",21],[255.2,\"p\",\"thosereviewsitesearncomm\",39],[258.74,\"h\",\"whatdoesthesecureelement\",49],[262.18,\"p\",\"thesafe3andsafe5useaninf\",118],[279.14,\"p\",\"thatisfromtrezorownhardw\",161],[290.06,\"p\",\"whatthatbuysyouisnarrow\",23],[292.14,\"p\",\"asecureelementhardensthe\",100],[299.34,\"p\",\"seedextractionbyfaultinj\",155],[310.46,\"p\",\"trezordidnotomitasecuree\",59],[314.54,\"p\",\"theirexplanationisthatth\",238],[329.74,\"p\",\"whetheropennessorcertifi\",64],[334.1,\"p\",\"sothesecureelementmatter\",70],[339.26,\"p\",\"itdoesnothingaboutthethr\",94],[344.58,\"p\",\"thesamereasoningappliest\",59],[349.06,\"p\",\"itappliesjustassquarelyt\",135],[359.4,\"h\",\"howaretrezorownersactual\",42],[362.68,\"p\",\"bytypingtheirrecoveryphr\",40],[365.2,\"p\",\"notbyhavingtheirdevicecr\",33],[367.48,\"p\",\"trezorownscamsandphishin\",59],[371.84,\"p\",\"itstatesthatanyrequestfo\",126],[382.28,\"p\",\"thechannelsitdocumentsin\",158],[395.56,\"p\",\"fakewebsitesnowreachpeop\",195],[408.24,\"p\",\"thepatternthatkeepsworki\",50],[411.4,\"p\",\"yourdevicewillbedeactiva\",27],[413.72,\"p\",\"youraccounthasakycproble\",25],[416.16,\"p\",\"asecurityissuerequiresyo\",48],[419.6,\"p\",\"trezornamesthisspecifics\",43],[423.0,\"p\",\"theurgencyistheproductth\",62],[428.06,\"h\",\"whathappenedintheaugust2\",43],[432.06,\"p\",\"on13august2026trezorpubl\",102],[440.26,\"p\",\"shipmonkoneofitsfulfilme\",106],[447.54,\"p\",\"thenoticehasbeenupdatedt\",81],[452.86,\"p\",\"thefirstfigureswere11742\",258],[476.78,\"p\",\"thenon4september2026trez\",84],[484.06,\"p\",\"shipmonkhadalsoretainedo\",179],[498.42,\"p\",\"ifyoureadthisarticleoran\",179],[510.34,\"p\",\"thatolderdataisalsothepa\",81],[515.94,\"p\",\"trezorpointedtoa90dayret\",134],[525.46,\"p\",\"trezorstatesthroughoutth\",125],[533.42,\"p\",\"nokeyswereinvolvedandnod\",43],[537.3,\"p\",\"whatleakedisalistofpeopl\",68],[542.34,\"p\",\"anyonewhoreadtheledgerna\",80],[548.38,\"p\",\"the2020ledgercustomerdat\",137],[558.42,\"p\",\"ashippinglististherawmat\",61],[563.38,\"p\",\"noristhisa2020storyinaug\",156],[577.58,\"p\",\"sothepracticaltestiswide\",45],[580.9,\"p\",\"ifyouorderedatrezorintoa\",214],[597.78,\"p\",\"ashippinglistdoesnotexpi\",51],[602.28,\"h\",\"isatrezorbetterthanaledg\",26],[604.08,\"p\",\"thefullsidebysidewithpri\",126],[612.56,\"p\",\"theshortversionisthatfor\",133],[620.44,\"p\",\"bothkeepkeysoffyourcompu\",27],[622.76,\"p\",\"bothmakeyouapproveonthed\",29],[624.84,\"p\",\"bothareundonebyaphrasety\",44],[628.32,\"p\",\"thatisaboringconclusiona\",43],[631.84,\"t\",\"malwareonyourlaptop\",137],[642.76,\"t\",\"someonestealsthedevice\",143],[655.4,\"t\",\"asiteasksforyourrecovery\",125],[666.2,\"t\",\"yourbackupislostordestro\",137],[678.52,\"t\",\"aletterorcallclaimstobes\",143],[690.92,\"p\",\"thepassphraseistheonefea\",55],[694.56,\"p\",\"itisanextrasecretlayered\",130],[703.68,\"p\",\"itisalsounrecoverable\",21],[705.64,\"p\",\"forgetitandthecoinsbehin\",34],[707.88,\"p\",\"typingoneofthoseonatwobu\",168],[720.58,\"h\",\"whatshouldyoucheckbefore\",50],[723.78,\"p\",\"buyfromthemanufactureror\",75],[728.66,\"p\",\"expecttowritethebackupdo\",67],[734.18,\"p\",\"confirmthedevicegenerate\",40],[737.54,\"p\",\"onethatarriveswithaphras\",46],[741.82,\"p\",\"decideinadvancewheretwoc\",68],[746.5,\"p\",\"assumeanymessageaboutyou\",88],[752.78,\"p\",\"noneofthatdependsonwhich\",36],[755.22,\"p\",\"theframeworkforthatchoic\",81],[761.4,\"h\",\"sowheredoesthatleavethet\",29],[763.16,\"p\",\"thesaferangeiscompetentl\",134],[773.96,\"p\",\"thosearecheckablefactsan\",66],[778.84,\"p\",\"theyarealsonotwhatdecide\",64],[783.28,\"p\",\"thatisdecidedbywhetheryo\",134],[790.88,\"p\",\"ifsplittingtheriskacross\",159],[801.08,\"p\",\"thedevicecannothelpwithe\",29],[803.0,\"p\",\"itwasneverdesignedto\",20]];\n(function(){\n  function init(){\n  var root = document.querySelector('.msq-audio'); if (!root) { return; }\n  var audio = root.querySelector('audio'), items = Array.prototype.slice.call(root.querySelectorAll('.msq-toc li'));\n  var starts = items.map(function(li){ return parseFloat(li.getAttribute('data-start')) || 0; });\n  var names = items.map(function(li){ return li.querySelector('a').textContent; });\n  var anchors = items.map(function(li){ var h = li.querySelector('a').getAttribute('href') || ''; return (h.charAt(0) === '#' && h !== '#top') ? document.getElementById(h.slice(1)) : null; });\n  var article = root.getAttribute('data-article') || location.pathname, minutes = root.getAttribute('data-minutes') || '';\n  var marks = {}, started = false, pausedAt = -1, closed = false, ended = false;\n  var RATES = [1, 1.25, 1.5], rate = 1;\n  try { var saved = parseFloat(localStorage.getItem('msq-audio-rate')); if (RATES.indexOf(saved) >= 0) { rate = saved; } } catch (e) {}\n  audio.playbackRate = rate;\n  function track(name, extra){ try { if (typeof gtag === 'function') { var p = { article: article }; for (var k in extra) { p[k] = extra[k]; } gtag('event', name, p); } } catch (e) {} }\n  function current(){ var t = audio.currentTime, idx = 0; for (var i = 0; starts.length > i; i += 1) { if (t + 0.25 >= starts[i]) { idx = i; } } return idx; }\n  function onScreen(){\n    var line = window.innerHeight \/ 3, idx = 0;\n    for (var i = 0; anchors.length > i; i += 1) { var el = anchors[i]; if (el && line >= el.getBoundingClientRect().top) { idx = i; } }\n    return idx;\n  }\n  function fmt(s){ s = Math.max(0, Math.round(s || 0)); var m = Math.floor(s \/ 60), r = s % 60; return m + ':' + (10 > r ? '0' : '') + r; }\n  function play(from, source){\n    if (from !== null) { audio.currentTime = from; }\n    var p = audio.play(); if (p && p.catch) { p.catch(function(){}); }\n    track(from === null ? 'audio_resume' : 'audio_chapter', { chapter: names[current()], start: Math.round(audio.currentTime), source: source });\n  }\n  var hbtns = anchors.map(function(el, i){\n    if (!el) { return null; }\n    var b = document.createElement('button'); b.type = 'button'; b.className = 'msq-hplay'; b.setAttribute('aria-label', 'Play this section: ' + names[i]);\n    b.addEventListener('click', function(){\n      if (!audio.paused && current() === i) { audio.pause(); track('audio_pause', { source: 'heading' }); return; }\n      play(starts[i], 'heading');\n    });\n    el.appendChild(b); return b;\n  });\n  var bar = document.createElement('div'); bar.className = 'msq-bar msq-bar-pill is-hidden'; bar.setAttribute('role', 'region'); bar.setAttribute('aria-label', 'Audio player');\n  var playBtn = document.createElement('button'); playBtn.type = 'button'; playBtn.className = 'msq-bar-play';\n  var icon = document.createElement('span'); icon.className = 'msq-bar-icon'; icon.setAttribute('aria-hidden', 'true');\n  var label = document.createElement('span'); label.className = 'msq-bar-label';\n  playBtn.appendChild(icon); playBtn.appendChild(label);\n  var chap = document.createElement('span'); chap.className = 'msq-bar-chapter';\n  var clock = document.createElement('span'); clock.className = 'msq-bar-time';\n  var rateBtn = document.createElement('button'); rateBtn.type = 'button'; rateBtn.className = 'msq-bar-rate'; rateBtn.setAttribute('aria-label', 'Playback speed');\n  var closeBtn = document.createElement('button'); closeBtn.type = 'button'; closeBtn.className = 'msq-bar-close'; closeBtn.setAttribute('aria-label', 'Close the audio bar');\n  bar.appendChild(playBtn); bar.appendChild(chap); bar.appendChild(clock); bar.appendChild(rateBtn); bar.appendChild(closeBtn);\n  document.body.appendChild(bar);\n  function showRate(){ rateBtn.textContent = (rate === 1 ? '1' : String(rate)) + 'x'; }\n  showRate();\n  rateBtn.addEventListener('click', function(){\n    rate = RATES[(RATES.indexOf(rate) + 1) % RATES.length]; audio.playbackRate = rate; showRate();\n    try { localStorage.setItem('msq-audio-rate', String(rate)); } catch (e) {}\n    track('audio_rate', { rate: rate });\n  });\n  closeBtn.addEventListener('click', function(){\n    closed = true; if (!audio.paused) { audio.pause(); } paint(); track('audio_bar_close', {});\n  });\n  function mode(){\n    if (!audio.paused) { return 'pause'; }\n    if (ended) { return 'again'; }\n    if (!started) { return 'listen'; }\n    return (pausedAt === onScreen()) ? 'resume' : 'section';\n  }\n  playBtn.addEventListener('click', function(){\n    var m = mode();\n    if (m === 'pause') { audio.pause(); track('audio_pause', { source: 'bar' }); return; }\n    if (m === 'again') { ended = false; play(0, 'bar'); return; }\n    if (m === 'resume') { play(null, 'bar'); return; }\n    play(starts[onScreen()], 'bar');\n  });\n  function paint(){\n    var idx = current(), playing = !audio.paused, m = mode();\n    items.forEach(function(li, i){\n      var on = (i === idx) && playing, b = li.querySelector('.msq-toc-play'), a = li.querySelector('a');\n      li.classList.toggle('is-active', on); b.classList.toggle('is-playing', on);\n      b.textContent = on ? '\u2016' : '\u25b6\ufe0e';\n      b.setAttribute('aria-label', (on ? 'Pause: ' : 'Play from: ') + a.textContent);\n    });\n    hbtns.forEach(function(b, i){ if (b) { var on = (i === idx) && playing; b.classList.toggle('is-playing', on); b.setAttribute('aria-label', (on ? 'Pause this section: ' : 'Play this section: ') + names[i]); } });\n    playBtn.classList.toggle('is-playing', playing);\n    label.textContent = m === 'pause' ? 'Pause' : m === 'again' ? 'Play again' : m === 'resume' ? 'Resume' : m === 'section' ? 'Play this section' : 'Listen, ' + minutes + ' min';\n    playBtn.setAttribute('aria-label', label.textContent);\n    chap.textContent = started ? names[(playing || m === 'resume') ? idx : onScreen()] : '';\n    clock.textContent = started ? fmt(audio.currentTime) + ' \/ ' + fmt(audio.duration) : '';\n    bar.classList.toggle('msq-bar-pill', !started);\n    var show = !closed && (started || 0 > root.getBoundingClientRect().bottom);\n    bar.classList.toggle('is-hidden', !show);\n    document.body.classList.toggle('msq-has-bar', show);\n  }\n  root.addEventListener('click', function(e){\n    var b = e.target.closest ? e.target.closest('.msq-toc-play') : null; if (!b) { return; }\n    var li = b.parentNode, s = parseFloat(b.getAttribute('data-start')) || 0;\n    if (!audio.paused && current() === items.indexOf(li)) { audio.pause(); track('audio_pause', { source: 'index' }); return; }\n    play(s, 'index');\n  });\n  audio.addEventListener('play', function(){ ended = false; closed = false; if (!started) { started = true; track('audio_play', { minutes: Math.round((audio.duration || 0) \/ 60) }); } paint(); });\n  audio.addEventListener('pause', function(){ pausedAt = current(); paint(); });\n  audio.addEventListener('timeupdate', function(){\n    paint();\n    if (audio.duration > 0) {\n      var pct = Math.floor(audio.currentTime \/ audio.duration * 100);\n      [25, 50, 75].forEach(function(m){ if (pct >= m && !marks[m]) { marks[m] = true; track('audio_progress', { percent: m }); } });\n    }\n  });\n  audio.addEventListener('ended', function(){ ended = true; track('audio_complete', {}); paint(); });\n  var ticking = false;\n  function onScroll(){ if (ticking) { return; } ticking = true; setTimeout(function(){ ticking = false; paint(); }, 80); }\n  window.addEventListener('scroll', onScroll, { passive: true }); window.addEventListener('resize', onScroll);\n  paint();\n  }\n  if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', init); } else { init(); }\n})();\n\n(function(){\n  function start(){\n    var root = document.querySelector('.msq-audio'), audio = root ? root.querySelector('audio') : null;\n    var map = (typeof MSQ_SENT !== 'undefined') ? MSQ_SENT : [];\n    if (!root || !audio || !map.length) { return; }\n    var scope = root.closest('main') || root.closest('article') || root.closest('.entry-content') || document.body;\n    var SKIP = '.msq-audio,.msq,.msq-tool,.msq-end,.msq-bar,script,style,noscript,figcaption,#rank-math-faq,.rank-math-block,nav,header,footer';\n    function norm(s){ return s.toLowerCase().replace(\/[^a-z0-9]+\/g, ''); }\n    var nodes = [], stream = '', walker = document.createTreeWalker(scope, NodeFilter.SHOW_TEXT, null), n;\n    while ((n = walker.nextNode())) {\n      var el = n.parentElement; if (!el || el.closest(SKIP)) { continue; }\n      var raw = n.nodeValue, keep = [], norms = '';\n      for (var i = 0; raw.length > i; i += 1) { var c = raw.charAt(i).toLowerCase(); if (\/[a-z0-9]\/.test(c)) { keep.push(i); norms += c; } }\n      if (!norms) { continue; }\n      nodes.push({ node: n, a: stream.length, b: stream.length + norms.length, keep: keep });\n      stream += norms;\n    }\n    var segs = [], cursor = 0, lastRow = null;\n    map.forEach(function(m, idx){\n      var kind = m[1], f = m[2], len = m[3];\n      if (kind === 't') {\n        var rows = scope.querySelectorAll('tr'), after = !lastRow;\n        for (var r = 0; rows.length > r; r += 1) {\n          var tr = rows[r];\n          if (!after) { if (tr === lastRow) { after = true; } continue; }\n          var cell = tr.querySelector('td,th');\n          if (cell && norm(cell.textContent).indexOf(f) === 0) { tr.setAttribute('data-i', idx); lastRow = tr; break; }\n        }\n        return;\n      }\n      var p = stream.indexOf(f, cursor); if (0 > p) { return; }\n      segs.push({ i: idx, a: p, b: Math.min(p + len, stream.length) }); cursor = p + len;\n    });\n    var si = 0;\n    nodes.forEach(function(nd){\n      var frag = document.createDocumentFragment(), raw = nd.node.nodeValue, rawPos = 0, any = false;\n      for (var k = si; segs.length > k; k += 1) {\n        var sg = segs[k]; if (sg.a >= nd.b) { break; } if (nd.a >= sg.b) { continue; }\n        var s = Math.max(sg.a, nd.a), e = Math.min(sg.b, nd.b);\n        var rs = nd.keep[s - nd.a], re2 = nd.keep[e - nd.a - 1] + 1;\n        if (rs > rawPos) { frag.appendChild(document.createTextNode(raw.slice(rawPos, rs))); }\n        var span = document.createElement('span'); span.className = 'msq-s'; span.setAttribute('data-i', sg.i); span.textContent = raw.slice(rs, re2);\n        frag.appendChild(span); rawPos = re2; any = true;\n        if (sg.b > nd.b) { break; }\n      }\n      while (segs.length > si && nd.b >= segs[si].b) { si += 1; }\n      if (!any) { return; }\n      if (raw.length > rawPos) { frag.appendChild(document.createTextNode(raw.slice(rawPos))); }\n      nd.node.parentNode.replaceChild(frag, nd.node);\n    });\n    var starts = map.map(function(m){ return m[0]; }), curIdx = -1, lastUser = 0, timer = null, autoUntil = 0, dragging = false;\n    function idxAt(t){ var lo = 0, hi = starts.length; while (hi > lo + 1) { var mid = (lo + hi) >> 1; if (t + 0.15 >= starts[mid]) { lo = mid; } else { hi = mid; } } return (t + 0.15 >= starts[0]) ? lo : -1; }\n    function setNow(i){\n      if (i === curIdx) { return; }\n      Array.prototype.forEach.call(scope.querySelectorAll('.msq-now'), function(el){ el.classList.remove('msq-now'); });\n      curIdx = i; if (0 > i) { return; }\n      var els = scope.querySelectorAll('[data-i=\"' + i + '\"]'); if (!els.length) { return; }\n      Array.prototype.forEach.call(els, function(el){ el.classList.add('msq-now'); });\n      var r = els[0].getBoundingClientRect(), now = Date.now();\n      if (!dragging && now > lastUser + 2500 && (80 > r.top || r.bottom > window.innerHeight - 140)) {\n        var reduce = window.matchMedia && window.matchMedia('(prefers-reduced-motion: reduce)').matches;\n        autoUntil = now + (reduce ? 400 : 1600);\n        els[0].scrollIntoView({ block: 'center', behavior: reduce ? 'auto' : 'smooth' });\n      }\n    }\n    function tick(){ if (!audio.paused) { setNow(idxAt(audio.currentTime)); } }\n    function userScrolled(){ lastUser = Date.now(); }\n    ['wheel', 'touchmove', 'keydown'].forEach(function(ev){ window.addEventListener(ev, userScrolled, { passive: true }); });\n    window.addEventListener('scroll', function(){ if (Date.now() > autoUntil) { userScrolled(); } }, { passive: true });\n    window.addEventListener('mousedown', function(e){ if (e.clientX >= document.documentElement.clientWidth) { dragging = true; userScrolled(); } }, { passive: true });\n    window.addEventListener('mouseup', function(){ if (dragging) { dragging = false; userScrolled(); } }, { passive: true });\n    audio.addEventListener('play', function(){ if (timer) { clearInterval(timer); } timer = setInterval(tick, 150); tick(); });\n    audio.addEventListener('pause', function(){ if (timer) { clearInterval(timer); timer = null; } });\n    scope.addEventListener('click', function(e){\n      if (e.target.closest('a, button, input, select, textarea, label, summary, .msq, .msq-tool, .msq-end, .msq-audio, .msq-bar')) { return; }\n      var sel = window.getSelection ? String(window.getSelection()) : '';\n      if (sel && sel.trim()) { return; }\n      var el = e.target.closest('[data-i]'); if (!el) { return; }\n      var i = parseInt(el.getAttribute('data-i'), 10); if (isNaN(i)) { return; }\n      if (!audio.paused && i === curIdx) { return; }\n      lastUser = Date.now();\n      audio.currentTime = starts[i];\n      var p = audio.play(); if (p && p.catch) { p.catch(function(){}); }\n      try { if (typeof gtag === 'function') { gtag('event', 'audio_chapter', { article: location.pathname, source: 'sentence', start: Math.round(starts[i]) }); } } catch (err) {}\n    });\n    audio.addEventListener('seeked', tick);\n    audio.addEventListener('ended', function(){ setNow(-1); });\n  }\n  if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', start); } else { start(); }\n})();<\/script>\n<\/div>\n\n\n\n<p class=\"msq-hook wp-block-paragraph\">On this page: the narrow thing a Trezor actually protects, which models are still sold after the January 2026 retirements, what the secure element buys and does not, how owners actually lose coins, and the August 2026 shipping data exposure that grew by a factor of five in September.<\/p>\n\n\n\n<div class=\"msq\" id=\"ms-quiz\" data-slug=\"trezor-hardware-wallet\" data-category=\"self custody\" data-list=\"1\">\n<style>.msq,.msq-hook,.msq-box,.msq-end,.msq-tool{--msq-accent:#1F4E79;--msq-accent-text:#FFFFFF;--msq-line:#CBD8E6;--msq-warn:#B4531A;--msq-muted:#4A5560;--msq-tint:#EEF3F8;--msq-base:#FFFFFF}\n.msq{margin:1.25em 0 1.75em}\n.msq-hook{border-left:3px solid var(--msq-accent);padding:6px 14px;color:var(--msq-muted);font-size:.97em}\n.msq-box{background:var(--msq-tint);border:1px solid var(--msq-line);border-radius:12px;padding:0}\n.msq-box>summary{cursor:pointer;list-style:none;padding:14px 18px;font-weight:700;color:var(--msq-accent)}\n.msq-box>summary::-webkit-details-marker{display:none}\n.msq-box>summary::before{content:\"+\";display:inline-block;width:1.1em;font-weight:800}\n.msq-box[open]>summary::before{content:\"\\00d7\"}\n.msq-body{padding:2px 18px 18px}\n.msq-intro{margin:0 0 12px;font-size:.95em;color:var(--msq-muted)}\n.msq-list{margin:0;padding:0;list-style:none}\n.msq-q{margin:0 0 18px;padding:0}\n.msq-question{font-weight:700;margin:0 0 8px}\n.msq-options{display:flex;flex-direction:column;gap:8px}\n.msq-opt{text-align:left;background:var(--msq-base);border:1px solid var(--msq-line);border-radius:8px;padding:10px 12px;font:inherit;font-size:.95em;color:inherit;cursor:pointer;line-height:1.35}\n.msq-opt:hover{border-color:var(--msq-accent)}\n.msq-opt[disabled]{cursor:default}\n.msq-opt.is-right{border-color:var(--msq-accent);background:var(--msq-line);font-weight:700}\n.msq-opt.is-wrong{border-color:var(--msq-warn);color:var(--msq-warn)}\n.msq-explain{margin:8px 0 0;font-size:.92em;padding:10px 12px;border-left:3px solid var(--msq-accent);background:var(--msq-base);border-radius:0 8px 8px 0}\n.msq-explain[hidden]{display:none}\n.msq-verdict{font-weight:700}\n.msq-result{margin-top:14px;padding:14px 16px;background:var(--msq-base);border:1px solid var(--msq-line);border-radius:10px}\n.msq-result[hidden]{display:none}\n.msq-result h3{margin:0 0 6px;font-size:1.1em}\n.msq-result p{margin:0 0 8px}\n.msq-jump{margin:0 0 8px;padding-left:1.2em}\n.msq-form{margin-top:10px;display:flex;flex-wrap:wrap;gap:8px;align-items:center}\n.msq-form input[type=email]{flex:1 1 220px;padding:10px 12px;border:1px solid var(--msq-muted);border-radius:8px;font:inherit;background:#fff}\n.msq-btn{background:var(--msq-accent);color:var(--msq-accent-text);border:0;border-radius:8px;padding:11px 18px;font:inherit;font-weight:700;cursor:pointer}\n.msq-btn:hover{filter:brightness(.92)}\n.msq-btn[disabled]{opacity:.7;cursor:default}\n.msq-no{font-size:.9em;color:var(--msq-muted);margin-left:4px}\n.msq-privacy{margin:6px 0 0;font-size:.82em;color:var(--msq-muted);flex-basis:100%}\n.msq-hp{position:absolute;left:-5000px;width:1px;height:1px;overflow:hidden}\n.msq-msg{margin:8px 0 0;font-size:.92em}\n.msq-end{margin:1.5em 0;padding:18px;border:1px solid var(--msq-accent);border-radius:12px;text-align:center;background:var(--msq-tint)}\n.msq-end p{margin:0 0 12px}\n.msq-end .msq-body{text-align:left;padding:16px 0 0}\n.msq-end .msq-start-test[hidden]{display:none}\n.msq-tool{margin:1.5em 0;padding:18px 20px;background:var(--msq-tint);border:1px solid var(--msq-line);border-radius:12px}\n.msq-tool h3{margin:0 0 6px;font-size:1.15em}\n.msq-tool p{margin:0 0 10px}\n.msq-tool .msq-note{font-size:.85em;color:var(--msq-muted);margin:10px 0 0}\n.msq-check label{display:flex;gap:10px;align-items:flex-start;padding:9px 0;border-bottom:1px solid var(--msq-line);cursor:pointer;line-height:1.4}\n.msq-check label:last-of-type{border-bottom:0}\n.msq-check input{margin-top:5px;flex:0 0 auto;width:18px;height:18px;accent-color:var(--msq-accent)}\n.msq-check-count{font-weight:700;margin:10px 0 0}\n.msq-verdict-box{margin:12px 0 0;padding:10px 14px;border-radius:8px;background:var(--msq-base);border-left:3px solid var(--msq-warn)}\n.msq-verdict-box[hidden]{display:none}\n.msq-calc{display:grid;grid-template-columns:1fr 1fr;gap:10px 16px}\n.msq-calc label{display:flex;flex-direction:column;gap:4px;font-size:.92em}\n.msq-calc input,.msq-calc select{padding:8px 10px;border:1px solid var(--msq-muted);border-radius:8px;font:inherit;background:#fff}\n.msq-calc-out{grid-column:1 \/ -1;margin-top:6px;padding:12px 14px;background:var(--msq-base);border-radius:8px;border:1px solid var(--msq-line)}\n.msq-calc-out strong{font-size:1.15em}\n.msq-choose label{display:block;padding:9px 12px;margin:0 0 8px;background:var(--msq-base);border:1px solid var(--msq-line);border-radius:8px;cursor:pointer}\n.msq-choose input{margin-right:8px;accent-color:var(--msq-accent)}\n.msq-choice-result{margin-top:10px;padding:12px 14px;background:var(--msq-base);border-left:3px solid var(--msq-accent);border-radius:0 8px 8px 0}\n.msq-choice-result[hidden]{display:none}\n@media (max-width:600px){.msq-calc{grid-template-columns:1fr}}\nh2.wp-block-heading[id]{scroll-margin-top:24px}<\/style>\n<noscript><style>.msq-explain{display:block !important}<\/style><\/noscript>\n<details class=\"msq-box\">\n<summary>Think you already know this? Five questions, one minute.<\/summary>\n<div class=\"msq-body\">\n<p class=\"msq-intro\">Every answer is on this page. Answer from what you know now; the page fills in the rest.<\/p>\n<ol class=\"msq-list\">\n<li class=\"msq-q\" data-q=\"1\" data-answer=\"a\" data-title=\"What is a Trezor actually protecting you from?\" data-section=\"#what-is-a-trezor-actually-protecting-you-from\">\n<p class=\"msq-question\">1. What are the two protections a hardware wallet provides, according to this page?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 1 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">Keys that never leave the device, and a screen that shows the destination and amount before you confirm<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">Insurance and a password reset<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">Anonymity and higher prices<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span>The unsigned transaction goes in, the signature comes out, and malware on the laptop never sees a key. Read the screen and address swapping malware fails; press through without reading and it does not. That is the whole list. <a class=\"msq-section\" href=\"#what-is-a-trezor-actually-protecting-you-from\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"2\" data-answer=\"b\" data-title=\"Which Trezor models are still sold in 2026?\" data-section=\"#which-trezor-models-are-still-sold-in-2026\">\n<p class=\"msq-question\">2. Which Trezor devices are sold new in 2026?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 2 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">Model One and Model T<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">Safe 3, Safe 5 and Safe 7, each with a Bitcoin only variant<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">Only the Safe 7<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span><a href=\"https:\/\/trezor.io\/other\/product-updates\/how-long-will-trezor-model-one-and-model-t-be-supported\" target=\"_blank\" rel=\"noopener\">Trezor&#8217;s product update page<\/a> states the Model One and Model T left the shop on 8 January 2026, with basic maintenance until at least 2031 and critical security updates until at least 2036. <a href=\"https:\/\/trezor.io\/trezor-safe-3\" target=\"_blank\" rel=\"noopener\">The Safe 3 page<\/a> listed 59 US dollars on 6 September 2026. <a class=\"msq-section\" href=\"#which-trezor-models-are-still-sold-in-2026\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"3\" data-answer=\"b\" data-title=\"What does the secure element in the Safe models actually do?\" data-section=\"#what-does-the-secure-element-in-the-safe-models-actually-do\">\n<p class=\"msq-question\">3. What does the certified secure element in the Safe models protect against?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 3 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">Being talked into revealing your backup<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">Somebody who physically has the device and the equipment to attack it, such as fault injection<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">Losing the phrase<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span><a href=\"https:\/\/trezor.io\/security\" target=\"_blank\" rel=\"noopener\">Trezor&#8217;s security page<\/a> documents the OPTIGA Trust M chip and the public disclosure programme. Seed extraction by voltage glitching was a known weakness of the older models; the chip does nothing about the threat that actually empties wallets. <a class=\"msq-section\" href=\"#what-does-the-secure-element-in-the-safe-models-actually-do\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"4\" data-answer=\"a\" data-title=\"How are Trezor owners actually losing their coins?\" data-section=\"#how-are-trezor-owners-actually-losing-their-coins\">\n<p class=\"msq-question\">4. How do most Trezor owners actually lose coins, per Trezor&#8217;s own guidance?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 4 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">By typing the recovery phrase into something after a manufactured emergency<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">By having the device cracked open<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">By firmware bugs<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span><a href=\"https:\/\/trezor.io\/learn\/security-privacy\/personal-security-standards\/scams-and-phishing\" target=\"_blank\" rel=\"noopener\">Trezor&#8217;s scams and phishing page<\/a> states any request for the wallet backup, PIN or codes is always a scam and that it will never contact you about your backup, through email, calls, AI generated voice, messaging apps or letters by post. <a class=\"msq-section\" href=\"#how-are-trezor-owners-actually-losing-their-coins\">Read the section<\/a><\/p>\n<\/li>\n<li class=\"msq-q\" data-q=\"5\" data-answer=\"b\" data-title=\"What happened in the August 2026 Trezor data breach?\" data-section=\"#what-happened-in-the-august-2026-trezor-data-breach\">\n<p class=\"msq-question\">5. How did the 4 September 2026 update change the shipping data incident?<\/p>\n<div class=\"msq-options\" role=\"group\" aria-label=\"Question 5 options\"><button type=\"button\" class=\"msq-opt\" data-opt=\"a\">It reduced the count to a few hundred<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"b\">It added roughly 67,000 United States customers from an earlier period, making the exposure about five times larger<\/button><button type=\"button\" class=\"msq-opt\" data-opt=\"c\">It confirmed private keys had leaked<\/button><\/div>\n<p class=\"msq-explain\" hidden><span class=\"msq-verdict\"><\/span><a href=\"https:\/\/trezor.io\/blog\/news\/recent-customer-data-exposed-in-shipping-provider-incident\" target=\"_blank\" rel=\"noopener\">The notice<\/a> first gave 11,742 full and 1,947 partial exposures for May to August 2026 orders, then added data the provider had retained from November 2019 to August 2021. No keys or devices were affected; what leaked is a phishing list that does not expire. <a class=\"msq-section\" href=\"#what-happened-in-the-august-2026-trezor-data-breach\">Read the section<\/a><\/p>\n<\/li>\n<\/ol>\n<div class=\"msq-result\" hidden><\/div>\n<\/div>\n<\/details>\n<script>(function(){\n  if (window.__msqInit) { return; }\n  window.__msqInit = true;\n  var root = document.getElementById('ms-quiz');\n  if (!root) { return; }\n  var meta = { slug: root.getAttribute('data-slug'), category: root.getAttribute('data-category'),\n               list: root.getAttribute('data-list') || '1' };\n  function qs(el, s){ return el.querySelector(s); }\n  function qsa(el, s){ return Array.prototype.slice.call(el.querySelectorAll(s)); }\n  function track(name, params){\n    try { if (typeof gtag === 'function') { var p = params || {}; p.article = meta.slug; gtag('event', name, p); } } catch (e) {}\n  }\n  function jumpList(missed){\n    if (!missed.length) { return ''; }\n    return '<ul class=\"msq-jump\">' + missed.map(function(q){\n      return '<li><a href=\"' + q.getAttribute('data-section') + '\">' + q.getAttribute('data-title') + '<\/a><\/li>';\n    }).join('') + '<\/ul>';\n  }\n  function emailForm(){\n    return '<div class=\"msq-sub\"><p><strong>Get the next one.<\/strong> We publish new articles on ' + meta.category\n      + ' most weeks and recheck this page on Sundays. Email me when a new article goes up or this page changes.<\/p>'\n      + '<form class=\"msq-form\" method=\"post\" action=\"\/mail\/form.php\" novalidate>'\n      + '<input type=\"hidden\" name=\"list\" value=\"' + meta.list + '\">'\n      + '<input type=\"hidden\" name=\"name\" value=\"\">'\n      + '<label class=\"msq-hp\" aria-hidden=\"true\">Leave this empty<input type=\"text\" name=\"website\" tabindex=\"-1\" autocomplete=\"off\"><\/label>'\n      + '<input type=\"email\" name=\"email\" placeholder=\"you@example.com\" required aria-label=\"Email address\" autocomplete=\"email\">'\n      + '<button type=\"submit\" class=\"msq-btn\">Email me the updates<\/button>'\n      + '<a href=\"#\" class=\"msq-no\">No thanks<\/a>'\n      + '<p class=\"msq-privacy\">We store your email and this page\\'s topic, nothing else. Unsubscribe any time.<\/p>'\n      + '<\/form><p class=\"msq-msg\" aria-live=\"polite\"><\/p><\/div>';\n  }\n  \/* The autoresponder always answers 200 with its own page. A \".msg.err\" box means the\n     address was rejected, \"You're subscribed\" means accepted, and a redirect only happens\n     after a successful subscribe. Same reading as the landing pages on the other sites. *\/\n  function sendForm(form){\n    return fetch(form.getAttribute('action'), { method: 'POST', body: new FormData(form), credentials: 'same-origin', redirect: 'manual' })\n      .then(function(res){\n        if (res.type === 'opaqueredirect') { return { status: 'ok' }; }\n        if (res.status === 404) { return { status: 'notlive' }; }\n        if (!res.ok) { throw new Error('HTTP ' + res.status); }\n        return res.text().then(function(t){\n          var doc = new DOMParser().parseFromString(t, 'text\/html');\n          var err = doc.querySelector('.msg.err');\n          if (err) {\n            var m = err.textContent.trim();\n            if (\/something went wrong\/i.test(m)) { throw new Error(m); }\n            return { status: 'rejected', message: m };\n          }\n          if (\/you.re subscribed\/i.test(doc.body.textContent)) { return { status: 'ok' }; }\n          return { status: 'unknown' };\n        });\n      });\n  }\n  function wireForm(sub){\n    var form = qs(sub, '.msq-form'), msg = qs(sub, '.msq-msg');\n    qs(form, '.msq-no').addEventListener('click', function(e){\n      e.preventDefault();\n      sub.innerHTML = '<p class=\"msq-msg\">No problem. The Sunday refresh keeps this page current either way.<\/p>';\n      track('quiz_email', { result: 'declined' });\n    });\n    form.addEventListener('submit', function(e){\n      e.preventDefault();\n      var input = qs(form, 'input[name=email]'), btn = qs(form, '.msq-btn');\n      var email = input.value.trim(); input.value = email;\n      if (!\/^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$\/.test(email)) { msg.textContent = 'That email does not look right.'; return; }\n      btn.disabled = true; btn.textContent = 'Sending';\n      function reset(){ btn.disabled = false; btn.textContent = 'Email me the updates'; }\n      sendForm(form).then(function(r){\n        if (r.status === 'ok' || r.status === 'unknown') {\n          sub.innerHTML = '<p class=\"msq-msg\"><strong>Done.<\/strong> We will email you when the next article on ' + meta.category\n            + ' goes up and when this page changes. If a confirmation email arrives, click it.<\/p>';\n          track('quiz_email', { result: r.status });\n          if (r.status === 'ok') { track('generate_lead', { method: 'quiz' }); }\n        } else if (r.status === 'notlive') {\n          msg.textContent = 'Sign up is not switched on yet for this site. Nothing was stored.'; reset();\n          track('quiz_email', { result: 'notlive' });\n        } else {\n          msg.textContent = r.message || 'Please check the email address and try again.'; reset();\n          track('quiz_email', { result: 'rejected' });\n        }\n      }).catch(function(){\n        msg.textContent = 'Could not reach the sign up service just now. Nothing was stored.'; reset();\n        track('quiz_email', { result: 'error' });\n      });\n    });\n  }\n  function finish(container, mode, score, total, missed){\n    var result = qs(container, '.msq-result');\n    track('quiz_complete', { mode: mode, score: score, total: total });\n    var h;\n    if (mode === 'pre') {\n      h = '<h3>You knew ' + score + ' of ' + total + ' before reading.<\/h3>';\n      h += (score === total) ? '<p>All of them. Read on anyway; the sections below carry the detail behind each answer.<\/p>'\n                             : '<p>The rest is below. Jump straight to what you missed:<\/p>' + jumpList(missed);\n      try { sessionStorage.setItem('msq-pre-' + meta.slug, String(score)); } catch (e) {}\n    } else {\n      var pre = null;\n      try { pre = sessionStorage.getItem('msq-pre-' + meta.slug); } catch (e) {}\n      h = '<h3>You got ' + score + ' of ' + total + '.<\/h3>';\n      if (pre !== null) { h += '<p>Before reading you had ' + pre + ' of ' + total + '.<\/p>'; }\n      if (missed.length) { h += '<p>Worth a second look:<\/p>' + jumpList(missed); }\n      h += emailForm();\n    }\n    result.innerHTML = h; result.hidden = false;\n    if (mode !== 'pre') { wireForm(qs(result, '.msq-sub')); }\n    result.scrollIntoView({ behavior: 'smooth', block: 'nearest' });\n  }\n  function setup(container, mode){\n    var qEls = qsa(container, '.msq-q'), answered = 0, score = 0, missed = [];\n    qEls.forEach(function(q){\n      var answer = q.getAttribute('data-answer'), opts = qsa(q, '.msq-opt'), explain = qs(q, '.msq-explain');\n      q.removeAttribute('data-done'); explain.hidden = true; qs(explain, '.msq-verdict').textContent = '';\n      opts.forEach(function(b){ b.disabled = false; b.classList.remove('is-right', 'is-wrong'); });\n      opts.forEach(function(b){\n        b.addEventListener('click', function(){\n          if (q.getAttribute('data-done')) { return; }\n          q.setAttribute('data-done', '1');\n          var ok = b.getAttribute('data-opt') === answer;\n          opts.forEach(function(o){ o.disabled = true; if (o.getAttribute('data-opt') === answer) { o.classList.add('is-right'); } });\n          if (ok) { score += 1; } else { b.classList.add('is-wrong'); missed.push(q); }\n          qs(explain, '.msq-verdict').textContent = ok ? 'Right. ' : 'Not quite. ';\n          explain.hidden = false;\n          answered += 1;\n          track('quiz_answer', { mode: mode, question: q.getAttribute('data-q'), correct: ok ? 1 : 0 });\n          if (answered === qEls.length) { finish(container, mode, score, qEls.length, missed); }\n        });\n      });\n    });\n  }\n  var box = qs(root, '.msq-box');\n  setup(root, 'pre');\n  if (box) { box.addEventListener('toggle', function(){ if (box.open) { track('quiz_open', { mode: 'pre' }); } }); }\n  \/* The end block sits far below this script, so it does not exist yet while this runs\n     during parsing. A delegated listener finds it at click time. *\/\n  document.addEventListener('click', function(e){\n    var startBtn = (e.target && e.target.closest) ? e.target.closest('.msq-start-test') : null;\n    if (!startBtn) { return; }\n    var end = startBtn.closest('.msq-end');\n    if (!end) { return; }\n    var mount = qs(end, '.msq-mount');\n    var clone = qs(root, '.msq-body').cloneNode(true);\n    var intro = qs(clone, '.msq-intro');\n    if (intro) { intro.textContent = 'The same five questions, now that you have read the page.'; }\n    var res = qs(clone, '.msq-result'); if (res) { res.hidden = true; res.innerHTML = ''; }\n    mount.innerHTML = ''; mount.appendChild(clone);\n    setup(mount, 'test');\n    startBtn.hidden = true;\n    track('quiz_open', { mode: 'test' });\n    mount.scrollIntoView({ behavior: 'smooth', block: 'start' });\n    var first = qs(mount, '.msq-opt'); if (first) { first.focus({ preventScroll: true }); }\n  });\n  \/* Shared tool behaviour: checklists remember their ticks on this device, and a chooser\n     shows the result for the option picked. Calculators carry their own small script. *\/\n  function initTools(){\n    qsa(document, '.msq-check').forEach(function(box){\n      var key = 'msq-check-' + meta.slug + '-' + (box.getAttribute('data-id') || 'x');\n      var boxes = qsa(box, 'input[type=checkbox]'), count = qs(box, '.msq-check-count');\n      var yes = qs(box, '.msq-verdict-yes'), no = qs(box, '.msq-verdict-no');\n      var saved = {};\n      try { saved = JSON.parse(localStorage.getItem(key) || '{}'); } catch (e) {}\n      boxes.forEach(function(cb, i){ if (saved[i]) { cb.checked = true; } });\n      function refresh(){\n        var n = boxes.filter(function(cb){ return cb.checked; }).length, state = {};\n        boxes.forEach(function(cb, i){ if (cb.checked) { state[i] = 1; } });\n        try { localStorage.setItem(key, JSON.stringify(state)); } catch (e) {}\n        if (count) { count.textContent = n + ' of ' + boxes.length + (box.getAttribute('data-verb') || ' done'); }\n        if (yes && no) { yes.hidden = n === 0; no.hidden = n !== 0; }\n      }\n      boxes.forEach(function(cb){ cb.addEventListener('change', function(){ refresh(); track('tool_check', { tool: box.getAttribute('data-id') }); }); });\n      refresh();\n    });\n    qsa(document, '.msq-choose').forEach(function(box){\n      var results = qsa(box, '.msq-choice-result');\n      qsa(box, 'input[type=radio]').forEach(function(r){\n        r.addEventListener('change', function(){\n          results.forEach(function(el){ el.hidden = el.getAttribute('data-for') !== r.value; });\n          track('tool_choose', { tool: box.getAttribute('data-id'), choice: r.value });\n        });\n      });\n    });\n  }\n  \/\/ read progress: how far down the article the reader has scrolled, fired once per quarter\n  (function(){\n    var art = root.closest('article') || root.parentNode, fired = {};\n    function check(){\n      var top = art.getBoundingClientRect().top + window.pageYOffset, h = art.offsetHeight || 1;\n      var seen = (window.pageYOffset + window.innerHeight - top) \/ h * 100;\n      [25, 50, 75, 100].forEach(function(m){ if (seen >= m && !fired[m]) { fired[m] = true; track('read_progress', { percent: m }); } });\n    }\n    window.addEventListener('scroll', check, { passive: true }); window.addEventListener('load', check);\n  })();\n  if (document.readyState === 'loading') { document.addEventListener('DOMContentLoaded', initTools); } else { initTools(); }\n})();<\/script>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor is made by SatoshiLabs in Prague and was the first hardware wallet anyone shipped. What matters more is what the current devices do, what changed in 2026, and where the protection stops.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-is-a-trezor-actually-protecting-you-from\">What is a Trezor actually protecting you from?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">A hardware wallet solves one narrow problem very well. Your private keys are generated on the device and stay there. When you send a payment, the unsigned transaction goes to the device, the device signs it internally, and only the signature comes back. Malware on your laptop never sees a key, because the key never travels.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The second protection is the screen. It shows the destination address and the amount, and nothing moves until you confirm on the hardware itself. That is the defence against address swapping malware, which quietly replaces a pasted address with the attacker one. Read the screen and the swap fails. Press through without reading and it does not. The same trade off is covered in <a href=\"https:\/\/getbitcoin.guide\/articles\/what-is-a-cold-wallet\/\">what a cold wallet is and is not<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That is the whole list. Everything else people assume a hardware wallet does, it does not do.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"627\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-2.jpg\" alt=\"Close up of a circuit board showing individual electronic components\" class=\"wp-image-59\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-2.jpg 1200w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-2-300x157.jpg 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-2-1024x535.jpg 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-2-768x401.jpg 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><figcaption class=\"wp-block-image__caption\">A certified secure element resists physical attack, not persuasion. Photo by Armando Are on Pexels.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"which-trezor-models-are-still-sold-in-2026\">Which Trezor models are still sold in 2026?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This changed recently and most published comparisons have not caught up. Trezor own <a href=\"https:\/\/trezor.io\/other\/product-updates\/how-long-will-trezor-model-one-and-model-t-be-supported\" target=\"_blank\" rel=\"noopener\">product update page<\/a> states that the Model One and Model T are no longer sold as of 8 January 2026, with limited availability through official resellers afterwards. The current range on trezor.io is the Safe 3, Safe 5 and Safe 7, each with a Bitcoin only variant.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor has committed to keeping the retired devices alive rather than abandoning them. The same page states basic maintenance until at least 2031 and critical security updates until at least 2036, with new coin support on the Model T until at least 2031. If you own one, it keeps working and keeps getting security fixes.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Model<\/th><th>Screen<\/th><th>Secure element<\/th><th>Sold new<\/th><\/tr><\/thead><tbody><tr><td>Safe 3<\/td><td>0.96 in monochrome, 128 x 64, two buttons<\/td><td>OPTIGA Trust M (V3), CC EAL6+<\/td><td>Yes<\/td><\/tr><tr><td>Safe 5<\/td><td>1.54 in colour touchscreen, 240 x 240<\/td><td>OPTIGA Trust M (V3), CC EAL6+<\/td><td>Yes<\/td><\/tr><tr><td>Safe 7<\/td><td>2.5 in colour touchscreen, 520 x 380, Bluetooth<\/td><td>Two: OPTIGA Trust M (V3) and TROPIC01<\/td><td>Yes<\/td><\/tr><tr><td>Model T<\/td><td>1.54 in colour touchscreen<\/td><td>None<\/td><td>No, retired January 2026<\/td><\/tr><tr><td>Model One<\/td><td>0.96 in monochrome<\/td><td>None<\/td><td>No, retired January 2026<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor lists the Safe 3 at 59 US dollars on its <a href=\"https:\/\/trezor.io\/trezor-safe-3\" target=\"_blank\" rel=\"noopener\">own product page<\/a>, checked again on 6 September 2026. Safe 5 and Safe 7 prices were not shown on the pages I could reach, and the figures circulating on review sites disagree with each other and with the official Safe 3 price. The Safe 5 figure has since been read directly from the vendor at 129 US dollars, on 2 October 2026, in our <a href=\"https:\/\/getbitcoin.guide\/articles\/trezor-safe-5-review\/\">review of the Safe 5 and its 20 word backup<\/a>. Check the store directly. Those review sites earn commission on the link.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-does-the-secure-element-in-the-safe-models-actually-do\">What does the secure element in the Safe models actually do?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Safe 3 and Safe 5 use an Infineon OPTIGA Trust M (V3) chip certified to CC EAL6+, and the <a href=\"https:\/\/trezor.io\/trezor-safe-7\" target=\"_blank\" rel=\"noopener\">Safe 7<\/a> uses two secure elements, the OPTIGA plus a TROPIC01. That is from Trezor own hardware documentation, not a marketing summary of it, and the company runs a public <a href=\"https:\/\/trezor.io\/security\" target=\"_blank\" rel=\"noopener\">bug bounty and vulnerability disclosure page<\/a> where resolved issues are listed by name.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What that buys you is narrow. A secure element hardens the device against somebody who physically has it in their hands and the equipment to attack it. Seed extraction by fault injection, sometimes called voltage glitching, was a known weakness of the Model One and Model T, and Trezor documents it as addressed in the secure element models.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor did not omit a secure element from the older devices by accident. Their explanation is that the chips available at the time required non disclosure agreements that conflicted with fully open source firmware, so they built around the problem with the passphrase and Shamir backup, and adopted a chip only once they found one without the NDA restriction. Whether openness or certification matters more is a genuine judgement call.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So the secure element matters if your realistic threat is a burglary or a lost device. It does nothing about the threat that actually empties wallets, which is being talked into revealing your backup. The same reasoning applies to the Ledger range, in the <a href=\"https:\/\/getbitcoin.guide\/articles\/ledger-nano-s-plus-review\/\">Nano S Plus review<\/a>. It applies just as squarely to biometric unlocking, which is why a fingerprint sensor cannot stand in for your backup, as the <a href=\"https:\/\/getbitcoin.guide\/articles\/dcent-biometric-wallet\/\">D&#8217;CENT biometric wallet shows in detail<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"how-are-trezor-owners-actually-losing-their-coins\">How are Trezor owners actually losing their coins?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">By typing their recovery phrase into something. Not by having their device cracked open.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Trezor own <a href=\"https:\/\/trezor.io\/learn\/security-privacy\/personal-security-standards\/scams-and-phishing\" target=\"_blank\" rel=\"noopener\">scams and phishing guidance<\/a> is unusually direct about this. It states that any request for your wallet backup, PIN, passwords or codes is always a scam, and that Trezor will never contact you about your wallet backup. The channels it documents include fake emails and websites, phone calls, AI generated text, voice and video impersonation, messages on WhatsApp and Telegram, and physical letters sent by post. Fake websites now reach people through search itself: on 22 September 2026 three lookalike pages outranked the real vendor for the query, which is why <a href=\"https:\/\/getbitcoin.guide\/articles\/trezor-official-website\/\">confirming you are on the Trezor official website<\/a> comes before plugging anything in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The pattern that keeps working is a manufactured emergency. Your device will be deactivated. Your account has a KYC problem. A security issue requires you to validate your wallet now. Trezor names this specific script on its scams page. The urgency is the product; the story wrapped around it is interchangeable.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"627\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-3.jpg\" alt=\"A smartphone lying face down beside a keyboard on a wooden desk\" class=\"wp-image-60\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-3.jpg 1200w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-3-300x157.jpg 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-3-1024x535.jpg 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/08\/trezor-hardware-wallet-3-768x401.jpg 768w\" sizes=\"auto, (max-width: 1200px) 100vw, 1200px\" \/><figcaption class=\"wp-block-image__caption\">Most losses start with a message, not a broken device. Photo by Pixabay on Pexels.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-happened-in-the-august-2026-trezor-data-breach\">What happened in the August 2026 Trezor data breach?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On 13 August 2026 Trezor published an incident notice titled <a href=\"https:\/\/trezor.io\/blog\/news\/recent-customer-data-exposed-in-shipping-provider-incident\" target=\"_blank\" rel=\"noopener\">Recent customer data exposed in shipping provider incident<\/a>. ShipMonk, one of its fulfilment providers, had its systems holding Trezor customer order data accessed without authorisation. The notice has been updated twice since, and the second update changed the size of it considerably.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The first figures were 11,742 customers with full exposure, meaning name, email address, phone number and shipping address, and 1,947 with partial exposure of name, city and email, covering orders shipped to the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal between 10 May and 8 August 2026.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Then on 4 September 2026 Trezor updated the notice to say the incident was larger than first reported. ShipMonk had also retained order data from an earlier period of cooperation running from November 2019 to August 2021, and roughly 67,000 further United States customers had full details exposed from that older set. If you read this article, or anything else about the incident, before early September, the number you took away was low by roughly a factor of five, and the window you checked your own orders against started years too late.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That older data is also the part that undercuts the reassurance in the first version of the notice. Trezor pointed to a 90 day retention policy as limiting the scope, which was true of its own systems and turned out not to be true of the provider holding the parcels. Trezor states throughout that its systems, hardware wallets, private keys and wallet backups were not affected, and nothing in the update changes that.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No keys were involved and no device was compromised. What leaked is a list of people who probably own Bitcoin, with their home addresses. Anyone who read the <a href=\"https:\/\/getbitcoin.guide\/articles\/ledger-nano-x-review\/\">Ledger Nano X review<\/a> on this site already knows why that is the dangerous part. The 2020 Ledger customer database leak produced years of targeted phishing, convincing fake support contact, and in some cases threats made to people at their homes. A shipping list is the raw material for exactly that, and it does not expire. Nor is this a 2020 story: in August 2026 <a href=\"https:\/\/getbitcoin.guide\/articles\/safepal-wallet-review\/\">the SafePal order leak put the home addresses of 39,798 hardware wallet buyers into circulation<\/a>, and targeted phishing aimed at those buyers followed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So the practical test is wider than it looked in August. If you ordered a Trezor into any of those countries between May and August 2026, or into the United States at any point between November 2019 and August 2021, treat every unexpected message about your wallet as hostile, including anything that arrives on paper. A shipping list does not expire and neither does your address.<\/p>\n\n\n\n<div class=\"msq-tool msq-choose\" data-id=\"breach-61\">\n<h3>Were your details in the shipping data exposure?<\/h3>\n<p>Two windows, from Trezor&#8217;s notice of 13 August 2026 and its update of 4 September. Pick the one that applies.<\/p>\n<label><input type=\"radio\" name=\"breach61\" value=\"recent\">I ordered a Trezor shipped to the United States, United Kingdom, Sweden, Colombia, Brazil, Italy or Portugal between 10 May and 8 August 2026<\/label>\n<label><input type=\"radio\" name=\"breach61\" value=\"old\">I ordered a Trezor shipped to the United States between November 2019 and August 2021<\/label>\n<label><input type=\"radio\" name=\"breach61\" value=\"none\">Neither<\/label>\n<div class=\"msq-choice-result\" data-for=\"recent\" hidden><strong>Treat every unexpected message about your wallet as hostile<\/strong>, including anything that arrives on paper. The first notice covered 11,742 customers with full details and 1,947 with partial details. No keys or devices were involved; what leaked is a list of people who probably own Bitcoin, with home addresses.<\/div>\n<div class=\"msq-choice-result\" data-for=\"old\" hidden><strong>You are in the larger set the 4 September update added:<\/strong> roughly 67,000 further United States customers whose full details the provider had retained from an earlier period. A shipping list does not expire and neither does your address, so the same rule applies for good: nothing genuine will ever ask for your backup or PIN.<\/div>\n<div class=\"msq-choice-result\" data-for=\"none\" hidden><strong>Not in either window, on the current notice.<\/strong> The rule still holds for everyone: Trezor states it will never contact you about your wallet backup, and any request for the backup, PIN or codes is always a scam.<\/div>\n<p class=\"msq-note\">Source: Trezor&#8217;s incident notice, linked in the section above. Check the notice itself for any later update.<\/p>\n<\/div>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1600\" height=\"900\" src=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/09\/trezor-hardware-wallet-chart.png\" alt=\"Chart of the Trezor hardware wallet shipping data exposure: 11,742 and 1,947 in August, about 67,000 more added in September.\" class=\"wp-image-250\" srcset=\"https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/09\/trezor-hardware-wallet-chart.png 1600w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/09\/trezor-hardware-wallet-chart-300x169.png 300w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/09\/trezor-hardware-wallet-chart-1024x576.png 1024w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/09\/trezor-hardware-wallet-chart-768x432.png 768w, https:\/\/getbitcoin.guide\/articles\/wp-content\/uploads\/2026\/09\/trezor-hardware-wallet-chart-1536x864.png 1536w\" sizes=\"auto, (max-width: 1600px) 100vw, 1600px\" \/><figcaption class=\"wp-block-image__caption\">Customers exposed, as stated in Trezor&#8217;s notice of 13 August 2026 and its update of 4 September. No keys, devices or backups were involved; names and delivery addresses were.<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"is-a-trezor-better-than-a-ledger\">Is a Trezor better than a Ledger?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The full side by side, with prices, secure elements and the open source question weighed against each other, is in <a href=\"https:\/\/getbitcoin.guide\/articles\/trezor-vs-ledger\/\">the honest Trezor and Ledger comparison<\/a>. The short version is that for most people the difference between the two brands is smaller than the difference between backing up properly and backing up badly. Both keep keys off your computer. Both make you approve on the device. Both are undone by a phrase typed into a phishing page. That is a boring conclusion and it is the correct one.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><thead><tr><th>Situation<\/th><th>What a Trezor changes<\/th><th>What it does not change<\/th><\/tr><\/thead><tbody><tr><td>Malware on your laptop<\/td><td>Keys never leave the device, so they cannot be read<\/td><td>Nothing, if you approve a malicious transaction<\/td><\/tr><tr><td>Someone steals the device<\/td><td>PIN, and on Safe models a certified secure element<\/td><td>Nothing, if your written backup is in the same drawer<\/td><\/tr><tr><td>A site asks for your recovery phrase<\/td><td>Nothing at all<\/td><td>The phrase alone controls the coins, device or no device<\/td><\/tr><tr><td>Your backup is lost or destroyed<\/td><td>Nothing, the device is not the backup<\/td><td>Only a tested, durable, offline written record helps<\/td><\/tr><tr><td>A letter or call claims to be support<\/td><td>Nothing, this is entirely a human decision<\/td><td>Trezor states it will never ask for a backup or PIN<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The passphrase is the one feature genuinely worth understanding. It is an extra secret layered on top of the recovery phrase, and Trezor notes it is never stored on the device, so it cannot be extracted even by a physical attack. It is also unrecoverable. Forget it and the coins behind it are gone. Typing one of those on a two button device is its own hazard, which is the practical case for a full keyboard on a signer like the <a href=\"https:\/\/getbitcoin.guide\/articles\/coldcard-q\/\">Coldcard Q<\/a>. The trade offs are covered in <a href=\"https:\/\/getbitcoin.guide\/articles\/self-custody-crypto\/\">what self custody actually asks of you<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"what-should-you-check-before-setting-up-any-hardware-wallet\">What should you check before setting up any hardware wallet?<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Buy from the manufacturer or a listed official reseller, never from a marketplace listing.<\/li>\n\n<li>Expect to write the backup down on paper or steel at setup, before any coins arrive.<\/li>\n\n<li>Confirm the device generates the backup itself. One that arrives with a phrase already printed is a trap.<\/li>\n\n<li>Decide in advance where two copies of the backup will live, in different buildings.<\/li>\n\n<li>Assume any message about your wallet is fraudulent until you prove otherwise through a channel you chose.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">None of that depends on which brand you pick. The framework for that choice, with no recommendation attached, is in <a href=\"https:\/\/getbitcoin.guide\/articles\/best-crypto-wallet\/\">how to choose a crypto wallet<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"so-where-does-that-leave-the-trezor\">So where does that leave the Trezor?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Safe range is competently built, with an open source firmware policy, a certified secure element, and a support commitment on retired hardware running to 2036. Those are checkable facts, and they sit on Trezor own site rather than in a review.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They are also not what decides whether you still hold your coins in five years. That is decided by whether your backup survives a house move, and whether you hold your nerve when a well written message says your wallet needs urgent validation. If splitting the risk across several devices sounds like the fix, <a href=\"https:\/\/getbitcoin.guide\/articles\/multisig-for-one-person\/\">a 2 of 3 takes the list of things that must survive from two to nine<\/a>, and the reported failures are paperwork rather than hardware. The device cannot help with either. It was never designed to.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"frequently-asked-questions\">Frequently asked questions<\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-q-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Is the Trezor Model One discontinued?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Yes. Trezor product update page states the Model One and Model T are no longer sold as of 8 January 2026, with limited availability through official resellers afterwards. Existing devices keep working, with basic maintenance committed until at least 2031 and critical security updates until at least 2036.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Does a Trezor protect me if I get phished?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>No. If a recovery phrase is entered into a website, form or app, that phrase alone controls the coins and the hardware becomes irrelevant. Trezor own guidance states that any request for your wallet backup, PIN, passwords or codes is always a scam. A recovery phrase should never be typed anywhere.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-3\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Was I affected by the August 2026 Trezor data breach?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Possibly, and the answer widened on 4 September 2026. The original notice of 13 August covered orders shipped to the United States, United Kingdom, Sweden, Colombia, Brazil, Italy and Portugal between 10 May and 8 August 2026, with 11,742 customers fully exposed and 1,947 partially. The update added roughly 67,000 further United States customers whose order data dated from November 2019 to August 2021. Trezor says affected customers were contacted by email, and that no keys, backups or devices were involved.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-4\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Do I need a Trezor with a secure element?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>That depends on whether physical theft is a realistic concern for you. The Safe 3, Safe 5 and Safe 7 carry a certified secure element that addresses fault injection attacks known on the older models. It makes no difference at all to phishing, which is the more common way funds are lost.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-5\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">What is a Trezor passphrase?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>A passphrase is an extra secret layered on top of the recovery phrase. Trezor notes it is never stored on the device, so it cannot be extracted physically. It is also completely unrecoverable if forgotten, so it adds a second thing that must never be lost rather than simply adding safety.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-6\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">Can Trezor support recover my wallet if I lose my backup?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>No. There is no reset, no identity check and no account recovery. Nobody at Trezor can restore access, and any message claiming otherwise is fraudulent. This is why the written backup, stored offline in two separate places and checked at setup, is the part that genuinely matters.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-q-7\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \">What can someone actually do with my leaked shipping address?<\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Target you personally rather than at random. A shipping list identifies people who probably hold Bitcoin, with a name, a phone number and a home address attached. That is the raw material for convincing fake support contact, for letters that arrive on paper looking official, and after the 2020 Ledger leak, in a documented minority of cases, for threats made to people where they live. No device setting changes any of this. What helps is refusing to act on any unexpected contact about your wallet, whatever form it arrives in.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<div class=\"msq-end\" id=\"ms-quiz-end\">\n<p><strong>Finished the page?<\/strong> The same five questions from the top, to see what stuck.<\/p>\n<button type=\"button\" class=\"msq-btn msq-start-test\">Test Your Understanding of This Article<\/button>\n<div class=\"msq-mount\"><\/div>\n<\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>This article is educational and is not financial advice. Nothing here is a recommendation to buy, sell or hold anything. You are responsible for your own security decisions.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Trezor keeps your keys off your computer and forces you to approve payments on the device. It cannot stop you being talked into typing your recovery phrase, which is how most owners actually lose coins.<\/p>\n","protected":false},"author":1,"featured_media":58,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","rank_math_title":"Trezor Hardware Wallet Review: What It Protects, and What It Does Not","rank_math_description":"An honest look at the Trezor hardware wallet: which models are still sold in 2026, what the secure element does, the August 2026 shipping data breach, and the one risk no device can stop.","rank_math_focus_keyword":"trezor hardware wallet","rank_math_canonical_url":"","rank_math_breadcrumb_title":"","rank_math_facebook_title":"","rank_math_facebook_description":"","rank_math_facebook_image":"","rank_math_twitter_title":"","rank_math_twitter_description":"","rank_math_twitter_image":"","rank_math_pillar_content":"","rank_math_robots":[],"rank_math_advanced_robots":[]},"categories":[2],"tags":[],"class_list":["post-61","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-wallets"],"_links":{"self":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/61","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/comments?post=61"}],"version-history":[{"count":14,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/61\/revisions"}],"predecessor-version":[{"id":760,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/posts\/61\/revisions\/760"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/media\/58"}],"wp:attachment":[{"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/media?parent=61"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/categories?post=61"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/getbitcoin.guide\/articles\/wp-json\/wp\/v2\/tags?post=61"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}