Welcome
This page walks you through starting up your Trezor device, from unboxing to sending your first test transaction. It covers device authenticity checks, seed creation and backup, PINs and passphrases, firmware updates, troubleshooting, and daily security practices. Follow each step carefully — security depends on both hardware protections and correct user procedures.
Before you open the box
Make sure you purchased the device from an authorized seller. Check the vendor's official list of approved retailers. Inspect tamper-evident seals on arrival. If packaging appears altered, contact support and do not proceed with setup.
What you'll need
- Your Trezor device (Model One or Model T).
- A computer with a modern browser, or the official Trezor Suite desktop app.
- A USB cable compatible with your device and computer.
- A physical notebook or recovery card and a pen (do not use photos or digital notes for your seed).
- Optional: metal recovery backup plate for fire/water resistance.
Step-by-step: Start up your device
Unpack the device in a clean area. Inspect for tamper seals and physical damage. Compare the serial number printed on the device with any documentation in the box.
Visit trezor.io/start or the official download page and download Trezor Suite for your OS. Verify the URL carefully — phishing sites may mimic official pages. Desktop Suite is recommended for a robust installation experience; the web version works in modern browsers.
Connect the Trezor to your computer with the USB cable. The device should display a welcome message. If nothing appears, try another cable or port. Avoid USB hubs for initial setup.
Trezor Suite will show a device fingerprint and prompt you to verify it on the device screen. Confirm the fingerprint exactly as shown to ensure the device and host are paired and haven't been tampered with in transit.
Select Create a new wallet to generate a new recovery seed on the device. If you already have a seed, choose the recovery option and enter words when prompted on the device. Never enter your recovery seed into your computer or phone; only input words on the Trezor device itself when asked during recovery.
Your device will generate a seed — a list of 12, 18, or 24 words. Write the words down in order on paper or a recovery card. Double-check spelling and order. Store copies in secure, separate locations. Consider transferring the words to a metal backup for long-term durability, but avoid taking digital photos of the seed.
Choose a PIN on the device. The PIN prevents unauthorized access to the device if lost or stolen. Use a non-obvious PIN and avoid reusing commonly-known numbers. The device will prompt you to confirm the PIN.
Consider adding a passphrase for additional security or hidden wallets. A passphrase is an extra word or phrase appended to your seed to create an alternate wallet. It provides plausible deniability but adds complexity — losing your passphrase means losing access to funds in that wallet.
If prompted, update your device firmware through Suite. Firmware updates often include security fixes and feature improvements. Always apply firmware updates via the official Suite and verify update prompts on the device screen.
Add account types (Bitcoin, Ethereum, etc.) in Suite. Send and receive a small test transaction to make sure everything functions end-to-end. When receiving, verify the address displayed in Suite matches the address on the device screen.
Security best practices explained
Seed safety
Your recovery seed is the absolute key to your funds. Never share it, never store it digitally, and never enter it into a computer or website. Use physical backups and consider geographic separation for redundancy. If possible, use a metal backup to mitigate fire and water damage.
PIN strength
Choose a PIN you can remember but others cannot guess. If you forget your PIN, you must reset the device and restore from your recovery seed. The device will erase itself after a number of incorrect PIN attempts to protect against brute force attacks.
Passphrase trade-offs
A passphrase provides strong additional security and allows multiple hidden wallets from the same seed. However, if you forget the passphrase, funds in that passphrase-derived wallet are unrecoverable. Record passphrases securely and treat them like seeds.
Software hygiene
- Download Suite only from the official site; verify downloads where possible.
- Keep your operating system and apps patched, and use reputable antivirus/security tools where appropriate.
- Avoid setting up or performing high-value transactions on public or untrusted computers.
Common troubleshooting
- Device not powering on: Try a different cable and USB port. Verify the cable supports data (some cables are charge-only).
- Suite does not detect device: Restart Suite and the computer. Try another USB port, and avoid USB hubs. Ensure Bridge or required drivers are installed.
- Forgot PIN: Reset the device to factory settings and restore from your recovery seed.
- Seed restore shows no funds: Confirm you selected the correct seed length and derivation settings, and check whether a passphrase was used.
Daily use & transaction safety
When sending funds, prepare the transaction in Suite and always verify the recipient address, amount, and fee on your Trezor device. The Trezor screen is your trusted display and will show transaction details even if the host computer is compromised. For receiving, generate a new address in Suite and confirm the address on the device before sharing it.
Small test transactions
When interacting with a new service (exchange, dApp, or wallet), send a small test amount first. This simple step helps detect address manipulation, incorrect tokens, or unexpected fees.
Advanced topics
Multisig setups
Trezor devices can be used in multi-signature schemes for enhanced security and shared custody. Multisig reduces single-point-of-failure risk and is recommended for higher-value holdings or organizational treasury management.
Shamir backup / SLIP-0039
Some advanced backup schemes let you split the seed into multiple shares, requiring a subset to recover. This can be useful for distributing custody or adding extra resilience.
Using passphrases safely
Store passphrases separately from your seed. Consider using a password manager with hardware-backed encryption or a dedicated, offline record. Avoid typing passphrases into networked devices when possible.
What to do if something goes wrong
- Stop and assess: do not rush. Rushed actions increase mistakes.
- Do not share your recovery seed with support personnel or anyone else — legitimate support will never ask for it.
- Collect non-sensitive diagnostics (device model, firmware version, and screenshots of error messages) for support. Never include your seed or passphrase in shared logs.
- If you suspect device tampering or loss, move funds to a new wallet using a different device as soon as possible after restoring the seed on a trusted device.
Checklist before you finish setup
- Device authenticity checked on-screen.
- Recovery seed written down and stored in at least two secure physical locations.
- PIN set and tested.
- Firmware updated to the latest official version.
- Small test transactions completed successfully.
Glossary
- Recovery seed: A human-readable list of words (mnemonic) that can recover your wallet.
- PIN: Numeric code to unlock the device for routine use.
- Passphrase: Optional extra word or phrase appended to the seed to create hidden wallets.
- Firmware: Device-level software that runs on the hardware wallet.
Further resources
Consult the official documentation, firmware release notes, and support channels for device-specific instructions and the latest security advisories. Always validate you are on the correct official domain when downloading software or seeking help.