Trezor.io/Start® — Starting™ Up Your Device | Trezór®

1. Unboxing & device verification

When your Trezor arrives, treat the packaging and device as potentially sensitive. Take a moment to carefully inspect the box and its contents before powering the device.

Checklist — what should be in the box

• Your Trezor device (Model One or Model T).
• Official USB cable (USB-C or micro-USB depending on model).
• Recovery seed card(s) or blank paper for writing down your phrase.
• Quick start leaflet and tamper-evident stickers.

Tamper inspection

Ensure tamper-evident stickers are intact and the seal is unbroken. If the packaging looks opened, resealed, or otherwise suspicious, do not use the device — contact the seller or Trezor support immediately. Buying from authorized channels reduces this risk.

2. Initial device setup

These steps will guide you through safely initializing your Trezor for the first time. The device keeps your private keys offline — the host computer never has direct access to them.

Step-by-step setup

1. Connect the device to a trusted computer using the supplied USB cable. Avoid unfamiliar public computers.
2. Open suite.trezor.io in a modern browser or download the Trezor Suite desktop app from the official website — desktop app recommended for best experience.
3. Follow the on-screen prompts. The Suite will detect your device and guide you through verification, firmware checks, and wallet creation.
4. Verify device screen — always confirm that the model number and device fingerprint (displayed in Suite) match what appears on your device. This prevents host-side spoofing.
5. Install firmware if the Suite recommends it. Firmware is cryptographically signed. Confirm checksums/fingerprints shown in both the Suite and the device before proceeding.
6. Create a PIN on your device. Trezor uses a randomized on-screen keypad to prevent input capture; never enter your PIN directly into your computer keyboard without verifying digits on the device display.
7. Choose: create a new wallet or recover an existing one using your seed words. For a brand-new wallet, the device will generate a new recovery seed on-screen — write it down by hand immediately.

Tip: For maximum security, perform initial setup with a freshly installed OS or a trusted clean computer. This is not strictly necessary for most users but reduces attack surface.

3. Recovery seed generation & secure backup

The recovery seed (mnemonic) is the human-readable representation of your wallet’s private key. Protect it as you would a bank vault key: anyone with the seed controls your funds.

How recovery works

Trezor uses BIP39/BIP32 standards for seed and key derivation (depending on model and configuration). The device generates true entropy and displays your seed words on the device screen only. It is crucial never to enter the seed into any online device or store a digital copy.

Best-practice backup steps

1. Write it down: carefully transcribe each word in order onto the provided recovery card or high-quality archival paper. Double-check spelling and ordering.
2. Use multiple physical copies: store at least two copies in geographically separated secure locations (home safe, bank safe deposit box, trusted family member). Avoid storing all copies in one place.
3. Consider metal backups: for long term durability use stainless steel seed plates that resist fire, water, and time.
4. Do not photograph: never take a photo of your seed or store it in cloud services or password managers.
5. Shamir backup (advanced): if your model supports Shamir Secret Sharing (SLIP-0039), you can split your seed into N shares with a threshold M required to recover. This is useful for institutional or high-value setups.

Testing your backup

After writing your seed, perform a test recovery on a spare device in a controlled environment — this confirms you recorded the words correctly. Do not test on a device with funds unless you fully control the environment.

4. Trezor Suite — installation and core features

Trezor Suite is the official desktop (and web) interface for managing your Trezor device. It provides a unified UI for accounts, sending/receiving, firmware updates, and configuration.

Installing Trezor Suite

1. Download the installer from the official Trezor website (verify domain and checksum where provided).
2. Install the desktop app for your OS (Windows, macOS, Linux). On macOS, you might need to allow the app in Security & Privacy settings.
3. Open the Suite and connect your Trezor. Follow guided steps to either create a new wallet or restore an existing one.

Core Suite features

• Portfolio overview and transaction history
• Receive addresses (QR & copy) with on-device verification
• Send flow with fee estimation and on-device confirmation
• Device settings: change PIN, toggle passphrase (hidden wallets), and view device info
• Integration with third-party wallets and dApps for advanced use cases

Always verify transaction details (recipient address, amount, fee) on your device screen before approving. The Suite constructs transactions but cannot sign them without your device confirmation.

5. Using your wallet — sending, receiving & account management

Receiving funds

1. Open Trezor Suite → Accounts → Receive.
2. Select the account and request an address.
3. Confirm the address shown in the Suite matches the address displayed on your Trezor device.
4. Share the confirmed address with the sender.

Sending funds

1. Open Accounts → Send in Suite.
2. Enter or paste the recipient address and amount. Use the QR scanner for mobile convenience.
3. Review the fee and transaction details — adjust fee if needed for timely confirmation.
4. Confirm details on the device screen and approve the transaction; the Trezor signs it with the private key stored only on the device.

Managing multiple cryptocurrencies

Trezor supports many major blockchains. Add accounts in the Suite for each asset you want to manage. For certain chains or tokens, third-party wallets may offer additional features; when connecting them, the device still signs transactions securely.

6. Advanced features & options

Passphrase-protected hidden wallets

A passphrase augments your seed with an additional secret, creating an independent hidden wallet. This provides plausible deniability and improved security — but if you forget the passphrase, those funds are irretrievable. Treat the passphrase like a separate, highly confidential password.

Multisignature (multisig)

For institutional or high-value storage, consider multisig setups where multiple keys (on different hardware wallets or parties) are required to sign transactions. This reduces the risk of a single point of failure.

Third-party integrations

Use MetaMask, WalletConnect, Electrum, or other wallets to interact with DeFi or specialty chains. When using integrations, always verify transaction details on the Trezor device; the device signs the transaction locally.

7. Firmware updates & device maintenance

Firmware keeps your device secure and compatible. Trezor firmware has cryptographic signatures so Suite and the device can verify authenticity.

Updating steps

1. When connecting your device, Suite will check for firmware updates and notify you if one is available.
2. Read release notes and confirm checksums/fingerprints presented by Suite match those on the device (when displayed).
3. Follow prompts to download and install. Do not disconnect the device during the update — let the device reboot and display completion messages.

Device care

• Keep the device clean and dry.
• Avoid exposing it to extreme temperatures or magnetic fields.
• Store unused devices in secure places and do not leave them unattended when connected to unknown computers.

8. Security checklist & best practices

• Purchase only from trusted vendors (official store or authorized resellers) to avoid supply-chain tampering.
• Never disclose your seed or passphrase — Trezor staff will never ask for them.
• Keep multiple physical backups in separated locations and consider metal seed backups for durability.
• Use a strong, non-trivial PIN and change it if compromised.
• Enable passphrase only if you can reliably manage and remember the passphrase.
• Consider multisig for high-value holdings and diversify custody.
• Test recoveries on spare hardware before you need them in an emergency.

If you suspect compromise (someone saw your recovery phrase, or the device was tampered with), move funds to a new wallet created from a freshly generated seed on an uncompromised device immediately.

9. Support, troubleshooting & FAQ

Common issues

Device not detected

• Try a different USB cable or port; avoid unpowered USB hubs.
• Restart your computer and open Trezor Suite again.
• Ensure browser extensions or security software are not blocking the connection.

Firmware update problems

If an update fails, reconnect the device and open Suite — it will usually offer recovery mode instructions. If the device is unresponsive, follow official recovery steps or contact support.

I lost my seed

Without your seed, your wallet cannot be recovered. If you still have device access, move funds to a new wallet with a newly generated seed and back it up properly.

Short FAQ

Can I use Trezor with MetaMask?

Yes — Trezor integrates with MetaMask and other wallets. The private keys remain on the Trezor device and signatures are confirmed on-device.

Does Trezor support NFTs?

Trezor supports NFTs via compatible wallets and third-party interfaces; token support depends on the blockchain and wallet used to view/manage the tokens.

What happens if my device is stolen?

If your seed is secure, an attacker still needs the seed or passphrase to access funds. Use the PIN and passphrase options to minimize risk. Restore from seed on a new device to regain access.