Setting up Trezor One
- 1 Starting
- 2 Using
- 3 Additional security measures
Important note before we start
We are currently moving our software infrastructure from Trezor Wallet (web) to Trezor Suite (app). We'll finish the transition within Q1 2021, and after that, we will be closing our ecosystem on Trezor Suite and will gradually put Wallet out of use.
For now, you can use both Trezor Wallet and Trezor Suite interfaces. They are equally safe to work, but we recommend you to get familiar with Trezor Suite right from the start, as we plan to have it as our main and only wallet interface.
This guide is designed to help you get familiar with Trezor Model One using Trezor Suite.
First thing first
- Download Trezor Suite from https://suite.trezor.io
- Begin the setup process by connecting your Trezor device to your computer using a USB cable. Please make sure that the device is properly connected.
- When connected, open Trezor Suite and click the Begin setup button.
- Our devices were manufactured before we started the transition and they were designed to onboard new users via Trezor Wallet. Thus on the first stage of the initialization, your device will ask you to go to trezor.io/start (a link to Trezor Wallet) - and It is the only time when we recommend you to do other than what your device requires!
- Click Create new wallet and proceed with verification of the package following the instructions in Trezor Suite
Install the latest firmware
New Trezor devices are always shipped without a pre installed firmware to ensure the latest firmware is installed when initializing a new device. Leaving this step to you also enables you to check the legitimacy of the firmware.
To install the firmware, simply click on Install firmware. To finish the installation, reconnect your Trezor device when asked.
If you receive a new Trezor device with the firmware already installed, please contact us immediately!
Create a new wallet
To generate a new wallet, click on Create new wallet and follow the instructions on your device. Your device will generate a new and unique seed which will hold all of your accounts and addresses.
Create a backup
Click on Create backup and prepare to write down your recovery seed on the specially designed cards included in the package.
You will be presented with a random set of English words, each displayed on your device's screen.
Note that the seed will only be presented to you twice in a row and then never again. It is not possible to get to the seed or have the device display the words ever again. Pay close attention to every word and make sure you write it down correctly and in the right order.
Push the right button on your device to see the next word of your recovery seed. Carefully write down the words in the exact order they are presented.
Once all of the words are recorded in the recovery card, your Trezor device will display the 24-word recovery seed again so you can verify the correct order and spelling.
Never make a digital copy of your recovery seed and never upload it online!
Set up a PIN
A PIN protects your Trezor device against unauthorized physical access. It is recommended to set up PIN protection as soon as you initialize your new device.
Enter your PIN by clicking on the obscured numerical pad displayed in the browser. The layout revealing the position of the digits is displayed on your Trezor device.
The PIN layout changes at each new prompt. Recommended PIN length is 4-6 digits without repeating digits. The maximum PIN length is 9 digits.
After you set your PIN, the Setup is complete. You’ll now be directed to Trezor Suite, where you will be able to select the wallet to access.
We recommend you to choose Standard wallet as the initial and default wallet. You can learn about Hidden wallets and Passphrase in the bottom section of this guide.
Once you have initialized your Trezor, your Trezor Suite is ready to be used. You should now see the home screen with a Dashboard and your Portfolio.
In the Assets section, you’re shown (yet empty) Bitcoin balance, you can add more assets by clicking + Enable more coins.
By clicking on Accounts, you will see an empty Transactions tab.
- Select the cryptocurrency that you would like to receive by clicking + on the top left side of the screen near My accounts
- For the full list of supported cryptocurrencies, click here.
Do not send or receive transactions to addresses generated for a different cryptocurrency, e.g., bitcoin cash to a Bitcoin address.
- Select the Receive tab to get your first receiving address. Make sure that the receiving address you have provided to someone else has not been changed by the infected computer. The feature Show full address has been developed exactly for this purpose.
- At this point, you will be asked to check and confirm the address on your Trezor. Always make sure the receiving address created by your Trezor device matches the one in Trezor Suite. This will make sure that the address is yours and not one generated by a third party.
You can always re-check and re-confirm the address on your Trezor device by clicking on the eye icon next to the address in Trezor Suite.
- Now you can use your newly generated address to receive funds. When someone makes a payment to you, you will see it in your transaction panel. At first, it will appear as unconfirmed. After the transaction gets its first confirmation in the network, you will see the "unconfirmed" text replaced by the time of the confirmation. You can always double-check the status of your transaction in a blockchain explorer by clicking on the confirmation time.
You can send your newly received funds even before the first confirmation. However, we strongly recommend waiting until the transaction is confirmed multiple times (three to six confirmations is considered safe). The confirmation time varies based on the transaction fee and the state of the network.
To make payments, plug in your Trezor device and go to the account page in Trezor Suite.
- Select the cryptocurrency that you want to send on the left side of the screen under My accounts.
- Go to the Send tab
Remember only to send and receive funds between accounts of the same cryptocurrency. Mixing accounts of different cryptocurrencies is very likely to end with a loss of funds.
- Enter the destination address and the amount.
You can type in the destination address for your transaction. You can also scan it in the form of a QR code (if available) simply by pressing the Scan button in the address field and holding the QR code in front of your computer webcam.
- Insert the value of the funds you want to send (in the selected cryptocurrency or a fiat currency of your choice).
Please remember that the fiat currency exchange rates are estimates based on the current exchange rate (provided by CoinGecko).
By pressing the + Add recipient button, you can send funds to multiple addresses with one transaction. Sending funds to multiple addresses at the same time is convenient and saves you money in transaction fees.
- Setting transaction fee
There are four different levels of priority (high, normal, economy, low). Please note that the fees are used to fund the running of the network and are not charged by SatoshiLabs.
In case you have enabled labeling you will also see the comment row, where you can write a comment for the current transaction.
- Confirm the transaction on your Trezor
Once you press send, you will be asked to confirm your transaction. Check the amount of the transaction and the destination address. If the amount and address are correct, press confirm. If the amount and address displayed on your Trezor screen are not the same as those on your computer screen, your computer might be infected. Do not worry; your funds are still safe in your Trezor. However, we strongly advise contacting our support.
Once you have confirmed the destination address(es) and amount(s) of your coin transaction, your Trezor will display the total amount of the transaction along with the transaction fee. Again, check them and confirm.
- Transactions confirmation
You can see your transactions in the Transactions tab. At first, it will appear as unconfirmed. After the transaction gets its first confirmation in the network, you will see the time of the confirmation next to the transaction. You can always double-check the status of your transaction in a blockchain explorer by clicking on the confirmation time.
We strongly recommend waiting until the transaction is confirmed multiple times (three to six confirmations is considered safe) to view it as complete. The confirmation time varies based on the transaction fee and the state of the network.
Updating the device firmware is often the only way to expand the functionality of your Trezor, to apply new security measures, and to enable newly developed features.
When a new firmware version is released, Trezor Suite will display an easily noticeable bar in the upper part of the wallet interface.
Clicking the Show details button allows you to review the changes brought with the update and displays instructions asking you to connect the device in bootloader mode.
- To check your current firmware version, enter bootloader mode (see below) or go to the Advanced settings in Trezor Wallet. To see the firmware changelog, see Trezor firmware changelog.
1. Entering bootloader mode
Connect your Trezor while using your finger to hold the left button pressed.
2. Updating the firmware
- Important Before the firmware update, make sure to have your recovery seed available in case you need to immediately recover your wallet. Some firmware updates delete the memory of your device. You can check the validity of your seed at any time by doing the Dry-run recovery (as indicated below in this manual).
When in bootloader mode, read the instructions and warnings carefully and check the relevant box to enable the Update my device button. Confirm the update on your device and let the Trezor update the firmware.
- Important Your Trezor will wipe itself if the device loses connection while loading the new firmware. This can sometimes happen due to a faulty or disconnected cable. In such case, reconnect your Trezor and repeat the whole process. Prepare to recover your accounts afterwards.
3. Let the device load the new firmware. Do not disconnect the device while the firmware is loading.
The dry-run recovery is a useful way to test your recovery seed. It is recommended to test your seed before you wipe the Trezor device or before every firmware update. It allows you to double check that your recovery seed backup is correct.
By starting the verification process, you are telling the device that you want to run the recovery process, but you do not want the device to remember the seed. Instead, in the end, the device compares the seed saved in its storage and the seed you have just “recovered,” and the result of this comparison is sent to the Suite interface. If the seeds match, a message on your Trezor device screen will tell you your backup is okay. If it is not the same, then the device screen will show you an error.
Dry-run recovery manual:
1. Go to Trezor Suite
2. Click on the Settings button in the top-right corner.
3. Go to the Check backup section and click on Check backup
4. Select the number of words in your recovery seed and click on Continue
5. Follow the instructions on your computer screen and your Trezor device.
Recovery refers to the process of using a recovery seed to restore and enable access to already existing accounts.
If you lost your PIN and need access to your accounts, or if you wish to load a different seed onto your device, you need to wipe the memory of your Trezor.
- *See Wiping the Trezor device on our wiki for detailed instructions.
1. After you wiped your device, make sure you have your Trezor connected to a computer and go to Trezor Suite.
2. Click on Recover wallet
3. Select the number of words used in your recovery seed. Typically, this would be 12, 18, or 24.
- You can enhance the safety of the recovery process by choosing to do the Advanced Recovery. This method allows you to use your mouse to obfuscate your input and feed the words of your recovery seed directly to your device, effectively circumventing all risky communication with your computer.
4. Click on Continue button.
5. Do you remember using the Passphrase feature to protect your accounts in the past? You can check the ✔ box right next to "I used passphrase before" to enable this feature now. If you are not sure, leave the box unchecked.
6. This feature can be turned on at any time in the future. Click on Continue.
7. Read the Terms of Service and confirm the action by pressing the right button on your Trezor device.
- Remember, you should never even touch your written backups until you confirm this action on your device. Beware of websites and applications that ask for the words of your recovery seed. Always look for instructions and confirmations on your physical Trezor device.
8. Enter the individual words of your seed, following the instructions displayed on the screen of your Trezor.
Because the words of your recovery seed are drawn from a finite list, Trezor Suite interface can predict the word and offer you a suggestion. To confirm, click on the correct word or hit enter on your keyboard.
- Are your words not showing up? Make sure you are not misspelling your seed words. For more information, please see Commonly misspelled recovery seed words.
9. When you finish entering the recovery seed, the page automatically refreshes and lets you access the accounts. You can now access your accounts using the Trezor Suite interface.
Once you have successfully recovered your wallet, continue the setup by enabling the basic security features (as described in this document), and customizing your experience.
Warning! Never enter your seed online in a straight start-to-end sequence as written in your Recovery seed card! Enter the words in a random order as instructed by your device. Never disclose the order in your browser.
Accepting Monero with Trezor One
Because of the higher hardware requirements Monero is not supported on Trezor One natively and it is supported only on high end Trezor Model T.
However, even with Trezor One you can still accept Monero donations for your organizations. This is possible thanks to the XMR.to service which transparently converts Monero to Bitcoin.
Additional security measures
Passphrase is an optional feature of the Trezor device which allows users to create hidden wallets. Passphrases serve as a function of second-factor protection of the recovery seed and are an ultimate protection against attacks involving physical access to the device or the recovery seed.
- The passphrase is not stored anywhere on the device. It is only used temporarily whenever you enter it.
- A passphrase, as implemented in Trezor devices, can be any character or set of characters, a word, or a sentence up to 50 bytes long (~50 ASCII characters).
- Passphrases are case-sensitive - lowercase and uppercase characters are distinguished and count as different.
- A space (blank) is a valid character.
- The passphrase and recovery seed belong together. Neither can be used without the other if you sent your coins to a passphrase protected wallet.
- It only exists in your head.
Because the passphrase is not stored anywhere on the device, it is impervious to any attacks involving physical access and tampering with the chip. Furthermore, if somebody compromised your physical copy of the recovery seed, they still would not be able to access your passphrase protected wallet unless they knew the passphrase.
- Any number of hidden wallets.
Passphrases are free. You can create as many passphrases in combination with your recovery seed as you like. This ease of creating a new wallet lets you gain a secondary advantage of hidden wallets = plausible deniability.
Potential risks when using passphrases:
- By using the passphrase feature, you gain lots of additional personal responsibility in direct proportion to the security enhancements.
Because the passphrase is not stored anywhere, you need to take all necessary precautions in order to preserve the passphrase safe, be it a physical backup or just a memory.
If the passphrase is lost, it can only be found by guessing (brute-forcing) which is often technologically and economically infeasible (read impossible). The difficulty of guessing the passphrase varies depending on the strength (complexity) of the passphrase.
Before you activate passphrases on your wallets, we strongly recommend you to be as well informed about this technology as possible. Here are several articles that will help you learn more about it.