What Trezor Suite is and how to use it safely

What Trezor Suite is

Trezor Suite is the official desktop and web interface built by SatoshiLabs, the Prague company that shipped the first commercial Trezor hardware wallet in 2014. It succeeded the older browser-only wallet interface and is now the default way to initialize a device, hold a portfolio view, and change device settings. Everything a hardware wallet cannot show you on a screen the size of a postage stamp lives here instead.

Two things separate Trezor Suite from a typical crypto app. It is watch-only by construction, so uninstalling it or losing the computer it ran on does not touch your funds. And its source code is published openly, which means the way it derives addresses, builds transactions, and talks to servers can be read and audited by anyone rather than taken on faith.

You can run Trezor Suite three ways. The native desktop build for Windows, macOS and Linux is the recommended one, because it bundles its own network layer and has the fullest feature set. The Trezor Suite browser version does nearly the same job without an install, at the cost of depending on browser USB support. Trezor Suite Lite on iOS and Android is a companion for checking balances on the move, with no ability to sign anything.

There is no subscription, no licence key and no account. The software is free, and SatoshiLabs earns its money selling devices, so nothing about Trezor Suite depends on harvesting you as a user. Optional third-party services inside the app, such as buying or swapping coins, are the only places where an outside company and its own rules enter the picture.

How Trezor Suite works with the device

When you unlock a device, it hands Trezor Suite a set of extended public keys, one per account. From those, Trezor Suite can calculate every receiving and change address that account will ever use, ask an indexing server what happened at those addresses, and reconstruct balances and history. Public keys let you watch; they do not let you spend.

Spending needs a second step. Trezor Suite composes the transaction, selects inputs, sets the fee, and then streams the whole thing to the device. The device parses it independently, shows the destination, amount and fee on its own screen, and waits for a physical button press or touch. Only after that does it return a signature, which Trezor Suite relays to the network.

The consequence is a clear trust boundary. Malware on your machine can tamper with what Trezor Suite draws, swap a clipboard address, or nag you into approving something. What it cannot do is extract the seed or forge a signature, and it cannot change what the device displays. So the habit to build is simple: read the device, not the window.

Address derivation follows published standards rather than a private scheme, which is why the same seed opens the same wallet in other compatible software. That interoperability is a safety net worth understanding: Trezor Suite is a convenient front end, not a proprietary vault, and your recovery backup is meaningful without it. If you want the background on how key derivation and hardware signing fit together in general, the Wikipedia entry on cryptocurrency wallets is a reasonable primer.

One more detail: the app needs a blockchain data source. By default Trezor Suite queries servers operated by SatoshiLabs, which see the addresses you ask about even though they never see a key. If that bothers you, the privacy section below covers pointing accounts at your own node instead.

How to get started with Trezor Suite

First-time setup is guided, and Trezor Suite will not let you skip the parts that matter. Set aside half an hour, work somewhere private, and have pen and paper ready. Do not photograph your recovery words, and do not type them into any device.

1. 01

   Install the app

   Download the desktop build from the official Trezor website only, never from a search advert, a forum link or an app store clone. Install Trezor Suite, open it, and connect the device with the cable that came in the box.

2. 02

   Install firmware

   New devices ship without firmware. Trezor Suite fetches the signed release, verifies it, and installs it while the device shows you what it is doing. On models that support it, run the authenticity check the app offers at this point.

3. 03

   Create and record the backup

   Choose a new wallet, and the device generates a seed and shows the words one at a time. Write them in order on the supplied card. Trezor Suite then walks you through a confirmation quiz, and later you can run a non-destructive backup check from settings whenever you want reassurance.

4. 04

   Set a PIN

   The PIN protects against someone who physically takes the device. Trezor Suite prompts for it on every connection, and entry is handled through the device so the number never sits in your computer's memory in a usable form. Pick something you will not forget, because there is no reset that keeps the wallet.

5. 05

   Activate coins and test

   Enable the networks you use in Trezor Suite, let accounts sync, then send a small test amount in and back out again before you move anything serious. The test costs a few cents in fees and confirms the whole chain of custody works.

If you are migrating an existing seed, choose recovery instead of a new wallet and enter the words on the device. Afterwards, let Trezor Suite finish discovery before you panic about a missing balance; the section on troubleshooting explains why coins sometimes hide behind the wrong account type or an unrecorded passphrase.

Accounts, balances and the dashboard

The Trezor Suite dashboard opens on a combined portfolio value, a chart of how it has moved, and a list of recent activity across every enabled network. It is a summary, not the source of truth about prices; rates come from market data feeds, so treat the fiat figure as an estimate rather than an audited statement.

Underneath sit accounts. Each network can hold several, and Trezor Suite scans standard derivation paths on connect so that anything with history appears automatically. Adding a fresh account is one click, and the app will not let you stack empty ones endlessly, which keeps the sidebar honest.

For Bitcoin there is a further wrinkle: address format. A single seed produces distinct account sets for legacy, wrapped SegWit, native SegWit and Taproot addresses, and they hold separate balances even though one backup covers them all. Newer formats cost less in fees; older ones exist because some senders and services still lag behind.

Every account view splits into balance, receive addresses, and a transaction list with confirmations, fees and, where relevant, token transfers. Clicking a transaction opens its detail, including the raw identifier you can paste into any block explorer. It is worth doing that once so you can see that Trezor Suite is reporting the same chain everyone else reads.

Ethereum accounts add token balances, and Trezor Suite hides dust and unknown tokens by default so scam airdrops do not clutter your view. Nothing about an unwanted token in your account can move your coins; treat such arrivals as junk mail and never interact with links attached to them.

Receiving coins and verifying an address

To receive, open an account, choose the receive tab, and Trezor Suite reveals the next unused address. For Bitcoin it deliberately hands out a fresh one each time rather than reusing a single address, which makes it harder for an observer to link your payments together.

Before you share it, press the confirm step so the address appears on the device screen, then compare the two character by character, or at least the first and last several characters. This is the defence against malware that quietly rewrites addresses in the app or the clipboard. It takes seconds, and Trezor Suite is built around the assumption that you will do it.

A confirmed address stays valid forever, so an old one still works if a sender saved it. You also do not need the device plugged in to receive; the coins land on the blockchain regardless, and the balance shows up the next time you open Trezor Suite and sync.

Sending, fees and coin control

The send form takes a destination, an amount in crypto or fiat, and a fee level. Trezor Suite offers preset fee tiers plus a custom field, and for Bitcoin it shows the rate in satoshis per virtual byte along with the total in your chosen currency, so you can see what a faster confirmation actually costs.

Trezor Suite gives Bitcoin senders coin control, which lets you pick exactly which unspent outputs fund the payment. That is useful for keeping coins from different sources apart, for spending a specific input on purpose, or for avoiding a mix that would tie two identities together. Most people can ignore it; anyone who cares about chain analysis should not.

Two other options sit in the same form. You can add an OP_RETURN data output where a service requires one, and you can set a locktime so a transaction only becomes valid after a given block or time. Both are niche, and Trezor Suite marks them as advanced for good reason.

If a Bitcoin payment goes out with a fee that turns out too low, you are not stuck. Replace-by-fee support lets you bump the fee on an unconfirmed transaction from the transaction detail view, and Trezor Suite walks the replacement back through the device for a fresh signature. Ethereum sends expose gas limit and gas price for the same kind of adjustment.

Whatever the network, the final screen is on the device. Check the amount, check the destination, check the fee, then approve. If any of the three differs from what Trezor Suite promised, reject it and treat the computer as untrusted until you have worked out why.

Security controls worth turning on

Out of the box you get a PIN and a paper backup. The device settings inside Trezor Suite hold several more layers, and each one trades convenience for resilience in a way you should decide about deliberately rather than by accident.

Passphrase and hidden wallets

A passphrase is an extra secret combined with your seed to derive an entirely separate wallet. Enter nothing and you open the standard wallet; enter a passphrase and Trezor Suite loads a different set of accounts, with its own addresses and balances. There is no list of valid passphrases anywhere, so every string produces a real wallet, and a typo silently opens an empty one.

This is the strongest feature Trezor Suite exposes and the easiest way to lose money. The passphrase is not recoverable and is not stored on the device, so it needs its own backup, kept somewhere separate from the seed words. Test the setup by reconnecting, reopening the hidden wallet in Trezor Suite and confirming the balance before you fund it properly.

Backup formats and checks

The default backup Trezor Suite guides you through is a word list you copy by hand. Supported models can instead use a Shamir-style split backup, where the seed is divided into several shares and a chosen threshold of them reconstructs it, which suits people who want geographic distribution without a single fatal piece of paper. If the idea is new to you, the concept comes from Shamir's secret sharing.

Whichever format you use, run the backup check in Trezor Suite once a year. It asks you to re-enter the words so the device can confirm they match what it holds, without exposing or altering anything. Discovering a transcription error during a drill is inconvenient; discovering it during a real recovery is not.

Firmware, authenticity and wipe

Trezor Suite notices when new firmware exists, verifies its signature and shows the version before installing. Take backups seriously before any update, and always update from the app rather than from a file someone sent you. Devices with a secure element also support an authenticity check that Trezor Suite can run against the manufacturer, which is a sensible thing to do on an unboxing or after shipping a device anywhere.

Beyond that, supported models offer a wipe code, a second PIN that erases the device when entered, and Trezor Suite can wipe a device outright when you sell it or repurpose it. Wiping is safe only when your backup is genuinely good, because a wiped device is indistinguishable from a new one.

Privacy controls in Trezor Suite

Custody and privacy are separate problems. Your keys can be perfectly safe while a network observer still learns which addresses you watch and roughly when you look. Trezor Suite gives you a few real levers here rather than a vague promise.

Trezor Suite on the desktop can route its traffic over Tor with a single switch, so the servers answering your balance queries see a relay rather than your home connection. Syncing gets slower, which is the honest cost. The browser version cannot offer this, and that alone is a good reason to prefer the desktop build.

Going further, you can replace the default data source. In coin settings, Trezor Suite lets you point a network at your own indexing server instead of the hosted default, which removes the third party from the loop entirely. It is the most private configuration available and the most work to maintain, so it suits people already running a node.

Locally, discreet mode blurs every balance and amount so you can open the app in a cafe or on a shared screen without broadcasting your net worth. Labels are the other local feature: you can name accounts, addresses and transactions so history becomes readable, and Trezor Suite keeps those labels encrypted with a key derived from your device, syncing them through a cloud storage account you connect yourself. Skip the connection and labels simply stay on that computer.

Worth noting what is not on offer: a Bitcoin coinjoin feature that once shipped in Trezor Suite depended on an outside coordinator and is no longer available, and there is no built-in mixing replacement. Address rotation, coin control, Tor and your own backend are the privacy tools you actually have.

Buying, swapping and staking through partners

Alongside the wallet functions, Trezor Suite embeds an exchange comparison layer that quotes buy, sell and swap offers from third-party providers and delivers the coins straight to an address on your device. It saves the round trip through an exchange account, which is where a lot of people lose coins.

Be clear about who you are dealing with. These trades are contracts with the provider, not with Trezor Suite: identity verification, limits, spreads, regional availability and complaint handling all belong to them. Compare the quoted rate against a public market price, because convenience inside Trezor Suite is not the same thing as a good price.

Ethereum holders also get staking through an integrated third-party validator service, with rewards and unstaking timelines visible in the account. Every action still needs a device confirmation, so custody stays with you, but staking carries its own protocol and provider risks that Trezor Suite cannot remove. Read the terms before committing anything you would miss.

Desktop, browser or phone

The Trezor Suite desktop application is the reference experience. It talks to the device directly, includes Tor, keeps working when a browser update breaks something, and does not depend on loading code from a website every session. If you only pick one, pick this.

The Trezor Suite browser version is a useful fallback on a machine where you cannot install software. It needs a Chromium-based browser with USB access, which is why Firefox and Safari users usually hit a wall, and it inherits whatever extensions and tabs are running around it. That is a wider attack surface than a native app, so keep it for occasional use.

Trezor Suite Lite on iOS and Android is deliberately limited. It tracks balances and portfolio value in a watch-only way, cannot sign or send anything, and does not need the device in your pocket. Think of it as a read-only window onto accounts you manage from the desktop.

Which coins Trezor Suite handles

Bitcoin comes first and is the most thoroughly supported network in Trezor Suite, with coin control, fee bumping and multiple address formats. Beyond it, Trezor Suite natively manages Ethereum and ERC-20 tokens plus a long list of other major chains and their assets, and the exact roster shifts as releases add support and device models differ in what their firmware covers.

Some assets your device can hold are not managed inside the app at all. Those cases route through third-party wallets that use the device as a signer, so the coins remain protected by the same hardware even though Trezor Suite is not the interface. Check the current list in the app before you buy hardware for one specific coin.

The older Trezor Model One, the Model T, and the Safe family are all supported, and Trezor Suite adapts its screens to what the connected model can do. That backwards compatibility is one of the quieter strengths here: a device bought years ago still works with today's app.

Making sure you have the real app

Fake wallet software is a standing industry in this space. Counterfeit installers, sponsored search results and lookalike domains all exist, and a convincing clone of Trezor Suite that captures a recovery seed is the single most effective attack against a hardware wallet owner.

So download only from the official Trezor domain, typed by hand, and prefer the desktop app. For extra assurance the project publishes signatures and checksums for its releases, and verifying the file you downloaded against them takes a couple of commands. Keep the app updated, since Trezor Suite ships regular releases that carry security fixes as well as features.

Recovery words are entered on the device itself, or through a protected input flow the device drives, and legitimate support never needs them. Treat every unsolicited message about your wallet as hostile, and go back to Trezor Suite as you installed it yourself instead of following a link.

Troubleshooting common problems

A device that Trezor Suite will not show is almost always a connection problem rather than a broken wallet. Try the original cable, a different port directly on the machine rather than through a hub or dock, and close any other tab or app that might have grabbed the device, since only one program can hold it at a time. On Linux, the udev rules need to be in place before a non-root user can talk to the hardware.

If Trezor Suite in the browser cannot see the device, check the browser. Only Chromium-based browsers expose the USB access it needs, so the desktop app is the fix rather than a workaround. Corporate machines with USB policy restrictions will block both.

A wallet that opens empty after a recovery has two usual causes. Either a passphrase is involved and you are looking at the standard wallet instead of the hidden one, or the coins live under an address format whose account has not been added yet. Add the legacy or SegWit account manually and let Trezor Suite rescan before concluding anything is lost.

Stuck outgoing Bitcoin transactions are a fee problem, not a failure. Open the transaction and bump the fee; the network will confirm the replacement. Balances that look wrong or stale usually mean the data backend is lagging, so check the connection indicator, toggle Tor off briefly, or restart Trezor Suite.

When the desktop app itself will not start or sits forever on a loading screen, look at local security software. Antivirus tools and firewalls sometimes block its network layer, and an exception usually resolves it. Whatever else you try, remember that reinstalling Trezor Suite is harmless, because nothing you need to recover funds is stored in the app.

What Trezor Suite does not do

Trezor Suite is not a mobile signing wallet. The phone app is watch-only, so if you need to spend from a pocket, this ecosystem will not suit your habits. It is also not a multisignature coordinator: building a multisig setup with a Trezor device means using third-party software that supports it, with the device as one of the signers.

There is no account recovery of any kind, because there is no account. Lose both the device and the backup and the coins are gone, and no amount of support contact changes that. Trezor Suite also cannot reverse a sent transaction, recover coins sent to the wrong network, or undo an approval you confirmed on the device.

Finally, it is not a full node. By default Trezor Suite trusts a remote server for chain data, which is fine for balances and history but is a trust assumption worth naming. Users who want to remove it entirely should run their own backend, and users who want tax reports, deep DeFi interaction or Lightning payments will need other tools alongside the wallet.

A short checklist for safe daily use

Most losses in this field come from process, not cryptography. The following habits cost almost nothing once they are routine, and they cover the situations where Trezor Suite alone cannot protect you.

• Read the destination and amount on the device screen every single time, including for small payments.
• Open Trezor Suite and confirm receive addresses on the device before sharing them.
• Keep the seed on paper or metal, offline, in a place that survives fire and flood, and never as a photo or text file.
• Back up any passphrase separately from the seed, and test the hidden wallet before funding it.
• Update firmware and the app from inside Trezor Suite, never from a link someone sent you.
• Send a small test amount first whenever a destination, network or device is new to you.

Do those consistently and Trezor Suite becomes what it is meant to be: a clear window onto your holdings, with the only irreversible action in the system sitting behind a physical button you press yourself.

Frequently asked questions