Trezor Hardware Wallet — Secure Setup

What you'll need

1. Your new Trezor device (Model One or Model T) in unopened packaging.
2. A computer with a supported browser (Chrome, Brave, Edge) or the Trezor Suite app, plus a USB cable if required.
3. Pen and paper (or a quality steel backup) to record the recovery seed securely — never store the seed as plain text or in cloud storage.

Step 1 — Verify packaging and authenticity

1. Inspect the box for tamper-evident seals. Only use devices purchased from authorized sellers.
2. Do not use a device with broken seals or visible tampering — contact the seller or Trezor support.

Tip: Trezor devices ship with a holographic sticker and serial number. Cross-check the device serial with official resources where available.

Step 2 — Connect and install firmware

1. Connect your Trezor to your computer using the supplied USB cable.
2. Open Trezor Suite (download only from the official Trezor website) or navigate to the official web setup page to initialize your device.
3. If prompted, install the latest firmware. Only accept firmware provided through the official Trezor installation flow; do not install firmware from unknown sources.

Firmware updates often contain security fixes—keeping firmware current is critical.

Step 3 — Create PIN (device-level protection)

1. The device will prompt you to choose a PIN. Use a PIN that's easy for you to remember but hard for others to guess.
2. Never enter your PIN in front of cameras or people who might shoulder‑surf.

Step 4 — Record your recovery seed (most important)

1. Trezor generates a recovery seed (12, 18, or 24 words). Write these words down in order on the card provided or on a dedicated backup sheet.
2. Double-check each word and the order. Store the seed offline in a secure location (safe, bank deposit box, or steel backup).
3. Do not photograph, copy to cloud storage, or send your seed via message or email. Anyone with the seed can control your funds.

Consider splitting the seed across multiple secure locations if desired (shamir backup or multisig setups are advanced options).

Optional — Set a passphrase (additional security)

1. Trezor supports an optional passphrase that acts as an extra word added to your seed. Treat it like a second password.
2. A passphrase creates a hidden wallet and significantly increases security if used correctly — but losing it means losing access to the hidden wallet.
3. Use a strong passphrase and store it securely; if you prefer simplicity, you may skip it but accept the security trade-offs.

Step 5 — Use Trezor Suite and connect accounts

1. Open Trezor Suite and allow the device to connect. Confirm the connection on the hardware screen when prompted.
2. Follow the Suite UI to add cryptocurrency accounts (Bitcoin, Ethereum, ERC‑20 tokens, and others supported by your model).
3. Always verify receiving addresses on the Trezor device screen before sending funds—hardware display verification ensures the address wasn’t tampered with by malware.

Security checklist

• Keep firmware up to date and download Trezor Suite only from official sources.
• Never share your recovery seed, PIN, or passphrase with anyone.
• Consider using a hardware wallet for large holdings and keep small daily-use balances in separate wallets if needed.
• For added redundancy, consider using Shamir Backup (if supported) or multisig schemes for very large holdings.

Troubleshooting

1. Device not recognized? Try a different USB cable/port and ensure the device is unlocked when connecting.
2. Lost seed? If you lose the recovery seed and still have access to the device, create a new backup immediately and transfer funds.
3. Compromised device? If you suspect tampering, move funds to a newly-initialized device using a new seed as soon as possible.