Trezor Review 2026: Safe 3, Safe 5 or Safe 7?

Trezor models and current prices

These are the normal US prices checked on 7 August 2026. Promotions, tax, shipping, local currency and Bitcoin-only editions can change the final total. Trezor still documents Model One and Model T, but a new buyer should start with the Safe range. Safe 3 and Safe 5 add a Secure Element and USB-C, while Safe 7 is the current flagship.

Our review method and the limits of a spec sheet

We assessed the published hardware architecture, source transparency, official security disclosures, Trezor Suite behaviour, platform connections, backup choices, supported wallet interfaces and store pricing. We also scanned owner discussions for patterns that product pages naturally underplay, such as whether wireless convenience justifies the premium and how much a larger screen changes regular use.

This review does not invent penetration tests or claim months of personal ownership. Hardware security deserves a cleaner standard than staged photos and a score with two decimal places. Our core questions are whether the design reduces realistic loss paths, whether the user can verify what is being signed, and whether recovery remains understandable after the setup excitement has worn off.

Trezor Safe 3 review: enough wallet for most cold storage

Safe 3 is a compact USB-C signer with two physical buttons, a monochrome OLED display and an OPTIGA Trust M Secure Element alongside the main microcontroller. Trezor uses the Secure Element to enforce PIN protection, add entropy and authenticate the device, while keeping its firmware and broader design open for public review.

The $79 price makes sense for a wallet that receives more often than it sends. You can verify addresses and amounts on the device, manage native accounts in Trezor Suite, and use compatible third-party wallets for networks or functions that Suite does not expose directly. It has no battery, which removes one maintenance concern from multi-year storage.

Its limitation is not security theatre; it is ergonomics. Entering a PIN or passphrase and reviewing long fields with two buttons takes patience. Safe 3 also has no Bluetooth. Android can connect by USB-C, but iPhone users get view-only Trezor Suite Mobile rather than full signing. If this wallet will approve something every week, the touchscreen upgrade stops feeling frivolous.

Trezor Safe 5 review: the best balance for desktop users

Safe 5 retains the USB-only design and OPTIGA Secure Element, then replaces button navigation with a color touchscreen and haptic feedback. That improves more than setup speed. Passphrase entry stays on the trusted device, address review is less cramped, and confirming a transaction feels deliberate without turning the wallet into a tiny puzzle box.

For regular desktop use, this is the Trezor we would buy. It offers the parts of the flagship experience that directly affect safe operation while avoiding a battery and wireless radios. The price is more than double Safe 3, so an owner who only moves Bitcoin quarterly should keep the extra $90. An owner who signs DeFi or gaming-related transfers regularly may recover that cost in fewer rushed approvals.

Safe 5 is less attractive for iPhone-first users because iOS does not support the wired Trezor connection. The mobile app can monitor synchronized accounts in view-only mode, but sending still needs a supported connected environment. That single compatibility detail is more important than half the features in most comparison charts.

Trezor Safe 7 review: a real flagship with a specific audience

Safe 7 is Trezor's first wireless model. It adds encrypted Bluetooth across iOS, Android, Windows, macOS and Linux, Qi2-compatible wireless charging, a LiFePO4 battery, a 2.5-inch high-resolution color touchscreen, an aluminum body, Gorilla Glass and IP54 dust and splash resistance. It can also operate over USB-C, and Bluetooth can be disabled.

The security architecture adds a TROPIC01 auditable Secure Element beside the NDA-free OPTIGA chip and a hardened STM32U5 microcontroller. Trezor describes these as three independent hardware layers. Safe 7 also uses post-quantum signatures for parts of its boot and device-authentication chain. That does not make today's Bitcoin signatures quantum-resistant. It is infrastructure intended to let the device verify future updates more safely.

The clearest reason to pay $249 is full mobile operation, particularly on iPhone. Trezor Suite Mobile can pair over Bluetooth for setup, sending, receiving and device management. The second reason is usability: the larger, brighter screen and premium body suit an owner who handles the device often. If it lives in a safe, Safe 7 is a rather handsome solution to a problem Safe 3 already solved.

Owner discussions mirror that split. People using Trezor as a daily mobile signer often value Safe 7's screen and wireless connection. Long-term holders repeatedly conclude that Safe 3 is enough. Some early owners have also reported Bluetooth pairing or reboot problems. Those individual reports do not prove a range-wide fault, but they justify testing pairing, haptics, charging and wired fallback during the return period.

The 2026 TROPIC01 disclosure explained properly

On 3 June 2026, Trezor disclosed that Ledger Donjon had used a laser fault-injection attack against the TROPIC01 chip used in Safe 7. The work enabled extraction of a subset of secrets from that chip, and follow-up research found a route affecting additional PIN-related functions. This is a hardware issue and cannot be removed from existing devices with a firmware update.

Trezor says the finding does not expose the wallet backup, private keys, PIN or funds because TROPIC01 is only one layer in Safe 7. The attack requires possession of the device, destructive disassembly, desoldering, chip decapsulation, specialist laser equipment and expertise. Compromising this one chip is not enough to defeat the OPTIGA Secure Element and the rest of the PIN design.

Our judgment is measured. The disclosure is not a remote wallet-draining vulnerability, and it is not a reason to panic-migrate funds from a Safe 7. It also should not be erased by the phrase "funds are safe." A premium product includes a chip with a confirmed hardware weakness that current units cannot patch. The layered architecture limits the consequence, while public disclosure demonstrates the value and discomfort of auditable hardware. Both facts belong in the verdict.

Open-source security is Trezor's strongest argument

Trezor publishes its hardware and software design for review. That allows researchers to inspect firmware, build tools around it and challenge security claims without relying solely on the manufacturer. Safe 3 and Safe 5 use an NDA-free Secure Element for PIN enforcement and device authentication. Safe 7 adds the auditable TROPIC01 chip, despite the 2026 finding described above.

Open source is not a magic shield. Most owners do not audit firmware, and public code can still contain flaws. Its value is that independent specialists can inspect and reproduce more of the system, while the manufacturer can discuss hardware behaviour openly. Buyers comparing this with the partly proprietary architecture in our Ledger review are choosing different trust models, not "safe" versus "unsafe."

Wallet backups: 20 words, passphrases and multi-share recovery

Current Trezor Safe devices support 12, 20 and 24-word backups, with 20-word SLIP39 backup cards supplied in current packages. A single-share 20-word backup behaves like a normal recovery secret: anyone who gets it can restore the wallet. Advanced Multi-share Backup splits recovery across several shares and lets the owner choose a threshold, such as two of three.

Multi-share recovery can remove one physical point of failure, but it adds admin. Each share needs a location, an inventory and a recovery rehearsal. A clever threshold nobody in the family understands is not an inheritance plan. Read our seed phrase backup guide before choosing between a single durable backup and a distributed scheme.

Trezor also supports passphrase-protected hidden wallets. A passphrase creates a different wallet rather than merely unlocking the same one. A typo therefore opens an empty but valid wallet, and a forgotten passphrase cannot be reset. Use it only if you can back it up separately without creating a more fragile system than the one it is meant to improve.

Trezor Suite is clean, but native support is not everything

Trezor Suite manages accounts, firmware, receiving addresses, sending, coin control, Tor connectivity and integrated third-party buying, selling, swapping or staking services. The interface is calmer than a trading terminal, which suits a storage wallet. Integrated financial services remain third-party transactions, so compare quotes and fees rather than assuming the convenient button is the cheapest route.

Trezor supports thousands of coins and tokens across Suite and compatible third-party wallets. MetaMask, Rabby, Backpack, Exodus, Ronin and WalletConnect-based dApps extend what the native app can do. Custom EVM networks may require a third-party interface because Trezor Suite does not let users add arbitrary networks directly.

Always verify the exact chain and action before buying. "Ethereum tokens supported" does not prove that a particular game, staking flow, Solana feature or privacy coin works inside Trezor Suite. For gaming rewards, the hardware wallet should usually receive from a separate hot wallet rather than connect to every new contract. Our wallet safety guide explains that separation.

Universal firmware or Bitcoin-only edition?

Safe 3, Safe 5 and Safe 7 are offered in universal and Bitcoin-only variants. The hardware security model is the same. Bitcoin-only firmware removes altcoin functionality and reduces the code devoted to other networks, which appeals to Bitcoin-focused owners and makes menus simpler.

Choose Bitcoin-only only if you are comfortable keeping it that way. A portfolio containing Ethereum, stablecoins, NFTs or gaming tokens needs the universal edition. Buying the narrower version for philosophical tidiness and then adding another device for one token is a fine way to turn minimalism into extra admin.

Trezor pros and cons

Who should buy each Trezor?

Buy Safe 3 if the wallet is primarily a vault, the budget matters, and you use desktop or Android. It provides the modern Safe security model without charging for a touchscreen you rarely touch.

Buy Safe 5 if you use Trezor regularly from a computer, enter a passphrase on-device, or want clearer touch interaction while keeping a cable-only and battery-free routine. It is our best overall Trezor.

Buy Safe 7 if iPhone support, wireless signing, a larger screen or premium durability materially changes how often and how carefully you use the wallet. Its extra chips and future-update architecture are worthwhile additions, but they do not make Safe 3 obsolete.

Look elsewhere if your portfolio relies on a chain or specialist wallet that Trezor does not support, if you want the broadest third-party ecosystem, or if seed phrase storage is the part of self-custody you most want to redesign. Ledger has broader app compatibility, while Cypherock distributes recovery material across a vault and cards.

Secure Trezor setup in seven checks

1. Buy from Trezor or an authorized seller and inspect the model-specific tamper seal.
2. Install Trezor Suite from the manufacturer's verified domain.
3. Confirm that no firmware is preinstalled when the official setup expects a fresh device.
4. Run the device authentication check and stop if Suite reports a failure.
5. Generate the backup on the Trezor and record it offline. Never accept words supplied in the box.
6. Verify a receiving address on the hardware display and send a small test amount.
7. Test the recovery plan before moving a balance you cannot afford to lose.

Trezor review FAQ

Is Trezor Safe 7 safe after the TROPIC01 disclosure?

The disclosed attack affects one chip and requires destructive physical lab work. Trezor says it does not reveal the PIN, backup or private keys and cannot by itself move funds because Safe 7 has additional independent security layers. No user action is currently recommended. Buyers should still know that the hardware issue exists and cannot be fixed on shipped chips.

Is Safe 5 worth twice the price of Safe 3?

Not for passive storage. It becomes worthwhile when the touchscreen makes regular address review, PIN entry and passphrase use more careful. The security baseline is similar enough that frequency of use, not portfolio ego, should make the decision.

Can Trezor work with MetaMask?

Yes, for supported accounts and networks. MetaMask acts as the interface while the private keys remain on Trezor and transactions require hardware approval. Confirm the exact network and avoid blind approvals just as you would with any connected hardware wallet.

What if Trezor goes out of business?

Standard backups can be restored with compatible wallets, and Trezor's open-source software reduces dependence on a single vendor. Record derivation paths and any passphrase or multi-share instructions, because standards compatibility does not compensate for missing operational notes.

Final recommendation

Trezor remains the strongest mainstream choice for buyers who put transparency ahead of the biggest app catalogue. Safe 3 is the smart vault, Safe 5 is the most balanced device, and Safe 7 is the mobile flagship. The current range finally makes that distinction clean.

Our pick is Safe 5 for regular desktop use and Safe 3 for low-frequency storage. Choose Safe 7 when iPhone or wireless use is a requirement, not as a reflex upgrade. Then put as much thought into the backup as the device. Trezor can protect a key from a thief; it cannot remember a passphrase the owner made too clever to recover.