Trezor Suite

Reference guide ยท hardware wallet software

Software guide

Trezor Suite explained from first setup to daily use

Trezor Suite is the application people use to manage a Trezor hardware wallet. It shows balances, builds and broadcasts transactions, installs firmware and keeps a portfolio history, while the private keys that control the coins never leave the physical device. Put simply, Trezor Suite is the screen and the workbench, and the hardware is the safe.

Trezor Suite shown as the wallet interface used alongside a Trezor hardware device
Trezor Suite is designed to be used with a hardware device plugged in, not on its own.

It is made by SatoshiLabs, the Prague company that shipped the first Trezor hardware wallet in 2014. Trezor Suite arrives in three shapes: a desktop program for Windows, macOS and Linux, a browser version, and a lighter mobile companion. All of them are free, none of them asks for an account or an email address, and the code behind Trezor Suite is published for anyone to read.

This guide covers what the app does and does not do, how the work is split between software and hardware, which privacy and security settings are worth changing on the first day, and the questions that come up most often. If you are weighing Trezor Suite against a third-party wallet for the same device, there is a comparison further down.

Key facts

Developer
Type
Interface for hardware wallets, non-custodial
Platforms
Windows, macOS, Linux, browser, Android, iOS
Price
Free to download and use
Source code
Published publicly

What Trezor Suite is

Trezor Suite is a wallet interface rather than a wallet in the everyday sense of the word. The wallet, strictly speaking, is the set of keys generated inside the hardware device from your recovery seed. Trezor Suite is the program that reads public data derived from those keys, presents it as accounts and balances, and hands unsigned transactions to the device for approval.

Trezor Suite replaced the older browser-based wallet interface and became the default place to set up a new device, restore an old one and handle day-to-day payments. The change mattered because a desktop application can do things a web page cannot: bundle its own Tor client, be signature-checked at install time, and keep working when a browser vendor changes how USB access is handled.

Trezor Suite works with the current lineup and with older hardware: Trezor One, Trezor Model T, Trezor Safe 3 and Trezor Safe 5 all connect to the same app, and the interface adapts to what each model can do. A device with a touchscreen shows more of a transaction on its own display, while on models with two buttons Trezor Suite carries more of the explanation on the computer screen and the device still confirms the critical details.

Nothing about Trezor Suite is a subscription. There is no registration, no identity check to open the app, and no server-side profile holding your balances. Settings, labels and cached data live on the computer you installed it on, which is also why moving to a new machine means re-adding your accounts rather than logging in somewhere.

How Trezor Suite works

Three pieces have to cooperate: the hardware wallet, Trezor Suite itself, and the backend servers that read the blockchains. The device holds keys and signs. Trezor Suite draws the interface and assembles transactions. The backends answer the boring but necessary question of which coins belong to which addresses right now.

When you unlock a device, Trezor Suite asks it for extended public keys, one per account. Those keys let the app derive every receiving and change address an account will ever use, without being able to spend anything. Trezor Suite then asks a backend for the history and balance of those addresses and reassembles the answer into the account list you see on the dashboard.

Sending money runs the other way. You enter an amount and a destination in Trezor Suite, the app selects coins to spend and calculates a fee, and the unsigned transaction goes to the device. The device shows the amount, the fee and the destination on its own screen, you approve, and only then does a signed transaction come back for Trezor Suite to broadcast. If the two screens disagree, trust the small one: it is the part malware on your computer cannot rewrite.

By default Trezor Suite talks to backend servers run by SatoshiLabs, based on an open source blockchain indexer. Those servers see which addresses you are asking about, which is a privacy consideration rather than a security one, since they never see keys. Trezor Suite also lets you point an account at your own indexer instead, which removes that third party from the picture entirely.

Firmware is handled in the same app. Trezor Suite checks the version on the connected device, offers updates, and the device itself verifies that a firmware image is properly signed before running it. Newer models with a secure element also support an authenticity check, run from inside the app, that confirms the hardware is genuine rather than a look-alike.

Signing a payment, step by step

  1. 01You fill in a recipient and an amount in Trezor Suite and choose a fee level.
  2. 02The app builds an unsigned transaction, selecting which coins to spend.
  3. 03The transaction is sent over USB to the hardware wallet.
  4. 04The device displays the details and waits for your physical confirmation.
  5. 05The signature returns to Trezor Suite, which broadcasts it to the network.

Desktop, browser and mobile versions of Trezor Suite

The desktop build is the one SatoshiLabs treats as the reference. You download an installer, ideally check its signature once, and from then on Trezor Suite runs as a normal application with its own device transport and a built-in Tor switch. It does not depend on a browser extension or on whatever a browser update decided to do with USB permissions this month.

The browser version does almost everything the desktop one does and asks nothing of you but a compatible browser. It is genuinely useful on a machine where you cannot install software. The trade-off is the browser itself: extensions, tabs and phishing pages all live in the same environment, so a fake page imitating Trezor Suite is a more plausible risk there than on the desktop, where the app you launch is the app you installed.

Trezor Suite Lite is the mobile companion, available for Android and iOS. It is built for looking rather than spending: portfolio balances and account overviews on a phone, with signing left to a real device connection. Treat it as a viewer that complements Trezor Suite on a computer, not a replacement for it. Mobile capabilities have expanded over the years, so check the release notes for the version you install and the model you own.

None of these versions can move funds on its own, and that is the point. Whichever face of Trezor Suite you happen to be looking at, the device signs, the device displays, and the app is just the messenger.

Table 1. Trezor Suite versions compared
Criterion Desktop app Browser version Trezor Suite Lite
Installation Signed installer you download once None, runs in the browser From the mobile app stores
Device connection Built-in USB transport Browser USB access, browser dependent Viewing oriented
Tor routing Bundled with Trezor Suite, one switch Only via a Tor-capable browser No
Firmware updates Yes Yes No
Best for Setup and regular use Machines you cannot install on Checking balances away from a computer

Accounts and transactions in Trezor Suite

An account in Trezor Suite is a branch of your seed, not a login. You can add as many as you like, name them, and hide the ones you are not using, and all of them are recoverable from the same backup because they are derived from it mathematically.

Account types and address formats

For Bitcoin, Trezor Suite can create several account types from one seed: legacy, SegWit, native SegWit and Taproot. Each produces different-looking addresses and slightly different fees. Coins received into a native SegWit account will not show up in a legacy account, which is the single most common reason a returning user believes a balance has vanished. The fix is almost always to add the missing account type.

Receiving

Receiving is deliberately two-handed. Trezor Suite shows a fresh address, then asks you to confirm that the same address appears on the device screen before you copy it anywhere. That step exists because clipboard-swapping malware is cheap and common, and the device display is the only surface an attacker on your computer cannot quietly rewrite.

Sending, fees and coin control

On the send screen, Trezor Suite estimates fees at several confirmation speeds and lets you type a custom rate. For Bitcoin it supports replace-by-fee, so a transaction stuck at a low fee can be bumped instead of abandoned, and coin control lets you choose which specific coins to spend. That last feature is more useful than it sounds: picking inputs deliberately keeps unrelated funds from being linked together on a public ledger.

For accounts on other networks the send screen changes shape. Ethereum accounts show a gas fee and token transfers, and Trezor Suite flags the usual traps, such as trying to send a token without holding enough of the network's base asset to pay for the transaction. Whatever the chain, the final confirmation still happens on the hardware.

Labels, history and the portfolio view

Trezor Suite can label accounts, addresses and individual transactions. Labels are encrypted with a key derived from your device and stored either locally or in a personal cloud drive you connect, so the readable text never leaves your control. The dashboard adds a portfolio chart, a fiat valuation in the currency you pick and a full transaction history that can be exported for accounting.

Privacy settings worth changing early

Trezor Suite gives you privacy tools, but most of them are optional and some are off by default. The app never asks who you are and does not need to. The meaningful questions are what the network sees when the app fetches your balances, and what your own machine keeps on disk.

The desktop app ships with Tor built in. Turning it on routes the app's traffic, including backend queries, through the Tor network, so the servers answering your balance requests see an exit node rather than your home connection. It costs a little speed. On a network you do not control, that trade is usually worth making, and it is a single switch in Trezor Suite settings.

The stronger move is to run your own blockchain indexer and point Trezor Suite at it, coin by coin. Then no outside server learns which addresses you care about at all. This is more work than most people want to do, but it is offered in the settings screen rather than buried in a configuration file.

Two smaller options deserve a look. Discreet mode blurs balances so you can open Trezor Suite in a cafe without announcing your net worth to the next table over. And the anonymous usage-data setting, which feeds product analytics, can be declined during setup or switched off later.

None of this makes on-chain activity private on its own. Bitcoin is a public ledger, and Trezor Suite cannot unlink an address you already posted on a forum or handed to an exchange. What the app can do is avoid leaking extra information, mainly through coin control, sensible habits about address reuse, and the network settings above.

The security model behind the app

The reason to pair Trezor Suite with a hardware wallet is one blunt assumption: your computer may already be compromised, and the setup should survive that. Keys are generated and stored in the device, signing happens in the device, and the confirmation you rely on is drawn by the device. The software is treated as untrusted plumbing by design.

A PIN protects the device from whoever picks it up. It is entered in a scrambled layout, so watching the screen or the mouse does not reveal it, and wrong guesses trigger a growing delay. Trezor Suite prompts for the PIN every time the device is reconnected.

The recovery seed is the real backup, written on paper or metal during setup and never typed into a computer. Trezor Suite will never ask you to enter it into the app during normal use, and any page or message that does is an attack. On models that support it, setup can instead create a multi-share backup based on Shamir's Secret Sharing, splitting recovery across several cards where a subset is enough to restore.

A passphrase adds a hidden wallet on top of the seed. Any passphrase you type produces a completely separate set of accounts, and there is no way to prove which ones exist. Trezor Suite supports these hidden wallets directly, with one hard warning attached: a passphrase is not recoverable. Lose it and the funds behind it are gone, seed or no seed.

Two habits close most of the remaining gaps. Install Trezor Suite from a source you verified once, and check firmware and device authenticity from inside the app rather than trusting a message that arrives by email or chat. SatoshiLabs does not send unsolicited requests for a recovery seed, and neither does Trezor Suite.

Finally, keep things current. Both firmware and Trezor Suite releases carry fixes as well as features, and the update prompt in the app is the intended channel for both. If you want background on how self-custody differs from leaving coins with a company, the general overview at Wikipedia on cryptocurrency wallets is a reasonable starting point.

Five habits that matter more than settings

  • Verify every receiving and sending address on the device screen, not only in Trezor Suite.
  • Keep the recovery backup offline, duplicated, and away from the device itself.
  • Never type a seed into a computer, a website or a support chat.
  • Test a passphrase wallet with a small amount before trusting it with more.
  • Update firmware and the app from inside the app, not from links you were sent.

Coins and tokens Trezor Suite handles

Trezor Suite covers the major networks directly: Bitcoin and its close relatives such as Litecoin, Dogecoin and Bitcoin Cash, Ethereum together with ERC-20 tokens, and other chains including Cardano and XRP. Coverage grows with releases, so the definitive list is always the one your installed version shows in coin settings.

Two distinctions are worth keeping straight. A coin can be supported by the device firmware without appearing in Trezor Suite, in which case a third-party wallet connected to the same hardware is the route to it. And a token can be perfectly visible in Trezor Suite while its transaction fees must be paid in the network's base asset, which is why an Ethereum account holding tokens but no ETH cannot send anything at all.

Trezor Suite lets each coin be enabled or disabled individually, and switching off the ones you never touch keeps both the dashboard and the number of backend queries smaller.

Buying, selling, swapping and staking

Beyond storage, Trezor Suite embeds a set of optional services. You can buy crypto with a card or a bank transfer, sell back to a bank account, and swap one asset for another without leaving the app.

These are third-party services surfaced inside the interface, aggregated so you can compare offers before committing. The counterparty is the provider, not Trezor Suite: their rates, their fees, their identity checks and their regional restrictions apply. What makes the feature worth having is the destination, since coins bought this way land directly in an address controlled by your own device.

On networks that support it, Trezor Suite also offers staking through third-party providers, so certain assets can earn a yield while the keys stay on the hardware. Read the unbonding rules before committing, because staked funds are usually not instantly available, and the operational risk belongs to the provider rather than to the wallet.

None of these services is compulsory. Trezor Suite behaves exactly like a plain send-and-receive wallet if you ignore them, and the modules can be hidden so they stop appearing in the interface.

Trezor Suite compared with third-party wallets

A Trezor device is not locked to a single app. Bitcoin-focused users often pair it with a desktop wallet like Electrum, Ethereum users with a browser wallet, and several other chains have their own established apps that speak to the hardware. The useful question is what each choice costs you.

Trezor Suite is the most complete and best-supported option for setup, firmware and everyday balances, and it is the only place where firmware management, device authenticity checks and multi-coin accounts sit in one window. Third-party wallets win when you need something specific that Trezor Suite does not do, above all connecting to decentralized applications. Plenty of people run both: Trezor Suite as the home base, a specialist wallet for the one job it does better.

Table 2. The same device, two kinds of software
Criterion Trezor Suite Third-party wallet
Device setup and firmware Handled in the app Usually not supported
Multi-coin overview One dashboard for all enabled coins Typically one chain or ecosystem
dApp connections Not built in Common strength
Privacy controls Tor toggle, custom backend, coin control Varies widely by app
Where keys live On the device, always On the device, when used in hardware mode

Getting started with Trezor Suite

A first-time setup takes roughly fifteen unhurried minutes and follows the same path on every model.

  1. Step 01

    Install Trezor Suite on your own computer, from a source you have checked, and open it before plugging anything in.

  2. Step 02

    Connect the device. Trezor Suite detects it, installs firmware if the device is new, and runs an authenticity check on models that support one.

  3. Step 03

    Create a wallet and write down the recovery backup exactly as the device shows it. Nothing is typed into the computer during this step.

  4. Step 04

    Set a PIN, name the device, and let Trezor Suite finish the setup checklist.

  5. Step 05

    Enable the coins you actually use, add your first account, and receive a small test amount before anything larger.

Do the backup step properly, on paper or metal, away from cameras and cloud-connected devices. Trezor Suite will not show those words again later, and no support channel anywhere can recover them for you.

Once the wallet exists, spend a few minutes in the settings before moving real money: pick your display currency, decide about Tor, and rehearse a full send with a trivial amount. Trezor Suite makes that loop cheap to practice, and practicing it once is worth more than reading about it twice.

Common problems and how to fix them

The device is not detected

Start with the physical layer: try another cable, since many are charge-only, then another port, and skip the hub. In the browser version, the page needs permission to reach the USB device and some browsers do not support that at all, which is a question the desktop build of Trezor Suite avoids entirely. On Linux, missing udev rules are a frequent cause. Restarting Trezor Suite after reconnecting the device solves more cases than it has any right to.

A balance looks wrong or missing

Nine times out of ten this is the account-type issue described earlier. Add the other Bitcoin account types in Trezor Suite and check whether the coins appear in one of them. If you use a passphrase, remember that a single typo silently produces a different, empty wallet instead of an error message.

A transaction is stuck

A low fee means waiting. Trezor Suite can bump the fee on a Bitcoin transaction that was sent with replace-by-fee enabled; otherwise the choices are patience or spending the incoming output at a higher fee once it confirms.

A firmware update was interrupted

The device falls back to bootloader mode, which looks alarming and usually is not. Reconnect it and let Trezor Suite reinstall the firmware. In the worst case the recovery backup restores everything, which is precisely why the backup exists.

The app will not start or sync

Turn Tor off temporarily, since a slow circuit can look exactly like a broken connection, and check whether a firewall is blocking the backend. If nothing helps, reinstalling Trezor Suite is safe: no funds live in the app, and re-adding accounts rebuilds the same view from the same device.

Open source code, updates and support

The source code of Trezor Suite is public, as is the device firmware. Openness does not automatically make software secure, but it does mean the claims in this guide are checkable by anyone with the patience to read a repository, and independent researchers regularly do exactly that.

Releases arrive on a steady rhythm, mixing new coin support, interface work and fixes. The desktop app checks for updates and can install them for you, while the browser version simply serves the current build. Firmware follows its own schedule and is offered through Trezor Suite whenever a connected device is behind.

Support runs through documentation and the company's own help channels. One rule is worth memorizing above all others: no legitimate support conversation, in Trezor Suite or anywhere else, ever involves your recovery seed.

What Trezor Suite does not do

Trezor Suite is not a browser for decentralized applications. There is no built-in dApp connector, so lending, minting or trading on a protocol means connecting the device through a third-party wallet that offers one.

It is not a custodian or an exchange either. Trezor Suite holds no funds, cannot reverse a transaction, cannot freeze an address and cannot recover a lost seed or passphrase. Everything it does is initiated by you and authorized by your device.

And it is not an offline tool. Balances, fee estimates and broadcasting all need a network connection, even though the signing itself happens on an isolated chip inside the hardware. If your threat model demands a fully air-gapped signing workflow, Trezor Suite is not the component that provides it.

Frequently asked questions

Is Trezor Suite free to use?

Yes. Trezor Suite costs nothing to download or run, and there is no subscription of any kind. You still pay network fees on transactions, and any buy, sell, swap or staking service inside the app charges its own fees, which are shown before you confirm.

Do I have to use Trezor Suite with my device?

No. The hardware works with a range of third-party wallets. Trezor Suite is still the simplest place to set the device up, install firmware and keep a multi-coin overview, so most owners use it for those jobs even when a specialist wallet handles one particular chain.

Does Trezor Suite ever see my recovery seed or private keys?

No. Keys are generated and kept inside the device, and the seed is shown on the device screen during setup only. Trezor Suite works with public keys and unsigned transactions. Any prompt that asks you to type a seed into the app should be treated as an attack, without exception.

Is the desktop app safer than the browser version?

Generally yes. The desktop build of Trezor Suite sidesteps browser extensions and phishing pages that imitate the interface, and its installer can be signature-checked once and then trusted. The browser version remains a sensible fallback when installing software is not possible.

What happens to my coins if Trezor Suite disappears?

Nothing, as long as you hold your backup. The recovery seed follows open standards, so it can be restored in other compatible wallets without Trezor Suite existing at all. If you chose a multi-share backup, check in advance which wallets support that format.

Can I manage several devices or hidden wallets?

Yes. Trezor Suite remembers each device separately, with its own accounts and labels, and switching between them is a matter of plugging in the other one. Passphrase-protected hidden wallets appear as distinct wallets whenever you enter the matching passphrase.

Does Trezor Suite work without an internet connection?

Not usefully. Reading balances, estimating fees and broadcasting transactions all require connectivity. The device can sign in isolation in principle, but Trezor Suite is built as an online client and does not offer an air-gapped workflow.