Loading…
Loading…
Prices and availability on Trezor’s website can change and are not guaranteed.
Advertising disclosure: This page contains partner links. Squaby may earn a commission at no extra cost to you. Partner links do not change a score.
The Trezor Safe 5 is a hardware wallet from the Czech company Trezor Company s.r.o., part of the SatoshiLabs group. It pairs a Secure Element chip with a color touchscreen with haptic feedback and USB-C, and works with the Trezor Suite app on computers, in a browser and on Android phones. Trezor publishes the device firmware under open licenses. Its Squaby Score rests on public documents and records checked on October 22, 2026; Squaby has not tested the device. Trezor also sells a newer Safe 7 and Bitcoin-only versions of its devices, which this review does not cover.
Methodology version 1.0 · Checked on
87 / 100
Class A
95.5%
of the possible points could be assessed (39 of 41 criteria)
A: 80 or more · B: 65 to 79 · C: 50 to 64 · D: below 50
Taken from the total rounded to a whole number.
The facts behind this score were checked on . Squaby re-checks them every 3 months. Prices, firmware and availability change, so verify them on the manufacturer’s official site before acting.
The score combines 41 criteria in seven weighted categories. Each criterion has a published rule (shown below), and its points are calculated from the fact Squaby recorded together with its source and check date; points are never typed in by hand. A criterion that could not be checked is marked "not assessed": it is left out of both the points earned and the points possible, so it never counts as zero, and it lowers the evidence coverage instead.
The score describes the Trezor Safe 5 model’s global offering. It rests on public documents and public records, not on a lab test of the device. It rewards documented facts and disclosures. It is not a guarantee of safety and not a recommendation.
Secure element10 / 10 points
Finding: Yes
Note: Trezor’s Learn articles name the Infineon OPTIGA Trust M (V3) as the Safe 5’s Secure Element; the product page itself only says "NDA-free EAL 6+ Secure Element" without a chip model.
Rule: The manufacturer states that the keys are protected by a named secure element chip: 10 points.
Basis: Stated by the manufacturer · checked on
Secure element certificate15 / 15 points
Finding: Active certificate at EAL5+ or higher
Note: The Common Criteria list has no entry named OPTIGA Trust M. It shows an active EAL6+ certificate for the Infineon hardware platform that Infineon’s datasheet says the Trust M is based on (valid until March 2027). Trezor does not say which hardware revision is inside the Safe 5, and a chip certificate covers the chip, not the whole device.
Rule: Only with an official register as the basis. Active certificate for the named chip at EAL5+ or higher (with AVA_VAN.5) found in a public register: 15 points. Active certificate below that level, or an EAL5+ certificate that is archived or expired: 8. Not found: 0. A chip certificate covers the chip, not the whole device.
Basis: Official register or public record · checked on
Device-level security certification0 / 10 points
Finding: No device-level certificate found
Note: No entry for Trezor, SatoshiLabs or the Safe 5 was found in the Common Criteria list (all schemes) or in the ANSSI catalogue of October 16, 2026. Trezor mentions CE and RoHS marks, which are product safety marks, not security certificates.
Rule: Only with an official register as the basis. The device or its operating system (not only the chip) holds an active certificate from a national security agency or a Common Criteria scheme, found in the register: 10 points. Archived or expired: 5. None found: 0.
Basis: Official register or public record · checked on
On-device protections25 / 25 points
Finding: Found: PIN needed to unlock; Wipe or permanent lock after wrong PINs; Address and amount shown on the device’s own screen; Physical confirmation on the device for every signature; Firmware signature checked by the device.
Note: The PIN is checked inside the Secure Element and the device resets after 16 wrong PINs; the touchscreen shows what is signed, including amounts and addresses; firmware updates need physical confirmation; the bootloader checks the firmware signature and the device warns about unofficial firmware.
Rule: 5 points each: PIN needed to unlock; the device wipes or locks permanently after a limited number of wrong PINs; address and amount shown on the device’s own screen before signing; every signature needs a physical confirmation on the device; the device checks the firmware’s signature before installing or starting it.
Basis: Stated by the manufacturer · checked on
Genuine-device check10 / 10 points
Finding: Yes
Note: Each Safe 5 gets a unique certificate in its Secure Element during production, and Trezor Suite checks it when the device connects. Trezor does not say whether the check can detect hardware added to a genuine device.
Rule: A cryptographic genuine-device (attestation) check is documented and offered to the user: 10 points.
Basis: Stated by the manufacturer · checked on
Firmware maintenance15 / 15 points
Finding: Release with notes within 6 months
Note: Firmware 2.13.0 was released on October 21, 2026, after releases about every month, with a published changelog.
Rule: A firmware release with published release notes within the last 6 months: 15 points. Within the last 12 months: 8. Older, or no release notes: 0.
Basis: Stated by the manufacturer · checked on
Unfixed known vulnerabilities (last 5 years)15 / 15 points
Finding: No unfixed known vulnerability
Note: All 30 vulnerabilities listed on Trezor’s portal for the last five years are marked resolved; three name the Safe 5. The one NVD entry that Trezor does not list (CVE-2026-65058) was fixed before firmware 2.13.0. Ledger Donjon’s 2024 attack concerned the Safe 3’s microcontroller; Trezor states that the Safe 5 is not affected.
Rule: No publicly disclosed vulnerability affecting this model that is still unfixed on the check date: 15 points. An unfixed one that needs physical possession of the device and lab equipment: 8. An unfixed one that can be used remotely or without special equipment: 0.
Basis: Stated by the manufacturer · checked on
Fund-loss incidents (last 5 years)25 / 25 points
Finding: No incident with user losses
Note: No loss of funds caused by a flaw in Trezor’s device, firmware, app or code was found on Trezor’s security portal, in the NVD or in a media search. After Ledger’s October 2026 case, Trezor said it has no reports of tampered Trezors, removed the reseller named in that case (CryptoBilis) and is reducing its reseller list.
Rule: None: no incident in which users lost funds because of a flaw in the manufacturer’s device, firmware, app or distributed code (including supply-chain attacks on its code): 25 points. Compensated: incident, flaw fixed and affected users compensated: 15. Uncompensated: fixed, losses not compensated: 8. Unfixed: 0. Losses from phishing, fake apps not made by the manufacturer, or users revealing their recovery phrase are not counted.
Basis: Public reports and the manufacturer’s announcements · checked on
Customer data breach (last 5 years)5 / 10 points
Finding: Breach disclosed by the manufacturer
Note: Three incidents at third-party providers, each disclosed by Trezor on its own blog: contact details from a support ticketing tool (January 2024, up to 66,000 contacts), order data from the shipping provider ShipMonk (August 2026) and newsletter addresses at the email provider Brevo (September 2026, 347,149 addresses). Trezor states that its own systems were not compromised.
Rule: No reported breach of customer personal data: 10 points. A breach that the manufacturer disclosed itself: 5. A breach known only from third parties: 0.
Basis: Stated by the manufacturer · checked on
Years in operation10 / 10 points
Finding: 12 full years
Note: Trezor states that it was founded in 2013; the Czech business register shows the company created on December 12, 2013.
Rule: Full years since the manufacturer was founded, at the check date. 8 or more: 10 points. 5 to under 8: 6. 2 to under 5: 3. Under 2: 0.
Basis: Stated by the manufacturer · checked on
Open source10 / 20 points
Finding: Only one open source, or published without an open licence
Note: The device firmware is published under open licenses (GPLv3 and LGPLv3). The Trezor Suite app is published under the Trezor Reference Source License, which allows reading the code for reference but is not an open-source license. The secure element’s own firmware is made by Infineon.
Rule: Both the firmware (apart from closed code supplied by the secure element vendor) and the main companion app published under an OSI-approved licence: 20 points. Only one of the two, or code published without an open licence: 10. Neither: 0.
Basis: Stated by the manufacturer · checked on
Independent security audit0 / 15 points
Finding: None published
Note: No published report of an independent audit of the Safe 5 was found. The evaluation by Ledger’s security team (a competitor) concerned the Safe 3.
Rule: An independent audit or evaluation of the device or firmware, published within the last 3 years: 15 points. Older than 3 years: 7. None published: 0. Certification reports already used for the certificate criteria do not count again.
Basis: Stated by the manufacturer · checked on
Vulnerability disclosure10 / 10 points
Finding: Found: Published disclosure policy or security contact; Bug bounty programme with published rules.
Note: A security contact and a bug bounty with published rules and rewards of up to $100,000 for critical findings.
Rule: 5 points each: a published disclosure policy or security contact; a bug bounty programme with published rules.
Basis: Stated by the manufacturer · checked on
Manufacturer identified10 / 10 points
Finding: Yes
Note: Trezor Company s.r.o., Kundratka 2359/17a, 180 00 Prague 8, company ID 02440032, as stated in Trezor’s terms and in the Czech business register.
Rule: Only with an official register as the basis. The manufacturer’s legal entity name, registered address and company number are published on its site and match an official company register: 10 points.
Basis: Official register or public record · checked on
Portable backup standard30 / 30 points
Finding: Yes
Note: The default backup is a 20-word SLIP-39 backup; 12 and 24-word BIP-39 backups are listed on the product page. Trezor names wallets from other makers that can restore SLIP-39 backups (Rabby, Electrum, Sparrow, OneKey and Keystone), but fewer wallets read SLIP-39 than BIP-39.
Rule: The recovery backup follows a published open standard (BIP-39 or SLIP-39) that at least one wallet from another maker can restore: 30 points.
Basis: Stated by the manufacturer · checked on
Optional passphrase15 / 15 points
Finding: Yes
Rule: An optional passphrase (hidden wallets) is supported: 15 points.
Basis: Stated by the manufacturer · checked on
Multi-share backup15 / 15 points
Finding: Yes
Note: Multi-share Backup with up to 16 shares works on the Safe 5.
Rule: The device can split the backup into shares (for example SLIP-39 Shamir): 15 points.
Basis: Stated by the manufacturer · checked on
Backup check10 / 10 points
Finding: Yes
Rule: The device can verify a written backup without exposing it (dry-run recovery check): 10 points.
Basis: Stated by the manufacturer · checked on
Recovery guide10 / 10 points
Finding: Yes
Rule: An official step-by-step guide for restoring funds on a replacement device: 10 points.
Basis: Stated by the manufacturer · checked on
Third-party handling of seed data20 / 20 points
Finding: No such service exists
Note: No Trezor service that stores, splits or exports seed data was found on Trezor’s support, learn, guide and shop pages. Trezor Keep Metal is a physical backup product.
Rule: Scores transparency, not the design choice. No service that exports or stores seed data exists: 20 points. An optional, opt-in service exists and it is documented who holds the data and how: 20. Optional but not documented that way: 5. Required for normal use: 0. The review text describes both the added risk of such a service and what it protects against (a lost or destroyed written backup).
Basis: Stated by the manufacturer · checked on
Supported networks25 / 25 points
Finding: 50 networks
Note: Trezor’s list shows 44 networks for Ethereum alone and its coin pages name at least 15 other networks, such as Bitcoin, Solana, TRON, Cardano and Stellar. Squaby counted from Trezor’s own pages and did not check each network for the Safe 5.
Rule: Networks (blockchains) on the manufacturer’s official support list; tokens on a supported network are not counted separately. 50 or more: 25 points. 25 to 49: 18. 10 to 24: 10. 5 to 9: 5. Under 5: 0.
Basis: Stated by the manufacturer · checked on
Major assets25 / 25 points
Finding: Found: Bitcoin (BTC); Ethereum (ETH); XRP; BNB; Solana (SOL).
Note: Each coin page lists the Trezor Safe 5 among the supported devices.
Rule: 5 points each for support of the five largest non-stablecoin assets by market cap, fixed for version 1.0 on 2026-10-22: Bitcoin, Ethereum, XRP, BNB and Solana. Support through the manufacturer’s app or through a compatible wallet the manufacturer lists.
Basis: Stated by the manufacturer · checked on
Own companion apps15 / 20 points
Finding: Found: Desktop app; Android app; Browser extension or web app. Not found: iOS app.
Note: Trezor Suite for Windows, macOS and Linux, a web app, and an Android app that works with the Safe 5 over USB-C. On iPhone the Safe 5 has limited functions, so iOS is not counted.
Rule: 5 points each for a companion app made by the manufacturer: desktop; iOS; Android; browser extension or web app.
Basis: Stated by the manufacturer · checked on
Works without the manufacturer’s app15 / 15 points
Finding: Yes
Rule: The manufacturer lists compatible third-party wallets: 15 points.
Basis: Stated by the manufacturer · checked on
Connection to decentralized apps15 / 15 points
Finding: Yes
Note: WalletConnect in Trezor Suite and compatible third-party wallet apps.
Rule: A documented standard way to connect to decentralized apps (for example WalletConnect or a browser wallet integration): 15 points.
Basis: Stated by the manufacturer · checked on
Published price20 / 20 points
Finding: Yes
Note: Trezor’s product page lists the price in many currencies; the US price was $129.
Rule: The official list price is shown on the manufacturer’s international store: 20 points. The size of the price is not scored.
Basis: Stated by the manufacturer · checked on
No subscription for basic use20 / 20 points
Finding: Yes
Note: No subscription was found; Trezor Suite is free to use.
Rule: Receiving, sending and storing need no subscription or paid service: 20 points.
Basis: Stated by the manufacturer · checked on
In-app service fees disclosed0 / 20 points
Finding: No
Note: Trezor lists the third-party providers for buying, selling and swapping and says that all fees are included in the quoted amount, but that exact fee amounts cannot be shown in advance; the amounts and any share kept by Trezor are not published.
Rule: No paid in-app services, or the fees of in-app buy, swap or staking services (including partner fees) are disclosed: 20 points.
Basis: Stated by the manufacturer · checked on
Official sales channels15 / 15 points
Finding: Yes
Note: Trezor publishes its own store, its official Amazon stores and a list of authorized resellers by country.
Rule: The manufacturer publishes its official stores or authorized resellers: 15 points.
Basis: Stated by the manufacturer · checked on
Warranty15 / 15 points
Finding: 24 months
Note: A two-year commercial warranty from delivery, in addition to statutory rights, which differ by country.
Rule: Warranty months stated by the manufacturer. 24 or more: 15 points. 12 to 23: 8. Under 12 or not stated: 0.
Basis: Stated by the manufacturer · checked on
Return policy10 / 10 points
Finding: Yes
Note: A 15-day right of withdrawal; a wallet can only be returned with the device box unopened and the seals intact.
Rule: A return or refund policy is published: 10 points.
Basis: Stated by the manufacturer · checked on
Setup guide20 / 20 points
Finding: Yes
Rule: An official step-by-step setup guide: 20 points.
Basis: Stated by the manufacturer · checked on
Interface languages20 / 20 points
Finding: 16 languages
Note: Trezor Suite for desktop and web has 16 translation files; the mobile app has 9, the App Store listing names only English, and the device itself offers English plus six translations.
Rule: Languages of the manufacturer’s companion app (of the device if there is no app). 10 or more: 20 points. 5 to 9: 12. 2 to 4: 5. One: 0.
Basis: Stated by the manufacturer · checked on
Learning resources15 / 15 points
Finding: Yes
Rule: Official learning material on self-custody basics: 15 points.
Basis: Stated by the manufacturer · checked on
No account neededNot assessed
Why not assessed: Trezor Suite needs no account in the articles read, but no explicit statement to that effect was found.
Rule: The device and the manufacturer’s app can be used without creating an account or giving an email address: 20 points.
Squaby hands-on testNot assessed
Why not assessed: Squaby has not bought or tested the device.
Rule: Only as a documented Squaby test (a reviewer set up the device, restored a backup and signed a test transaction, with notes): 25 points. Not assessed while Squaby has no device.
Support channels15 / 30 points
Finding: Found: Ticket or email. Not found: Live chat.
Note: Support tickets through Trezor’s support center and a help chatbot ("Hal"); no live chat with a person, phone number or customer email address was found.
Rule: 15 points each: live chat; ticket or email.
Basis: Stated by the manufacturer · checked on
Help center20 / 20 points
Finding: Yes
Rule: A searchable help center: 20 points.
Basis: Stated by the manufacturer · checked on
Scam warning20 / 20 points
Finding: Yes
Note: Trezor states that its support never asks for the wallet backup.
Rule: An official page saying that support never asks for the recovery phrase, or listing the official domains and apps: 20 points.
Basis: Stated by the manufacturer · checked on
Status page15 / 15 points
Finding: Yes
Rule: A public status page for the manufacturer’s online services: 15 points.
Basis: Stated by the manufacturer · checked on
Response target0 / 15 points
Finding: No
Note: No stated response time was found.
Rule: A stated support response time: 15 points.
Basis: Stated by the manufacturer · checked on
Trezor’s Learn articles name the Infineon OPTIGA Trust M (V3) as the Safe 5’s Secure Element, which Trezor describes as certified to Common Criteria EAL6+. The Common Criteria list has no entry named OPTIGA Trust M; it shows an active EAL6+ certificate for the Infineon hardware platform that Infineon says the chip is based on, valid until March 2027. Trezor does not say which hardware revision is inside the device, and a chip certificate covers the chip, not the whole device. No device-level security certificate for the Safe 5 was found in the Common Criteria list or the ANSSI catalogue. According to Trezor, the PIN is checked inside the Secure Element, the device resets after 16 wrong PINs, the touchscreen shows the details of what you sign, and the bootloader checks the firmware signature. Trezor’s authenticity check uses a unique certificate stored in the Secure Element and is run by Trezor Suite; Trezor does not say whether it can detect hardware added to a genuine device. The current firmware is 2.13.0, released on October 21, 2026, after releases about every month. Trezor’s portal lists 30 resolved vulnerabilities for the last five years, three of which name the Safe 5; Trezor says that a 2024 attack by Ledger’s security team on the Safe 3’s microcontroller does not affect the Safe 5.
Trezor lists only a USB-C connection for the Safe 5. Trezor Suite runs on Windows, macOS and Linux, in a browser and as an Android app that works with the Safe 5 over USB-C; on iPhone the Safe 5 has limited functions. A wired connection still exposes the device to the connected computer or phone, so keep its software up to date.
The Safe 5 supports Bitcoin, Ethereum, XRP, BNB and Solana, and Trezor’s list shows 44 networks for Ethereum alone plus many others; Squaby counted from Trezor’s pages and did not check each network for the Safe 5. Trezor lists third-party wallet apps such as MetaMask and Rabby, and Trezor Suite offers WalletConnect. Buying, selling and swapping in Trezor Suite are services of third-party providers; Trezor says that all fees are included in the quoted amount but does not publish the amounts or any share it keeps. The default backup is a 20-word SLIP-39 backup, which fewer wallets can restore than a 12 or 24-word BIP-39 backup; Multi-share Backup with up to 16 shares, a passphrase and a backup check are supported, and Trezor offers no service that stores seed data. The device firmware is published under open licenses (GPLv3 and LGPLv3). The Trezor Suite app is published under the Trezor Reference Source License, which allows reading the code but is not an open-source license, and the Secure Element’s own firmware is made by Infineon.
Trezor reports three customer data incidents at third-party providers, each disclosed on its own blog. In January 2024 an intruder reached its support ticketing tool, exposing the contact details of up to 66,000 people and contacting 41 of them to ask for recovery seeds. In August 2026 the shipping provider ShipMonk exposed order data (names, addresses, phone numbers) of 11,742 customers, and a later update added about 67,000 US customers from orders between 2019 and 2021 that ShipMonk should have deleted. In September 2026 an attacker used Trezor’s account at the email provider Brevo to send a phishing email, claiming a hardware flaw, to 347,149 newsletter addresses. Trezor states that its own systems and devices were not compromised and that its support never asks for the wallet backup. No loss of funds caused by a flaw in Trezor’s device, firmware or app was found. After Ledger reported tampered devices in October 2026, Trezor said that it has no reports of tampered Trezors, removed the reseller named in Ledger’s case (CryptoBilis, which had been one of its resellers) from its reseller list and is reducing the number of its resellers. In 2024, Ledger’s security team (a competitor) published an attack on the Trezor Safe 3; Trezor says the Safe 5 is not affected.
Learn exactly how your hardware wallet converts 24 random words into infinite blockchain addresses using BIP-39 and asymmetric ciphers in Academy Module 1.