Skip to main content

Device settings

Trezor Suite provides comprehensive control over your device configuration. These settings are stored on your device and persist across Suite installations.
Device settings require your device to be connected and unlocked. Changes are applied directly to the device firmware.

Accessing device settings

Navigate to Settings → Device in Suite. You’ll see all available device configuration options based on your device model and firmware version.

Security settings

PIN configuration

Your PIN protects device access from unauthorized users.
1

Navigate to settings

Go to Settings → Device → PIN.
2

Click Change PIN

Suite prompts you to confirm on device.
3

Enter current PIN

Use the randomized keypad to enter your current PIN.
4

Enter new PIN twice

Enter your new PIN and confirm it.
Use 6-9 digits for optimal security. Firmware 1.10.0+ supports up to 50 digits.

PIN entry security

The PIN entry system includes security features:
  • Randomized layout: Keypad positions change each time
  • Increasing delays: Each failed attempt increases wait time
  • Wipe after 16 failures: Device wipes after too many wrong attempts
  • No visual feedback: Device shows only dots, not numbers

Passphrase configuration

Passphrase protection adds an extra layer of security beyond your recovery seed.
1

Enable passphrase

Go to Settings → Device → Passphrase and toggle Enable.
2

Choose entry method

On device (recommended):
  • Enter directly on device screen (T/Safe 3)
  • Maximum security
  • Protected from keyloggers
In Suite:
  • Type in Suite interface
  • More convenient
  • Slightly less secure
3

Using passphrases

After enabling, you’ll be prompted for a passphrase when accessing hidden wallets.
Empty passphrase = standard wallet. Any non-empty passphrase = hidden wallet.
Passphrases cannot be recovered if forgotten. Write them down and store separately from your recovery seed.

Wipe code

Set a code that wipes your device when entered.
1

Access wipe code settings

Settings → Device → Wipe code
2

Set code

Enter wipe code using the same method as PIN entry.
Wipe code must be different from your PIN.
3

Confirm code

Re-enter to confirm.
Entering the wipe code immediately erases all device data. Use only in emergency situations.

Device customization

Device label

Set a custom name for your device to identify it easily.
1

Edit label

Settings → Device → Device label → Click edit icon
2

Enter name

Type a descriptive name (e.g., “My Trezor”, “Hardware Wallet #1”)
3

Apply

Label is saved to device and appears in Suite device selector.
Device labels are stored on the device and are not part of metadata/labeling system. They don’t sync across Suite installations.

Homescreen customization

Customize your device’s idle screen (Model T and Safe 3 only).
1

Access homescreen settings

Settings → Device → Homescreen
2

Choose image

Options:
  • Default Trezor logo
  • Gallery of pre-installed images
  • Upload custom image
3

Custom image requirements

If uploading custom image:
  • Format: PNG or JPEG
  • Size: 240×240 pixels (Model T), 144×144 (Safe 3)
  • Will be converted to black and white
4

Apply

Confirm on device to set new homescreen.

Display settings

Rotate the display orientation:
  • : Default
  • 90°: Right rotation
  • 180°: Upside down
  • 270°: Left rotation
Useful for:
  • Different mounting positions
  • Left-handed use
  • Custom setups

Advanced settings

SD card protection

Use microSD card for enhanced security (Model T and Safe 3 only).
Encrypts device storage using a secret stored on the SD card:
  • Device requires SD card to function
  • Adds hardware-level security
  • Protects against device extraction attacks
  • SD card acts as physical “key”
1

Insert microSD card

Insert formatted microSD card into device.
2

Enable in settings

Settings → Device → SD card protection → Enable
3

Device writes to card

Device generates secret and writes to SD card.
4

Keep card inserted

Device now requires this SD card to operate.
Losing the SD card means losing access to your device. You’ll need your recovery seed to restore on a new device.
  1. Insert SD card with protection data
  2. Settings → Device → SD card protection
  3. Click Disable
  4. Confirm on device

Safety checks

Control device security warnings and checks.
Maximum security:
  • Blocks dangerous operations
  • Prevents known attack vectors
  • Shows all security warnings
  • Recommended for all users
Only disable safety checks if you fully understand the security implications. Keep on “Strict” for normal use.

Experimental features

Some firmware versions include experimental features:
  • Accessible via Settings → Device → Experimental
  • May be unstable or incomplete
  • Use at your own risk
  • Usually disabled by default
Experimental features are not fully tested. Only enable if you understand the risks.

Device maintenance

Backup verification

Regularly verify your device backup:
  1. Settings → Device → Backup
  2. Click Check backup
  3. Confirm random words from your recovery seed
  4. Verifies backup is valid without wiping device
Verify your backup at least every 6 months or after any significant changes.

Firmware information

View current firmware details:
  • Settings → Device → Firmware
  • Shows:
    • Current firmware version
    • Available updates
    • Firmware type (Universal/Bitcoin-only)
    • Bootloader version
See Firmware updates for update instructions.

Device information

Access device technical details:
Device Information:
- Model: Trezor Model T
- Device ID: A1B2C3D4...
- Firmware: 2.5.1
- Bootloader: 2.1.0
- Vendor: SatoshiLabs
- Serial number: (if available)
- Bootloader hash: (for verification)

Wiping device

Completely erase all device data.
This is irreversible! Ensure you have your recovery seed before wiping.

When to wipe

  • Selling or gifting device
  • Suspicious device behavior
  • Forgotten PIN (after 16 failed attempts, device wipes automatically)
  • Starting fresh setup
  • Recovery testing

Wipe process

1

Access wipe device

Settings → Device → Wipe device
2

Read warning

Suite displays warning about data loss.
3

Confirm on device

Device prompts for final confirmation.
After confirmation, all data is immediately and permanently erased.
4

Device reset

Device returns to factory state:
  • All wallets erased
  • PIN removed
  • All settings reset
  • Ready for new setup

After wiping

To restore access to your funds:
  1. Recover device using recovery seed
  2. Set new PIN
  3. Apply passphrase (if previously used)
  4. Suite rediscovers accounts
See Backup and recovery for detailed recovery instructions.

Device-specific features

Unique features:
  • Two-button interface
  • PIN entry via computer (with randomized layout)
  • Passphrase entry via computer only
Not available:
  • SD card protection
  • Touchscreen features
  • Homescreen customization
  • Shamir Backup

Troubleshooting settings

Causes:
  • Device disconnected during save
  • Firmware issue
  • Communication error
Solutions:
  • Ensure stable USB connection
  • Retry setting change
  • Update firmware if available
  • Try different USB port/cable
Reasons:
  • Firmware version too old
  • Feature not available on your model
  • Device not in correct mode
Check:
  • Update to latest firmware
  • Verify feature compatibility
  • Ensure device is unlocked
No recovery possible without seed:
  • After 16 failed attempts, device wipes
  • Must recover using recovery seed
  • All settings reset
  • See Backup and recovery

Settings best practices

Set strong PIN (6+ digits)
Enable passphrase for significant holdings
Use reasonable auto-lock timing (2-5 minutes)
Keep safety checks on “Strict”
Verify backups regularly
Update firmware when available
Use descriptive device label
Don’t disable security features unnecessarily

Security

Security best practices and threat protection

Backup and recovery

Backup and device recovery procedures

Device management

Connecting and managing devices

Firmware updates

Updating device firmware

Build docs developers (and LLMs) love