Trezor expands wallet passphrase limit after hardware security incidents

Traders Union
All News
Crypto
Trezor passphrase security update

Highlights

Trezor raised its wallet passphrase limit above 50 characters via a firmware update, aiming to improve security against attacks exploiting recovery phrase flaws.
Trezor warned customers on Friday to transfer funds from wallets purchased through ex-reseller CryptoBilis since March due to a possible Safe 5 device hardware implant risk.
Recent updates and warnings reflect increased focus on both software vulnerabilities and supply chain threats, prompting enhanced layered defenses in the crypto wallet industry.

Firmware update adds longer passphrase protection

According to Cointelegraph, Trezor said on Sunday that the higher passphrase limit is now available in Trezor Suite with updated device firmware. Devices running older firmware still cap optional passphrases at 50 characters.

According to Trezor, the passphrase works as an additional password used alongside a wallet’s recovery phrase. If an attacker obtains the recovery phrase, access to funds in that wallet still requires the correct passphrase.

Trezor linked the update to the Coldcard attacks in July, when a firmware flaw caused some devices to generate recovery phrases with insufficient randomness, allowing attackers to reconstruct them. The company said strong, unique passphrases helped protect some affected users.

Security warnings widen focus on wallet supply chain risks

The update follows a separate warning involving Trezor’s own devices. On Friday, the company advised customers who bought wallets from former authorized reseller CryptoBilis since March to move their funds to new wallets.

Trezor said an Indonesian customer reported a suspected implant inside a Trezor Safe 5 that could capture on-screen information, including recovery phrases, and transmit it over a cellular network. The company also said on Friday that it had not examined the device and had received no reports of related losses.

The developments underscore how crypto wallet security risks can stem from both software weaknesses and possible hardware tampering. For users and the broader digital asset sector, the latest steps highlight growing attention on layered defenses and distribution-chain controls.

Our earlier article on Cohere’s planned acquisition of AISLE highlighted how the AI company is expanding into enterprise cybersecurity alongside its merger with Aleph Alpha. We noted that AISLE’s AI focuses on finding software vulnerabilities at scale, and that the deal is intended to strengthen threat detection and security capabilities for enterprise and public-sector clients as AI-driven risks grow.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.