Bitcoin Forum
May 23, 2024, 08:43:06 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Worried my Trezor, could have been tampered with. (Reset can help?)  (Read 161 times)
thegoatiest (OP)
Member
**
Offline Offline

Activity: 200
Merit: 12


View Profile
July 15, 2020, 03:51:26 PM
Merited by o_e_l_e_o (2)
 #1

Hello,
I bought my Trezor online some years back. (it's the original not the new one)

For a long time I have been worrying - what if the seller, tampered with it before sending it to me.
 {it was an authorized seller~ from memory}

I've never stored much crypto on it due to this concern. While I've not had any problems so far, I also haven't put enough worth stealing on it yet.
------

Is this a valid worry, is it technically possible to receive a device with the equivalent of a key-logger or something in it? Or maybe a pre-made duplicate ?
I seem to remember that when you use the device for the first time - it generates a new and unique set of mnemonic passwords - to transfer ownership of the device.
So surely someone else couldn't have access to these backup pharses/mnemomics unless they had physical access to my device/menomic phrases? As they were created; after I created them, and weren't present before I hit the 'create' button..{or started it for the first time e.t.c}

Just getting a bit paranoid...
Would re-booting / resetting my Trezor to default and starting with a new set of mnemomics remove any chance of the above?  

Thanks.
TG
gentlemand
Legendary
*
Offline Offline

Activity: 2590
Merit: 3013


Welt Am Draht


View Profile
July 15, 2020, 03:55:40 PM
 #2

If it was from an authorised seller and arrived sealed then that's about as promising as it gets.

If you don't have any money tied up on it then doing a new seed is no hassle and should put your mind at rest.

I've never heard of sold hardware arriving tampered with yet, plenty of those pre printed seeds though. All of the hardware hacks require physical access to the device with the seed already created.
sunsilk
Hero Member
*****
Online Online

Activity: 2926
Merit: 620



View Profile
July 15, 2020, 04:00:16 PM
 #3

If the Trezor arrived to you already have the recovery seed printed then that's a red flag. But if you are the one that generated it, you don't have anything to worry with.

But if that doesn't convinces you, transfer the balances you have there to another wallet temporarily and just generate a new recovery seed.

Twentyonepaylots
Sr. Member
****
Offline Offline

Activity: 1876
Merit: 370


View Profile
July 15, 2020, 04:01:16 PM
 #4

If you bought it from an authorized seller you can worry less about it especially if that is the main business of them coz they are building reputation of their own too on this field, but it is best if bought directly from the supplier you can guarantee its not tampered 99%, like a freshly made wallet with brand new smell. There were cases reported of missing funds in an hardware wallet, most probably they acquire it from a random seller in an online shopping store like Amazon coz they are likely to be scammed by it, tampered somehow. You can reset it as many times as you want to be safe, no need to be anxious about it lol.
Darker45
Legendary
*
Offline Offline

Activity: 2590
Merit: 1867


View Profile
July 15, 2020, 04:04:40 PM
 #5

If you're sure that it was bought from an official retailer, then you should not worry about it possibly tampered.

Trezor has a lot of official resellers such as Amazon. If you can still remember the reseller you bought your Trezor from, you may check it on their official site here: https://trezor.io/resellers/. Look for the name of the shop from where you bought your Trezor.

If you have some serious doubts, however, then don't risk. Buy a new one from their official site and sleep better.  
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!