[ESHOP launched] Trezor: Bitcoin hardware wallet

[examplens]

What's wrong with https://wallet.trezor.io/ (If I understand correctly your doubt)
I use the option "remembering device" and I can see balances on my addresses, even without the connected wallet on PC.

But it displays the balance of the wallet, not the one of addresses....
This whole thing started when I sent a tx, the part I din't use was sent to a change address, but I could not see in my "receive" tab. I could later verify that the address did infact belong to me in Electrum; but the little heart attack I had when I saw the tx with one output I did not recognize was rather huge

I can see balance on all of my addresses. Now I have only 3 addy with balances, and I can see the current balance on each individually. I can't go on other addresses like Litecoin, Doge or something without the connected device, but for sure it works for BTC if the last one was "saved" before wallet physically disconnected.

[Csmiami]

I can see balance on all of my addresses. Now I have only 3 addy with balances, and I can see the current balance on each individually. I can't go on other addresses like Litecoin, Doge or something without the connected device, but for sure it works for BTC if the last one was "saved" before wallet physically disconnected.

And where do you see it exactly? I can see the list of all used addresses, with the total received on each; but not the current balance on each (and change addresses are not shown)
I have the device unpluged for paranoid issues

[examplens]

I can see balance on all of my addresses. Now I have only 3 addy with balances, and I can see the current balance on each individually. I can't go on other addresses like Litecoin, Doge or something without the connected device, but for sure it works for BTC if the last one was "saved" before wallet physically disconnected.

And where do you see it exactly? I can see the list of all used addresses, with the total received on each; but not the current balance on each (and change addresses are not shown)
I have the device unpluged for paranoid issues

First, I use the Trezor One. Just to be sure that we are talking about same thing 
I can see only addresses the current balance. Addresses with zero balances have not shown.
I'd love to take a screenshot for you, but my browsers are under my security investigation because of some weird issue.
I keep the unplugged device, mostly for a reason of hardware security.

[Rath_]

I guess the answer is no; but may it's just that I haven't found the option. And, in case it's not available... is this a feature that will be coming with Trezor Suite?

Sorry, but you can't do that in both Trezor Suite and Trezor Wallet. The following screenshot is a fragment of the 'Receiving' tab from Trezor Suite.



'Total Received' is a completely useless stat, especially for people who consolidate their UTXOs. Current balance would be more useful.

[coupable]

In the begginners board, someone reported a fake trezor website asking for the seed phrase.
Link to the Report thread: https://bitcointalk.org/index.php?topic=5260083
Fake link:

Code:

https://trez0r.com/

Do not click
Domain details:

Code:

Domain Name: TREZ0R.COM
Registry Domain ID: 2532695461_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.namecheap.com
Registrar URL: http://www.namecheap.com
Updated Date: 2020-06-01T20:03:49Z
Creation Date: 2020-05-31T21:13:44Z
Registry Expiry Date: 2021-05-31T21:13:44Z

There are already 24 other similar domains according to DNStwister: https://dnstwister.report/search?ed=7472657a6f722e696f
I would also recommend for anybody reading this to report the fake link using this link: https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en

[OmegaStarScream]

I don't have access to my seed right now, and I need to make a transaction. Do you guys know if it's safe to ignore this message and continue, or can the device get wiped if I do so?



I looked at the changelogs (https://wiki.trezor.io/Firmware_changelog) and checked the blog posts for the last two updates, and apparently, updating shouldn't wipe the device. Any thoughts?

[Rath_]

I looked at the changelogs (https://wiki.trezor.io/Firmware_changelog) and checked the blog posts for the last two updates, and apparently, updating shouldn't wipe the device. Any thoughts?

While both of these updates didn't wipe my device directly, they failed to install using both my computer and my laptop resulting in broken firmware which forced me to wipe my device and install the firmware again using my Android phone. In both cases, as stated by the error log on the device, something was interrupting the USB connection so it wasn't updates' fault. It might work fine for you, but the following idea may be better.

I don't have access to my seed right now, and I need to make a transaction. Do you guys know if it's safe to ignore this message and continue, or can the device get wiped if I do so?

It is definitely not going to be wiped if you ignore that message, but you might not be able to sign the transaction. Why don't you use the previous version of Electrum (3.3.8) just to be safe? You don't have to uninstall the current one. Simply download the portable executable.

[OmegaStarScream]

It is definitely not going to be wiped if you ignore that message, but you might not be able to sign the transaction. Why don't you use the previous version of Electrum (3.3. just to be safe? You don't have to uninstall the current one. Simply download the portable executable.

Thanks! I ignored it and it worked just fine. Not sure why you suggested downgrading to 3.3.8 though? Since that message is showing in both versions, what difference would it make?

[malevolent]

Thanks! I ignored it and it worked just fine. Not sure why you suggested downgrading to 3.3.8 though? Since that message is showing in both versions, what difference would it make?

I think the potential problems with signing transactions are related to this: https://blog.trezor.io/latest-firmware-updates-correct-possible-segwit-transaction-vulnerability-266df0d2860

https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd

[Rath_]

Not sure why you suggested downgrading to 3.3.8 though? Since that message is showing in both versions, what difference would it make?

Probably none. I thought that Electrum 3.3.8 was old enough to be fully supported by your Trezor's outdated firmware. Since the signing process has been refactored in the recent Trezor software updates, I assumed that you might fail to sign the transaction using the latest version of Electrum.

[Rath_]

Trezor is celebrating the 6th birthday of Trezor One. Starting at midnight 21st July (00:00 CEST) until 23rd July (09:00 CEST) - for every Trezor T bought, a free Trezor One will be given.

[Rath_]

Trezor has just shared a 10% discount code “DATAPRIVACY” that you can use in their shop. It is limited to 4500 people and 48 hours. Also, they mentioned that they get rid of any sensitive data (including e-mail addresses) from the e-shop after 90 days.

[Last of the V8s]

Then they must have a different database of emails to spam people's mailboxes with 

[Rath_]

Then they must have a different database of emails to spam people's mailboxes with 

Yeah, there is a checkbox during checkout which signs up people for their newsletter and other spam. I am quite sure that lately, they have been sending a lot of e-mails with links to their articles.

[Coin-Keeper]

I hope this thread is the place for these questions.  At 266 pages this thread is too long to read entirely but I checked the last half a dozen pages.

1.  Trezor T SD protection question:  if a user enables SD protection using trezorctl does that directly impact encryption of the SEED on the hardware wallet?  I know SD Protect encrypts the PIN and you must have both your PIN and the SD inserted to unlock the Trezor.  My concerns are to clearly understand my locked Trezor T with my SD card hidden elsewhere  ------- would a high end physical hack at a laboratory see my SEED or an encrypted remnant of sorts?  I use super long BIP passphrases to mitigate anyway, but I want to understand EXACTLY how SD Protect impacts the stored SEED on my device.

2. If I have a few Trezors that are setup using software wallets (not trezorctl) e.g. Electrum/trezor.io, is it safe to connect using trezorctl and just configure a few options not available on simple web wallets?  Everything is backed up multiple times so there is no danger of losing coins, just trying to save time if I can.  Blowing away and starting over is doable just asking.

[Rath_]

If you still haven't set up trezorctl then I would recommend following this guide. Also, if you are going to do it on Windows, using WSL will be the fastest way.

1.  Trezor T SD protection question:  if a user enables SD protection using trezorctl does that directly impact encryption of the SEED on the hardware wallet?  I know SD Protect encrypts the PIN and you must have both your PIN and the SD inserted to unlock the Trezor.  My concerns are to clearly understand my locked Trezor T with my SD card hidden elsewhere  ------- would a high end physical hack at a laboratory see my SEED or an encrypted remnant of sorts?  I use super long BIP passphrases to mitigate anyway, but I want to understand EXACTLY how SD Protect impacts the stored SEED on my device.

This feature encrypts your device's data (including the seed). If you enter a wrong or correct PIN without an SD card, the device will return an error and ask you to insert it. Once the correct SD card is inserted, you have 16 attempts to enter the correct PIN. You can easily copy the "secret" to multiple SD cards. It is stored in "trezor/device_id/salt" and can be accessed using any file explorer.

2. If I have a few Trezors that are setup using software wallets (not trezorctl) e.g. Electrum/trezor.io, is it safe to connect using trezorctl and just configure a few options not available on simple web wallets?

Yes, vice-versa works completely fine as well. Electrum and other third-party software do not care if you have the SD card protection enabled (because they see the device as locked) or if you used trezorctl to create a 18 word seed.

[Altcoin Reviewer]

I am looking to order my first trezor!

is it 100% secure? If yes, how can I verify it? Kinda curious as I am going to hold all the coins on trezor.

[Coin-Keeper]

BitCryptex,

Thank you.  I was hoping that the SEED was encrypted.

[malevolent]

I am looking to order my first trezor!

is it 100% secure? If yes, how can I verify it? Kinda curious as I am going to hold all the coins on trezor.

https://wiki.trezor.io/Security:Threats
https://wiki.trezor.io/User_manual:Security_best_practices

If you set up a passphrase, and you adhere to basic security practices outlined above, it can be said that the Trezor wallet is "100% secure".

[dkbit98]

I am looking to order my first trezor!

is it 100% secure? If yes, how can I verify it? Kinda curious as I am going to hold all the coins on trezor.

I would not say that anything is 100% secure, including Trezor wallet as we saw with recent reports from their competition.
Human factor is biggest issue here and flaws in software code.
However Trezor is open source and much more safer than regular desktop wallets.
Always use only official website and NEVER enter any seed words or private keys on any website to avoid phishing.