Trezor Suite Lite for mobile

[OmegaStarScream]

So it looks like Trezor has released a new (watch-only) mobile app, that allows to:

- Generate new receiving addresses
- monitor your balances and transaction
- And also track your portoflio.

The app is available on both iOS[1] and Android[2], and you can find more details about it here: https://trezor.io/learn/a/trezor-suite-lite-features

[1715372929]

1715372929

[1715372929]

1715372929

[1715372929]

1715372929

[1715372929]

1715372929

[m2017]

So it looks like Trezor has released a new (watch-only) mobile app, that allows to:

- Generate new receiving addresses
- monitor your balances and transaction
- And also track your portoflio.

The app is available on both iOS[1] and Android[2], and you can find more details about it here: https://trezor.io/learn/a/trezor-suite-lite-features

Well, it is convenient and safe (more on that later). You can always keep abreast of changes in your portfolio and find out in a timely manner about new receipts on the balance of the wallet, while not risking connecting the hardware wallet to a mobile phone (wait, this has not yet been implemented by trezor. about this also a little later) and online. I also see the convenience in that you can easily and quickly generate a new address to provide to the sender. I copied and pasted from this app (if such a function is implemented. In general, how could it be without it in our time) and sent it to social networks or instant messengers (wait, how safe is this and whether malicious programs that got on your phone can change the address wallet).

Including the question of security arises about if the smartphone is lost or stolen. By gaining access to the phone, and hence to Trezor Suite Lite, can get complete information about the owner's portfolio, which can be easily identified from the data in the phone. And also, almost everything about the owner of the phone. Compare these data and everything - you are in full view.

I assume that this app will be finalized and will be able to interact with trezor (via cable or otherwise), allowing to also send transactions from the wallet. That is, to have the same functionality as in the desktop version. Most likely with the new hardware wallet that will be released. Analog Nano X?

[dkbit98]

So it looks like Trezor has released a new (watch-only) mobile app, that allows to:

I saw the news and I think it's stupid to release something like this that is half-finished, while all their competition already have fully working applications already.
There did say something like, oh but we are working very hard on making this app a full-featured mobile wallet blablabla...

[Pmalek]

This is basically a portfolio tracker with the added function of master public keys, allowing you to generate and share receiving addresses. What is missing is the option to send crypto as no seeds and private keys are coupled with it obviously. Perhaps, it's the beginning of full support for mobile device onboarding, which still doesn't work with Trezor.     

[witcher_sense]

The app is available on both iOS[1] and Android[2], and you can find more details about it here: https://trezor.io/learn/a/trezor-suite-lite-features

It seems you forgot to add actual footnotes for these superscripts, so I took the liberty of specifying them:

iOS: https://apps.apple.com/app/id1631884497
Android: https://play.google.com/store/apps/details?id=io.trezor.suite

A fake copy of Trezor Suite is also present on Google Play, so be careful when using search engines to find a genuine application.

Please report the following app that pretends to be the Trezor Suite App and asks for your mnemonic:

Code:

https://play.google.com/store/apps/details?id=com.looklike.suitelove

As for Trezor Suite Lite for mobile, it definitely looks unfinished because it lacks certain important features, particularly:

1) It doesn't allow generating proof that I control a certain address in my self-hosted wallet.
2) It doesn't implement a CoinJoin feature so that blockchain analysis companies can associate my geoposition with addresses I register for CoinJoin rounds.

[Yamane_Keto]

The app is available on both iOS[1] and Android[2], and you can find more details about it here: https://trezor.io/learn/a/trezor-suite-lite-features

Why do I feel that this application will work as a chainalysis backdoor to track all your portfolio easily, it is a GUI XPUB import APK app.

Dealing with such an application should be with a little caution, as all that scammer will need is to try to make the application generate addresses that the hackers manage, is there any way to verify that the address that is generated is the same as the address from which the seeds are generated.

Can I contact using Tor?


Perhaps it would be a revolutionary update if it works like a car fingerprint (if your wallet is near you, you can see your balance, otherwise you will not be able to. )

[Pmalek]

As for Trezor Suite Lite for mobile, it definitely looks unfinished because it lacks certain important features, particularly:

1) It doesn't allow generating proof that I control a certain address in my self-hosted wallet.

Proof in what form? You mean verifying the address is correct on the screen of your hardware wallet? The purpose of this is to have an app you can use with limited features that don't require you connecting your Trezor HW. Your job is to import the correct master public keys. I am guessing that's how it's supposed to work.

2) It doesn't implement a CoinJoin feature so that blockchain analysis companies can associate my geoposition with addresses I register for CoinJoin rounds.

You can't participate in coinjoins because the app won't have the necessary private keys to sign transactions or the hardware device connected to confirm the transactions physically.

[OmegaStarScream]

This is basically a portfolio tracker with the added function of master public keys, allowing you to generate and share receiving addresses. What is missing is the option to send crypto as no seeds and private keys are coupled with it obviously. Perhaps, it's the beginning of full support for mobile device onboarding, which still doesn't work with Trezor.     

Yes, that's the plan: https://twitter.com/Trezor/status/1658126561218895876

-snip-
Can I contact using Tor?

No, the 'Privacy and security' settings offer two options only:

1. Hide balances
2. Usage data

But I would imagine that using something like Orbot would offer the same level of privacy

[dkbit98]

Why do I feel that this application will work as a chainalysis backdoor to track all your portfolio easily, it is a GUI XPUB import APK app.

I am not going to use this app but I think they release most of their stuff as open source, so this app should be no different and code should be checked by security experts.
Trezor can be criticized for some things and I ram not recommending their devices atm, but I have to give them credits for staying on open source path for so long.
Any app installed and used on smartphone should be considered as privacy risk for obvious reasons.

Can I contact using Tor?

Trezor desktop app have Tor integrated, but they didn't do a very good job and some stuff got leaked, until someone reported issues on their github and it was fixed.
That is why open source and community contribution is great.

[Husna QA]

A fake copy of Trezor Suite is also present on Google Play, so be careful when using search engines to find a genuine application.

Apps with a similar name Trezor Suite are also in the AppStore, so be careful too.



https://apps.apple.com/id/app/mytrez%C5%8Dr-suite-one-edition/id1672152406
https://apps.apple.com/id/app/tr-e-z-or-suite-manager-app/id6447076691


While the original Trezor Suite (https://apps.apple.com/id/app/trezor-suite-lite/id1631884497) looks like this:

This is basically a portfolio tracker with the added function of master public keys, allowing you to generate and share receiving addresses. What is missing is the option to send crypto as no seeds and private keys are coupled with it obviously. Perhaps, it's the beginning of full support for mobile device onboarding, which still doesn't work with Trezor.     

The Trezor mobile application was included in their roadmap when the desktop version of the Trezor Suite was released in 2021 (https://blog.trezor.io/trezor-suite-launches-8958c1d37d33).

On the roadmap are coin control, full node support, CoinJoin, a Trezor mobile app and password manager, and support for more languages!

However, it seems that users who want the Trezor mobile application still have to wait until there is an option to send transactions directly from the Trezor mobile lite application, which was recently released.

[Pmalek]

<Snip>

People should never trust Play/App store reviews, but sometimes those can help. More importantly, it helps looking at the number of downloads if you know the exact app you are looking for. For example, the Trezor Suite Lite (released recently) already has +1k downloads, which is expected. This number will increase to tens of thousands after a while. On the other hand, the fake one on Google Play Store only has +10. It makes no sense that a Trezor app would have that little interest from customers. And obviously, you should never perform a search on an app store and trust the results shown. You find the correct link on the official website. 

[Hispo]

Thanks for the headsup!
I am going to take a look at it, but eventually, I think I won't stay in the long run with this application, out the security concerns, unfortunately it opens a new universe for fraud  possibilities for scammers to launch fake apps on the stores, as already you guys have pointed out.

Not only that, the fact the application is on the phone, could easily give a hint to some malicious person on our Bitcoin holdings. If Trezor really wants this app to the a success in the long run, they need to make it more discreet and appealing, beyond being a simple portfolio tracker, which there are already many in this market. 

I am willing to give the benefit of the doubt for now, let us see. If all goes as intended, I would gladly connect a Trezor to my phone in the future, easier if there is no laptop at hand reach.

[Husna QA]

<Snip>

People should never trust Play/App store reviews, but sometimes those can help. -snip-

The risk of finding an application that turns out to be fake can occur when using keywords to find certain applications on the Play Store/App Store. It's safer to use a link that comes from the official website.
In the past, I even found several applications on behalf of Electrum in the play store (https://bitcointalk.org/index.php?topic=5297705.msg55773085#msg55773085).

After a few days of trying Trezor Suite Lite, I found a problem, including the number of assets displayed in the Portfolio balance on the home menu. The graphic didn't appear even though I had tried tapping the 'Try again' button. The graphic only appears when I tap on a previously synced coin asset.

 

[Pmalek]

After a few days of trying Trezor Suite Lite, I found a problem, including the number of assets displayed in the Portfolio balance on the home menu. The graphic didn't appear even though I had tried tapping the 'Try again' button. The graphic only appears when I tap on a previously synced coin asset.

What does the 'Sync my coins' button do that we can see at the bottom of your first page? Can it help to refresh the portfolio view? If you place your finger anywhere on the screen, hold, and swipe downwards, does that refresh the page or does the app miss that option?

How does adding coins work? Does Trezor Suite Lite display them automatically or do you have to add them from some sort of list? I am guessing you only need to import the master public keys.

[Flexystar]

Thanks for sharing this.

Does it allow you to import externally generated address? For example, the address which is generated from https://kimbatt.github.io/btc-address-generator/?page=paper-wallet, would it allow me to add that as well.

I am using Mycelium wallet, which does not seem to be properly build for the iOS, its simple yet complicated type of wallet for me. Sometime I am feeling to only use newly generated bitcoin and keep the private keys stores and never import them until I see a proper wallet to do so.

As you mentioned it's watch only wallet, so is it like just to check the balance? I mean I can do that using block explorer in blink of an eye, not sure what's so special about it or what is the thought behind it. 

[OmegaStarScream]

How does adding coins work? Does Trezor Suite Lite display them automatically or do you have to add them from some sort of list? I am guessing you only need to import the master public keys.

The "Sync coins" let you choose a coin, then scan the XPUB key for it.

-snip-

Yes, you can import from other wallets but only the master public key (for BTC). The app doesn't allow importing individual addresses.

Compared to other watch-only wallets? there's nothing special about it but compared to block explorers, then this app is obviously more convenient since you can watch your whole wallet.

[Yamane_Keto]

Does it allow you to import externally generated address? For example, the address which is generated from https://kimbatt.github.io/btc-address-generator/?page=paper-wallet, would it allow me to add that as well.

The main goal of hardware wallets is to generate your private key in an environment that is not and will not be connected to the internet, so if there is any hardware wallet application that allows you to import private keys, it is best to stop using it and (destroy that wallet) Joking .

As you mentioned it's watch only wallet, so is it like just to check the balance? I mean I can do that using block explorer in blink of an eye, not sure what's so special about it or what is the thought behind it. 

For privacy only reason, the ability to connect to Tor is supposed to be integrated, but according to the above, there is no option for that, so you can trust that Trezor Suite nodes will not send your IP addresses to a third party.

there are a very few block explorers that allow you to import the master public key.

I am using Mycelium wallet, which does not seem to be properly build for the iOS, its simple yet complicated type of wallet for me. Sometime I am feeling to only use newly generated bitcoin and keep the private keys stores and never import them until I see a proper wallet to do so.

You can choose bluewallet wallet as a bitcoin wallet for iPhone devices, after downloading the wallet, choose “Import wallet” then post your private key or WIF.

[Husna QA]

-snip-

What does the 'Sync my coins' button do that we can see at the bottom of your first page? Can it help to refresh the portfolio view? If you place your finger anywhere on the screen, hold, and swipe downwards, does that refresh the page or does the app miss that option?

How does adding coins work? Does Trezor Suite Lite display them automatically or do you have to add them from some sort of list? I am guessing you only need to import the master public keys.

Apart from tapping the Try Again button, I have also tried to hold and swipe the screen to refresh the home view, but it still doesn't work even when the application is opened and closed. Even though I don't think it's an important feature, it should work if it's already provided in the application.

The 'Sync my coins' button functions to select the coin you want to scan the Public Key for.

[dkbit98]

The main goal of hardware wallets is to generate your private key in an environment that is not and will not be connected to the internet, so if there is any hardware wallet application that allows you to import private keys, it is best to stop using it and (destroy that wallet) Joking .

Importing seed phrase with a QR code scan could be a good idea for all hardware wallets with camera, and this can potentially increase security of that device.
Some DIY devices (like Krux)are using this technique to compensate for the lack of secure element for protection, and this does mean you would have to have QR code each time when you start your device.
For Hardware wallets with secure elements this could be used as optional feature.

For privacy only reason, the ability to connect to Tor is supposed to be integrated, but according to the above, there is no option for that, so you can trust that Trezor Suite nodes will not send your IP addresses to a third party.

I am not sure how good Tor or mobile devices really is, it's totally different situation on desktop computers.

[Hispo]

I have tested it today to see how goes and I must say that there is something that greatly caught my attention.
For several months or years there has been people asking Trezor to include an option some people could track the evolution of the holdings in FIAT in the form of a simple portfolio tracker.

For some unknown reason, they never did so on the main Suit Desktop app, probably they did not deem it to be a priority. But now this application does exactly that, it is as if Satoshilabs was aware of the request and decided to make people to track the ups and downs of the crypto on a phone, rather on Suite.

I would not have much problem on it, but sharing the public keys with an application and even through a smartphone camera is kind of concerning, in my opinion. I would assume all xpub scanned or copy/pasted that way to be compromised and held somewhere in a Apple/Google server.